Function at 0x100019fc0
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
mov rax, rsp
sub rsp, 0xa8
mov qword [rsp + 0x60], 0xfffffffffffffffe
mov rbx, rcx
xor ebp, ebp
mov qword [rax - 0x40], rbp
mov qword [rax - 0x38], rbp
mov qword [rax - 0x30], rbp
mov qword [rax - 0x28], rbp
mov qword [rax - 0x20], rbp
lea esi, [rbp + 0xa]
mov dword [rax - 0x18], esi
mov rax, qword [rcx + 0x48]
cmp dword [rax - 0x10], ebp
jne 0x10001a025
add rcx, 0x48
call fcn.100034c6c
cmp eax, ebp
je 0x10001a06e
lea rcx, [rsp + 0x68]
call fcn.10001f6dc
mov eax, 0x80000000
jmp 0x10001a5bf
lea rax, [rsp + 0xe0]
mov qword [rsp + 0xe8], rax
lea rdx, [rcx + 0x48]
lea rcx, [rsp + 0xe0]
call fcn.10001ff10
nop
xor r8d, r8d
lea rdx, [rbx + 0x48]
mov rcx, rax
call fcn.1000349f8
cmp eax, ebp
je 0x10001a06e
lea rcx, [rsp + 0x68]
call fcn.10001f6dc
mov eax, 0x80000000
jmp 0x10001a5bf
mov rcx, qword [rbx + 0x48]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x10001a59a
shr eax, 4
mov r12d, 1
and al, r12b
je 0x10001a59a
mov r8, qword [rbx + 0x48]
lea rdx, [0x100002a10]
mov ecx, r12d
call fcn.10001e170
lea r11, [rsp + 0xe0]
mov qword [rsp + 0xe8], r11
lea rdx, [0x100001f18]
lea rcx, [rsp + 0xe0]
call fcn.10001ff98
nop
mov rcx, rax
call fcn.100024da8
cmp eax, ebp
jne 0x10001a0ed
lea r8, [0x100001f18]
lea rdx, [0x100002a68]
mov ecx, r12d
call fcn.10001e170
mov r13d, 2
cmp dword [0x1000834c8], ebp
je 0x10001a233
cmp dword [rbx + 0x14], ebp
jne 0x10001a115
lea ecx, [r13 + 6]
call fcn.1000264f8
cmp eax, ebp
jne 0x10001a115
mov eax, ebp
jmp 0x10001a118
mov eax, r12d
mov dword [rbx + 0x14], eax
cmp dword [rbx + 0x18], ebp
jne 0x10001a12f
xor ecx, ecx
call fcn.1000264f8
cmp eax, ebp
jne 0x10001a12f
mov eax, ebp
jmp 0x10001a132
mov eax, r12d
mov dword [rbx + 0x18], eax
cmp dword [rbx + 0x24], ebp
jne 0x10001a14a
mov ecx, r12d
call fcn.1000264f8
cmp eax, ebp
jne 0x10001a14a
mov eax, ebp
jmp 0x10001a14d
mov eax, r12d
mov dword [rbx + 0x24], eax
cmp dword [rbx + 0x28], ebp
jne 0x10001a165
mov ecx, r13d
call fcn.1000264f8
cmp eax, ebp
jne 0x10001a165
mov eax, ebp
jmp 0x10001a168
mov eax, r12d
mov dword [rbx + 0x28], eax
cmp dword [rbx + 0x38], ebp
jne 0x10001a182
mov ecx, 6
call fcn.1000264f8
cmp eax, ebp
jne 0x10001a182
mov eax, ebp
jmp 0x10001a185
mov eax, r12d
mov dword [rbx + 0x38], eax
cmp dword [rbx + 0x3c], ebp
jne 0x10001a19f
mov ecx, 4
call fcn.1000264f8
cmp eax, ebp
jne 0x10001a19f
mov eax, ebp
jmp 0x10001a1a2
mov eax, r12d
mov dword [rbx + 0x3c], eax
cmp dword [rbx + 0x40], ebp
jne 0x10001a1bc
mov ecx, 3
call fcn.1000264f8
cmp eax, ebp
jne 0x10001a1bc
mov eax, ebp
jmp 0x10001a1bf
mov eax, r12d
mov dword [rbx + 0x40], eax
cmp dword [rbx + 0x50], ebp
jne 0x10001a1d9
mov ecx, 5
call fcn.1000264f8
cmp eax, ebp
jne 0x10001a1d9
mov eax, ebp
jmp 0x10001a1dc
mov eax, r12d
mov dword [rbx + 0x50], eax
cmp dword [rbx + 0x5c], ebp
jne 0x10001a1f6
mov ecx, 9
call fcn.1000264f8
cmp eax, ebp
jne 0x10001a1f6
mov eax, ebp
jmp 0x10001a1f9
mov eax, r12d
mov dword [rbx + 0x5c], eax
cmp dword [rbx + 0x1c], ebp
jne 0x10001a213
mov ecx, 7
call fcn.1000264f8
cmp eax, ebp
jne 0x10001a213
mov eax, ebp
jmp 0x10001a216
mov eax, r12d
mov dword [rbx + 0x1c], eax
cmp dword [rbx + 0x6c], ebp
jne 0x10001a22d
mov ecx, esi
call fcn.1000264f8
cmp eax, ebp
jne 0x10001a22d
mov eax, ebp
jmp 0x10001a230
mov eax, r12d
mov dword [rbx + 0x6c], eax
cmp dword [rbx + 0x14], ebp
jne 0x10001a241
cmp dword [rbx + 0x18], ebp
jne 0x10001a241
mov ecx, ebp
jmp 0x10001a244
mov ecx, r12d
mov r8d, dword [rbx + 0x50]
movzx edx, word [rbx + 0x10]
call fcn.10001bb30
cmp eax, ebp
je 0x10001a26f
call fcn.100024f6c
nop
lea rcx, [rsp + 0x68]
call fcn.10001f6dc
mov eax, 0x80000000
jmp 0x10001a5bf
cmp dword [rbx + 0x14], ebp
jne 0x10001a27d
cmp dword [rbx + 0x18], ebp
jne 0x10001a27d
mov ecx, ebp
jmp 0x10001a280
mov ecx, r12d
call fcn.10001b994
cmp eax, ebp
je 0x10001a2a3
call fcn.100024f6c
nop
lea rcx, [rsp + 0x68]
call fcn.10001f6dc
mov eax, 0x80000000
jmp 0x10001a5bf
cmp dword [rbx + 0x24], ebp
je 0x10001a2bf
cmp dword [rbx + 0x28], ebp
je 0x10001a2bf
mov dword [rbx + 0x28], ebp
lea rdx, [0x100002ab0]
mov ecx, r13d
call fcn.10001dcc0
cmp dword [rbx + 0x14], ebp
jne 0x10001a2c9
cmp dword [rbx + 0x18], ebp
je 0x10001a2e3
cmp dword [rbx + 0x24], ebp
je 0x10001a2e3
mov dword [rbx + 0x14], ebp
mov dword [rbx + 0x18], ebp
lea rdx, [0x100002bb0]
mov ecx, r13d
call fcn.10001dcc0
cmp dword [rbx + 0x14], ebp
jne 0x10001a2ed
cmp dword [rbx + 0x18], ebp
je 0x10001a310
cmp dword [rbx + 0x20], ebp
jne 0x10001a310
call fcn.100025b08
cmp eax, ebp
je 0x10001a310
mov dword [rbx + 0x14], ebp
mov dword [rbx + 0x18], ebp
lea rdx, [0x100002c90]
mov ecx, r13d
call fcn.10001dcc0
cmp dword [rbx + 0x6c], ebp
je 0x10001a32c
cmp dword [rbx + 0x38], ebp
jne 0x10001a32c
mov dword [rbx + 0x6c], ebp
lea rdx, [0x100002d80]
mov ecx, r13d
call fcn.10001dcc0
cmp dword [rbx + 0x14], ebp
jne 0x10001a336
cmp dword [rbx + 0x18], ebp
je 0x10001a34d
cmp dword [rbx + 0x68], ebp
je 0x10001a34d
mov dword [rbx + 0x68], ebp
lea rdx, [0x100002e60]
mov ecx, r13d
call fcn.10001dcc0
cmp dword [rbx + 0x14], ebp
je 0x10001a361
lea rdx, [0x100002ef0]
mov ecx, r12d
call fcn.10001dcc0
cmp dword [rbx + 0x18], ebp
je 0x10001a375
lea rdx, [0x100002f70]
mov ecx, r12d
call fcn.10001dcc0
cmp dword [rbx + 0x1c], ebp
je 0x10001a389
lea rdx, [0x100003010]
mov ecx, r12d
call fcn.10001dcc0
cmp dword [rbx + 0x20], ebp
je 0x10001a39d
lea rdx, [0x100003060]
mov ecx, r12d
call fcn.10001dcc0
mov rax, qword [rbx + 0x30]
cmp dword [rax - 0x10], ebp
je 0x10001a3b8
mov r8, rax
lea rdx, [0x1000030b0]
mov ecx, r12d
call fcn.10001e170
cmp dword [rbx + 0x24], ebp
je 0x10001a3cc
lea rdx, [0x100003130]
mov ecx, r12d
call fcn.10001dcc0
cmp dword [rbx + 0x28], ebp
je 0x10001a3e0
lea rdx, [0x1000031a0]
mov ecx, r12d
call fcn.10001dcc0
cmp dword [rbx + 0x38], ebp
je 0x10001a3f4
lea rdx, [0x100003220]
mov ecx, r12d
call fcn.10001dcc0
cmp dword [rbx + 0x3c], ebp
je 0x10001a408
lea rdx, [0x1000032f0]
mov ecx, r12d
call fcn.10001dcc0
cmp dword [rbx + 0x40], ebp
je 0x10001a41c
lea rdx, [0x100003370]
mov ecx, r12d
call fcn.10001dcc0
cmp dword [rbx + 0x5c], ebp
je 0x10001a430
lea rdx, [0x1000033f0]
mov ecx, r12d
call fcn.10001dcc0
cmp dword [rbx + 0x68], ebp
je 0x10001a444
lea rdx, [0x100003480]
mov ecx, r12d
call fcn.10001dcc0
cmp dword [rbx + 0x6c], ebp
je 0x10001a458
lea rdx, [0x100003510]
mov ecx, r12d
call fcn.10001dcc0
lea rax, [rsp + 0xe0]
mov qword [rsp + 0xe8], rax
lea rdx, [rbx + 0x30]
lea rcx, [rsp + 0xe0]
call fcn.10001ff10
mov r11, rax
mov ecx, dword [rbx + 0x5c]
mov dword [rsp + 0x50], ecx
mov edx, dword [rbx + 0x3c]
mov dword [rsp + 0x48], edx
mov edx, dword [rbx + 0x40]
mov dword [rsp + 0x40], edx
mov edx, dword [rbx + 0x38]
mov dword [rsp + 0x38], edx
mov edx, dword [rbx + 0x28]
mov dword [rsp + 0x30], edx
mov eax, dword [rbx + 0x24]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r11
mov r9d, dword [rbx + 0x1c]
mov r8d, dword [rbx + 0x18]
mov edx, dword [rbx + 0x14]
lea rcx, [rbx + 0x48]
call fcn.10002840c
cmp dword [rbx + 0x14], ebp
jne 0x10001a52d
cmp dword [rbx + 0x18], ebp
jne 0x10001a52d
mov r8d, dword [rbx + 0x6c]
mov edx, dword [rbx + 0x68]
mov ecx, dword [rbx + 0x20]
call fcn.1000201c4
cmp eax, ebp
jne 0x10001a536
lea rcx, [0x100083030]
call qword [sym.imp.COMCTL32.dll_PropertySheetW]
cmp eax, 0xffffffff
jne 0x10001a507
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r8, [0x100005b58]
mov edx, eax
mov ecx, 3
call fcn.10001de60
mov rcx, qword [0x100083000]
cmp rcx, rbp
je 0x10001a519
call qword [sym.imp.GDI32.dll_DeleteObject]
mov rcx, qword [0x100082ff8]
cmp rcx, rbp
je 0x10001a536
call qword [sym.imp.USER32.dll_DestroyIcon]
jmp 0x10001a536
xor edx, edx
xor ecx, ecx
call fcn.10002854c
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0xe0]
call fcn.1000292ec
mov edi, eax
cmp eax, ebp
je 0x10001a565
cmp dword [rbx + 0x14], ebp
jne 0x10001a565
cmp dword [rbx + 0x18], ebp
jne 0x10001a565
mov r8d, r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_RestartDialog]
lea r8, [rsp + 0x68]
mov edx, dword [rsp + 0xe0]
mov ecx, edi
call fcn.10001d340
mov ebx, eax
lea rcx, [0x1000827d0]
call fcn.10001f6dc
call fcn.100024f6c
nop
lea rcx, [rsp + 0x68]
call fcn.10001f6dc
mov eax, ebx
jmp 0x10001a5bf
mov r8, qword [rbx + 0x48]
lea rdx, [0x100002a40]
mov ecx, 3
call fcn.10001e170
nop
lea rcx, [rsp + 0x68]
call fcn.10001f6dc
mov eax, 0x80000000
add rsp, 0xa8
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret