Function at 0x180003ce0
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push rbp
push rsi
push rdi
lea rbp, [rsp - 0x200]
sub rsp, 0x300
mov qword [rbp - 0x78], 0xfffffffffffffffe
mov qword [rsp + 0x330], rbx
mov rax, qword [0x180044360]
xor rax, rsp
mov qword [rbp + 0x1f0], rax
mov rsi, rdx
mov rdi, rcx
mov rcx, rdx
call fcn.180004450
mov ebx, eax
test eax, eax
js 0x180003f87
lea ecx, [rbx + 1]
cmp word [rsi + rcx*2], 0
je 0x180003f87
lea rax, [rbx + rbx]
mov qword [rsp + 0x38], rax
lea rdx, [rax + rsi]
lea rcx, [rsp + 0x60]
call fcn.180002bb0
nop
mov rdx, rsi
lea rcx, [rsp + 0x28]
call fcn.180002bb0
nop
cmp ebx, dword [rsp + 0x30]
jae 0x180003d7a
mov dword [rsp + 0x30], ebx
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x38]
xor edx, edx
mov word [rcx + rax], dx
mov eax, dword [rsp + 0x68]
cmp eax, 6
jbe 0x180003da2
mov ecx, eax
mov rax, qword [rsp + 0x60]
add rax, 0xfffffffffffffff4
lea rcx, [rax + rcx*2]
lea rdx, str.:_DATA
call fcn.1800036e0
test al, al
jne 0x180003db3
lea rdx, str.:_DATA
lea rcx, [rsp + 0x60]
call fcn.180002f80
mov rcx, qword [rsp + 0x28]
call fcn.180004c10
mov rdx, qword [rsp + 0x28]
test al, al
je 0x180003e0d
cmp ebx, 2
je 0x180003dd7
cmp ebx, 3
jne 0x180003e0d
cmp word [rdx + 4], 0x5c
jne 0x180003e0d
xor esi, esi
mov qword [rdi], rsi
mov qword [rdi + 8], rsi
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], rsi
mov dword [rdi + 0x20], esi
mov word [rdi + 0x24], si
lea rcx, [rdi + 0x28]
mov dword [rcx + 8], esi
mov rax, qword [rcx]
mov word [rax], si
cmp ebx, 2
jne 0x180003e1f
lea rdx, [rsp + 0x28]
call fcn.180002c80
jmp 0x180003e1f
mov rcx, rdi
call fcn.180003ce0
test al, al
je 0x180003f72
xor esi, esi
and dword [rdi + 0x20], 0xfffffbef
mov qword [rdi], rsi
or rbx, 0xffffffffffffffff
mov qword [rsp + 0x70], rbx
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x78]
call fcn.180002a30
nop
lea rcx, [rsp + 0x48]
call fcn.180002c40
nop
mov rcx, qword [rsp + 0x70]
cmp rcx, 0xffffffffffffffff
je 0x180003e8b
mov rax, qword [0x1800450f8]
test rax, rax
je 0x180003ec2
lea rdx, [rbp - 0x70]
call rax
test eax, eax
je 0x180003f0b
mov rax, qword [rbp - 0x70]
mov qword [rsp + 0x58], rax
lea rdx, [rbp - 0x68]
lea rcx, [rsp + 0x48]
call fcn.180002dd0
jmp 0x180003ea3
lea r8, [rsp + 0x48]
mov rdx, qword [rsp + 0x78]
lea rcx, [rsp + 0x70]
call fcn.180004300
test al, al
je 0x180003f0b
mov rdx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x48]
call fcn.180003620
test al, al
jne 0x180003ecf
mov rcx, qword [rsp + 0x48]
call fcn.180017964
jmp 0x180003e42
mov ecx, 0x78
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x180003f0b
mov eax, dword [rsp + 0x50]
cmp eax, 7
jbe 0x180003eec
lea ecx, [rax - 6]
cmp ecx, eax
jae 0x180003eec
mov dword [rsp + 0x50], ecx
mov rax, qword [rsp + 0x48]
mov word [rax + rcx*2], si
lea rcx, [rdi + 0x28]
lea rdx, [rsp + 0x48]
call fcn.180002f10
mov rax, qword [rsp + 0x58]
mov qword [rdi], rax
mov byte [rdi + 0x24], 1
mov dil, 1
jmp 0x180003f22
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x26
jne 0x180003f1f
lea ecx, [rax - 0x24]
call qword [sym.imp.KERNEL32.dll_SetLastError]
xor dil, dil
mov rcx, qword [rsp + 0x48]
call fcn.180017964
nop
mov rcx, qword [rsp + 0x78]
call fcn.180017964
mov rcx, qword [rsp + 0x70]
cmp rcx, 0xffffffffffffffff
je 0x180003f58
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rcx, qword [rsp + 0x70]
test eax, eax
cmovne rcx, rbx
mov qword [rsp + 0x70], rcx
mov rcx, qword [rsp + 0x28]
call fcn.180017964
nop
mov rcx, qword [rsp + 0x60]
call fcn.180017964
jmp 0x180004203
mov rcx, qword [rsp + 0x28]
call fcn.180017964
nop
mov rcx, qword [rsp + 0x60]
call fcn.180017964
or rbx, 0xffffffffffffffff
mov qword [rsp + 0x38], rbx
mov rcx, rsi
call fcn.180004d00
xor ecx, ecx
mov edx, 4
test al, al
cmovne ecx, edx
mov dword [rsp + 0x40], ecx
lea rax, [rsi + rcx*2]
mov qword [rsp + 0x28], rax
mov rcx, rax
call fcn.180004c40
test al, al
je 0x180004024
mov eax, dword [rsp + 0x40]
add eax, 3
cmp word [rsi + rax*2], 0
jne 0x180004024
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x1800041dc
test al, 0x10
je 0x1800041dc
xor esi, esi
mov qword [rdi], rsi
mov qword [rdi + 8], rsi
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], rsi
mov word [rdi + 0x24], si
mov dword [rdi + 0x20], eax
add rdi, 0x28
mov rdx, qword [rsp + 0x28]
mov rcx, rdi
call fcn.180002dd0
cmp dword [rdi + 8], 2
jbe 0x180004080
mov dword [rdi + 8], 2
mov rax, qword [rdi]
mov word [rax + 4], si
jmp 0x180004080
movzx eax, word [rsi]
cmp ax, 0x5c
je 0x180004037
cmp ax, 0x2f
jne 0x1800041dc
mov rcx, rsi
cmp word [rsi + 2], 0
jne 0x180004088
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov ecx, eax
cmp eax, 0xffffffff
je 0x1800041dc
test cl, 0x10
je 0x1800041dc
xor edx, edx
mov qword [rdi], rdx
mov qword [rdi + 8], rdx
mov qword [rdi + 0x10], rdx
mov qword [rdi + 0x18], rdx
mov dword [rdi + 0x20], edx
mov word [rdi + 0x24], dx
mov dword [rdi + 0x30], edx
mov rax, qword [rdi + 0x28]
mov word [rax], dx
mov dword [rdi + 0x20], ecx
mov dil, 1
jmp 0x1800041f4
call fcn.180004830
test eax, eax
je 0x1800041dc
mov eax, eax
lea rbx, [rsi + rax*2]
cmp word [rbx], 0
je 0x1800041dc
mov rcx, rbx
call fcn.1800044d0
test eax, eax
jns 0x1800041dc
mov rdx, rsi
lea rcx, [rsp + 0x28]
call fcn.180002bb0
nop
mov edx, dword [rsp + 0x30]
cmp dword [rsp + 0x34], edx
jne 0x1800040db
lea rcx, [rsp + 0x28]
call fcn.180003290
mov edx, dword [rsp + 0x30]
mov rcx, qword [rsp + 0x28]
mov eax, edx
mov r8d, 0x5c
mov word [rcx + rax*2], r8w
inc edx
xor r8d, r8d
mov word [rcx + rdx*2], r8w
mov dword [rsp + 0x30], edx
cmp dword [rsp + 0x34], edx
jne 0x18000410f
lea rcx, [rsp + 0x28]
call fcn.180003290
mov edx, dword [rsp + 0x30]
mov rcx, qword [rsp + 0x28]
mov eax, edx
mov r8d, 0x2a
mov word [rcx + rax*2], r8w
inc edx
xor r8d, r8d
mov word [rcx + rdx*2], r8w
mov dword [rsp + 0x30], edx
mov byte [rsp + 0x20], r8b
mov r8, rdi
mov rdx, qword [rsp + 0x28]
lea rcx, [rsp + 0x38]
call fcn.180004230
test al, al
je 0x18000416f
lea rcx, [rdi + 0x28]
mov rdx, qword [rcx]
movzx eax, word [rdx]
cmp ax, word [0x1800328b8]
jne 0x18000416a
movzx eax, word [rdx + 2]
cmp ax, word [0x1800328ba]
je 0x1800041c4
mov byte [rsp + 0x20], 1
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
or ecx, 0xffffffff
cmp eax, ecx
cmovne ecx, eax
cmp byte [rsp + 0x20], 0
jne 0x18000419d
cmp ecx, 0xffffffff
je 0x180004191
test cl, 0x10
jne 0x18000419d
mov rcx, qword [rsp + 0x28]
call fcn.180017964
jmp 0x1800041dc
xor eax, eax
mov qword [rdi], rax
mov qword [rdi + 8], rax
mov qword [rdi + 0x10], rax
mov qword [rdi + 0x18], rax
mov word [rdi + 0x24], ax
mov eax, 0x10
cmp ecx, 0xffffffff
cmovne eax, ecx
mov dword [rdi + 0x20], eax
lea rcx, [rdi + 0x28]
mov rdx, rbx
call fcn.180002dd0
nop
mov rcx, qword [rsp + 0x28]
call fcn.180017964
mov dil, 1
jmp 0x1800041ef
mov r8, rdi
mov rdx, rsi
lea rcx, [rsp + 0x38]
call fcn.180004230
movzx edi, al
mov rbx, qword [rsp + 0x38]
cmp rbx, 0xffffffffffffffff
je 0x180004203
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindClose]
movzx eax, dil
mov rcx, qword [rbp + 0x1f0]
xor rcx, rsp
call fcn.180017a50
mov rbx, qword [rsp + 0x330]
add rsp, 0x300
pop rdi
pop rsi
pop rbp
ret