Function at 0x18026a0a0
Capabilities:
Check if file exists
Read file on windows

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x60
mov rax, qword [0x1803b6038]
xor rax, rsp
mov qword [rsp + 0x58], rax
call fcn.18026a02d
mov rsi, rax
movzx eax, byte [rax + 0x17]
test al, al
js 0x18026a0cd
mov ecx, eax
and ecx, 0x7f
jmp 0x18026a0d1
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x18026a28a
test al, al
jns 0x18026a0e1
mov rsi, qword [rsi]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
mov rcx, rsi
mov edx, 1
mov r8d, 7
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x18026a208
mov rsi, rax
movabs rax, 0xaaaaaaaaaaaaaaaa
lea rdx, [rsp + 0x38]
mov qword [rdx], rax
lea rdi, [rsp + 0x50]
mov dword [rdi], 0
mov qword [rsp + 0x20], 0
mov rcx, rsi
mov r8d, 8
mov r9, rdi
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov ecx, dword [rdi]
test eax, eax
je 0x18026a229
cmp ecx, 8
jne 0x18026a229
mov edi, 8
cmp dword [rsp + 0x38], 1
jne 0x18026a232
mov eax, dword [rsp + 0x3c]
mov qword [0x1803c97e8], rax
test rax, rax
je 0x18026a201
mov edi, 9
cmp eax, 0x5d1745d
ja 0x18026a232
imul rdi, rax, 0x2c
mov rcx, rdi
call fcn.1801e4f7c
mov qword [0x1803c97f0], rax
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x50]
mov rcx, rsi
mov rdx, rax
mov r8d, edi
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov rcx, qword [0x1803c97f0]
test eax, eax
je 0x18026a269
cmp dword [rsp + 0x50], edi
jne 0x18026a269
mov rax, qword [0x1803c97e8]
xor edi, edi
cmp rax, 2
jb 0x18026a242
imul rax, rax, 0x2c
add rax, rcx
lea rdx, [rcx + 0x2c]
jmp 0x18026a36d
mov edi, 4
jmp 0x18026a242
mov edi, 2
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 2]
cmp ecx, 2
jb 0x18026a24b
mov edi, eax
cmp eax, 5
je 0x18026a252
mov edi, 6
jmp 0x18026a252
mov edi, 7
test ecx, ecx
je 0x18026a23d
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x18026a252
mov edi, 3
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [0x1803c97f8], 1
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.1801e6610
mov eax, edi
add rsp, 0x60
pop rbx
pop rdi
pop rsi
ret
mov edi, 0xa
test rcx, rcx
je 0x18026a278
call fcn.1801e4f84
xor eax, eax
mov qword [0x1803c97f0], rax
mov qword [0x1803c97e8], rax
jmp 0x18026a232
test al, al
js 0x18026a299
mov word [rsi], 0
mov byte [rsi + 0x17], 0
jmp 0x18026a2a9
mov rax, qword [rsi]
mov word [rax], 0
mov qword [rsi + 8], 0
mov qword [rsp + 0x50], 0
lea rdi, [rsp + 0x38]
mov rcx, rdi
call fcn.18016cafd
lea rbx, str.ThirdParty
mov rcx, rbx
call fcn.180206ad4
mov rcx, rdi
mov rdx, rbx
mov r8, rax
call fcn.1800fa7f6
cmp byte [rax + 0x17], 0
jns 0x18026a2e5
mov rax, qword [rax]
lea r9, [rsp + 0x50]
mov ecx, 2
mov rdx, rax
mov r8d, 1
call fcn.1801ddc54
mov ebx, eax
cmp byte [rsp + 0x4f], 0
jns 0x18026a310
mov rcx, qword [rsp + 0x38]
call fcn.1801e4f44
test bl, bl
je 0x18026a34d
mov rcx, qword [rsp + 0x50]
lea rdx, str.BlFilePath
mov r8, rsi
call fcn.18016baaa
mov ebx, eax
mov rcx, qword [rsp + 0x50]
call fcn.1801de3f3
test bl, bl
je 0x18026a34d
movzx eax, byte [rsi + 0x17]
test al, al
jns 0x18026a357
mov rcx, qword [rsi + 8]
test rcx, rcx
jne 0x18026a0da
mov edi, 1
jmp 0x18026a24b
mov ecx, eax
and ecx, 0x7f
jmp 0x18026a344
jb 0x18026a387
add rdx, 0x2c
cmp rdx, rax
je 0x18026a242
mov r8, 0xffffffffffffffec
mov r9b, byte [rdx + r8 - 0x18]
cmp byte [rdx + r8 + 0x14], r9b
jne 0x18026a35e
inc r8
jne 0x18026a374
jmp 0x18026a360
cmp rdx, rax
je 0x18026a242
mov edi, 0xb
jmp 0x18026a26e