Function at 0x180004190
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push rbp
push rsi
push rdi
lea rbp, [rsp - 0x200]
sub rsp, 0x300
mov qword [rbp - 0x78], 0xfffffffffffffffe
mov qword [rsp + 0x330], rbx
mov rax, qword [0x18005c800]
xor rax, rsp
mov qword [rbp + 0x1f0], rax
mov rsi, rdx
mov rdi, rcx
mov rcx, rdx
call fcn.180004900
mov ebx, eax
test eax, eax
js 0x180004437
lea ecx, [rbx + 1]
cmp word [rsi + rcx*2], 0
je 0x180004437
lea rax, [rbx + rbx]
mov qword [rsp + 0x38], rax
lea rdx, [rax + rsi]
lea rcx, [rsp + 0x60]
call fcn.1800030f0
nop
mov rdx, rsi
lea rcx, [rsp + 0x28]
call fcn.1800030f0
nop
cmp ebx, dword [rsp + 0x30]
jae 0x18000422a
mov dword [rsp + 0x30], ebx
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x38]
xor edx, edx
mov word [rcx + rax], dx
mov eax, dword [rsp + 0x68]
cmp eax, 6
jbe 0x180004252
mov ecx, eax
mov rax, qword [rsp + 0x60]
add rax, 0xfffffffffffffff4
lea rcx, [rax + rcx*2]
lea rdx, str.:_DATA
call fcn.180003b80
test al, al
jne 0x180004263
lea rdx, str.:_DATA
lea rcx, [rsp + 0x60]
call fcn.1800034c0
mov rcx, qword [rsp + 0x28]
call fcn.1800050c0
mov rdx, qword [rsp + 0x28]
test al, al
je 0x1800042bd
cmp ebx, 2
je 0x180004287
cmp ebx, 3
jne 0x1800042bd
cmp word [rdx + 4], 0x5c
jne 0x1800042bd
xor esi, esi
mov qword [rdi], rsi
mov qword [rdi + 8], rsi
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], rsi
mov dword [rdi + 0x20], esi
mov word [rdi + 0x24], si
lea rcx, [rdi + 0x28]
mov dword [rcx + 8], esi
mov rax, qword [rcx]
mov word [rax], si
cmp ebx, 2
jne 0x1800042cf
lea rdx, [rsp + 0x28]
call fcn.1800031c0
jmp 0x1800042cf
mov rcx, rdi
call fcn.180004190
test al, al
je 0x180004422
xor esi, esi
and dword [rdi + 0x20], 0xfffffbef
mov qword [rdi], rsi
or rbx, 0xffffffffffffffff
mov qword [rsp + 0x70], rbx
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x78]
call fcn.180002f70
nop
lea rcx, [rsp + 0x48]
call fcn.180003180
nop
mov rcx, qword [rsp + 0x70]
cmp rcx, 0xffffffffffffffff
je 0x18000433b
mov rax, qword [0x18005d7b8]
test rax, rax
je 0x180004372
lea rdx, [rbp - 0x70]
call rax
test eax, eax
je 0x1800043bb
mov rax, qword [rbp - 0x70]
mov qword [rsp + 0x58], rax
lea rdx, [rbp - 0x68]
lea rcx, [rsp + 0x48]
call fcn.180003310
jmp 0x180004353
lea r8, [rsp + 0x48]
mov rdx, qword [rsp + 0x78]
lea rcx, [rsp + 0x70]
call fcn.1800047b0
test al, al
je 0x1800043bb
mov rdx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x48]
call fcn.180003ac0
test al, al
jne 0x18000437f
mov rcx, qword [rsp + 0x48]
call fcn.18001c770
jmp 0x1800042f2
mov ecx, 0x78
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1800043bb
mov eax, dword [rsp + 0x50]
cmp eax, 7
jbe 0x18000439c
lea ecx, [rax - 6]
cmp ecx, eax
jae 0x18000439c
mov dword [rsp + 0x50], ecx
mov rax, qword [rsp + 0x48]
mov word [rax + rcx*2], si
lea rcx, [rdi + 0x28]
lea rdx, [rsp + 0x48]
call fcn.180003450
mov rax, qword [rsp + 0x58]
mov qword [rdi], rax
mov byte [rdi + 0x24], 1
mov dil, 1
jmp 0x1800043d2
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x26
jne 0x1800043cf
lea ecx, [rax - 0x24]
call qword [sym.imp.KERNEL32.dll_SetLastError]
xor dil, dil
mov rcx, qword [rsp + 0x48]
call fcn.18001c770
nop
mov rcx, qword [rsp + 0x78]
call fcn.18001c770
mov rcx, qword [rsp + 0x70]
cmp rcx, 0xffffffffffffffff
je 0x180004408
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rcx, qword [rsp + 0x70]
test eax, eax
cmovne rcx, rbx
mov qword [rsp + 0x70], rcx
mov rcx, qword [rsp + 0x28]
call fcn.18001c770
nop
mov rcx, qword [rsp + 0x60]
call fcn.18001c770
jmp 0x1800046b3
mov rcx, qword [rsp + 0x28]
call fcn.18001c770
nop
mov rcx, qword [rsp + 0x60]
call fcn.18001c770
or rbx, 0xffffffffffffffff
mov qword [rsp + 0x38], rbx
mov rcx, rsi
call fcn.1800051b0
xor ecx, ecx
mov edx, 4
test al, al
cmovne ecx, edx
mov dword [rsp + 0x40], ecx
lea rax, [rsi + rcx*2]
mov qword [rsp + 0x28], rax
mov rcx, rax
call fcn.1800050f0
test al, al
je 0x1800044d4
mov eax, dword [rsp + 0x40]
add eax, 3
cmp word [rsi + rax*2], 0
jne 0x1800044d4
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x18000468c
test al, 0x10
je 0x18000468c
xor esi, esi
mov qword [rdi], rsi
mov qword [rdi + 8], rsi
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], rsi
mov word [rdi + 0x24], si
mov dword [rdi + 0x20], eax
add rdi, 0x28
mov rdx, qword [rsp + 0x28]
mov rcx, rdi
call fcn.180003310
cmp dword [rdi + 8], 2
jbe 0x180004530
mov dword [rdi + 8], 2
mov rax, qword [rdi]
mov word [rax + 4], si
jmp 0x180004530
movzx eax, word [rsi]
cmp ax, 0x5c
je 0x1800044e7
cmp ax, 0x2f
jne 0x18000468c
mov rcx, rsi
cmp word [rsi + 2], 0
jne 0x180004538
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov ecx, eax
cmp eax, 0xffffffff
je 0x18000468c
test cl, 0x10
je 0x18000468c
xor edx, edx
mov qword [rdi], rdx
mov qword [rdi + 8], rdx
mov qword [rdi + 0x10], rdx
mov qword [rdi + 0x18], rdx
mov dword [rdi + 0x20], edx
mov word [rdi + 0x24], dx
mov dword [rdi + 0x30], edx
mov rax, qword [rdi + 0x28]
mov word [rax], dx
mov dword [rdi + 0x20], ecx
mov dil, 1
jmp 0x1800046a4
call fcn.180004ce0
test eax, eax
je 0x18000468c
mov eax, eax
lea rbx, [rsi + rax*2]
cmp word [rbx], 0
je 0x18000468c
mov rcx, rbx
call fcn.180004980
test eax, eax
jns 0x18000468c
mov rdx, rsi
lea rcx, [rsp + 0x28]
call fcn.1800030f0
nop
mov edx, dword [rsp + 0x30]
cmp dword [rsp + 0x34], edx
jne 0x18000458b
lea rcx, [rsp + 0x28]
call fcn.1800037b0
mov edx, dword [rsp + 0x30]
mov rcx, qword [rsp + 0x28]
mov eax, edx
mov r8d, 0x5c
mov word [rcx + rax*2], r8w
inc edx
xor r8d, r8d
mov word [rcx + rdx*2], r8w
mov dword [rsp + 0x30], edx
cmp dword [rsp + 0x34], edx
jne 0x1800045bf
lea rcx, [rsp + 0x28]
call fcn.1800037b0
mov edx, dword [rsp + 0x30]
mov rcx, qword [rsp + 0x28]
mov eax, edx
mov r8d, 0x2a
mov word [rcx + rax*2], r8w
inc edx
xor r8d, r8d
mov word [rcx + rdx*2], r8w
mov dword [rsp + 0x30], edx
mov byte [rsp + 0x20], r8b
mov r8, rdi
mov rdx, qword [rsp + 0x28]
lea rcx, [rsp + 0x38]
call fcn.1800046e0
test al, al
je 0x18000461f
lea rcx, [rdi + 0x28]
mov rdx, qword [rcx]
movzx eax, word [rdx]
cmp ax, word [0x18003eb10]
jne 0x18000461a
movzx eax, word [rdx + 2]
cmp ax, word [0x18003eb12]
je 0x180004674
mov byte [rsp + 0x20], 1
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
or ecx, 0xffffffff
cmp eax, ecx
cmovne ecx, eax
cmp byte [rsp + 0x20], 0
jne 0x18000464d
cmp ecx, 0xffffffff
je 0x180004641
test cl, 0x10
jne 0x18000464d
mov rcx, qword [rsp + 0x28]
call fcn.18001c770
jmp 0x18000468c
xor eax, eax
mov qword [rdi], rax
mov qword [rdi + 8], rax
mov qword [rdi + 0x10], rax
mov qword [rdi + 0x18], rax
mov word [rdi + 0x24], ax
mov eax, 0x10
cmp ecx, 0xffffffff
cmovne eax, ecx
mov dword [rdi + 0x20], eax
lea rcx, [rdi + 0x28]
mov rdx, rbx
call fcn.180003310
nop
mov rcx, qword [rsp + 0x28]
call fcn.18001c770
mov dil, 1
jmp 0x18000469f
mov r8, rdi
mov rdx, rsi
lea rcx, [rsp + 0x38]
call fcn.1800046e0
movzx edi, al
mov rbx, qword [rsp + 0x38]
cmp rbx, 0xffffffffffffffff
je 0x1800046b3
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindClose]
movzx eax, dil
mov rcx, qword [rbp + 0x1f0]
xor rcx, rsp
call fcn.18001c850
mov rbx, qword [rsp + 0x330]
add rsp, 0x300
pop rdi
pop rsi
pop rbp
ret