Function at 0x100074a90
Capabilities:
Check if file exists
Get file attributes

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
sub rsp, 0x480
mov rax, qword [0x10007f110]
xor rax, rsp
mov qword [rsp + 0x470], rax
mov rbx, rcx
mov edi, 0x20e
lea rcx, [rsp + 0x260]
xor ebp, ebp
xor edx, edx
mov r8, rdi
mov esi, ebp
call sub.msvcrt.dll_memset
lea r8d, [rdi - 4]
lea rcx, [rsp + 0x50]
xor edx, edx
mov dword [rsp + 0x40], ebp
call sub.msvcrt.dll_memset
or qword [rsp + 0x48], 0xffffffffffffffff
mov qword [rsp + 0x38], rbp
lea rax, [rsp + 0x40]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x260]
mov edx, 0x4d0008
mov rcx, rbx
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rax
call qword [sym.imp.API_MS_Win_Core_IO_L1_1_0.dll_DeviceIoControl]
cmp eax, ebp
jne 0x100074b3f
call sub.API_MS_Win_Core_ErrorHandling_L1_1_0.dll_GetLastError
movzx ebx, ax
or ebx, 0x80070000
cmp eax, ebp
cmovle ebx, eax
jmp 0x100074d16
lea r8, [0x10000b1f0]
lea rax, [rsp + 0x50]
mov edi, 0x105
lea rcx, [rsp + 0x50]
mov ebx, ebp
mov r12d, 1
sub r8, rax
mov rdx, rdi
lea rax, [rdx + 0x7ffffef9]
cmp rax, rbp
je 0x100074b85
movzx eax, word [r8 + rcx]
cmp ax, bp
je 0x100074b85
mov word [rcx], ax
add rcx, 2
sub rdx, r12
jne 0x100074b63
mov r10d, 0x8007007a
cmp rdx, rbp
jne 0x100074b97
sub rcx, 2
mov ebx, r10d
cmp ebx, ebp
mov word [rcx], bp
jl 0x100074d16
movzx r8d, word [rsp + 0x260]
mov rcx, rdi
lea rax, [rsp + 0x50]
shr r8, 1
mov ebx, ebp
cmp word [rax], bp
je 0x100074bc6
add rax, 2
sub rcx, r12
jne 0x100074bb8
cmp rcx, rbp
jne 0x100074bd5
mov ebx, 0x80070057
mov rax, rbp
jmp 0x100074bdb
mov rax, rdi
sub rax, rcx
cmp ebx, ebp
jl 0x100074d16
cmp r8, 0x7ffffffe
jbe 0x100074bf3
mov ebx, 0x80070057
jmp 0x100074c48
mov rdx, rdi
lea rcx, [rsp + rax*2 + 0x50]
mov ebx, ebp
sub rdx, rax
je 0x100074c3e
add rax, rdx
lea r9, [rax + r8 - 0x105]
lea r8, [rsp + 0x262]
sub r8, rcx
cmp r9, rbp
je 0x100074c39
movzx eax, word [r8 + rcx]
cmp ax, bp
je 0x100074c39
sub rdx, r12
mov word [rcx], ax
sub r9, r12
add rcx, 2
cmp rdx, rbp
jne 0x100074c18
cmp rdx, rbp
jne 0x100074c45
sub rcx, 2
mov ebx, r10d
mov word [rcx], bp
cmp ebx, ebp
jl 0x100074d16
lea r8, [0x10002ea60]
lea rcx, [rsp + 0x50]
mov rdx, rdi
call fcn.1000743a8
cmp eax, ebp
mov ebx, eax
jl 0x100074d16
mov rax, rdi
lea rcx, [rsp + 0x50]
mov ebx, ebp
cmp word [rcx], bp
je 0x100074c86
add rcx, 2
sub rax, r12
jne 0x100074c78
cmp rax, rbp
jne 0x100074c95
mov ebx, 0x80070057
mov rdi, rbp
jmp 0x100074c98
sub rdi, rax
cmp ebx, ebp
jl 0x100074d16
cmp rdi, rbp
je 0x100074d16
lea rdx, [rsp + 0x48]
mov ecx, 0x11
call fcn.10007490c
cmp eax, ebp
mov ebx, eax
jl 0x100074ce7
movzx ebx, bp
lea eax, [rbx + 0x31]
lea rcx, [rsp + 0x50]
mov word [rsp + rdi*2 + 0x4e], ax
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x100074cdd
add bx, r12w
cmp bx, 3
jb 0x100074cb9
jmp 0x100074ce0
mov esi, r12d
cmp esi, ebp
mov ebx, ebp
sete bl
mov rdi, qword [rsp + 0x48]
cmp rdi, 0xffffffffffffffff
je 0x100074d16
mov rdx, rdi
xor ecx, ecx
call qword [sym.imp.API_MS_Win_Core_ProcessThreads_L1_1_0.dll_SetThreadToken]
cmp eax, ebp
jne 0x100074d08
call sub.API_MS_Win_Core_ErrorHandling_L1_1_0.dll_GetLastError
jmp 0x100074d16
cmp rdi, rbp
je 0x100074d16
mov rcx, rdi
call qword [sym.imp.API_MS_Win_Core_Handle_L1_1_0.dll_CloseHandle]
mov eax, ebx
mov rcx, qword [rsp + 0x470]
xor rcx, rsp
call fcn.100075490
lea r11, [rsp + 0x480]
mov rbx, qword [r11 + 0x28]
mov rbp, qword [r11 + 0x30]
mov rsp, r11
pop r12
pop rdi
pop rsi
ret