Function at 0x100034b40
Capabilities:
Check if file exists
Get file attributes

Disassembly:
mov rax, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x200
mov qword [rsp + 0x90], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rsi
mov r14, r9
mov r12, r8
mov r13d, edx
mov rbx, rcx
mov ebp, 0x643
lea rcx, [rsp + 0x30]
call fcn.10001e06c
nop
lea rcx, [rsp + 0xa0]
call fcn.10003845c
nop
lea rcx, [rsp + 0x50]
call fcn.10003df74
nop
lea rcx, [rsp + 0x20]
call fcn.10001e06c
nop
xor esi, esi
mov dword [rsp + 0x38], esi
mov dword [rsp + 0x230], esi
lea rcx, [rsp + 0x28]
call fcn.10001e06c
nop
cmp rbx, rsi
je 0x10003550a
cmp r14, rsi
je 0x10003550a
mov dword [r14], esi
mov ecx, 0x7fff
mov rax, rbx
cmp word [rax], si
je 0x100034bef
add rax, 2
sub rcx, 1
jne 0x100034be0
cmp rcx, rsi
jne 0x100034c3f
lea rdx, [0x10000bc50]
mov ecx, 3
call fcn.100037e18
nop
lea rcx, [rsp + 0x28]
call fcn.10001f3ec
nop
lea rcx, [rsp + 0x20]
call fcn.10001f3ec
nop
lea rcx, [rsp + 0x50]
call fcn.10003dfc8
nop
lea rcx, [rsp + 0xa0]
call fcn.10003861c
nop
mov edi, 0xce
jmp 0x1000354fc
lea rax, [rsp + 0x40]
mov qword [rsp + 0x48], rax
mov rdx, rbx
lea rcx, [rsp + 0x40]
call fcn.10001e134
nop
xor r8d, r8d
lea rdx, [rsp + 0x30]
mov rcx, rax
call fcn.10003171c
mov edi, eax
cmp eax, esi
je 0x100034cb8
mov r9, rbx
lea r8, [0x10000bca0]
mov edx, eax
mov ecx, 3
call fcn.100037ee8
nop
lea rcx, [rsp + 0x28]
call fcn.10001f3ec
nop
lea rcx, [rsp + 0x20]
call fcn.10001f3ec
nop
lea rcx, [rsp + 0x50]
call fcn.10003dfc8
nop
lea rcx, [rsp + 0xa0]
call fcn.10003861c
nop
jmp 0x1000354fc
mov rbx, qword [rsp + 0x30]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov edi, eax
cmp eax, 0xffffffff
jne 0x100034cd7
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
jmp 0x100034cdd
shr edi, 3
and edi, 2
cmp edi, esi
je 0x100034d2c
mov r9, rbx
lea r8, [0x10000bce8]
mov edx, edi
mov ecx, 3
call fcn.100037ee8
nop
lea rcx, [rsp + 0x28]
call fcn.10001f3ec
nop
lea rcx, [rsp + 0x20]
call fcn.10001f3ec
nop
lea rcx, [rsp + 0x50]
call fcn.10003dfc8
nop
lea rcx, [rsp + 0xa0]
call fcn.10003861c
nop
jmp 0x1000354fc
test r13d, 0xffffffe0
je 0x100034d80
lea rdx, [0x10000bd18]
mov ecx, 3
call fcn.100037e18
nop
lea rcx, [rsp + 0x28]
call fcn.10001f3ec
nop
lea rcx, [rsp + 0x20]
call fcn.10001f3ec
nop
lea rcx, [rsp + 0x50]
call fcn.10003dfc8
nop
lea rcx, [rsp + 0xa0]
call fcn.10003861c
nop
mov edi, 0x57
jmp 0x1000354fc
cmp r12, rsi
je 0x100034e3c
mov rcx, qword [r12]
cmp rcx, rsi
je 0x100034df1
cmp qword [r12 + 0x10], rsi
je 0x100034df1
cmp qword [r12 + 0x18], rsi
je 0x100034df1
cmp qword [r12 + 8], rsi
je 0x100034df1
lea rdi, [0x100008b20]
mov rdx, rdi
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
cmp eax, esi
je 0x100034df1
mov rdx, rdi
mov rcx, qword [r12 + 0x10]
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
cmp eax, esi
je 0x100034df1
mov rdx, rdi
mov rcx, qword [r12 + 0x18]
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
cmp eax, esi
je 0x100034df1
mov rdx, rdi
mov rcx, qword [r12 + 8]
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
cmp eax, esi
jne 0x100034e3c
lea rdx, [0x10000c260]
mov ecx, 3
call fcn.100037e18
nop
lea rcx, [rsp + 0x28]
call fcn.10001f3ec
nop
lea rcx, [rsp + 0x20]
call fcn.10001f3ec
nop
lea rcx, [rsp + 0x50]
call fcn.10003dfc8
nop
lea rcx, [rsp + 0xa0]
call fcn.10003861c
nop
mov edi, 0x57
jmp 0x1000354fc
call fcn.1000305b8
cmp eax, esi
jne 0x100034e90
lea rdx, [0x10000c170]
mov ecx, 3
call fcn.100037e18
nop
lea rcx, [rsp + 0x28]
call fcn.10001f3ec
nop
lea rcx, [rsp + 0x20]
call fcn.10001f3ec
nop
lea rcx, [rsp + 0x50]
call fcn.10003dfc8
nop
lea rcx, [rsp + 0xa0]
call fcn.10003861c
nop
mov edi, 5
jmp 0x1000354fc
lea rax, [rsp + 0x40]
mov qword [rsp + 0x48], rax
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.10001e09c
nop
lea rdx, [rsp + 0x28]
mov rcx, rax
call fcn.100037414
cmp eax, esi
je 0x100034f7b
cmp eax, 0x34
jne 0x100034f42
test r13b, 1
je 0x100034f13
lea rdx, [0x10000c370]
lea ecx, [rax - 0x31]
call fcn.100037e18
nop
lea rcx, [rsp + 0x28]
call fcn.10001f3ec
nop
lea rcx, [rsp + 0x20]
call fcn.10001f3ec
nop
lea rcx, [rsp + 0x50]
call fcn.10003dfc8
nop
lea rcx, [rsp + 0xa0]
call fcn.10003861c
nop
mov edi, 0x780
jmp 0x1000354fc
mov r9, qword [rsp + 0x28]
mov r8, rbx
lea rdx, [0x10000be20]
mov ecx, 1
call fcn.100037e18
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x30]
call fcn.10001e1c8
mov rbx, qword [rsp + 0x30]
jmp 0x100034f7b
lea rcx, [rsp + 0x28]
call fcn.10001f3ec
nop
lea rcx, [rsp + 0x20]
call fcn.10001f3ec
nop
lea rcx, [rsp + 0x50]
call fcn.10003dfc8
nop
lea rcx, [rsp + 0xa0]
call fcn.10003861c
nop
mov edi, 0x780
jmp 0x1000354fc
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0xa0]
call fcn.1000386e0
mov edi, eax
cmp eax, esi
je 0x100034fde
mov r9, rbx
lea r8, [0x10000b9e0]
mov edx, eax
mov ecx, 3
call fcn.100037ee8
nop
lea rcx, [rsp + 0x28]
call fcn.10001f3ec
nop
lea rcx, [rsp + 0x20]
call fcn.10001f3ec
nop
lea rcx, [rsp + 0x50]
call fcn.10003dfc8
nop
lea rcx, [rsp + 0xa0]
call fcn.10003861c
nop
jmp 0x1000354fc
mov edi, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
mov eax, edi
mov rcx, qword [rsp + 0xa8]
cmp rcx, rsi
cmovne eax, dword [rsp + 0x1f8]
cmp eax, 9
je 0x1000354b3
mov eax, edi
cmp rcx, rsi
cmovne eax, dword [rsp + 0x1f8]
cmp eax, 0xb
je 0x1000354b3
test r13b, 2
je 0x10003502a
xor ecx, ecx
call fcn.100045390
mov dword [rsp + 0x40], eax
jmp 0x100035038
mov ecx, 1
call fcn.100045390
mov dword [rsp + 0x40], eax
mov r15d, r13d
and r15d, 4
mov ebx, r13d
and ebx, 1
mov esi, 3
test r13b, 8
je 0x10003510e
cmp qword [rsp + 0xa8], 0
cmovne edi, dword [rsp + 0x1f8]
cmp edi, 6
jne 0x100035104
lea rax, [rsp + 0x48]
mov qword [rsp + 0x88], rax
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x48]
call fcn.10001e09c
nop
mov rcx, rax
call fcn.100045e1c
test eax, eax
je 0x10003510e
cmp eax, 0x103
jne 0x1000350fd
test r15d, r15d
jne 0x10003510e
test r12, r12
je 0x1000350f3
lea r9, [rsp + 0x50]
xor r8d, r8d
mov edx, esi
lea rcx, [rsp + 0xa0]
call fcn.1000406c4
cmp eax, 0xb7
jne 0x100035376
lea r8, [rsp + 0x230]
mov rdx, r12
lea rcx, [rsp + 0x50]
call fcn.100037940
mov ebp, eax
test eax, eax
jne 0x100035344
mov ebp, 0x103
jmp 0x100035458
mov ebp, 0x103
jmp 0x100035458
mov ebp, eax
jmp 0x10003533c
mov ebp, 1
jmp 0x100035376
test r13b, 0x10
mov r8d, 0
cmove r8d, esi
test ebx, ebx
je 0x100035139
lea r9, [rsp + 0x50]
mov edx, 6
lea rcx, [rsp + 0xa0]
call fcn.1000406c4
jmp 0x100035150
lea r9, [rsp + 0x50]
mov edx, 4
lea rcx, [rsp + 0xa0]
call fcn.1000406c4
test eax, eax
jne 0x10003515f
lea r13d, [rax + 1]
mov dword [rsp + 0x38], r13d
jmp 0x10003516f
cmp eax, 0xb7
jne 0x10003533a
mov r13d, dword [rsp + 0x38]
test r12, r12
je 0x100035193
lea r8, [rsp + 0x230]
mov rdx, r12
lea rcx, [rsp + 0x50]
call fcn.100037940
mov ebp, eax
test eax, eax
jne 0x100035344
lea rdx, [rsp + 0x3c]
lea rcx, [rsp + 0x50]
call fcn.10003e358
test eax, eax
jne 0x1000351be
lea rdx, [0x10000c440]
mov ecx, esi
call fcn.100037e18
mov ebp, 0x643
jmp 0x100035368
mov eax, dword [rsp + 0x3c]
test eax, eax
jle 0x100035324
cmp eax, 4
jle 0x10003530e
mov edi, 5
cmp eax, edi
je 0x1000352f8
cmp eax, 6
je 0x100035281
cmp eax, 6
jle 0x100035324
cmp eax, 8
jle 0x100035258
cmp eax, 9
je 0x1000352f8
cmp eax, 0xa
je 0x100035234
cmp eax, 0xb
jne 0x100035324
test r13d, r13d
jne 0x10003521e
test ebx, ebx
jne 0x10003521e
xor ebp, ebp
jmp 0x100035458
mov r8, r14
mov edx, ebx
lea rcx, [rsp + 0x50]
call fcn.100051844
mov ebp, eax
jmp 0x10003533c
test r13d, r13d
jne 0x100035244
test ebx, ebx
jne 0x100035244
xor ebp, ebp
jmp 0x100035458
mov rdx, r14
lea rcx, [rsp + 0x50]
call fcn.10004b894
mov ebp, eax
jmp 0x10003533c
test r13d, r13d
jne 0x100035268
test ebx, ebx
jne 0x100035268
xor ebp, ebp
jmp 0x100035458
mov r9, r14
mov r8d, ebx
mov edx, eax
lea rcx, [rsp + 0x50]
call fcn.1000548c8
mov ebp, eax
jmp 0x10003533c
lea rax, [rsp + 0x20]
test rax, rax
jne 0x100035296
lea ecx, [rax + 0x57]
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1000352ae
lea r8, [rsp + 0x20]
mov edx, 2
lea rcx, [rsp + 0x50]
call fcn.10003e3c8
test eax, eax
jne 0x1000352c6
lea rdx, [0x10000c4a0]
mov ecx, esi
call fcn.100037e18
mov ebp, 0x643
jmp 0x100035368
mov r9d, dword [rsp + 0x3c]
mov r8, qword [rsp + 0x20]
lea rdx, [0x10000c4f0]
mov ecx, 1
call fcn.100037e18
mov r9, r14
mov r8d, ebx
mov edx, r15d
lea rcx, [rsp + 0x20]
call fcn.100037144
mov ebp, eax
jmp 0x10003533c
mov r9, r14
mov r8d, ebx
mov edx, eax
lea rcx, [rsp + 0x50]
call fcn.1000510e8
mov ebp, eax
jmp 0x10003533c
mov r9, r14
mov r8d, ebx
mov edx, eax
lea rcx, [rsp + 0x50]
call fcn.10004b550
mov ebp, eax
jmp 0x10003533c
mov r8d, eax
lea rdx, [0x10000c540]
mov ecx, 1
call fcn.100037e18
jmp 0x10003533c
mov ebp, eax
test ebp, ebp
je 0x100035458
cmp ebp, 0x103
je 0x100035458
cmp ebp, 0xe000020b
je 0x100035458
cmp ebp, 0xe0000301
je 0x100035458
cmp dword [rsp + 0x230], 0
jne 0x100035407
test r12, r12
je 0x100035407
lea rax, [rsp + 0x230]
mov qword [rsp + 0x88], rax
lea rax, [rsp + 0x48]
mov qword [rsp + 0x98], rax
mov rdx, qword [r12 + 8]
lea rcx, [rsp + 0x230]
call fcn.10001e134
mov rbx, rax
mov rdx, qword [r12]
lea rcx, [rsp + 0x48]
call fcn.10001e134
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.10003f4b0
test eax, eax
jne 0x1000353ed
mov r9, qword [rsp + 0x20]
mov r8, qword [r12]
lea rdx, [0x10000c5e0]
mov ecx, esi
call fcn.100037e18
jmp 0x100035407
mov r9, qword [rsp + 0x20]
mov r8, qword [r12]
lea rdx, [0x10000c670]
mov ecx, 1
call fcn.100037e18
cmp dword [rsp + 0x38], 0
je 0x100035469
cmp dword [rsp + 0x3c], 6
jne 0x10003541f
lea rcx, [rsp + 0x20]
call fcn.100046d7c
lea rcx, [rsp + 0x50]
call fcn.10003e2ec
test eax, eax
jne 0x100035443
mov r8, qword [rsp + 0x20]
lea rdx, [0x10000c710]
lea ecx, [rax + 1]
call fcn.100037e18
jmp 0x100035469
mov r8, qword [rsp + 0x20]
lea rdx, [0x10000c760]
mov ecx, esi
call fcn.100037e18
jmp 0x100035469
mov r8d, ebp
lea rdx, [0x10000c590]
xor ecx, ecx
call fcn.100037e18
mov ecx, dword [rsp + 0x40]
call fcn.100045390
nop
lea rcx, [rsp + 0x28]
call fcn.10001f3ec
nop
lea rcx, [rsp + 0x20]
call fcn.10001f3ec
nop
lea rcx, [rsp + 0x50]
call fcn.10003dfc8
nop
lea rcx, [rsp + 0xa0]
call fcn.10003861c
nop
lea rcx, [rsp + 0x30]
call fcn.10001f3ec
mov eax, ebp
jmp 0x10003555a
mov r8, rbx
lea rdx, [0x10000c3e0]
mov ecx, 3
call fcn.100037e18
nop
lea rcx, [rsp + 0x28]
call fcn.10001f3ec
nop
lea rcx, [rsp + 0x20]
call fcn.10001f3ec
nop
lea rcx, [rsp + 0x50]
call fcn.10003dfc8
nop
lea rcx, [rsp + 0xa0]
call fcn.10003861c
nop
mov edi, 0xd
lea rcx, [rsp + 0x30]
call fcn.10001f3ec
mov eax, edi
jmp 0x10003555a
lea rdx, [0x10000b960]
mov ecx, 3
call fcn.100037e18
nop
lea rcx, [rsp + 0x28]
call fcn.10001f3ec
nop
lea rcx, [rsp + 0x20]
call fcn.10001f3ec
nop
lea rcx, [rsp + 0x50]
call fcn.10003dfc8
nop
lea rcx, [rsp + 0xa0]
call fcn.10003861c
nop
lea rcx, [rsp + 0x30]
call fcn.10001f3ec
mov eax, 0x57
lea r11, [rsp + 0x200]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret