Function at 0x100038b00
Capabilities:
Check if file exists
Get file attributes

Disassembly:
mov rax, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x200
mov qword [rsp + 0x90], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rsi
mov r14, r9
mov r12, r8
mov r13d, edx
mov rbx, rcx
mov ebp, 0x643
lea rcx, [rsp + 0x30]
call fcn.100020360
nop
lea rcx, [rsp + 0xa0]
call fcn.100055970
nop
lea rcx, [rsp + 0x50]
call fcn.10003cdb4
nop
lea rcx, [rsp + 0x20]
call fcn.100020360
nop
xor esi, esi
mov dword [rsp + 0x38], esi
mov dword [rsp + 0x230], esi
lea rcx, [rsp + 0x28]
call fcn.100020360
nop
cmp rbx, rsi
je 0x1000394ca
cmp r14, rsi
je 0x1000394ca
mov dword [r14], esi
mov ecx, 0x7fff
mov rax, rbx
cmp word [rax], si
je 0x100038baf
add rax, 2
sub rcx, 1
jne 0x100038ba0
cmp rcx, rsi
jne 0x100038bff
lea rdx, [0x10000c3c0]
mov ecx, 3
call fcn.100054fd8
nop
lea rcx, [rsp + 0x28]
call fcn.10002006c
nop
lea rcx, [rsp + 0x20]
call fcn.10002006c
nop
lea rcx, [rsp + 0x50]
call fcn.10003ce68
nop
lea rcx, [rsp + 0xa0]
call fcn.100055cd4
nop
mov edi, 0xce
jmp 0x1000394bc
lea rax, [rsp + 0x40]
mov qword [rsp + 0x48], rax
mov rdx, rbx
lea rcx, [rsp + 0x40]
call fcn.100020428
nop
xor r8d, r8d
lea rdx, [rsp + 0x30]
mov rcx, rax
call fcn.100034be4
mov edi, eax
cmp eax, esi
je 0x100038c78
mov r9, rbx
lea r8, [0x10000c410]
mov edx, eax
mov ecx, 3
call fcn.1000550a8
nop
lea rcx, [rsp + 0x28]
call fcn.10002006c
nop
lea rcx, [rsp + 0x20]
call fcn.10002006c
nop
lea rcx, [rsp + 0x50]
call fcn.10003ce68
nop
lea rcx, [rsp + 0xa0]
call fcn.100055cd4
nop
jmp 0x1000394bc
mov rbx, qword [rsp + 0x30]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov edi, eax
cmp eax, 0xffffffff
jne 0x100038c97
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
jmp 0x100038c9d
shr edi, 3
and edi, 2
cmp edi, esi
je 0x100038cec
mov r9, rbx
lea r8, [0x10000c458]
mov edx, edi
mov ecx, 3
call fcn.1000550a8
nop
lea rcx, [rsp + 0x28]
call fcn.10002006c
nop
lea rcx, [rsp + 0x20]
call fcn.10002006c
nop
lea rcx, [rsp + 0x50]
call fcn.10003ce68
nop
lea rcx, [rsp + 0xa0]
call fcn.100055cd4
nop
jmp 0x1000394bc
test r13d, 0xffffffe0
je 0x100038d40
lea rdx, [0x10000c488]
mov ecx, 3
call fcn.100054fd8
nop
lea rcx, [rsp + 0x28]
call fcn.10002006c
nop
lea rcx, [rsp + 0x20]
call fcn.10002006c
nop
lea rcx, [rsp + 0x50]
call fcn.10003ce68
nop
lea rcx, [rsp + 0xa0]
call fcn.100055cd4
nop
mov edi, 0x57
jmp 0x1000394bc
cmp r12, rsi
je 0x100038dfc
mov rcx, qword [r12]
cmp rcx, rsi
je 0x100038db1
cmp qword [r12 + 0x10], rsi
je 0x100038db1
cmp qword [r12 + 0x18], rsi
je 0x100038db1
cmp qword [r12 + 8], rsi
je 0x100038db1
lea rdi, [0x100005b90]
mov rdx, rdi
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
cmp eax, esi
je 0x100038db1
mov rdx, rdi
mov rcx, qword [r12 + 0x10]
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
cmp eax, esi
je 0x100038db1
mov rdx, rdi
mov rcx, qword [r12 + 0x18]
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
cmp eax, esi
je 0x100038db1
mov rdx, rdi
mov rcx, qword [r12 + 8]
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
cmp eax, esi
jne 0x100038dfc
lea rdx, [0x10000c9d0]
mov ecx, 3
call fcn.100054fd8
nop
lea rcx, [rsp + 0x28]
call fcn.10002006c
nop
lea rcx, [rsp + 0x20]
call fcn.10002006c
nop
lea rcx, [rsp + 0x50]
call fcn.10003ce68
nop
lea rcx, [rsp + 0xa0]
call fcn.100055cd4
nop
mov edi, 0x57
jmp 0x1000394bc
call fcn.1000338d4
cmp eax, esi
jne 0x100038e50
lea rdx, [0x10000c8e0]
mov ecx, 3
call fcn.100054fd8
nop
lea rcx, [rsp + 0x28]
call fcn.10002006c
nop
lea rcx, [rsp + 0x20]
call fcn.10002006c
nop
lea rcx, [rsp + 0x50]
call fcn.10003ce68
nop
lea rcx, [rsp + 0xa0]
call fcn.100055cd4
nop
mov edi, 5
jmp 0x1000394bc
lea rax, [rsp + 0x40]
mov qword [rsp + 0x48], rax
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.100020390
nop
lea rdx, [rsp + 0x28]
mov rcx, rax
call fcn.10003bc38
cmp eax, esi
je 0x100038f3b
cmp eax, 0x34
jne 0x100038f02
test r13b, 1
je 0x100038ed3
lea rdx, [0x10000cae0]
lea ecx, [rax - 0x31]
call fcn.100054fd8
nop
lea rcx, [rsp + 0x28]
call fcn.10002006c
nop
lea rcx, [rsp + 0x20]
call fcn.10002006c
nop
lea rcx, [rsp + 0x50]
call fcn.10003ce68
nop
lea rcx, [rsp + 0xa0]
call fcn.100055cd4
nop
mov edi, 0x780
jmp 0x1000394bc
mov r9, qword [rsp + 0x28]
mov r8, rbx
lea rdx, [0x10000c590]
mov ecx, 1
call fcn.100054fd8
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x30]
call fcn.10001f050
mov rbx, qword [rsp + 0x30]
jmp 0x100038f3b
lea rcx, [rsp + 0x28]
call fcn.10002006c
nop
lea rcx, [rsp + 0x20]
call fcn.10002006c
nop
lea rcx, [rsp + 0x50]
call fcn.10003ce68
nop
lea rcx, [rsp + 0xa0]
call fcn.100055cd4
nop
mov edi, 0x780
jmp 0x1000394bc
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0xa0]
call fcn.100055f34
mov edi, eax
cmp eax, esi
je 0x100038f9e
mov r9, rbx
lea r8, [0x10000c150]
mov edx, eax
mov ecx, 3
call fcn.1000550a8
nop
lea rcx, [rsp + 0x28]
call fcn.10002006c
nop
lea rcx, [rsp + 0x20]
call fcn.10002006c
nop
lea rcx, [rsp + 0x50]
call fcn.10003ce68
nop
lea rcx, [rsp + 0xa0]
call fcn.100055cd4
nop
jmp 0x1000394bc
mov edi, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
mov eax, edi
mov rcx, qword [rsp + 0xa8]
cmp rcx, rsi
cmovne eax, dword [rsp + 0x1f8]
cmp eax, 9
je 0x100039473
mov eax, edi
cmp rcx, rsi
cmovne eax, dword [rsp + 0x1f8]
cmp eax, 0xb
je 0x100039473
test r13b, 2
je 0x100038fea
xor ecx, ecx
call fcn.1000634e0
mov dword [rsp + 0x40], eax
jmp 0x100038ff8
mov ecx, 1
call fcn.1000634e0
mov dword [rsp + 0x40], eax
mov r15d, r13d
and r15d, 4
mov ebx, r13d
and ebx, 1
mov esi, 3
test r13b, 8
je 0x1000390ce
cmp qword [rsp + 0xa8], 0
cmovne edi, dword [rsp + 0x1f8]
cmp edi, 6
jne 0x1000390c4
lea rax, [rsp + 0x48]
mov qword [rsp + 0x88], rax
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x48]
call fcn.100020390
nop
mov rcx, rax
call fcn.100050360
test eax, eax
je 0x1000390ce
cmp eax, 0x103
jne 0x1000390bd
test r15d, r15d
jne 0x1000390ce
test r12, r12
je 0x1000390b3
lea r9, [rsp + 0x50]
xor r8d, r8d
mov edx, esi
lea rcx, [rsp + 0xa0]
call fcn.10005d374
cmp eax, 0xb7
jne 0x100039336
lea r8, [rsp + 0x230]
mov rdx, r12
lea rcx, [rsp + 0x50]
call fcn.10003c328
mov ebp, eax
test eax, eax
jne 0x100039304
mov ebp, 0x103
jmp 0x100039418
mov ebp, 0x103
jmp 0x100039418
mov ebp, eax
jmp 0x1000392fc
mov ebp, 1
jmp 0x100039336
test r13b, 0x10
mov r8d, 0
cmove r8d, esi
test ebx, ebx
je 0x1000390f9
lea r9, [rsp + 0x50]
mov edx, 6
lea rcx, [rsp + 0xa0]
call fcn.10005d374
jmp 0x100039110
lea r9, [rsp + 0x50]
mov edx, 4
lea rcx, [rsp + 0xa0]
call fcn.10005d374
test eax, eax
jne 0x10003911f
lea r13d, [rax + 1]
mov dword [rsp + 0x38], r13d
jmp 0x10003912f
cmp eax, 0xb7
jne 0x1000392fa
mov r13d, dword [rsp + 0x38]
test r12, r12
je 0x100039153
lea r8, [rsp + 0x230]
mov rdx, r12
lea rcx, [rsp + 0x50]
call fcn.10003c328
mov ebp, eax
test eax, eax
jne 0x100039304
lea rdx, [rsp + 0x3c]
lea rcx, [rsp + 0x50]
call fcn.10003d268
test eax, eax
jne 0x10003917e
lea rdx, [0x10000cbb0]
mov ecx, esi
call fcn.100054fd8
mov ebp, 0x643
jmp 0x100039328
mov eax, dword [rsp + 0x3c]
test eax, eax
jle 0x1000392e4
cmp eax, 4
jle 0x1000392ce
mov edi, 5
cmp eax, edi
je 0x1000392b8
cmp eax, 6
je 0x100039241
cmp eax, 6
jle 0x1000392e4
cmp eax, 8
jle 0x100039218
cmp eax, 9
je 0x1000392b8
cmp eax, 0xa
je 0x1000391f4
cmp eax, 0xb
jne 0x1000392e4
test r13d, r13d
jne 0x1000391de
test ebx, ebx
jne 0x1000391de
xor ebp, ebp
jmp 0x100039418
mov r8, r14
mov edx, ebx
lea rcx, [rsp + 0x50]
call fcn.1000498cc
mov ebp, eax
jmp 0x1000392fc
test r13d, r13d
jne 0x100039204
test ebx, ebx
jne 0x100039204
xor ebp, ebp
jmp 0x100039418
mov rdx, r14
lea rcx, [rsp + 0x50]
call fcn.1000423d0
mov ebp, eax
jmp 0x1000392fc
test r13d, r13d
jne 0x100039228
test ebx, ebx
jne 0x100039228
xor ebp, ebp
jmp 0x100039418
mov r9, r14
mov r8d, ebx
mov edx, eax
lea rcx, [rsp + 0x50]
call fcn.10004e070
mov ebp, eax
jmp 0x1000392fc
lea rax, [rsp + 0x20]
test rax, rax
jne 0x100039256
lea ecx, [rax + 0x57]
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10003926e
lea r8, [rsp + 0x20]
mov edx, 2
lea rcx, [rsp + 0x50]
call fcn.10003d2d8
test eax, eax
jne 0x100039286
lea rdx, [0x10000cc10]
mov ecx, esi
call fcn.100054fd8
mov ebp, 0x643
jmp 0x100039328
mov r9d, dword [rsp + 0x3c]
mov r8, qword [rsp + 0x20]
lea rdx, [0x10000cc60]
mov ecx, 1
call fcn.100054fd8
mov r9, r14
mov r8d, ebx
mov edx, r15d
lea rcx, [rsp + 0x20]
call fcn.10003b888
mov ebp, eax
jmp 0x1000392fc
mov r9, r14
mov r8d, ebx
mov edx, eax
lea rcx, [rsp + 0x50]
call fcn.10004907c
mov ebp, eax
jmp 0x1000392fc
mov r9, r14
mov r8d, ebx
mov edx, eax
lea rcx, [rsp + 0x50]
call fcn.100041fec
mov ebp, eax
jmp 0x1000392fc
mov r8d, eax
lea rdx, [0x10000ccb0]
mov ecx, 1
call fcn.100054fd8
jmp 0x1000392fc
mov ebp, eax
test ebp, ebp
je 0x100039418
cmp ebp, 0x103
je 0x100039418
cmp ebp, 0xe000020b
je 0x100039418
cmp ebp, 0xe0000301
je 0x100039418
cmp dword [rsp + 0x230], 0
jne 0x1000393c7
test r12, r12
je 0x1000393c7
lea rax, [rsp + 0x230]
mov qword [rsp + 0x88], rax
lea rax, [rsp + 0x48]
mov qword [rsp + 0x98], rax
mov rdx, qword [r12 + 8]
lea rcx, [rsp + 0x230]
call fcn.100020428
mov rbx, rax
mov rdx, qword [r12]
lea rcx, [rsp + 0x48]
call fcn.100020428
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.10003e76c
test eax, eax
jne 0x1000393ad
mov r9, qword [rsp + 0x20]
mov r8, qword [r12]
lea rdx, [0x10000cd50]
mov ecx, esi
call fcn.100054fd8
jmp 0x1000393c7
mov r9, qword [rsp + 0x20]
mov r8, qword [r12]
lea rdx, [0x10000cde0]
mov ecx, 1
call fcn.100054fd8
cmp dword [rsp + 0x38], 0
je 0x100039429
cmp dword [rsp + 0x3c], 6
jne 0x1000393df
lea rcx, [rsp + 0x20]
call fcn.100051420
lea rcx, [rsp + 0x50]
call fcn.10003d1fc
test eax, eax
jne 0x100039403
mov r8, qword [rsp + 0x20]
lea rdx, [0x10000ce80]
lea ecx, [rax + 1]
call fcn.100054fd8
jmp 0x100039429
mov r8, qword [rsp + 0x20]
lea rdx, [0x10000ced0]
mov ecx, esi
call fcn.100054fd8
jmp 0x100039429
mov r8d, ebp
lea rdx, [0x10000cd00]
xor ecx, ecx
call fcn.100054fd8
mov ecx, dword [rsp + 0x40]
call fcn.1000634e0
nop
lea rcx, [rsp + 0x28]
call fcn.10002006c
nop
lea rcx, [rsp + 0x20]
call fcn.10002006c
nop
lea rcx, [rsp + 0x50]
call fcn.10003ce68
nop
lea rcx, [rsp + 0xa0]
call fcn.100055cd4
nop
lea rcx, [rsp + 0x30]
call fcn.10002006c
mov eax, ebp
jmp 0x10003951a
mov r8, rbx
lea rdx, [0x10000cb50]
mov ecx, 3
call fcn.100054fd8
nop
lea rcx, [rsp + 0x28]
call fcn.10002006c
nop
lea rcx, [rsp + 0x20]
call fcn.10002006c
nop
lea rcx, [rsp + 0x50]
call fcn.10003ce68
nop
lea rcx, [rsp + 0xa0]
call fcn.100055cd4
nop
mov edi, 0xd
lea rcx, [rsp + 0x30]
call fcn.10002006c
mov eax, edi
jmp 0x10003951a
lea rdx, [0x10000c0d0]
mov ecx, 3
call fcn.100054fd8
nop
lea rcx, [rsp + 0x28]
call fcn.10002006c
nop
lea rcx, [rsp + 0x20]
call fcn.10002006c
nop
lea rcx, [rsp + 0x50]
call fcn.10003ce68
nop
lea rcx, [rsp + 0xa0]
call fcn.100055cd4
nop
lea rcx, [rsp + 0x30]
call fcn.10002006c
mov eax, 0x57
lea r11, [rsp + 0x200]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret