Function at 0x1400c1860
Capabilities:
Check if file exists
Get file attributes

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x90
mov rax, qword [0x14016f898]
xor rax, rsp
mov qword [rsp + 0x80], rax
mov rsi, rcx
call fcn.140061c50
test al, al
je 0x1400c1aac
mov dl, 1
lea rcx, [0x140114fa0]
call fcn.140061d00
test al, al
je 0x1400c1a4e
mov r9b, 1
xor r8d, r8d
lea rdx, str.CTRLO
lea rcx, [0x140114fb0]
call fcn.14006e950
test al, al
je 0x1400c1a49
mov ecx, dword [0x14017fb00]
mov rax, qword gs:[0x58]
mov r8d, 0x14
mov rdx, qword [rax + rcx*8]
mov eax, dword [r8 + rdx]
cmp dword [0x1401777a0], eax
jg 0x1400c1af6
lea rdx, [0x140177780]
cmp qword [0x140177798], 0x10
cmovae rdx, qword [0x140177780]
lea rcx, [0x140114fc8]
call fcn.14007bd70
mov rbx, rax
test rax, rax
je 0x1400c1a49
mov rdx, rax
lea rcx, [rsp + 0x38]
call fcn.140094bc0
nop
xor r8d, r8d
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x38]
call fcn.14008f160
cmp qword [rax + 0x18], 8
jb 0x1400c194d
mov rax, qword [rax]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
setne dil
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x1400c19a2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c199d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400c199d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400f29d8
test dil, dil
je 0x1400c1a3f
mov rdx, rbx
lea rcx, [rsp + 0x60]
call fcn.140093600
mov rbx, rax
mov qword [rsp + 0x30], rax
lea rcx, [0x140176768]
cmp rcx, rax
je 0x1400c19e3
mov rdx, rax
cmp qword [rax + 0x18], 0x10
jb 0x1400c19d9
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
call fcn.14007eee0
nop
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x1400c1a1d
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x1400c1a18
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400c1ad1
mov rcx, r8
call fcn.1400f29d8
mov qword [rbx + 0x10], 0
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov dl, 1
lea rcx, [0x140176000]
call fcn.14009b840
nop
lea rcx, [rsp + 0x40]
call fcn.14008a960
call fcn.14006a060
mov dl, 1
lea rcx, [0x140114fe0]
call fcn.140061d00
test al, al
je 0x1400c1aa7
mov r9b, 1
xor r8d, r8d
lea rdx, [0x1400fb69c]
lea rcx, [0x140114fe8]
call fcn.14006e950
test al, al
je 0x1400c1a81
mov byte [rsi + 0x32], 1
mov r9b, 1
xor r8d, r8d
lea rdx, [0x1400fb69c]
lea rcx, [0x140114ff0]
call fcn.14006e950
test al, al
je 0x1400c1aa2
mov byte [rsi + 0x33], 1
call fcn.14006a060
call fcn.140069ed0
mov rcx, qword [rsp + 0x80]
xor rcx, rsp
call fcn.1400f2a70
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea rcx, [0x1400f8bc0]
call fcn.1400f2cc8
nop
lea rcx, [0x1401777a0]
call fcn.1400f2e08
jmp 0x1400c18f4
lea rcx, [0x1401777a0]
call fcn.1400f2e68
cmp dword [0x1401777a0], 0xffffffff
jne 0x1400c18f4
lea rcx, [rsp + 0x60]
call fcn.1400b0600
mov rdi, rax
mov rcx, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 7
jb 0x1400c1b63
lea rax, [rcx + 7]
mov qword [rdi + 0x10], rax
mov rax, rdi
cmp rdx, 0x10
jb 0x1400c1b44
mov rax, qword [rdi]
lea rbx, [rax + rcx]
mov r8d, 7
lea rdx, str.effect
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 7], 0
jmp 0x1400c1b85
mov qword [rsp + 0x20], 7
lea r9, str.effect
xor r8d, r8d
lea edx, [r8 + 7]
mov rcx, rdi
call fcn.14007c6d0
mov rdi, rax
mov qword [0x140177780], 0
xorps xmm0, xmm0
movdqu xmmword [0x140177790], xmm0
movups xmm0, xmmword [rdi]
movups xmmword [0x140177780], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [0x140177790], xmm1
mov qword [rdi + 0x10], 0
mov qword [rdi + 0x18], 0xf
mov byte [rdi], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x1400c1ad8
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c1c02
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400c1c02
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400f29d8
jmp 0x1400c1ad8