Function at 0x18001e3e0
Capabilities:
Check if file exists
Get file attributes

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xc0]
sub rsp, 0x1c0
mov rax, qword [0x180167010]
xor rax, rsp
mov qword [rbp + 0xb0], rax
mov rbx, rcx
xor r13d, r13d
mov r14d, r13d
mov dword [rbp - 0x80], r13d
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
movups xmmword [rbp + 0x80], xmm0
movups xmmword [rbp + 0x90], xmm0
cmp qword [rcx + 0x18], 0x10
jb 0x18001e454
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
setne r15b
mov byte [rsp + 0x70], r15b
mov rcx, qword [rbx + 0x18]
je 0x18001e4b1
mov rdx, rbx
cmp rcx, 0x10
jb 0x18001e478
mov rdx, qword [rbx]
lea rcx, [rbp + 0x30]
call fcn.180052a20
test eax, eax
je 0x18001e861
cmp qword [rbx + 0x18], 0x10
jb 0x18001e493
mov rbx, qword [rbx]
mov rdx, rbx
lea rcx, [rbp + 0x30]
call fcn.180053490
test eax, eax
jne 0x18001e4ce
lea rcx, [rbp + 0x30]
call fcn.180052880
jmp 0x18001e861
cmp rcx, 0x10
jb 0x18001e4ba
mov rbx, qword [rbx]
mov rdx, rbx
lea rcx, [rbp + 0x30]
call fcn.1800533a0
test eax, eax
je 0x18001e861
mov rdi, qword [0x18016ba28]
mov rbx, qword [rdi]
cmp rbx, rdi
je 0x18001e84f
movabs r9, 0x897c1899bbbb75dd
movabs r8, 0x897c189986860291
mov rcx, 0xffffffffffffffff
movabs rdx, 0x4dd6a69c12652be6
mov qword [rsp + 0x78], r8
mov rax, qword [rsp + 0x78]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x78], rdx
mov rax, qword [rsp + 0x78]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x78], r9
mov rax, qword [rsp + 0x78]
mov qword [rbp + 0xa0], rax
mov qword [rsp + 0x78], rdx
mov rax, qword [rsp + 0x78]
mov qword [rbp + 0xa8], rax
movdqa xmm0, xmmword [rbp - 0x70]
pxor xmm0, xmmword [rbp + 0xa0]
movdqa xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], 0
lea rax, [rbp - 0x70]
mov r8, rcx
inc r8
cmp byte [rax + r8], 0
jne 0x18001e571
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x50]
call fcn.1800045d0
nop
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x30]
call fcn.1800553f0
nop
lea r8, [rbx + 0x10]
cmp qword [rbx + 0x28], 0x10
jb 0x18001e5a6
mov r8, qword [rbx + 0x10]
mov r9, qword [rbx + 0x20]
mov rcx, rax
call fcn.1800455a0
mov qword [rbp - 0x10], r13
mov qword [rbp], r13
mov qword [rbp + 8], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
or r14d, 1
mov dword [rbp - 0x80], r14d
lea rcx, [rbp - 0x30]
call fcn.180041490
nop
lea rcx, [rbp - 0x50]
call fcn.180041490
test r15b, r15b
je 0x18001e626
lea rdx, [rbp - 0x10]
cmp qword [rbp + 8], 0x10
cmovae rdx, qword [rbp - 0x10]
lea rax, [rbp - 0x7c]
mov qword [rsp + 0x20], rax
lea rcx, [rbp + 0x30]
call fcn.180052dd0
test eax, eax
je 0x18001e67e
cmp dword [rbp - 0x7c], 0
jne 0x18001e67e
lea rdx, [rbp - 0x10]
cmp qword [rbp + 8], 0x10
cmovae rdx, qword [rbp - 0x10]
mov dword [rsp + 0x68], r13d
mov qword [rsp + 0x60], r13
mov dword [rsp + 0x58], r13d
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x48], r13
mov dword [rsp + 0x40], r13d
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], r13d
mov word [rsp + 0x28], r13w
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
lea rcx, [rbp + 0x30]
call fcn.180053df0
test eax, eax
je 0x18001e83a
mov r15, qword [rbx + 0x30]
mov rax, qword [rbx + 0x38]
mov qword [rbp - 0x58], rax
cmp r15, rax
je 0x18001e802
mov r12, qword [rbp]
mov rcx, qword [r15 + 0x30]
mov qword [rbp - 0x60], rcx
movabs r8, 0x7fffffffffffffff
mov rax, r8
sub rax, r12
cmp rax, rcx
jb 0x18001e891
lea rdx, [rbp - 0x10]
cmp qword [rbp + 8], 0x10
cmovae rdx, qword [rbp - 0x10]
mov qword [rbp - 0x78], rdx
lea rax, [r15 + 0x20]
mov qword [rsp + 0x78], rax
cmp qword [r15 + 0x38], 0x10
jb 0x18001e6e2
mov rax, qword [rax]
mov qword [rsp + 0x78], rax
mov qword [rbp + 0x10], r13
mov qword [rbp + 0x20], r13
mov qword [rbp + 0x28], r13
lea r13, [r12 + rcx]
mov r14d, 0xf
lea rsi, [rbp + 0x10]
cmp r13, r14
jbe 0x18001e787
mov r14, r13
or r14, 0xf
cmp r14, r8
jbe 0x18001e716
mov r14, r8
jmp 0x18001e723
cmp r14, 0x16
mov eax, 0x16
cmovb r14, rax
mov rcx, r14
add rcx, 1
mov rax, 0xffffffffffffffff
cmovb rcx, rax
cmp rcx, 0x1000
jb 0x18001e76e
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18001e897
mov rcx, rax
call fcn.18012c104
test rax, rax
je 0x18001e81e
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
mov rdx, qword [rbp - 0x78]
jmp 0x18001e783
test rcx, rcx
je 0x18001e781
call fcn.18012c104
mov rsi, rax
mov rdx, qword [rbp - 0x78]
jmp 0x18001e783
xor esi, esi
mov qword [rbp + 0x10], rsi
mov qword [rbp + 0x20], r13
mov qword [rbp + 0x28], r14
mov r8, r12
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rsi + r12]
mov r8, qword [rbp - 0x60]
mov rdx, qword [rsp + 0x78]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + r13], 0
mov r14d, dword [rbp - 0x80]
or r14d, 2
mov dword [rbp - 0x80], r14d
mov r8, r15
cmp qword [r15 + 0x18], 0x10
jb 0x18001e7ca
mov r8, qword [r15]
lea rdx, [rbp + 0x10]
cmp qword [rbp + 0x28], 0x10
cmovae rdx, qword [rbp + 0x10]
lea rcx, [rbp + 0x30]
call fcn.180054e60
test eax, eax
je 0x18001e825
lea rcx, [rbp + 0x10]
call fcn.180041490
add r15, 0x40
cmp r15, qword [rbp - 0x58]
mov r13d, 0
jne 0x18001e693
lea rcx, [rbp - 0x10]
call fcn.180041490
mov rbx, qword [rbx]
cmp rbx, rdi
je 0x18001e84f
movzx r15d, byte [rsp + 0x70]
jmp 0x18001e4e1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea rcx, [rbp + 0x30]
call fcn.180053080
nop
lea rcx, [rbp + 0x10]
call fcn.180041490
jmp 0x18001e844
lea rcx, [rbp + 0x30]
call fcn.180053080
nop
lea rcx, [rbp - 0x10]
call fcn.180041490
jmp 0x18001e861
lea rcx, [rbp + 0x30]
call fcn.180054ff0
lea rcx, [rbp + 0x30]
call fcn.180053080
mov rcx, qword [rbp + 0xb0]
xor rcx, rsp
call fcn.18012be40
lea r11, [rsp + 0x1c0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1800012d0
nop
call fcn.180001230
int3