Function at 0x14001a140
Capabilities:
Check if file exists
Get file attributes

Disassembly:
mov rax, rsp
push rdi
sub rsp, 0x600
mov qword [rsp + 0x48], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rax, qword [0x1401b5030]
xor rax, rsp
mov qword [rsp + 0x5f0], rax
mov rbx, rcx
mov qword [rsp + 0x38], rcx
mov byte [rsp + 0x30], 0
mov rcx, qword [rcx + 0x12d8]
test rcx, rcx
je 0x14001a1ac
lea r8, [0x1402bee90]
mov edx, 0x40c
call qword [sym.imp.USER32.dll_SetDlgItemTextA]
mov rcx, qword [rbx + 0x12d8]
test rcx, rcx
je 0x14001a1ac
call qword [sym.imp.USER32.dll_UpdateWindow]
nop
lea r9, [rsp + 0x30]
lea rdx, [rsp + 0x1d0]
mov rcx, rbx
call fcn.140025d20
nop
mov byte [rsp + 0x1dc], 0
cmp byte [rbx + 0x4d60], 0
je 0x14001a271
cmp byte [rsp + 0x30], 0
je 0x14001a271
cmp qword [rbx + 0x4d70], 0
jne 0x14001a271
mov rax, qword [rbx + 0xd748]
cmp byte [rax + 0x806], 0
jne 0x14001a579
mov byte [rbx + 0x4d60], 0
mov rcx, qword [rbx + 0x4d68]
test rcx, rcx
je 0x14001a23e
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
mov rax, qword [rbx + 0xd748]
mov qword [rbx + 0x4d68], 0
mov qword [rbx + 0x4d70], 0
cmp byte [rax + 0x805], 0
jne 0x14001a271
mov r9d, 0x40034
lea r8, str.Accept_insecure_connection
lea rdx, str.You_have_specified_an_encryption_plugin__however_this_connection_is_unencrypted__Do_you_want_to_continue_
mov rcx, qword [rbx + 0xd760]
call qword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 7
je 0x14001a5a5
lea rdi, [rbx + 0x5234]
mov r9, rdi
lea r8, [rbx + 0x5230]
lea rdx, str.RFB__03d._03d_n
lea rcx, [rsp + 0x1d0]
call fcn.1400152f0
cmp eax, 2
je 0x14001a2c8
mov rcx, qword [rbx + 0x2a0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
cmp byte [rbx + 0x4d60], 0
je 0x14001a5fd
cmp qword [rbx + 0x4d70], 0
jne 0x14001a5fd
jmp 0x14001a5d1
mov eax, dword [rdi]
mov dword [rsp + 0x20], eax
mov r9d, dword [rbx + 0x5230]
lea r8, str.RFB_server_supports_protocol_version__d._d_n
xor edx, edx
lea rcx, vtable.Log.0
call fcn.1400153f0
mov ecx, dword [rdi]
cmp ecx, 4
je 0x14001a35d
cmp ecx, 6
je 0x14001a364
lea eax, [rcx - 7]
cmp eax, 1
jbe 0x14001a36e
cmp ecx, 0xe
je 0x14001a35d
lea eax, [rcx - 0x10]
test eax, 0xfffffffd
je 0x14001a364
cmp dword [rbx + 0x5230], 3
jne 0x14001a34b
cmp ecx, 3
jge 0x14001a332
lea r8, str.Cant_use_IDEA_authentication_n
xor edx, edx
lea rcx, vtable.Log.0
call fcn.1400153f0
jmp 0x14001a36e
jne 0x14001a34b
lea r8, str.RFB_version_3.3__Legacy__n
xor edx, edx
lea rcx, vtable.Log.0
call fcn.1400153f0
jmp 0x14001a36e
mov dword [rbx + 0x5230], 3
mov dword [rdi], 8
jmp 0x14001a36e
mov byte [rbx + 0x52e0], 1
mov dword [rbx + 0x55e4], 1
mov r9d, dword [rdi]
mov r8d, dword [rbx + 0x5230]
lea rdx, str.RFB__03d._03d_n
lea rcx, [rsp + 0x1d0]
call fcn.14002d7f0
cmp byte [rbx + 0x2b0], 0
je 0x14001a409
mov r8d, 0x104
lea rdx, [rsp + 0x1e0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x14001a409
mov edx, 0x5c
lea rcx, [rsp + 0x1e0]
call fcn.14011f744
test rax, rax
je 0x14001a409
mov byte [rax], 0
lea r8, str._sound.wav
mov edx, 0x104
lea rcx, [rsp + 0x1e0]
call fcn.1401220fc
lea rcx, [rsp + 0x1e0]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x14001a409
xor edx, edx
lea r8d, [rdx + 1]
lea rcx, [rsp + 0x1e0]
call qword [sym.imp.WINMM.dll_PlaySoundA]
xor r9d, r9d
lea r8d, [r9 + 0xc]
lea rdx, [rsp + 0x1d0]
mov rcx, rbx
call fcn.140026600
mov ecx, dword [rdi]
lea eax, [rcx - 0xe]
test eax, 0xfffffffd
je 0x14001a435
cmp ecx, 0x12
jne 0x14001a4f1
mov r8d, 4
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.140025ac0
mov r8d, dword [rsp + 0x40]
cmp r8d, 0x400
ja 0x14001a54d
lea rdx, [rsp + 0x1e0]
mov rcx, rbx
call fcn.140025ac0
movsxd rax, dword [rsp + 0x40]
cmp rax, 0x401
jae 0x14001a662
mov byte [rsp + rax + 0x1e0], 0
mov rax, qword [rbx + 0xd748]
cmp byte [rax + 0x804], 0
jne 0x14001a4ce
mov r9d, 0x40004
lea r8, str.Accept_Incoming_SC_Connection
lea rdx, [rsp + 0x1e0]
mov rcx, qword [rbx + 0xd760]
call qword [sym.imp.USER32.dll_MessageBoxA]
mov r8d, 4
lea rdx, [rsp + 0x38]
mov rcx, rbx
cmp eax, 7
je 0x14001a629
jmp 0x14001a4dc
mov r8d, 4
lea rdx, [rsp + 0x38]
mov rcx, rbx
mov dword [rsp + 0x38], 1
xor r9d, r9d
call fcn.140026600
add dword [rdi], 0xfffffff6
mov ecx, dword [rdi]
mov dword [rsp + 0x20], ecx
mov r9d, 3
lea r8, str.Connected_to_RFB_server__using_protocol_version__d._d_n
xor edx, edx
lea rcx, vtable.Log.0
call fcn.1400153f0
cmp dword [rdi], 7
jl 0x14001a528
cmp qword [rbx + 0x4d70], 0
je 0x14001a528
mov word [rbx + 0x4d61], 0x101
mov rcx, qword [rsp + 0x5f0]
xor rcx, rsp
call fcn.14011b0c0
lea r11, [rsp + 0x600]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
xor r8d, r8d
lea rdx, str.Buffer_too_big_
lea rcx, [rsp + 0x130]
call fcn.14003d4c0
lea rdx, [0x1401b14d8]
lea rcx, [rsp + 0x130]
call fcn.1401202c4
int3
xor r8d, r8d
lea rdx, str.The_insecure_connection_was_refused.
lea rcx, [rsp + 0x90]
call fcn.14003d4c0
lea rdx, [0x1401b14d8]
lea rcx, [rsp + 0x90]
call fcn.1401202c4
int3
xor r8d, r8d
lea rdx, str.You_refused_the_insecure_connection.
lea rcx, [rsp + 0xb0]
call fcn.14003d4c0
lea rdx, [0x1401b14d8]
lea rcx, [rsp + 0xb0]
call fcn.1401202c4
int3
xor r8d, r8d
lea rdx, str.Connection_failed___Invalid_protocol___r_n_r_nPossible_causes:_r_r__Youve_forgotten_to_select_a_DSMPlugin_and_the_Server_uses_a_DSMPlugin_r_n__The_selected_DSMPlugin_is_not_compatible_with_the_one_running_on_the_Server_r_n__The_selected_DSMPlugin_is_not_correctly_configured__also_possibly_on_the_Server__r_n__The_password_youve_possibly_entered_is_incorrect_r_n__Another_viewer_using_a_DSMPlugin_is_already_connected_to_the_Server__more_than_one_is_forbidden__r_n
lea rcx, [rsp + 0xd0]
call fcn.14003d4c0
lea rdx, [0x1401b14d8]
lea rcx, [rsp + 0xd0]
call fcn.1401202c4
int3
xor r8d, r8d
lea rdx, str.Connection_failed___Invalid_protocol___r_n_r_nPossible_causes:_r_r__Youve_forgotten_to_select_a_DSMPlugin_and_the_Server_uses_a_DSMPlugin_r_n__Viewer_and_Server_are_not_compatible__they_use_different_RFB_protocols__r_n
lea rcx, [rsp + 0xf0]
call fcn.14003d4c0
lea rdx, [0x1401b14d8]
lea rcx, [rsp + 0xf0]
call fcn.1401202c4
int3
mov dword [rsp + 0x38], 0
call fcn.140026760
xor r8d, r8d
lea rdx, str.You_refused_the_connection
lea rcx, [rsp + 0x110]
call fcn.14003d4c0
lea rdx, [0x1401b14d8]
lea rcx, [rsp + 0x110]
call fcn.1401202c4
int3
call fcn.14011b25c
int3