Function at 0x140238cb0
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x88
mov rbx, rcx
mov rax, qword [0x1402b3040]
xor rax, rsp
mov qword [rsp + 0x80], rax
call fcn.140238c30
mov edi, 0x1126
test al, al
je 0x140238d0c
mov rcx, qword [rsp + 0x80]
xor rcx, rsp
call fcn.140191d70
mov eax, edi
add rsp, 0x88
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
xorps xmm0, xmm0
lea rsi, [rsp + 0x50]
movaps xmmword [rsi], xmm0
mov qword [rsi + 0x10], 0
mov rcx, rbx
mov rdx, rsi
call fcn.140238fa0
mov edi, eax
mov rcx, rsi
call fcn.140239060
mov ebx, eax
mov rcx, rsi
mov rdx, rsi
call fcn.1402390b0
test bl, bl
jne 0x140238d71
test dil, dil
jne 0x140238d71
mov edi, Ordinal_127
test al, al
jne 0x140238d71
cmp byte [rsp + 0x67], 0
jns 0x140238ce6
mov rcx, qword [rsp + 0x50]
call fcn.14018f5a0
jmp 0x140238ce6
mov edi, 0x1126
jmp 0x140238d53
xor edi, edi
jmp 0x140238d53
mov byte [rsp + 0x37], bl
test bl, bl
je 0x140238ef7
mov r15, 0xffffffffffffffff
xor ebp, ebp
lea r12, [rsp + 0x70]
lea rbx, [rsp + 0x38]
mov r13, qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
jmp 0x140238dae
test r12d, r12d
jne 0x140238ee8
mov r12, r13
mov r13, r14
cmp r15, 2
jbe 0x140238d66
mov qword [rsp + 0x20], r12
mov rcx, rbx
mov rdx, rsi
xor r8d, r8d
mov r9, r15
call fcn.14016f2f0
cmp byte [rsp + 0x67], 0
jns 0x140238dd5
mov rcx, qword [rsp + 0x50]
call fcn.14018f5a0
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x60], rax
movups xmm0, xmmword [rsp + 0x38]
movaps xmmword [rsp + 0x50], xmm0
cmp byte [rsp + 0x67], 0
mov rcx, rsi
jns 0x140238df8
mov rcx, qword [rsp + 0x50]
call r13
cmp eax, 0xffffffff
je 0x140238e5b
bt eax, 0xa
jb 0x140238d6d
movsx rax, byte [rsp + 0x67]
test rax, rax
cmovs rax, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x50]
cmovns rcx, rsi
mov r15, 0xffffffffffffffff
mov bpl, 1
test rax, rax
je 0x140238da8
add rax, rax
test rax, rax
je 0x140238da8
lea rdx, [rax - 2]
cmp word [rcx + rax - 2], 0x5c
mov rax, rdx
jne 0x140238e38
sar rdx, 1
mov r15, rdx
jmp 0x140238da8
mov r14, r13
mov r13, r12
xor r12d, r12d
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 2]
cmp ecx, 2
jb 0x140238e8c
cmp eax, 0x7b
je 0x140238e8c
mov edx, ebp
not dl
or dl, byte [rsp + 0x37]
test dl, 1
je 0x140238ea5
mov r12d, 1
mov edi, eax
cmp ecx, 2
jb 0x140238e9a
cmp eax, 0x7b
jne 0x140238d99
mov r12, r13
mov r13, r14
jmp 0x140238e0a
movsx rdx, byte [rsp + 0x67]
test rdx, rdx
cmovs rdx, qword [rsp + 0x58]
mov r8, qword [rsp + 0x50]
cmovns r8, rsi
test rdx, rdx
je 0x140238e84
add rdx, rdx
test rdx, rdx
je 0x140238e84
lea r9, [rdx - 2]
cmp word [r8 + rdx - 2], 0x5c
mov rdx, r9
jne 0x140238ec5
mov r12d, 2
cmp r9, 6
je 0x140238e8c
jmp 0x140238e84
cmp r12d, 2
jne 0x140238d53
jmp 0x140238d66
lea r14, [rsp + 0x58]
lea rdx, str.._
lea rdi, [rsp + 0x38]
mov rcx, rdi
call fcn.14013ec40
movsx r8, byte [r14 + 0xf]
test r8, r8
cmovs r8, qword [r14]
mov rdx, qword [r14 - 8]
cmovns rdx, rsi
mov rcx, rdi
call fcn.14016ee30
mov rdi, qword [rax]
mov rcx, qword [rax + 8]
mov rdx, qword [rax + 0xf]
mov qword [rsp + 0x77], rdx
mov qword [rsp + 0x70], rcx
mov bpl, byte [rax + 0x17]
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
cmp byte [r14 + 0xf], 0
jns 0x140238f64
mov rcx, qword [rsp + 0x50]
call fcn.14018f5a0
mov qword [rsp + 0x50], rdi
mov rax, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x77]
mov qword [r14 + 7], rcx
mov qword [r14], rax
mov byte [rsp + 0x67], bpl
cmp byte [rsp + 0x4f], 0
jns 0x140238d7d
mov rcx, qword [rsp + 0x38]
call fcn.14018f5a0
jmp 0x140238d7d