Function at 0x140178e00
Capabilities:
Check if file exists
Get file attributes

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0x100
mov rax, qword [0x14041d440]
xor rax, rsp
mov qword [rbp + 0x17], rax
mov qword [rbp - 0x41], r9
mov rdi, r8
mov r13, rdx
mov rsi, rcx
mov qword [rbp - 0x39], rcx
mov qword [rbp - 0x29], rdx
mov dword [rsp + 0x24], 0
mov rdx, qword [r8]
mov qword [rsp + 0x50], rdx
mov eax, dword [rdx - 0x10]
nop
test eax, 0x30000000
jne 0x140178e5e
lock inc dword [rdx - 0x10]
lea rax, [rsp + 0x50]
mov qword [rbp - 0x79], rax
mov rdx, r9
lea rcx, [rsp + 0x50]
call fcn.140181250
mov rcx, qword [rax]
mov qword [rbp - 0x79], rcx
mov eax, dword [rcx - 0x10]
nop
test eax, 0x30000000
jne 0x140178e8a
lock inc dword [rcx - 0x10]
mov dword [rsp + 0x24], 8
mov rcx, qword [rsp + 0x50]
add rcx, 0xfffffffffffffff0
mov eax, dword [rcx]
nop
mov r14, 0xffffffffffffffff
test eax, 0x30000000
jne 0x140178ec0
mov eax, r14d
lock xadd dword [rcx], eax
dec eax
cmp eax, r14d
jne 0x140178ec0
call fcn.1400daaa8
nop
mov rbx, qword [rbp - 0x79]
mov r8, rbx
mov rdx, r13
mov rcx, rsi
call fcn.140179d20
mov dword [rsp + 0x24], 9
lea rcx, [rbx - 0x10]
mov eax, dword [rcx]
nop
test eax, 0x30000000
jne 0x140178efb
mov eax, r14d
lock xadd dword [rcx], eax
dec eax
cmp eax, 0xffffffff
jne 0x140178efb
call fcn.1400daaa8
mov rax, qword [r13]
cmp byte [rax], 0
je 0x140179521
mov rdx, r13
lea rcx, [rbp - 0x21]
call fcn.140014d10
mov rcx, qword [rax]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
nop
cmp eax, 0xffffffff
je 0x140179521
mov r15d, 1
mov rcx, qword [rdi]
mov qword [rsp + 0x30], rcx
mov eax, dword [rcx - 0x10]
nop
test eax, 0x30000000
jne 0x140178f44
lock inc dword [rcx - 0x10]
mov rdi, qword [rsp + 0x30]
cmp byte [rdi], 0
je 0x140178fbb
lea rdx, [rbp - 0x71]
lea rcx, [rsp + 0x30]
call fcn.14000e1f0
mov rbx, qword [rbp - 0x71]
mov rax, r14
lea rax, [rax + 1]
cmp byte [rbx + rax], 0
jne 0x140178f63
lea rsi, [rax + rbx]
mov r8, rsi
mov rdx, rbx
lea rcx, [rbp - 0x69]
call fcn.140168f00
mov r8, qword [rbp - 0x69]
cmp r8, rbx
ja 0x140178f9a
lea rbx, [0x140370a58]
mov qword [rsp + 0x58], rbx
mov rcx, rbx
jmp 0x140178fd9
cmp rdi, rbx
jb 0x140178fa4
cmp r8, rsi
jae 0x140178fbb
mov rdx, rbx
lea rcx, [rsp + 0x58]
call fcn.14016c680
mov rbx, qword [rsp + 0x58]
mov rcx, rbx
jmp 0x140178fd9
mov qword [rsp + 0x58], rdi
mov eax, dword [rdi - 0x10]
nop
test eax, 0x30000000
jne 0x140178fcf
lock inc dword [rdi - 0x10]
mov rcx, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x58]
mov dword [rsp + 0x24], SafeArrayCopy
cmp byte [rcx], 0
jne 0x140178feb
xor dil, dil
jmp 0x140179029
mov rax, r14
nop
inc rax
cmp byte [rcx + rax], 0
jne 0x140178ff0
add rax, rcx
xor edx, edx
nop
dec rax
movzx ecx, byte [rax]
and cl, 0xc0
cmp cl, 0x80
jne 0x140179015
inc edx
cmp edx, 4
jl 0x140179000
mov qword [rbp - 0x61], rax
lea rcx, [rbp - 0x61]
call fcn.14000de70
cmp eax, 0x29
sete dil
lea rcx, [rbx - 0x10]
mov eax, dword [rcx]
nop
test eax, 0x30000000
jne 0x14017904a
mov eax, r14d
lock xadd dword [rcx], eax
dec eax
cmp eax, 0xffffffff
jne 0x14017904a
call fcn.1400daaa8
test dil, dil
je 0x140179281
mov byte [rsp + 0x20], 1
mov edx, 0x28
lea rcx, [rsp + 0x30]
call fcn.14016ada0
mov edi, eax
mov edx, 0x29
lea rcx, [rsp + 0x30]
call fcn.14016ada0
mov r15d, eax
test edi, edi
jle 0x1401790bc
cmp eax, edi
jle 0x1401790bc
lea r12d, [rdi + 1]
mov r9d, eax
mov r8d, r12d
lea rdx, [rbp - 0x59]
lea rcx, [rsp + 0x30]
call fcn.1401693a0
mov ebx, 0x1b
mov dword [rsp + 0x24], ebx
lea rdx, str.0123456789
mov rcx, rax
call fcn.1401682f0
test al, al
je 0x1401790c0
mov sil, 1
jmp 0x1401790c7
mov ebx, dword [rsp + 0x24]
xor sil, sil
lea r12d, [rdi + 1]
test bl, 2
je 0x1401790f8
and ebx, 0xfffffffd
mov dword [rsp + 0x24], ebx
mov rcx, qword [rbp - 0x59]
add rcx, 0xfffffffffffffff0
mov eax, dword [rcx]
nop
test eax, 0x30000000
jne 0x1401790f8
mov eax, r14d
lock xadd dword [rcx], eax
dec eax
cmp eax, 0xffffffff
jne 0x1401790f8
call fcn.1400daaa8
test sil, sil
je 0x14017928e
mov r9d, r15d
mov r8d, r12d
lea rdx, [rbp - 0x51]
lea rcx, [rsp + 0x30]
call fcn.1401693a0
mov rcx, qword [rax]
call fcn.1400f1330
mov r15d, eax
mov rcx, qword [rbp - 0x51]
add rcx, 0xfffffffffffffff0
mov edx, dword [rcx]
nop
test edx, 0x30000000
jne 0x140179146
mov edx, r14d
lock xadd dword [rcx], edx
dec edx
cmp edx, 0xffffffff
jne 0x140179146
call fcn.1400daaa8
mov r9d, edi
xor r8d, r8d
lea rdx, [rbp - 0x49]
lea rcx, [rsp + 0x30]
call fcn.1401693a0
mov rdx, rax
mov rax, qword [rsp + 0x30]
mov rcx, qword [rdx]
mov qword [rsp + 0x30], rcx
mov qword [rdx], rax
mov rcx, qword [rbp - 0x49]
add rcx, 0xfffffffffffffff0
mov eax, dword [rcx]
nop
test eax, 0x30000000
jne 0x140179192
mov eax, r14d
lock xadd dword [rcx], eax
dec eax
cmp eax, 0xffffffff
jne 0x140179192
call fcn.1400daaa8
mov cl, 1
mov rax, qword [rsp + 0x30]
lea r12, [rax - 0x10]
lea rdx, [rsp + 0x48]
mov qword [rbp - 0x19], rdx
nop word [rax + rax]
mov qword [rsp + 0x40], rax
mov eax, dword [r12]
nop
test eax, 0x30000000
jne 0x1401791c6
lock inc dword [r12]
test cl, cl
je 0x14017929d
inc r15d
mov word [rsp + 0x38], 0x28
lea rax, [rsp + 0x38]
mov rcx, r14
inc rcx
cmp byte [rax + rcx], 0
jne 0x1401791e0
test ecx, ecx
jle 0x14017922b
mov rax, qword [rsp + 0x30]
mov rbx, r14
inc rbx
cmp byte [rax + rbx], 0
jne 0x1401791f5
movsxd rdi, ecx
lea rdx, [rdi + rbx]
lea rcx, [rsp + 0x40]
call fcn.14016ca30
movsxd rbx, ebx
add rbx, qword [rsp + 0x40]
mov r8, rdi
lea rdx, [rsp + 0x38]
mov rcx, rbx
call fcn.1400dd3e0
mov byte [rdi + rbx], 0
mov edx, r15d
lea rcx, [rbp + 7]
call fcn.14016c2f0
lea r8, [rbp + 7]
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.14016b200
mov word [rsp + 0x28], 0x29
lea rcx, [rsp + 0x28]
mov rax, r14
inc rax
cmp byte [rcx + rax], 0
jne 0x140179257
lea r8, [rsp + 0x28]
add r8, rax
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x40]
call fcn.14016b200
mov rbx, qword [rsp + 0x40]
jmp 0x1401793cc
movzx ecx, byte [rbp + 0x7f]
mov byte [rsp + 0x20], cl
jmp 0x140179194
mov r15d, 1
movzx ecx, r15b
jmp 0x140179194
mov rbx, qword [rsp + 0x30]
cmp byte [rbx], 0
jne 0x1401792ab
xor eax, eax
jmp 0x1401792f8
mov rax, rbx
xor edx, edx
movzx ecx, byte [rax]
inc rax
test cl, cl
jns 0x1401792e3
movzx ecx, byte [rax]
and cl, 0xc0
cmp cl, 0x80
jne 0x1401792e7
nop word [rax + rax]
inc rax
movzx ecx, byte [rax]
and cl, 0xc0
cmp cl, 0x80
je 0x1401792d0
inc rdx
jmp 0x1401792b0
test ecx, ecx
je 0x1401792ec
inc rdx
jmp 0x1401792b0
dec edx
lea rcx, [rsp + 0x30]
call fcn.14000e020
movzx ecx, ax
call fcn.1400eb324
test eax, eax
je 0x14017935e
mov word [rsp + 0x3c], 0x5f
lea rcx, [rsp + 0x3c]
mov rax, r14
inc rax
cmp byte [rcx + rax], 0
jne 0x140179313
test eax, eax
jle 0x14017935e
mov rdi, r14
inc rdi
cmp byte [rbx + rdi], 0
jne 0x140179323
movsxd rsi, eax
lea rdx, [rdi + rsi]
lea rcx, [rsp + 0x40]
call fcn.14016ca30
movsxd rdi, edi
mov rbx, qword [rsp + 0x40]
add rdi, rbx
mov r8, rsi
lea rdx, [rsp + 0x3c]
mov rcx, rdi
call fcn.1400dd3e0
mov byte [rdi + rsi], 0
jmp 0x140179363
mov rbx, qword [rsp + 0x40]
inc r15d
mov dword [rsp + 0x48], r15d
lea r11, [rbp + 0x17]
mov edx, r15d
lea rcx, [rbp + 0x17]
call fcn.14016c2f0
mov r15, rax
sub r11d, eax
test r11d, r11d
jle 0x1401793c7
mov rdi, r14
nop dword [rax]
inc rdi
cmp byte [rbx + rdi], 0
jne 0x140179390
movsxd rsi, r11d
lea rdx, [rdi + rsi]
lea rcx, [rsp + 0x40]
call fcn.14016ca30
movsxd rdi, edi
mov rbx, qword [rsp + 0x40]
add rdi, rbx
mov r8, rsi
mov rdx, r15
mov rcx, rdi
call fcn.1400dd3e0
mov byte [rdi + rsi], 0
mov r15d, dword [rsp + 0x48]
mov qword [rsp + 0x48], rbx
mov eax, dword [rbx - 0x10]
nop
test eax, 0x30000000
jne 0x1401793e0
lock inc dword [rbx - 0x10]
mov rdx, qword [rbp - 0x41]
lea rcx, [rsp + 0x48]
call fcn.140181250
mov rcx, qword [rax]
mov qword [rsp + 0x60], rcx
mov eax, dword [rcx - 0x10]
nop
test eax, 0x30000000
jne 0x140179405
lock inc dword [rcx - 0x10]
or dword [rsp + 0x24], 4
mov rcx, qword [rsp + 0x48]
add rcx, 0xfffffffffffffff0
mov eax, dword [rcx]
nop
test eax, 0x30000000
jne 0x140179431
mov eax, r14d
lock xadd dword [rcx], eax
dec eax
cmp eax, 0xffffffff
jne 0x140179431
call fcn.1400daaa8
nop
mov r8, qword [rsp + 0x60]
lea rdx, [rbp - 0x31]
mov rcx, qword [rbp - 0x39]
call fcn.140179d20
mov rdx, rax
mov rax, qword [r13]
mov rcx, qword [rdx]
mov qword [r13], rcx
mov qword [rdx], rax
mov rcx, qword [rbp - 0x31]
add rcx, 0xfffffffffffffff0
mov eax, dword [rcx]
nop
test eax, 0x30000000
jne 0x14017947a
mov eax, r14d
lock xadd dword [rcx], eax
dec eax
cmp eax, 0xffffffff
jne 0x14017947a
call fcn.1400daaa8
nop
mov rcx, qword [rsp + 0x60]
add rcx, 0xfffffffffffffff0
mov eax, dword [rcx]
nop
test eax, 0x30000000
jne 0x1401794a1
mov eax, r14d
lock xadd dword [rcx], eax
dec eax
cmp eax, 0xffffffff
jne 0x1401794a1
call fcn.1400daaa8
nop
mov rcx, qword [rsp + 0x40]
add rcx, 0xfffffffffffffff0
mov eax, dword [rcx]
nop
test eax, 0x30000000
jne 0x1401794c7
mov eax, r14d
lock xadd dword [rcx], eax
dec eax
cmp eax, 0xffffffff
jne 0x1401794c7
call fcn.1400daaa8
mov rax, qword [r13]
cmp byte [rax], 0
je 0x1401794fa
mov rdx, r13
lea rcx, [rbp - 0x11]
call fcn.140014d10
mov rcx, qword [rax]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
nop
cmp eax, 0xffffffff
je 0x1401794fa
mov rax, qword [rsp + 0x30]
movzx ecx, byte [rsp + 0x20]
jmp 0x1401791b0
mov rcx, qword [rsp + 0x30]
add rcx, 0xfffffffffffffff0
mov edx, dword [rcx]
nop
test edx, 0x30000000
jne 0x140179521
lock xadd dword [rcx], r14d
dec r14d
cmp r14d, 0xffffffff
jne 0x140179521
call fcn.1400daaa8
mov rax, r13
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.1400da5a0
mov rbx, qword [rsp + 0x150]
add rsp, 0x100
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret