Function at 0x14000ff10
Capabilities:
Check if file exists
Get file attributes
Query environment variable

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x1170]
mov eax, 0x1270
call fcn.140018cb0
sub rsp, rax
mov rax, qword [0x14003f2f0]
xor rax, rsp
mov qword [rbp + 0x1160], rax
mov rbx, rcx
lea rcx, [rsp + 0x44]
xor edi, edi
xor edx, edx
mov r8d, 0x1fc
mov dword [rsp + 0x40], edi
call fcn.1400166f0
lea rax, [0x140042700]
mov dword [rsp + 0x30], edi
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x40]
lea r8, [0x14002ce18]
lea rdx, str.FileName
mov rcx, rbx
mov dword [rsp + 0x20], pe_nt_image_headers64
call fcn.14000db60
lea rdx, [rbp + 0xd40]
lea rcx, str._ProgramFiles_Internet_ExplorerSIGNUPinstall.ins
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
lea rdx, [rbp + 0xf50]
lea rcx, str._ProgramFiles_x86__Internet_ExplorerSIGNUPinstall.ins
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x14000ffe9
lea rdx, [rsp + 0x40]
lea rcx, str._nError_reading_IE_Webslice_Settings_file__s
call fcn.14000adf0
jmp 0x140010258
mov ebx, 1
nop
lea rcx, [rbp + 0xb44]
xor edx, edx
mov r8d, 0x1fc
mov dword [rbp + 0xb40], edi
call fcn.1400166f0
lea rcx, [rbp + 0x944]
xor edx, edx
mov r8d, 0x1fc
mov dword [rbp + 0x940], edi
call fcn.1400166f0
lea rcx, [rbp + 0x744]
xor edx, edx
mov r8d, 0x1fc
mov dword [rbp + 0x740], edi
call fcn.1400166f0
lea rcx, [rbp + 0x544]
xor edx, edx
mov r8d, 0x1fc
mov dword [rbp + 0x540], edi
call fcn.1400166f0
lea rcx, [rbp + 0x344]
xor edx, edx
mov r8d, 0x1fc
mov dword [rbp + 0x340], edi
call fcn.1400166f0
lea rcx, [rbp + 0x144]
xor edx, edx
mov r8d, 0x1fc
mov dword [rbp + 0x140], edi
call fcn.1400166f0
lea rdx, str.FavBar_WebSlice__d_Name
lea rcx, [rbp + 0xb40]
mov r8d, ebx
call fcn.140018028
lea rdx, str.FavBar_WebSlice__d
lea rcx, [rbp + 0x940]
mov r8d, ebx
call fcn.140018028
mov r8d, dword [0x14003f108]
lea rdx, str.FavBar_WebSlice__d_Name
lea rcx, [rbp + 0x740]
call fcn.140018028
mov r8d, dword [0x14003f108]
lea rdx, str.FavBar_WebSlice__d
lea rcx, [rbp + 0x540]
call fcn.140018028
lea rax, [rsp + 0x40]
mov dword [rsp + 0x30], edi
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x140]
lea r8, [0x14002ce18]
lea rdx, [rbp + 0xb40]
lea rcx, str.FavoritesBar
mov dword [rsp + 0x20], pe_nt_image_headers64
call fcn.14000db60
lea rax, [rsp + 0x40]
mov dword [rsp + 0x30], edi
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x340]
lea r8, [0x14002ce18]
lea rdx, [rbp + 0x940]
lea rcx, str.FavoritesBar
mov dword [rsp + 0x20], pe_nt_image_headers64
call fcn.14000db60
lea rcx, [rbp + 0x140]
or rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], di
jne 0x140010165
test rax, rax
je 0x14001024d
lea rcx, [rbp + 0x340]
or rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], di
jne 0x140010182
test rax, rax
je 0x14001024d
lea r9, [rsp + 0x40]
lea r8, [rbp + 0x340]
lea rdx, [rbp + 0x140]
lea rcx, str._nMerging_IE_WebSlice_Name__s__IE_WebSlice_URL__s__from_IE_Settings_File__s
call fcn.14000adf0
inc dword [0x14003f108]
lea r9, [rbp + 0xd40]
lea r8, [rbp + 0x140]
lea rdx, [rbp + 0x740]
lea rcx, str.FavoritesBar
mov dword [rsp + 0x20], edi
call fcn.1400135d0
lea r9, [rbp + 0xd40]
lea r8, [rbp + 0x340]
lea rdx, [rbp + 0x540]
lea rcx, str.FavoritesBar
mov dword [rsp + 0x20], edi
call fcn.1400135d0
lea r9, [rbp + 0xf50]
lea r8, [rbp + 0x140]
lea rdx, [rbp + 0x740]
lea rcx, str.FavoritesBar
mov dword [rsp + 0x20], edi
call fcn.1400135d0
lea r9, [rbp + 0xf50]
lea r8, [rbp + 0x340]
lea rdx, [rbp + 0x540]
lea rcx, str.FavoritesBar
mov dword [rsp + 0x20], edi
call fcn.1400135d0
inc ebx
cmp ebx, 0x64
jle 0x14000fff0
mov rcx, qword [rbp + 0x1160]
xor rcx, rsp
call fcn.1400161c0
lea r11, [rsp + 0x1270]
mov rbx, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret