Function at 0x1f947b76
Capabilities:
Check if file exists

Disassembly:
push 0x6c
mov eax, 0x1f96a465
call fcn.1f8a600e
mov eax, dword [0x1f97b00c]
mov edi, 0x1f97b00c
mov ebx, 0x400
cmp eax, edi
je 0x1f947baf
test dword [eax + 0x1c], ebx
je 0x1f947baf
mov esi, 0x1f88e2d0
push esi
push 0x6e
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1f895ce3
jmp 0x1f947bb4
mov esi, 0x1f88e2d0
push dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
xor eax, eax
mov dword [ecx], eax
mov ecx, dword [ebp + 0x10]
push eax
push 4
mov dword [ecx], eax
call dword [sym.imp.KERNEL32.dll_OpenJobObjectW]
mov dword [ebp - 0x14], eax
and dword [ebp - 4], 0
test eax, eax
jne 0x1f947c09
mov eax, dword [0x1f97b00c]
cmp eax, edi
je 0x1f947bff
test dword [eax + 0x1c], ebx
je 0x1f947bff
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov eax, dword [0x1f97b00c]
push esi
push 0x6f
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1f895d0a
xor eax, eax
call fcn.1f8a60fa
ret 0xc
push 0
push 0x30
lea ecx, [ebp - 0x78]
push ecx
push 1
push eax
call dword [sym.imp.KERNEL32.dll_QueryInformationJobObject]
test eax, eax
jne 0x1f947c5c
mov eax, dword [0x1f97b00c]
cmp eax, edi
je 0x1f947c46
test dword [eax + 0x1c], ebx
je 0x1f947c46
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push esi
push 0x70
mov eax, dword [0x1f97b00c]
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1f895d0a
xor esi, esi
push dword [ebp - 0x14]
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x14]
push eax
call fcn.1f895f98
mov eax, esi
jmp 0x1f947c01
mov eax, dword [ebp - 0x50]
test eax, eax
jne 0x1f947c84
mov eax, dword [0x1f97b00c]
cmp eax, edi
je 0x1f947c7f
test dword [eax + 0x1c], ebx
je 0x1f947c7f
push esi
push 0x71
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1f895ce3
xor esi, esi
inc esi
jmp 0x1f947c48
push 0
lea ecx, [ebp + 0xb]
lea eax, [eax*4 + 8]
push ecx
push eax
mov dword [ebp - 0x1c], eax
call sym.WsmSvc.DLL_public:_static_void____stdcall_WSManMemory::Alloc_unsigned_int__class_TestSystem::CallSite_const___enum_TestSystem::Mode_
mov esi, eax
test esi, esi
jne 0x1f947ccd
push 0xe
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, dword [0x1f97b00c]
cmp eax, edi
je 0x1f947c46
test dword [eax + 0x1c], ebx
je 0x1f947c46
push 0x1f88e2d0
push 0x72
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1f895ce3
jmp 0x1f947c46
mov eax, dword [ebp - 0x50]
push 0
push dword [ebp - 0x1c]
mov dword [esi], eax
push esi
push 3
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_QueryInformationJobObject]
test eax, eax
jne 0x1f947d10
mov eax, dword [0x1f97b00c]
cmp eax, edi
je 0x1f947c46
test dword [eax + 0x1c], ebx
je 0x1f947c46
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x1f88e2d0
push 0x73
jmp 0x1f947c36
mov eax, dword [esi]
cmp eax, dword [esi + 4]
jbe 0x1f947d41
push 0x1f
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, dword [0x1f97b00c]
cmp eax, edi
je 0x1f947c46
test dword [eax + 0x1c], ebx
je 0x1f947c46
push 0x1f88e2d0
push 0x74
jmp 0x1f947cbd
mov ecx, dword [ebp + 0x10]
xor eax, eax
mov dword [ecx], eax
mov dword [ebp - 0x1c], eax
cmp dword [esi], eax
jbe 0x1f947df2
lea eax, [esi + 8]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
push dword [eax]
push 0
push ebx
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x1f947da3
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 2
je 0x1f947de0
mov ecx, dword [0x1f97b00c]
cmp ecx, edi
je 0x1f947c46
test dword [ecx + 0x1c], ebx
je 0x1f947c46
push eax
push 0x1f88e2d0
push 0x75
push dword [ecx + 0x14]
push dword [ecx + 0x10]
jmp 0x1f947c41
push 0x2c
lea eax, [ebp - 0x48]
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
push 0x2c
lea eax, [ebp - 0x48]
push eax
push dword [ebp - 0x10]
call sub.KERNEL32.dll_K32GetProcessMemoryInfo
test eax, eax
je 0x1f947e1d
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp + 0x10]
push dword [ebp - 0x10]
shr ecx, 0x14
add dword [eax], ecx
lea eax, [ebp - 0x10]
push eax
mov byte [ebp - 4], 0
call fcn.1f895f98
inc dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
add dword [ebp - 0x18], 4
cmp eax, dword [esi]
jb 0x1f947d59
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp + 0xc]
dec eax
mov dword [ecx], eax
mov eax, dword [0x1f97b00c]
cmp eax, edi
je 0x1f947c7f
test dword [eax + 0x1c], ebx
je 0x1f947c7f
push 0x1f88e2d0
push 0x77
jmp 0x1f947c74
mov eax, dword [0x1f97b00c]
cmp eax, edi
je 0x1f947e49
test dword [eax + 0x1c], ebx
je 0x1f947e49
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov eax, dword [0x1f97b00c]
push 0x1f88e2d0
push 0x76
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1f895d0a
push dword [ebp - 0x10]
lea eax, [ebp - 0x10]
push eax
mov byte [ebp - 4], 0
call fcn.1f895f98
jmp 0x1f947c46