Function at 0x1800243f0
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push rsi
push rdi
push r13
push r14
sub rsp, 0x38
mov r14, rcx
xor r13d, r13d
xor ecx, ecx
mov esi, r13d
call qword [sym.imp.KERNEL32.dll_SetLastError]
test r14, r14
je 0x180024a5c
mov rdi, 0xffffffffffffffff
mov edx, r13d
mov rax, rdi
inc rax
cmp word [r14 + rax*2], dx
jne 0x180024422
test rax, rax
je 0x180024464
mov rcx, r13
nop dword [rax]
nop dword [rax + rax]
movzx r8d, word [r14 + rcx*2]
cmp r8w, 0x5c
je 0x180024a5c
cmp r8w, 0x2f
je 0x180024a5c
inc edx
mov ecx, edx
cmp rcx, rax
jb 0x180024440
mov qword [rsp + 0x60], rbx
mov rcx, r14
mov qword [rsp + 0x68], rbp
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x30], r15
call fcn.180024a80
mov r15, rax
test rax, rax
je 0x18002474f
call fcn.180025820
mov r12, rax
test rax, rax
je 0x180024a43
mov r8d, r13d
mov rcx, rdi
inc rcx
cmp word [r15 + rcx*2], si
jne 0x1800244a3
test rcx, rcx
je 0x1800244e4
mov rax, r13
nop word [rax + rax]
movzx edx, word [r15 + rax*2]
cmp dx, 0x5c
je 0x1800245ad
cmp dx, 0x2f
je 0x1800245ad
inc r8d
mov eax, r8d
cmp rax, rcx
jb 0x1800244c0
mov rcx, rdi
nop word [rax + rax]
inc rcx
cmp word [r12 + rcx*2], si
jne 0x1800244f0
nop word [rax + rax]
inc rdi
cmp word [r15 + rdi*2], si
jne 0x180024500
test rcx, rcx
je 0x180024529
cmp word [r12 + rcx*2 - 2], 0x5c
je 0x180024529
test rdi, rdi
je 0x180024529
cmp word [r15], 0x5c
mov ebx, 1
jne 0x18002452c
mov ebx, r13d
mov eax, ebx
add rax, rdi
add rax, rcx
mov ecx, 0x40
lea rdi, [rax*2 + 2]
mov rdx, rdi
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov rsi, rax
test rax, rax
je 0x1800245a5
mov r8, r12
mov rdx, rdi
mov rcx, rax
call fcn.1800230d0
test eax, eax
js 0x180024596
test ebx, ebx
je 0x180024581
lfence
lea r8, [0x1800bb42c]
mov rdx, rdi
mov rcx, rsi
call fcn.180023010
test eax, eax
js 0x180024596
lfence
mov r8, r15
mov rdx, rdi
mov rcx, rsi
call fcn.180023010
test eax, eax
jns 0x1800245a5
lfence
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rsi, r13
mov rcx, r12
jmp 0x180024a3d
lea rax, str.system32_
mov qword [rsp + 0x20], rax
lea r14, [rsp + 0x20]
lea rax, str.SystemRoot_system32_
mov qword [rsp + 0x28], rax
nop word [rax + rax]
mov rdx, qword [r14]
mov rbx, rdi
inc rbx
cmp word [rdx + rbx*2], si
jne 0x1800245d6
mov r8, rbx
mov rcx, r15
call fcn.180082900
test eax, eax
je 0x180024601
add r14, 8
lea rax, [rsp + 0x30]
cmp r14, rax
jb 0x1800245d0
jmp 0x1800246f5
lea rbp, [r15 + rbx*2]
mov rcx, rdi
nop dword [rax + rax]
inc rcx
cmp word [r12 + rcx*2], si
jne 0x180024610
test rbp, rbp
jne 0x180024650
lea rbx, [rcx + 1]
lea rdx, [rbx + rbx]
lea ecx, [rbp + 0x40]
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov rsi, rax
test rax, rax
je 0x1800246f2
mov r8, r12
mov rdx, rbx
mov rcx, rax
call fcn.180023290
jmp 0x1800246e2
inc rdi
cmp word [rbp + rdi*2], si
jne 0x180024650
test rcx, rcx
je 0x180024679
cmp word [r12 + rcx*2 - 2], 0x5c
je 0x180024679
test rdi, rdi
je 0x180024679
cmp word [rbp], 0x5c
mov ebx, 1
jne 0x18002467c
mov ebx, r13d
mov eax, ebx
add rax, rdi
add rax, rcx
mov ecx, 0x40
lea rdi, [rax*2 + 2]
mov rdx, rdi
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov rsi, rax
test rax, rax
je 0x1800246f5
mov r8, r12
mov rdx, rdi
mov rcx, rax
call fcn.1800230d0
test eax, eax
js 0x1800246e6
test ebx, ebx
je 0x1800246d1
lfence
lea r8, [0x1800bb42c]
mov rdx, rdi
mov rcx, rsi
call fcn.180023010
test eax, eax
js 0x1800246e6
lfence
mov r8, rbp
mov rdx, rdi
mov rcx, rsi
call fcn.180023010
test eax, eax
jns 0x1800246f5
lfence
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rsi, r13
lea rax, [rsp + 0x30]
cmp r14, rax
jne 0x1800245a5
movzx eax, word [r15]
cmp eax, 0x5c
je 0x180024741
cmp eax, 0x2f
je 0x180024741
mov ecx, eax
call fcn.180081eb0
test eax, eax
je 0x1800245a5
cmp word [r15 + 2], 0x3a
jne 0x1800245a5
movzx eax, word [r15 + 4]
cmp ax, 0x5c
je 0x180024741
cmp ax, 0x2f
jne 0x1800245a5
mov rsi, r15
mov rcx, r12
mov r15, r13
jmp 0x180024a3d
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7e
jne 0x180024906
mov r11, rdi
cmp word [r14 + r11*2 + 2], si
lea r11, [r11 + 1]
jne 0x180024761
mov rcx, r14
call fcn.180020520
mov rcx, rdi
nop dword [rax + rax]
inc rcx
cmp word [rax + rcx*2], si
jne 0x180024780
test rcx, rcx
je 0x1800248b1
cmp rcx, 1
je 0x1800247e3
mov rbx, rdi
nop dword [rax + rax]
inc rbx
cmp word [r14 + rbx*2], si
jne 0x1800247a0
inc rbx
mov ecx, 0x40
lea rdx, [rbx + rbx]
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov r15, rax
test rax, rax
je 0x180024906
mov r8, r14
mov rdx, rbx
mov rcx, rax
call fcn.180023290
test eax, eax
jns 0x18002488e
jmp 0x18002487f
lea r12, [r11 - 1]
test r12, r12
js 0x180024906
lfence
mov rbx, rdi
inc rbx
cmp word [r14 + rbx*2], si
jne 0x1800247f6
cmp r12, rbx
mov ecx, 0x40
cmovb rbx, r12
inc rbx
lea rdx, [rbx + rbx]
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov r15, rax
test rax, rax
je 0x180024906
lea rax, [rbx - 1]
cmp rax, 0x7ffffffe
ja 0x180024876
cmp r12, 0x7ffffffe
ja 0x18002487b
sub r12, rbx
mov rcx, r15
sub r14, r15
lea rax, [r12 + rbx]
test rax, rax
je 0x180024863
movzx eax, word [r14 + rcx]
test ax, ax
je 0x180024863
mov word [rcx], ax
add rcx, 2
sub rbx, 1
jne 0x180024843
test rbx, rbx
lea rax, [rcx - 2]
cmovne rax, rcx
mov word [rax], r13w
jne 0x18002488e
jmp 0x18002487f
test rbx, rbx
je 0x18002487f
mov word [r15], r13w
lfence
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov r15, r13
test r15, r15
je 0x180024906
mov ecx, 0x37e4
call fcn.1800226e0
test eax, eax
je 0x18002493b
xor ecx, ecx
call fcn.180025380
jmp 0x180024940
lea rbx, [r11*2 + 0xa]
mov ecx, 0x40
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov r15, rax
test rax, rax
je 0x180024906
mov r8, r14
mov rdx, rbx
mov rcx, rax
call fcn.1800230d0
lfence
mov rcx, r15
test eax, eax
js 0x180024900
lea r8, str..dll
mov rdx, rbx
call fcn.180023010
test eax, eax
jns 0x180024893
lfence
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_LocalFree]
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x180024919
lea ecx, [rax + 0x7e]
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov r15, qword [rsp + 0x30]
mov rax, rsi
mov r12, qword [rsp + 0x70]
mov rbp, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x60]
add rsp, 0x38
pop r14
pop r13
pop rdi
pop rsi
ret
call fcn.180025820
mov rbp, rax
test rax, rax
je 0x180024a43
mov rcx, rdi
nop
inc rcx
cmp word [rbp + rcx*2], si
jne 0x180024950
nop word [rax + rax]
inc rdi
cmp word [r15 + rdi*2], si
jne 0x180024960
test rcx, rcx
je 0x180024988
cmp word [rbp + rcx*2 - 2], 0x5c
je 0x180024988
test rdi, rdi
je 0x180024988
cmp word [r15], 0x5c
mov ebx, 1
jne 0x18002498b
mov ebx, r13d
mov eax, ebx
add rax, rdi
add rax, rcx
mov ecx, 0x40
lea rdi, [rax*2 + 2]
mov rdx, rdi
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov rsi, rax
test rax, rax
je 0x180024a04
mov r8, rbp
mov rdx, rdi
mov rcx, rax
call fcn.1800230d0
test eax, eax
jns 0x1800249c8
lfence
jmp 0x180024a2e
test ebx, ebx
je 0x1800249ea
lfence
lea r8, [0x1800bb42c]
mov rdx, rdi
mov rcx, rsi
call fcn.180023010
test eax, eax
jns 0x1800249ea
lfence
jmp 0x180024a2e
lfence
mov r8, r15
mov rdx, rdi
mov rcx, rsi
call fcn.180023010
test eax, eax
jns 0x180024a04
lfence
jmp 0x180024a2e
test rsi, rsi
je 0x180024a3a
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x180024a1b
test al, 0x50
je 0x180024a3a
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 2
jne 0x180024a2e
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rsi, r13
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_LocalFree]
test rsi, rsi
je 0x180024906
xor ecx, ecx
jmp 0x180024913
mov ecx, 0xa0
call qword [sym.imp.KERNEL32.dll_SetLastError]
xor eax, eax
add rsp, 0x38
pop r14
pop r13
pop rdi
pop rsi
ret