Function at 0x1800135d0
Capabilities:
Check if file exists
Get system information on windows

Disassembly:
mov rax, rsp
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0xd0
mov qword [rbp - 0x59], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x1800851e8]
xor rax, rsp
mov qword [rbp + 0x47], rax
mov rbx, rdx
mov qword [rbp - 0x21], rdx
movdqa xmm0, xmmword [0x1800602e0]
movdqu xmmword [rbp + 0x17], xmm0
xor esi, esi
mov word [rbp + 7], si
lea r8d, [rsi + 0x34]
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionUninstall_
lea rcx, [rbp + 7]
call fcn.180003d50
mov rdx, rbx
cmp qword [rbx + 0x18], 8
jb 0x18001363c
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
lea rcx, [rbp + 7]
call fcn.180003d50
lea r8, [rbp + 7]
cmp qword [rbp + 0x1f], 8
cmovae r8, qword [rbp + 7]
lea r9, str.DisplayIcon
mov rdx, 0xffffffff80000001
lea rcx, [rbp - 0x19]
call fcn.180006690
nop
lea rcx, [rbp - 0x19]
cmp qword [rbp - 1], 8
cmovae rcx, qword [rbp - 0x19]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x18001373f
mov rdx, qword [rbp - 1]
cmp rdx, 8
jb 0x1800136cb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800136c6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180013c67
call fcn.18001c898
movdqa xmm0, xmmword [0x1800602e0]
movdqu xmmword [rbp - 9], xmm0
mov word [rbp - 0x19], si
mov rdx, qword [rbp + 0x1f]
cmp rdx, 8
jb 0x18001371c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180013717
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180013c6d
call fcn.18001c898
movdqa xmm0, xmmword [0x1800602e0]
movdqu xmmword [rbp + 0x17], xmm0
mov word [rbp + 7], si
mov rcx, rbx
call fcn.180003c70
mov eax, 1
jmp 0x180013c2a
lea r8, [rbp + 7]
cmp qword [rbp + 0x1f], 8
cmovae r8, qword [rbp + 7]
lea r9, str.DisplayIcon
mov rdx, 0xffffffff80000002
lea rcx, [rbp + 0x27]
call fcn.180006690
mov rdi, rax
lea rax, [rbp - 0x19]
cmp rax, rdi
je 0x180013797
lea rcx, [rbp - 0x19]
call fcn.180003c70
movups xmm0, xmmword [rdi]
movups xmmword [rbp - 0x19], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbp - 9], xmm1
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], 7
mov word [rdi], si
mov rdx, qword [rbp + 0x3f]
cmp rdx, 8
jb 0x1800137d7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x27]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800137d2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180013c73
call fcn.18001c898
lea rcx, [rbp - 0x19]
cmp qword [rbp - 1], 8
cmovae rcx, qword [rbp - 0x19]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x18001388c
mov rdx, qword [rbp - 1]
cmp rdx, 8
jb 0x180013833
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001382e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180013c79
call fcn.18001c898
movdqa xmm0, xmmword [0x1800602e0]
movdqu xmmword [rbp - 9], xmm0
mov word [rbp - 0x19], si
mov rdx, qword [rbp + 0x1f]
cmp rdx, 8
jb 0x18001371c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180013717
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180013c55
jmp 0x180013717
lea rcx, [rbp - 0x51]
call qword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
cmp dword [rbp - 0x2d], 0x21d8
jne 0x180013b82
mov qword [rbp + 0x17], rsi
lea rax, [rbp + 7]
cmp qword [rbp + 0x1f], 8
cmovae rax, qword [rbp + 7]
mov word [rax], si
mov r8d, 0x40
lea rdx, str.softwareWow6432nodemicrosoftwindowscurrentversionuninstall_
lea rcx, [rbp + 7]
call fcn.180003d50
mov rdx, rbx
cmp qword [rbx + 0x18], 8
jb 0x1800138db
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
lea rcx, [rbp + 7]
call fcn.180003d50
lea r8, [rbp + 7]
cmp qword [rbp + 0x1f], 8
cmovae r8, qword [rbp + 7]
lea r9, str.DisplayIcon
mov rdx, 0xffffffff80000001
lea rcx, [rbp + 0x27]
call fcn.180006690
mov rdi, rax
lea rax, [rbp - 0x19]
cmp rax, rdi
je 0x180013940
lea rcx, [rbp - 0x19]
call fcn.180003c70
movups xmm0, xmmword [rdi]
movups xmmword [rbp - 0x19], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbp - 9], xmm1
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], 7
mov word [rdi], si
mov rdx, qword [rbp + 0x3f]
cmp rdx, 8
jb 0x180013980
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x27]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001397b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180013c7f
call fcn.18001c898
lea rcx, [rbp - 0x19]
cmp qword [rbp - 1], 8
cmovae rcx, qword [rbp - 0x19]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x180013a35
mov rdx, qword [rbp - 1]
cmp rdx, 8
jb 0x1800139dc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800139d7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180013c85
call fcn.18001c898
movdqa xmm0, xmmword [0x1800602e0]
movdqu xmmword [rbp - 9], xmm0
mov word [rbp - 0x19], si
mov rdx, qword [rbp + 0x1f]
cmp rdx, 8
jb 0x18001371c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180013717
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180013c5b
jmp 0x180013717
lea r8, [rbp + 7]
cmp qword [rbp + 0x1f], 8
cmovae r8, qword [rbp + 7]
lea r9, str.DisplayIcon
mov rdx, 0xffffffff80000002
lea rcx, [rbp + 0x27]
call fcn.180006690
mov rdi, rax
lea rax, [rbp - 0x19]
cmp rax, rdi
je 0x180013a8d
lea rcx, [rbp - 0x19]
call fcn.180003c70
movups xmm0, xmmword [rdi]
movups xmmword [rbp - 0x19], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbp - 9], xmm1
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], 7
mov word [rdi], si
mov rdx, qword [rbp + 0x3f]
cmp rdx, 8
jb 0x180013acd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x27]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180013ac8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180013c8b
call fcn.18001c898
lea rcx, [rbp - 0x19]
cmp qword [rbp - 1], 8
cmovae rcx, qword [rbp - 0x19]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x180013b82
mov rdx, qword [rbp - 1]
cmp rdx, 8
jb 0x180013b29
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180013b24
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180013c91
call fcn.18001c898
movdqa xmm0, xmmword [0x1800602e0]
movdqu xmmword [rbp - 9], xmm0
mov word [rbp - 0x19], si
mov rdx, qword [rbp + 0x1f]
cmp rdx, 8
jb 0x18001371c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180013717
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180013c61
jmp 0x180013717
mov rdx, qword [rbp - 1]
cmp rdx, 8
jb 0x180013bc2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180013bbd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180013c97
call fcn.18001c898
movdqa xmm0, xmmword [0x1800602e0]
movdqu xmmword [rbp - 9], xmm0
mov word [rbp - 0x19], si
mov rdx, qword [rbp + 0x1f]
cmp rdx, 8
jb 0x180013c0f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180013c0a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180013c4f
call fcn.18001c898
movdqa xmm0, xmmword [0x1800602e0]
movdqu xmmword [rbp + 0x17], xmm0
mov word [rbp + 7], si
mov rcx, rbx
call fcn.180003c70
xor eax, eax
mov rcx, qword [rbp + 0x47]
xor rcx, rsp
call fcn.18001c9b0
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret
call fcn.18003e394
nop
call fcn.18003e394
int3
call fcn.18003e394
int3
call fcn.18003e394
nop
call fcn.18003e394
nop
call fcn.18003e394
nop
call fcn.18003e394
nop
call fcn.18003e394
nop
call fcn.18003e394
nop
call fcn.18003e394
nop
call fcn.18003e394
nop
call fcn.18003e394
int3
call fcn.18003e394
int3