Function at 0x18004dcd0
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x520]
sub rsp, 0x620
mov qword [rbp + 0x140], 0xfffffffffffffffe
mov qword [rsp + 0x678], rbx
mov rax, qword [0x1800e0280]
xor rax, rsp
mov qword [rbp + 0x510], rax
mov r15, r8
mov r13, rdx
mov r12, rcx
mov qword [rbp + 0x250], rcx
mov qword [rbp + 0x258], rdx
xor esi, esi
mov dword [rsp + 0x28], esi
lea rax, [0x1800b08f8]
mov qword [rsp + 0x40], rax
lea rax, [0x1800b09a8]
mov qword [rsp + 0x50], rax
lea rax, [rbp - 0x28]
mov qword [rsp + 0x30], rax
lea rax, [0x1800b0988]
mov qword [rbp - 0x28], rax
lea rax, [0x1800b08f0]
mov qword [rbp - 0x28], rax
mov dword [rsp + 0x28], 1
mov rax, qword [rsp + 0x40]
movsxd rcx, dword [rax + 4]
lea rax, [0x1800b0850]
mov qword [rsp + rcx + 0x40], rax
mov rax, qword [rsp + 0x40]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rsp + rcx + 0x3c], edx
mov qword [rsp + 0x48], rsi
mov rax, qword [rsp + 0x40]
movsxd rcx, dword [rax + 4]
lea rbx, [rsp + 0x40]
add rbx, rcx
mov qword [rbx + 0x40], rsi
mov qword [rbx + 8], rsi
mov dword [rbx + 0x14], esi
mov dword [rbx + 0x18], 0x201
mov qword [rbx + 0x20], 6
mov qword [rbx + 0x28], rsi
mov qword [rbx + 0x30], rsi
mov qword [rbx + 0x38], rsi
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call fcn.18000e330
lea ecx, [rsi + 8]
call fcn.1800735b0
mov rdi, rax
test rax, rax
je 0x18004ddfa
xor eax, eax
mov qword [rdi], rax
mov cl, 1
call fcn.18007170c
mov qword [rdi], rax
jmp 0x18004ddfd
mov rdi, rsi
mov qword [rbx + 0x40], rdi
lea rax, [rsp + 0x58]
mov qword [rbx + 0x48], rax
mov qword [rbx + 0x50], rsi
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.18000e430
nop
mov rcx, rax
call fcn.180015d40
mov rdi, rax
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x18004de4a
mov rdx, qword [rcx]
call qword [rdx + 0x10]
test rax, rax
je 0x18004de4a
mov r8, qword [rax]
mov edx, 1
mov rcx, rax
call qword [r8]
mov rax, qword [rdi]
mov dl, 0x20
mov rcx, rdi
call qword [rax + 0x60]
mov word [rbx + 0x58], ax
cmp qword [rbx + 0x48], 0
jne 0x18004de72
mov edx, dword [rbx + 0x10]
or edx, 4
xor r8d, r8d
mov rcx, rbx
call fcn.18000e330
nop
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x50]
movsxd rcx, dword [rax + 4]
lea rax, [0x1800b0868]
mov qword [rsp + rcx + 0x50], rax
mov rax, qword [rsp + 0x50]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rsp + rcx + 0x4c], edx
mov rax, qword [rsp + 0x40]
movsxd rcx, dword [rax + 4]
lea rax, [0x1800b0908]
mov qword [rsp + rcx + 0x40], rax
mov rax, qword [rsp + 0x40]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x20]
mov dword [rsp + rcx + 0x3c], edx
mov rax, qword [rsp + 0x40]
movsxd rcx, dword [rax + 4]
lea rax, [0x1800b0990]
mov qword [rsp + rcx + 0x40], rax
mov rax, qword [rsp + 0x40]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rsp + rcx + 0x3c], edx
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x58]
call fcn.180014250
nop
lea rax, [0x1800b0910]
mov qword [rsp + 0x58], rax
mov qword [rbp - 0x40], rsi
mov dword [rbp - 0x38], esi
mov r9b, 0xe5
mov r8d, 0x15
lea rdx, [0x1800b3030]
lea rcx, [rbp + 0x260]
call fcn.1800403f0
mov r14, rax
mov r9b, 0xab
mov r8d, 1
lea rdx, [0x1800b0390]
lea rcx, [rbp + 0x280]
call fcn.1800403f0
mov rsi, rax
mov r9b, 0xda
mov r8d, 1
lea rdx, [0x1800b0394]
lea rcx, [rbp + 0x2c0]
call fcn.1800403f0
mov rbx, rax
call fcn.18006bebc
mov edi, eax
mov rdx, rbx
lea rcx, [rsp + 0x50]
call fcn.180015f30
mov rcx, rax
mov edx, edi
call fcn.180011820
mov rcx, rax
mov rdx, rsi
call fcn.180015f30
mov rcx, rax
mov rdx, r14
call fcn.180015f30
nop
cmp qword [rbp + 0x2d8], 8
jb 0x18004dfbe
mov rcx, qword [rbp + 0x2c0]
call fcn.180073478
mov qword [rbp + 0x2d8], 7
xor esi, esi
mov qword [rbp + 0x2d0], rsi
mov word [rbp + 0x2c0], si
cmp qword [rbp + 0x298], 8
jb 0x18004dfef
mov rcx, qword [rbp + 0x280]
call fcn.180073478
mov qword [rbp + 0x298], 7
mov qword [rbp + 0x290], rsi
mov word [rbp + 0x280], si
cmp qword [rbp + 0x278], 8
jb 0x18004e01e
mov rcx, qword [rbp + 0x260]
call fcn.180073478
mov qword [rbp + 0x278], 7
mov qword [rbp + 0x270], rsi
mov word [rbp + 0x260], si
mov r9b, 0xe7
mov r8d, 7
lea rdx, [0x1800b17a8]
lea rcx, [rbp + 0x2c0]
call fcn.18003fcc0
mov rdi, rax
mov r9b, 0x4d
mov r8d, 5
lea rdx, [0x1800b03a0]
lea rcx, [rbp + 0x280]
call fcn.18003fcc0
mov rbx, rax
lea rdx, [rbp + 0x260]
lea rcx, [rsp + 0x40]
call fcn.1800124c0
nop
mov r8, rdi
mov rdx, rbx
mov rcx, rax
call fcn.18003bf90
nop
cmp qword [rbp + 0x278], 8
jb 0x18004e0ac
mov rcx, qword [rbp + 0x260]
call fcn.180073478
mov qword [rbp + 0x278], 7
mov qword [rbp + 0x270], rsi
mov word [rbp + 0x260], si
cmp qword [rbp + 0x298], 0x10
jb 0x18004e0db
mov rcx, qword [rbp + 0x280]
call fcn.180073478
mov qword [rbp + 0x298], 0xf
mov qword [rbp + 0x290], rsi
mov byte [rbp + 0x280], 0
cmp qword [rbp + 0x2d8], 0x10
jb 0x18004e10a
mov rcx, qword [rbp + 0x2c0]
call fcn.180073478
mov qword [rbp + 0x2d8], 0xf
mov qword [rbp + 0x2d0], rsi
mov byte [rbp + 0x2c0], 0
lea rcx, [rbp - 0x28]
call fcn.1800123f0
lea rax, [rbp - 0x28]
mov qword [rsp + 0x20], rax
lea r14, [0x1800b08f0]
mov qword [rbp - 0x28], r14
lea rdi, [0x1800b0988]
mov qword [rbp - 0x28], rdi
lea rcx, [rbp - 0x28]
call fcn.1800723c4
mov r9b, 0xda
mov r8d, 0x13
lea rdx, [0x1800b3060]
lea rcx, [rbp + 0x2e0]
call fcn.1800403f0
nop
mov r9b, 0x4d
mov r8d, 8
lea rdx, [0x1800b3088]
lea rcx, [rbp + 0x260]
call fcn.1800403f0
nop
cmp qword [rax + 0x18], 8
jb 0x18004e198
mov rax, qword [rax]
mov r8d, 0x103
lea rdx, [rbp + 0x300]
mov rcx, rax
call fcn.18006b958
mov ebx, eax
cmp qword [rbp + 0x278], 8
jb 0x18004e1c5
mov rcx, qword [rbp + 0x260]
call fcn.180073478
mov qword [rbp + 0x278], 7
mov qword [rbp + 0x270], rsi
mov word [rbp + 0x260], si
test ebx, ebx
je 0x18004e281
cmp word [rbp + 0x300], 0
jne 0x18004e1f5
mov r8, rsi
jmp 0x18004e20b
lea rax, [rbp + 0x300]
or r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x18004e200
lea rdx, [rbp + 0x300]
lea rcx, [rbp + 0x2e0]
call fcn.180014300
mov r9b, 0xfb
mov r8d, 9
lea rdx, [0x1800b30a0]
lea rcx, [rbp + 0x260]
call fcn.1800403f0
nop
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, rax
lea rcx, [rbp + 0x2e0]
call fcn.180035ab0
nop
cmp qword [rbp + 0x278], 8
jb 0x18004e268
mov rcx, qword [rbp + 0x260]
call fcn.180073478
mov qword [rbp + 0x278], 7
mov qword [rbp + 0x270], rsi
mov word [rbp + 0x260], si
mov r9b, 0x33
mov r8d, 0xf
lea rdx, [0x1800b30c0]
lea rcx, [rbp + 0x2a0]
call fcn.1800403f0
nop
mov r8, r12
mov rdx, rax
lea rcx, [rbp + 0x2c0]
call fcn.18003ef20
nop
lea r8, [0x1800b30b4]
mov rdx, rax
lea rcx, [rbp + 0x280]
call fcn.1800372a0
nop
mov r8, r13
mov rdx, rax
lea rcx, [rbp + 0x260]
call fcn.18003ef20
nop
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, rax
lea rcx, [rbp + 0x2e0]
call fcn.180035ab0
nop
cmp qword [rbp + 0x278], 8
jb 0x18004e308
mov rcx, qword [rbp + 0x260]
call fcn.180073478
mov qword [rbp + 0x278], 7
mov qword [rbp + 0x270], rsi
mov word [rbp + 0x260], si
cmp qword [rbp + 0x298], 8
jb 0x18004e337
mov rcx, qword [rbp + 0x280]
call fcn.180073478
mov qword [rbp + 0x298], 7
mov qword [rbp + 0x290], rsi
mov word [rbp + 0x280], si
cmp qword [rbp + 0x2d8], 8
jb 0x18004e366
mov rcx, qword [rbp + 0x2c0]
call fcn.180073478
mov qword [rbp + 0x2d8], 7
mov qword [rbp + 0x2d0], rsi
mov word [rbp + 0x2c0], si
cmp qword [rbp + 0x2b8], 8
jb 0x18004e395
mov rcx, qword [rbp + 0x2a0]
call fcn.180073478
mov qword [rbp + 0x2b8], 7
mov qword [rbp + 0x2b0], rsi
mov word [rbp + 0x2a0], si
cmp qword [r12 + 0x18], 8
jb 0x18004e3bc
mov rcx, qword [r12]
jmp 0x18004e3bf
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x18004e731
lea rax, [0x1800b08f8]
mov qword [rbp + 0x40], rax
lea rax, [0x1800b09a8]
mov qword [rbp + 0x50], rax
lea rax, [rbp + 0xd8]
mov qword [rsp + 0x20], rax
mov qword [rbp + 0xd8], rdi
mov qword [rbp + 0xd8], r14
mov dword [rsp + 0x28], 0x11
mov rax, qword [rbp + 0x40]
movsxd rcx, dword [rax + 4]
lea rax, [0x1800b0850]
mov qword [rbp + rcx + 0x40], rax
mov rax, qword [rbp + 0x40]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rbp + rcx + 0x3c], edx
mov qword [rbp + 0x48], rsi
mov rax, qword [rbp + 0x40]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x40]
add rcx, rax
lea rdx, [rbp + 0x58]
call fcn.1800141b0
nop
lea rax, [rbp + 0x50]
mov qword [rsp + 0x20], rax
mov rax, qword [rbp + 0x50]
movsxd rcx, dword [rax + 4]
lea rax, [0x1800b0868]
mov qword [rbp + rcx + 0x50], rax
mov rax, qword [rbp + 0x50]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rbp + rcx + 0x4c], edx
mov rax, qword [rbp + 0x40]
movsxd rcx, dword [rax + 4]
lea rax, [0x1800b0908]
mov qword [rbp + rcx + 0x40], rax
mov rax, qword [rbp + 0x40]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x20]
mov dword [rbp + rcx + 0x3c], edx
mov rax, qword [rbp + 0x40]
movsxd rcx, dword [rax + 4]
lea rax, [0x1800b0990]
mov qword [rbp + rcx + 0x40], rax
mov rax, qword [rbp + 0x40]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x3c], edx
lea rax, [rbp + 0x58]
mov qword [rsp + 0x20], rax
lea rcx, [rbp + 0x58]
call fcn.180014250
nop
lea rax, [0x1800b0910]
mov qword [rbp + 0x58], rax
mov qword [rbp + 0xc0], rsi
mov dword [rbp + 0xc8], esi
mov r9b, 0xac
mov r8d, 0x11
lea rdx, [0x1800b30e0]
lea rcx, [rbp + 0x280]
call fcn.1800403f0
mov r14, rax
mov r9b, 0xab
mov r8d, 1
lea rdx, [0x1800b0390]
lea rcx, [rbp + 0x260]
call fcn.1800403f0
mov rsi, rax
mov r9b, 0xda
mov r8d, 1
lea rdx, [0x1800b0394]
lea rcx, [rbp + 0x2a0]
call fcn.1800403f0
mov rbx, rax
call fcn.18006bebc
mov edi, eax
mov rdx, rbx
lea rcx, [rbp + 0x50]
call fcn.180015f30
mov rcx, rax
mov edx, edi
call fcn.180011820
mov rcx, rax
mov rdx, rsi
call fcn.180015f30
mov rcx, rax
mov rdx, r14
call fcn.180015f30
nop
cmp qword [rbp + 0x2b8], 8
jb 0x18004e58d
mov rcx, qword [rbp + 0x2a0]
call fcn.180073478
mov qword [rbp + 0x2b8], 7
xor esi, esi
mov qword [rbp + 0x2b0], rsi
mov word [rbp + 0x2a0], si
cmp qword [rbp + 0x278], 8
jb 0x18004e5be
mov rcx, qword [rbp + 0x260]
call fcn.180073478
mov qword [rbp + 0x278], 7
mov qword [rbp + 0x270], rsi
mov word [rbp + 0x260], si
cmp qword [rbp + 0x298], 8
jb 0x18004e5ed
mov rcx, qword [rbp + 0x280]
call fcn.180073478
mov qword [rbp + 0x298], 7
mov qword [rbp + 0x290], rsi
mov word [rbp + 0x280], si
mov r9b, 0xe7
mov r8d, 7
lea rdx, [0x1800b17a8]
lea rcx, [rbp + 0x280]
call fcn.18003fcc0
mov rdi, rax
mov r9b, 0x4d
mov r8d, 5
lea rdx, [0x1800b03a0]
lea rcx, [rbp + 0x260]
call fcn.18003fcc0
mov rbx, rax
lea rdx, [rbp + 0x2a0]
lea rcx, [rbp + 0x40]
call fcn.1800124c0
nop
mov r8, rdi
mov rdx, rbx
mov rcx, rax
call fcn.18003bf90
nop
cmp qword [rbp + 0x2b8], 8
jb 0x18004e67a
mov rcx, qword [rbp + 0x2a0]
call fcn.180073478
mov qword [rbp + 0x2b8], 7
mov qword [rbp + 0x2b0], rsi
mov word [rbp + 0x2a0], si
cmp qword [rbp + 0x278], 0x10
jb 0x18004e6a9
mov rcx, qword [rbp + 0x260]
call fcn.180073478
mov qword [rbp + 0x278], 0xf
mov qword [rbp + 0x270], rsi
mov byte [rbp + 0x260], 0
cmp qword [rbp + 0x298], 0x10
jb 0x18004e6d8
mov rcx, qword [rbp + 0x280]
call fcn.180073478
mov qword [rbp + 0x298], 0xf
mov qword [rbp + 0x290], rsi
mov byte [rbp + 0x280], 0
lea rcx, [rbp + 0xd8]
call fcn.1800123f0
lea rax, [rbp + 0xd8]
mov qword [rsp + 0x20], rax
lea rax, [0x1800b08f0]
mov qword [rbp + 0xd8], rax
lea rax, [0x1800b0988]
mov qword [rbp + 0xd8], rax
lea rcx, [rbp + 0xd8]
call fcn.1800723c4
mov r9, r15
lea rcx, [rbp + 0x2e0]
call fcn.180052160
test al, al
jne 0x18004ea4e
cmp qword [r12 + 0x18], 8
jb 0x18004e756
mov rcx, qword [r12]
jmp 0x18004e759
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x18004ea4e
lea rcx, [rbp + 0x150]
call fcn.180012320
nop
mov r9b, 0xab
mov r8d, 0x1a
lea rdx, [0x1800b3108]
lea rcx, [rbp + 0x280]
call fcn.1800403f0
mov r15, rax
mov r9b, 0x79
mov r8d, 1
lea rdx, [0x1800b040c]
lea rcx, [rbp + 0x260]
call fcn.1800403f0
mov r14, rax
mov r9b, 0xbe
mov r8d, 1
lea rdx, [0x1800b0410]
lea rcx, [rbp + 0x2a0]
call fcn.1800403f0
mov rdi, rax
call fcn.18006c598
mov esi, eax
call fcn.18006bebc
mov ebx, eax
mov rdx, rdi
lea rcx, [rbp + 0x160]
call fcn.180015f30
mov rcx, rax
mov edx, ebx
call fcn.180011820
mov rcx, rax
mov rdx, r14
call fcn.180015f30
mov rcx, rax
mov rdx, r15
call fcn.180015f30
mov rcx, rax
lea rdx, str._Last_Error:
call fcn.1800161a0
mov rcx, rax
mov edx, esi
call fcn.180011820
nop
cmp qword [rbp + 0x2b8], 8
jb 0x18004e83f
mov rcx, qword [rbp + 0x2a0]
call fcn.180073478
mov qword [rbp + 0x2b8], 7
xor esi, esi
mov qword [rbp + 0x2b0], rsi
mov word [rbp + 0x2a0], si
cmp qword [rbp + 0x278], 8
jb 0x18004e870
mov rcx, qword [rbp + 0x260]
call fcn.180073478
mov qword [rbp + 0x278], 7
mov qword [rbp + 0x270], rsi
mov word [rbp + 0x260], si
cmp qword [rbp + 0x298], 8
jb 0x18004e89f
mov rcx, qword [rbp + 0x280]
call fcn.180073478
mov qword [rbp + 0x298], 7
mov qword [rbp + 0x290], rsi
mov word [rbp + 0x280], si
mov r9b, 0xe7
mov r8d, 7
lea rdx, [0x1800b17a8]
lea rcx, [rbp + 0x280]
call fcn.18003fcc0
mov rdi, rax
mov r9b, 0xf8
mov r8d, 5
lea rdx, [0x1800b0414]
lea rcx, [rbp + 0x260]
call fcn.18003fcc0
mov rbx, rax
lea rdx, [rbp + 0x2a0]
lea rcx, [rbp + 0x150]
call fcn.1800124c0
nop
mov r8, rdi
mov rdx, rbx
mov rcx, rax
call fcn.18003bf90
nop
cmp qword [rbp + 0x2b8], 8
jb 0x18004e92f
mov rcx, qword [rbp + 0x2a0]
call fcn.180073478
mov qword [rbp + 0x2b8], 7
mov qword [rbp + 0x2b0], rsi
mov word [rbp + 0x2a0], si
cmp qword [rbp + 0x278], 0x10
jb 0x18004e95e
mov rcx, qword [rbp + 0x260]
call fcn.180073478
mov qword [rbp + 0x278], 0xf
mov qword [rbp + 0x270], rsi
mov byte [rbp + 0x260], 0
cmp qword [rbp + 0x298], 0x10
jb 0x18004e98d
mov rcx, qword [rbp + 0x280]
call fcn.180073478
mov qword [rbp + 0x298], 0xf
mov qword [rbp + 0x290], rsi
mov byte [rbp + 0x280], 0
lea rcx, [rbp + 0x1e8]
call fcn.1800123f0
lea rax, [rbp + 0x1e8]
mov qword [rsp + 0x20], rax
lea rax, [0x1800b08f0]
mov qword [rbp + 0x1e8], rax
lea rax, [0x1800b0988]
mov qword [rbp + 0x1e8], rax
lea rcx, [rbp + 0x1e8]
call fcn.1800723c4
nop
cmp qword [rbp + 0x2f8], 8
jb 0x18004e9fd
mov rcx, qword [rbp + 0x2e0]
call fcn.180073478
mov qword [rbp + 0x2f8], 7
mov qword [rbp + 0x2f0], rsi
mov word [rbp + 0x2e0], si
cmp qword [r12 + 0x18], 8
jb 0x18004ea27
mov rcx, qword [r12]
call fcn.180073478
mov qword [r12 + 0x18], 7
mov qword [r12 + 0x10], rsi
mov word [r12], si
cmp qword [r13 + 0x18], 8
jb 0x18004ea4a
mov rcx, qword [r13]
call fcn.180073478
xor al, al
jmp 0x18004eab3
cmp qword [rbp + 0x2f8], 8
jb 0x18004ea64
mov rcx, qword [rbp + 0x2e0]
call fcn.180073478
mov qword [rbp + 0x2f8], 7
mov qword [rbp + 0x2f0], rsi
mov word [rbp + 0x2e0], si
cmp qword [r12 + 0x18], 8
jb 0x18004ea8e
mov rcx, qword [r12]
call fcn.180073478
mov qword [r12 + 0x18], 7
mov qword [r12 + 0x10], rsi
mov word [r12], si
cmp qword [r13 + 0x18], 8
jb 0x18004eab1
mov rcx, qword [r13]
call fcn.180073478
mov al, 1
mov qword [r13 + 0x18], 7
mov qword [r13 + 0x10], rsi
mov word [r13], si
mov rcx, qword [rbp + 0x510]
xor rcx, rsp
call fcn.180072850
mov rbx, qword [rsp + 0x678]
add rsp, 0x620
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret