Function at 0x1400b63ec
Capabilities:
Check if file exists
Get file attributes
Set file attributes

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x50
and qword [rbp + 0x58], 0
xor ebx, ebx
mov r14, rcx
mov qword [rbp + 0x48], rbx
cmp dword [rcx + 0x7c], ebx
je 0x1400b666c
cmp dword [rcx + 0x88], ebx
jne 0x1400b666c
lea r8, [rbp + 0x48]
xor edx, edx
lea rcx, [0x1403cad70]
call fcn.1400f4880
mov esi, eax
test eax, eax
jns 0x1400b6449
mov ecx, eax
call fcn.140079c40
mov rbx, qword [rbp + 0x48]
jmp 0x1400b6675
and qword [rbp - 0x20], rbx
mov r13d, 1
mov rbx, qword [rbp + 0x48]
mov dword [rbp - 0x18], r13d
mov dword [rbp - 0x10], r13d
mov rax, qword [rbx]
mov rdi, qword [rax + 0x40]
mov rax, qword [0x1403c1610]
mov rcx, rdi
call rax
mov rax, rdi
lea rdx, [rbp - 0x20]
mov rcx, rbx
call rax
mov esi, eax
test eax, eax
jns 0x1400b648b
mov ecx, eax
jmp 0x1400b6670
mov r15d, dword [r14 + 0x9c]
and qword [rbp - 0x20], 0
mov dword [rbp - 0x10], r15d
mov dword [rbp - 0x18], r13d
mov rax, qword [rbx]
mov rdi, qword [rax + 0x40]
mov rax, qword [0x1403c1610]
mov rcx, rdi
call rax
mov rax, rdi
lea rdx, [rbp - 0x20]
mov rcx, rbx
call rax
mov esi, eax
test eax, eax
js 0x1400b6484
xor edi, edi
test r15d, r15d
je 0x1400b64ef
movsxd rcx, edi
mov rdx, rbx
shl rcx, 4
add rcx, qword [r14 + 0xa0]
call fcn.1400ba4d0
mov esi, eax
test eax, eax
js 0x1400b6484
add edi, r13d
cmp edi, r15d
jb 0x1400b64cb
mov rax, qword [rbx]
mov rdi, qword [rax + 0x20]
mov rax, qword [0x1403c1610]
mov rcx, rdi
call rax
mov rax, rdi
lea r8, [rbp + 0x40]
lea rdx, [rbp + 0x50]
mov rcx, rbx
call rax
mov esi, eax
test eax, eax
js 0x1400b6484
mov r8, qword [rbp + 0x50]
lea rax, [rbp + 0x58]
mov edx, dword [rbp + 0x40]
lea r9, [rbp + 0x48]
mov rcx, r14
mov qword [rsp + 0x20], rax
call fcn.1400c0628
mov esi, eax
test eax, eax
js 0x1400b6484
mov eax, dword [rbp + 0x48]
and qword [rbp - 0x20], 0
mov dword [rbp - 8], eax
mov rax, qword [rbp + 0x58]
mov qword [rbp - 0x10], rax
mov dword [rbp - 0x18], 4
mov rax, qword [rbx]
mov rdi, qword [rax + 0x40]
mov rax, qword [0x1403c1610]
mov rcx, rdi
call rax
mov rax, rdi
lea rdx, [rbp - 0x20]
mov rcx, rbx
call rax
mov esi, eax
test eax, eax
js 0x1400b6484
mov rax, qword [rbx]
mov rdi, qword [rax + 0x20]
mov rax, qword [0x1403c1610]
mov rcx, rdi
call rax
mov rax, rdi
lea r8, [rbp + 0x40]
lea rdx, [rbp + 0x50]
mov rcx, rbx
call rax
mov esi, eax
test eax, eax
js 0x1400b6484
mov edx, dword [rbp + 0x40]
cmp edx, 0x200000
jbe 0x1400b65cb
mov dword [r14 + 0x80], r13d
xor esi, esi
jmp 0x1400b6675
mov r8, qword [rbp + 0x50]
mov rcx, qword [r14 + 0x68]
call fcn.1400c12c4
mov esi, eax
cmp eax, 0x80070005
jne 0x1400b6659
mov rsi, qword [r14 + 0x68]
test rsi, rsi
je 0x1400b6634
mov rcx, rsi
xor edi, edi
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x1400b661b
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x1400b660b
mov edi, 0x80004005
jmp 0x1400b6639
movzx edi, ax
or edi, 0x80070000
test eax, eax
cmovle edi, eax
jmp 0x1400b6639
test r13b, al
je 0x1400b6640
and eax, 0xfffffffe
mov rcx, rsi
mov edx, eax
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test eax, eax
jne 0x1400b6640
jmp 0x1400b65fa
mov edi, 0x80070057
mov ecx, edi
call fcn.140079c40
mov ecx, edi
call fcn.140079c60
mov r8, qword [rbp + 0x50]
mov edx, dword [rbp + 0x40]
mov rcx, qword [r14 + 0x68]
call fcn.1400c12c4
mov esi, eax
test esi, esi
jns 0x1400b6661
mov ecx, esi
jmp 0x1400b6670
and dword [r14 + 0x7c], 0
mov dword [r14 + 0x78], r13d
jmp 0x1400b6675
xor esi, esi
xor ecx, ecx
call fcn.140079c40
mov ecx, esi
call fcn.140079c60
test rbx, rbx
je 0x1400b669c
mov rax, qword [rbx]
mov rdi, qword [rax + 0x10]
mov rax, qword [0x1403c1610]
mov rcx, rdi
call rax
mov rax, rdi
mov rcx, rbx
call rax
lea rcx, [rbp + 0x58]
call fcn.14005a9b4
mov eax, esi
add rsp, 0x50
pop r15
pop r14
pop r13
pop rdi
pop rsi
pop rbx
pop rbp
ret