Function at 0x1400f6f50
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x1f0
mov edi, edx
mov rbx, rcx
mov rax, qword [0x140143038]
xor rax, rsp
mov qword [rsp + 0x1e8], rax
call fcn.14003b990
cmp eax, 8
jle 0x1400f700d
movaps xmm0, xmmword [0x14011cbd0]
lea r14, [rsp + 0x1a0]
movaps xmmword [r14 + 0x30], xmm0
movaps xmmword [r14 + 0x20], xmm0
movaps xmmword [r14 + 0x10], xmm0
movaps xmmword [r14], xmm0
lea rdx, str.DeleteFileWithDispositionFlags
lea r8, [0x1401244f8]
lea r15, [rsp + 0x40]
mov rcx, r15
mov r9d, 0x229
call fcn.140043d30
xor esi, esi
mov rcx, r14
mov rdx, r15
xor r8d, r8d
call fcn.14004a1f0
cmp byte [rbx + 0x17], 0
mov rcx, rbx
jns 0x1400f6fe2
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x1400f6ffe
test al, 0x10
je 0x1400f703b
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_SetLastError]
xor esi, esi
lea rcx, [rsp + 0x1a0]
call fcn.14004a250
jmp 0x1400f701a
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_SetLastError]
xor esi, esi
mov rcx, qword [rsp + 0x1e8]
xor rcx, rsp
call fcn.1400843b0
mov eax, esi
add rsp, 0x1f0
pop rbx
pop rdi
pop rsi
pop r14
pop r15
ret
cmp byte [rbx + 0x17], 0
jns 0x1400f7044
mov rbx, qword [rbx]
xor esi, esi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 3
mov rcx, rbx
mov edx, 0x10100
mov r8d, 7
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
lea rbx, [rsp + 0x198]
mov qword [rbx], rsi
mov rcx, rbx
mov rdx, rax
call fcn.14002c842
mov rcx, qword [rbx]
lea rax, [rcx + 1]
cmp rax, 2
jae 0x1400f70bd
inc rcx
cmp rcx, 2
jb 0x1400f6ffe
call fcn.140043d50
mov rcx, qword [rsp + 0x198]
call fcn.14003bb20
jmp 0x1400f6ffe
xor esi, esi
jmp 0x1400f7095
lea rcx, [0x1401242f0]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, str.NtSetInformationFile
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rsp + 0x198]
test rax, rax
je 0x1400f70b9
mov rbx, rax
or edi, 1
movups xmm0, xmmword [0x140124568]
lea rdx, [rsp + 0x180]
movaps xmmword [rdx], xmm0
lea r8, [rsp + 0x17c]
mov dword [r8], edi
mov dword [rsp + 0x20], 0x40
mov r9d, 4
call qword [0x14016a008]
mov edi, eax
cmp eax, 0xc0000022
je 0x1400f718c
cmp edi, 0xc0000121
je 0x1400f718c
mov sil, 1
test edi, edi
je 0x1400f71c2
mov byte [rsp + 0x17b], 1
lea rcx, [0x1401244f8]
mov edx, 0x22
call fcn.140041fe0
test eax, eax
jg 0x1400f71cf
mov rcx, qword [rsp + 0x198]
mov dword [rsp + 0x20], 0xd
lea rdx, [rsp + 0x180]
lea r8, [rsp + 0x17b]
mov r9d, 1
mov rax, rbx
call qword [0x14016a008]
mov edi, eax
test eax, eax
je 0x1400f71c2
lea rcx, [0x1401242f0]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, str.RtlNtStatusToDosError
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400f71b8
mov ecx, edi
call qword [0x14016a008]
mov edi, eax
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_SetLastError]
xor esi, esi
mov rcx, qword [rsp + 0x198]
jmp 0x1400f7095
lea rdx, [0x1401244f8]
lea r14, [rsp + 0x40]
mov rcx, r14
mov r8d, 0x250
mov r9d, 0xffffffff
call fcn.1400616f0
lea rcx, [rsp + 0x50]
lea rdx, str.FileDispositionInformationEx_failed_with_status
mov r8d, 0x30
call fcn.140027259
mov rcx, rax
mov edx, edi
call fcn.1400b8f56
lea rdx, str.__falling_back_to_using_FileDispositionInformation
mov r8d, 0x32
mov rcx, rax
call fcn.140027259
mov rcx, r14
call fcn.1400823c0
jmp 0x1400f7157