Function at 0x18000d930
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push rbp
push rsi
push rdi
lea rbp, [rsp - 0x200]
sub rsp, 0x300
mov qword [rbp - 0x78], 0xfffffffffffffffe
mov qword [rsp + 0x330], rbx
mov rax, qword [0x1800a0830]
xor rax, rsp
mov qword [rbp + 0x1f0], rax
mov rsi, rdx
mov rdi, rcx
mov rcx, rdx
call fcn.18000e250
mov ebx, eax
test eax, eax
js 0x18000dbd7
lea ecx, [rbx + 1]
cmp word [rsi + rcx*2], 0
je 0x18000dbd7
lea rax, [rbx + rbx]
mov qword [rsp + 0x38], rax
lea rdx, [rax + rsi]
lea rcx, [rsp + 0x60]
call fcn.18000c150
nop
mov rdx, rsi
lea rcx, [rsp + 0x28]
call fcn.18000c150
nop
cmp ebx, dword [rsp + 0x30]
jae 0x18000d9ca
mov dword [rsp + 0x30], ebx
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x38]
xor edx, edx
mov word [rcx + rax], dx
mov eax, dword [rsp + 0x68]
cmp eax, 6
jbe 0x18000d9f2
mov ecx, eax
mov rax, qword [rsp + 0x60]
add rax, 0xfffffffffffffff4
lea rcx, [rax + rcx*2]
lea rdx, str.:_DATA
call fcn.18000cd20
test al, al
jne 0x18000da03
lea rdx, str.:_DATA
lea rcx, [rsp + 0x60]
call fcn.18000c560
mov rcx, qword [rsp + 0x28]
call fcn.18000ea10
mov rdx, qword [rsp + 0x28]
test al, al
je 0x18000da5d
cmp ebx, 2
je 0x18000da27
cmp ebx, 3
jne 0x18000da5d
cmp word [rdx + 4], 0x5c
jne 0x18000da5d
xor esi, esi
mov qword [rdi], rsi
mov qword [rdi + 8], rsi
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], rsi
mov dword [rdi + 0x20], esi
mov word [rdi + 0x24], si
lea rcx, [rdi + 0x28]
mov dword [rcx + 8], esi
mov rax, qword [rcx]
mov word [rax], si
cmp ebx, 2
jne 0x18000da6f
lea rdx, [rsp + 0x28]
call fcn.18000c220
jmp 0x18000da6f
mov rcx, rdi
call fcn.18000d930
test al, al
je 0x18000dbc2
xor esi, esi
and dword [rdi + 0x20], 0xfffffbef
mov qword [rdi], rsi
or rbx, 0xffffffffffffffff
mov qword [rsp + 0x70], rbx
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x78]
call fcn.18000bfd0
nop
lea rcx, [rsp + 0x48]
call fcn.18000c1e0
nop
mov rcx, qword [rsp + 0x70]
cmp rcx, 0xffffffffffffffff
je 0x18000dadb
mov rax, qword [0x1800a3338]
test rax, rax
je 0x18000db12
lea rdx, [rbp - 0x70]
call rax
test eax, eax
je 0x18000db5b
mov rax, qword [rbp - 0x70]
mov qword [rsp + 0x58], rax
lea rdx, [rbp - 0x68]
lea rcx, [rsp + 0x48]
call fcn.18000c370
jmp 0x18000daf3
lea r8, [rsp + 0x48]
mov rdx, qword [rsp + 0x78]
lea rcx, [rsp + 0x70]
call fcn.18000df50
test al, al
je 0x18000db5b
mov rdx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x48]
call fcn.18000cc60
test al, al
jne 0x18000db1f
mov rcx, qword [rsp + 0x48]
call fcn.18002f650
jmp 0x18000da92
mov ecx, 0x78
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x18000db5b
mov eax, dword [rsp + 0x50]
cmp eax, 7
jbe 0x18000db3c
lea ecx, [rax - 6]
cmp ecx, eax
jae 0x18000db3c
mov dword [rsp + 0x50], ecx
mov rax, qword [rsp + 0x48]
mov word [rax + rcx*2], si
lea rcx, [rdi + 0x28]
lea rdx, [rsp + 0x48]
call fcn.18000c4f0
mov rax, qword [rsp + 0x58]
mov qword [rdi], rax
mov byte [rdi + 0x24], 1
mov dil, 1
jmp 0x18000db72
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x26
jne 0x18000db6f
lea ecx, [rax - 0x24]
call qword [sym.imp.KERNEL32.dll_SetLastError]
xor dil, dil
mov rcx, qword [rsp + 0x48]
call fcn.18002f650
nop
mov rcx, qword [rsp + 0x78]
call fcn.18002f650
mov rcx, qword [rsp + 0x70]
cmp rcx, 0xffffffffffffffff
je 0x18000dba8
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rcx, qword [rsp + 0x70]
test eax, eax
cmovne rcx, rbx
mov qword [rsp + 0x70], rcx
mov rcx, qword [rsp + 0x28]
call fcn.18002f650
nop
mov rcx, qword [rsp + 0x60]
call fcn.18002f650
jmp 0x18000de53
mov rcx, qword [rsp + 0x28]
call fcn.18002f650
nop
mov rcx, qword [rsp + 0x60]
call fcn.18002f650
or rbx, 0xffffffffffffffff
mov qword [rsp + 0x38], rbx
mov rcx, rsi
call fcn.18000eb00
xor ecx, ecx
mov edx, 4
test al, al
cmovne ecx, edx
mov dword [rsp + 0x40], ecx
lea rax, [rsi + rcx*2]
mov qword [rsp + 0x28], rax
mov rcx, rax
call fcn.18000ea40
test al, al
je 0x18000dc74
mov eax, dword [rsp + 0x40]
add eax, 3
cmp word [rsi + rax*2], 0
jne 0x18000dc74
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x18000de2c
test al, 0x10
je 0x18000de2c
xor esi, esi
mov qword [rdi], rsi
mov qword [rdi + 8], rsi
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], rsi
mov word [rdi + 0x24], si
mov dword [rdi + 0x20], eax
add rdi, 0x28
mov rdx, qword [rsp + 0x28]
mov rcx, rdi
call fcn.18000c370
cmp dword [rdi + 8], 2
jbe 0x18000dcd0
mov dword [rdi + 8], 2
mov rax, qword [rdi]
mov word [rax + 4], si
jmp 0x18000dcd0
movzx eax, word [rsi]
cmp ax, 0x5c
je 0x18000dc87
cmp ax, 0x2f
jne 0x18000de2c
mov rcx, rsi
cmp word [rsi + 2], 0
jne 0x18000dcd8
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov ecx, eax
cmp eax, 0xffffffff
je 0x18000de2c
test cl, 0x10
je 0x18000de2c
xor edx, edx
mov qword [rdi], rdx
mov qword [rdi + 8], rdx
mov qword [rdi + 0x10], rdx
mov qword [rdi + 0x18], rdx
mov dword [rdi + 0x20], edx
mov word [rdi + 0x24], dx
mov dword [rdi + 0x30], edx
mov rax, qword [rdi + 0x28]
mov word [rax], dx
mov dword [rdi + 0x20], ecx
mov dil, 1
jmp 0x18000de44
call fcn.18000e630
test eax, eax
je 0x18000de2c
mov eax, eax
lea rbx, [rsi + rax*2]
cmp word [rbx], 0
je 0x18000de2c
mov rcx, rbx
call fcn.18000e2d0
test eax, eax
jns 0x18000de2c
mov rdx, rsi
lea rcx, [rsp + 0x28]
call fcn.18000c150
nop
mov edx, dword [rsp + 0x30]
cmp dword [rsp + 0x34], edx
jne 0x18000dd2b
lea rcx, [rsp + 0x28]
call fcn.18000c880
mov edx, dword [rsp + 0x30]
mov rcx, qword [rsp + 0x28]
mov eax, edx
mov r8d, 0x5c
mov word [rcx + rax*2], r8w
inc edx
xor r8d, r8d
mov word [rcx + rdx*2], r8w
mov dword [rsp + 0x30], edx
cmp dword [rsp + 0x34], edx
jne 0x18000dd5f
lea rcx, [rsp + 0x28]
call fcn.18000c880
mov edx, dword [rsp + 0x30]
mov rcx, qword [rsp + 0x28]
mov eax, edx
mov r8d, 0x2a
mov word [rcx + rax*2], r8w
inc edx
xor r8d, r8d
mov word [rcx + rdx*2], r8w
mov dword [rsp + 0x30], edx
mov byte [rsp + 0x20], r8b
mov r8, rdi
mov rdx, qword [rsp + 0x28]
lea rcx, [rsp + 0x38]
call fcn.18000de80
test al, al
je 0x18000ddbf
lea rcx, [rdi + 0x28]
mov rdx, qword [rcx]
movzx eax, word [rdx]
cmp ax, word [0x18006b2d0]
jne 0x18000ddba
movzx eax, word [rdx + 2]
cmp ax, word [0x18006b2d2]
je 0x18000de14
mov byte [rsp + 0x20], 1
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
or ecx, 0xffffffff
cmp eax, ecx
cmovne ecx, eax
cmp byte [rsp + 0x20], 0
jne 0x18000dded
cmp ecx, 0xffffffff
je 0x18000dde1
test cl, 0x10
jne 0x18000dded
mov rcx, qword [rsp + 0x28]
call fcn.18002f650
jmp 0x18000de2c
xor eax, eax
mov qword [rdi], rax
mov qword [rdi + 8], rax
mov qword [rdi + 0x10], rax
mov qword [rdi + 0x18], rax
mov word [rdi + 0x24], ax
mov eax, 0x10
cmp ecx, 0xffffffff
cmovne eax, ecx
mov dword [rdi + 0x20], eax
lea rcx, [rdi + 0x28]
mov rdx, rbx
call fcn.18000c370
nop
mov rcx, qword [rsp + 0x28]
call fcn.18002f650
mov dil, 1
jmp 0x18000de3f
mov r8, rdi
mov rdx, rsi
lea rcx, [rsp + 0x38]
call fcn.18000de80
movzx edi, al
mov rbx, qword [rsp + 0x38]
cmp rbx, 0xffffffffffffffff
je 0x18000de53
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindClose]
movzx eax, dil
mov rcx, qword [rbp + 0x1f0]
xor rcx, rsp
call fcn.18002f6f0
mov rbx, qword [rsp + 0x330]
add rsp, 0x300
pop rdi
pop rsi
pop rbp
ret