Function at 0x140099a10
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xf8
mov rax, qword [0x1401750b8]
xor rax, rsp
mov qword [rbp + 7], rax
mov r15, rdx
mov qword [rbp - 0x71], 9
lea rax, [0x140154568]
mov r13, rcx
mov qword [rbp - 0x79], rax
lea rdx, [rsp + 0x40]
movaps xmm0, xmmword [rbp - 0x79]
mov rcx, r15
movdqa xmmword [rbp - 0x79], xmm0
mov rsi, r9
mov rdi, r8
call fcn.14005a6a0
mov rcx, rax
lea r8, [rbp - 0x79]
lea rdx, [rbp - 0x59]
call fcn.14005add0
lea rcx, [rsp + 0x40]
call fcn.1400599c0
mov rax, qword [0x14017c010]
cmp qword [rbp - 0x41], 8
mov rcx, qword [rax + 8]
mov r14b, byte [rcx + 0x38]
lea rcx, [rbp - 0x59]
cmovae rcx, qword [rbp - 0x59]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
xor r12d, r12d
mov ebx, 1
cmp eax, 0xffffffff
jne 0x140099b96
mov rcx, qword [r13 + 8]
lea rdx, [rbp - 0x79]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
cmp qword [rbp - 0x61], 8
lea r8, [rbp - 0x79]
mov al, r14b
lea rcx, [rsp + 0x28]
cmovae r8, qword [rbp - 0x79]
mov r9d, 0x201
neg al
sbb rdx, rdx
neg rdx
add rdx, 0xffffffff80000001
call fcn.14005d5c0
xor r8d, r8d
lea rcx, [rbp - 0x79]
mov dl, bl
call fcn.140029bc0
lea r8, [rsp + 0x40]
mov qword [rsp + 0x58], 7
lea rdx, str.UninstallString
mov qword [rsp + 0x50], r12
lea rcx, [rsp + 0x28]
mov word [rsp + 0x40], r12w
call fcn.14005db50
test eax, eax
jne 0x140099b7d
cmp qword [rsp + 0x58], 8
lea rax, [rsp + 0x40]
lea rdx, [rbp - 0x79]
cmovae rax, qword [rsp + 0x40]
lea rcx, [rbp - 0x39]
mov qword [rbp - 0x79], rax
mov rax, qword [rsp + 0x50]
mov qword [rbp - 0x71], rax
movaps xmm0, xmmword [rbp - 0x79]
movdqa xmmword [rbp - 0x79], xmm0
call fcn.140059940
mov rdx, rax
lea rcx, [rbp - 0x59]
call fcn.140059a60
lea rcx, [rbp - 0x39]
call fcn.1400599c0
xor r8d, r8d
lea rcx, [rsp + 0x40]
mov dl, bl
call fcn.140029bc0
lea rcx, [rsp + 0x28]
call fcn.14005d610
cmp qword [rbp - 0x41], 8
lea rcx, [rbp - 0x59]
cmovae rcx, qword [rbp - 0x59]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x140099d46
lea rdx, [rbp - 0x59]
lea rcx, [rbp - 0x39]
call fcn.14005fbd0
lea rcx, [rbp - 0x39]
call fcn.14009f748
mov r13d, 0xf
test r14b, r14b
je 0x140099c21
lea r8d, [r13 - 3]
mov qword [rsp + 0x58], r13
lea rdx, str.system_level
mov qword [rsp + 0x50], r12
lea rcx, [rsp + 0x40]
mov byte [rsp + 0x40], r12b
call fcn.14002a1a4
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x39]
call fcn.140060cd0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x140099c21
mov rcx, qword [rsp + 0x40]
inc rdx
mov r8, rbx
call fcn.1400223b0
mov r8d, 0x17
mov qword [rsp + 0x58], r13
lea rdx, str.register_chrome_browser
mov qword [rsp + 0x50], r12
lea rcx, [rsp + 0x40]
mov byte [rsp + 0x40], r12b
call fcn.14002a1a4
mov r8, r15
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x39]
call fcn.140060d90
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x140099c73
mov rcx, qword [rsp + 0x40]
inc rdx
mov r8, rbx
call fcn.1400223b0
cmp qword [rdi + 0x10], r12
je 0x140099ccb
mov r8d, 0x1e
mov qword [rsp + 0x58], r13
lea rdx, str.register_chrome_browser_suffix
mov qword [rsp + 0x50], r12
lea rcx, [rsp + 0x40]
mov byte [rsp + 0x40], r12b
call fcn.14002a1a4
mov r8, rdi
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x39]
call fcn.140060d90
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x140099ccb
mov rcx, qword [rsp + 0x40]
inc rdx
mov r8, rbx
call fcn.1400223b0
cmp qword [rsi + 0x10], r12
je 0x140099d23
mov r8d, 0x15
mov qword [rsp + 0x58], r13
lea rdx, str.register_url_protocol
mov qword [rsp + 0x50], r12
lea rcx, [rsp + 0x40]
mov byte [rsp + 0x40], r12b
call fcn.14002a1a4
mov r8, rsi
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x39]
call fcn.140060d90
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x140099d23
mov rcx, qword [rsp + 0x40]
inc rdx
mov r8, rbx
call fcn.1400223b0
lea rdx, [rsp + 0x20]
mov dword [rsp + 0x20], r12d
lea rcx, [rbp - 0x39]
call fcn.14009e6e0
lea rcx, [rbp - 0x39]
call fcn.14005fe00
cmp dword [rsp + 0x20], r12d
je 0x140099d49
mov bl, r12b
lea rcx, [rbp - 0x59]
call fcn.1400599c0
mov al, bl
mov rcx, qword [rbp + 7]
xor rcx, rsp
call fcn.140111850
add rsp, 0xf8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret