Function at 0x1000101a0
Capabilities:
Check if file exists
Get file attributes

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
sub rsp, 0x30
mov rbx, qword [rcx + 0x10a70]
xor r13d, r13d
mov rdi, rcx
mov ecx, 0x80000001
mov esi, r13d
mov dword [rsp + 0x68], r13d
call qword [sym.imp.KERNEL32.dll_SetThreadExecutionState]
mov rbp, qword [rdi + 0x60]
mov dword [rdi + 0x10a68], 1
mov qword [rdi + 0x10a70], rbx
mov qword [rdi + 0x10a78], r13
mov qword [rdi + 0x10ac8], r13
jmp 0x100010279
mov r9, qword [rdi + 0x10a70]
mov rdx, qword [rdi + 8]
mov rcx, qword [0x100023760]
lea rax, [rsp + 0x68]
mov r8, rbp
mov qword [rsp + 0x28], rax
mov rax, qword [rdi + 0x10ac8]
mov qword [rsp + 0x20], rax
call fcn.10000ac70
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x100010248
and eax, 0x10
je 0x100010248
mov rdx, rbp
mov rcx, rdi
call fcn.100010e3c
jmp 0x100010253
mov rdx, rbp
mov rcx, rdi
call fcn.100010cf8
mov dword [rsp + 0x68], eax
mov esi, eax
cmp eax, r13d
jne 0x100010284
cmp dword [0x100023768], r13d
jne 0x100010284
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
cdqe
lea rbp, [rbp + rax*2]
cmp word [rbp], r13w
jne 0x1000101f8
mov ecx, 0x80000000
call qword [sym.imp.KERNEL32.dll_SetThreadExecutionState]
cmp esi, r13d
jne 0x1000102c5
mov r9, qword [rdi + 0x10a70]
mov rdx, qword [rdi + 8]
mov rcx, qword [0x100023760]
lea rax, [rsp + 0x68]
lea r8, [rdi + 0x10448]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r9
call fcn.10000ac70
mov esi, dword [rsp + 0x68]
cmp esi, 0x4c7
je 0x10001038a
mov ecx, 3
mov dword [rdi + 0x10a68], r13d
lea r12d, [rcx + 5]
call fcn.1000117d8
cmp dword [rdi + 0x10aa8], 2
mov rbx, rax
mov qword [rsp + 0x70], rax
je 0x1000102fc
cmp esi, r13d
je 0x100010306
mov edx, esi
mov rcx, rdi
call fcn.100011e84
cmp dword [rdi + 0x10aa8], 1
jne 0x10001036c
cmp rbx, r13
je 0x10001036c
lea rdx, [rsp + 0x60]
mov r8d, 1
mov rcx, rbx
mov byte [rsp + 0x60], 0x81
call fcn.100011814
cmp eax, r13d
je 0x10001036c
mov edx, 3
mov rcx, rbx
call fcn.1000119b8
cmp eax, r13d
je 0x10001036c
mov r8b, 0xa0
mov rdx, rbx
mov rcx, rdi
call fcn.1000136b4
mov r12d, eax
cmp eax, r13d
jne 0x10001036c
mov r8b, 0xa0
mov edx, 0x3a98
mov rcx, rdi
call fcn.100012340
mov r12d, eax
lea rcx, [rsp + 0x70]
mov dword [rdi + 0x10aa8], r13d
call fcn.100011b90
cmp esi, r13d
jne 0x10001038f
mov esi, r12d
mov dword [rsp + 0x68], r12d
cmp esi, r13d
je 0x1000103b7
mov rdx, qword [rdi + 8]
mov rcx, qword [0x100023760]
lea rax, [rsp + 0x68]
mov qword [rsp + 0x28], rax
mov r9d, esi
mov r8, rbp
mov dword [rsp + 0x20], 4
call fcn.10000ad1c
mov r8, qword [rdi + 0x10a78]
mov rdx, qword [rdi + 8]
mov rcx, qword [0x100023760]
lea r9, [rsp + 0x68]
call fcn.10000addc
mov rcx, qword [0x1000236d8]
mov rdx, rdi
call fcn.10000f420
lea rcx, [rdi + 0x10]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
add dword [rdi + 0x68], 0xffffffff
lea rcx, [rdi + 0x10]
jne 0x10001040b
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edx, 1
mov rcx, rdi
call fcn.10000f0f4
jmp 0x100010411
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rbx, qword [rsp + 0x78]
add rsp, 0x30
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret