Function at 0x140011070
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
lea rbp, [rsp - 0x37]
sub rsp, 0xe0
mov qword [rbp - 0x49], 0xfffffffffffffffe
mov qword [rsp + 0x120], rbx
mov rax, qword [0x140040490]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov rsi, rdx
mov rdi, rcx
lea rcx, [rbp - 9]
call fcn.140003a60
mov rbx, rax
mov rdx, rdi
lea rcx, [rbp - 0x41]
call fcn.140003a60
nop
mov rdx, rbx
mov rcx, rax
call fcn.140011dd0
test eax, eax
sete bl
cmp qword [rbp - 0x29], 8
jb 0x1400110e1
mov rcx, qword [rbp - 0x41]
call fcn.140018e2c
mov qword [rbp - 0x29], 7
xor r12d, r12d
mov qword [rbp - 0x31], r12
mov word [rbp - 0x41], r12w
cmp qword [rbp + 0xf], 8
jb 0x140011105
mov rcx, qword [rbp - 9]
call fcn.140018e2c
mov qword [rbp + 0xf], 7
mov qword [rbp + 7], r12
mov word [rbp - 9], r12w
test bl, bl
je 0x140011121
mov al, 1
jmp 0x1400113bb
mov rcx, rsi
call fcn.140010ec0
movzx ebx, al
mov rcx, rdi
call fcn.140010ec0
cmp al, bl
jne 0x1400113b9
cmp qword [rdi + 0x18], 8
jb 0x140011148
mov rcx, qword [rdi]
jmp 0x14001114b
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x14001115a
xor cl, cl
jmp 0x140011161
and al, 0x10
cmp al, 0x10
sete cl
cmp qword [rdi + 0x18], 8
jb 0x14001116b
mov rdi, qword [rdi]
mov ebx, 0x80
mov eax, ebx
mov r13d, 0x2000000
test cl, cl
cmovne eax, r13d
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [rbx - 0x7f]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rdi, rax
mov qword [rbp - 0x69], rax
mov qword [rbp - 0x61], r12
cmp qword [rsi + 0x18], 8
jb 0x1400111bb
mov rcx, qword [rsi]
jmp 0x1400111be
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x1400111cd
xor al, al
jmp 0x1400111d4
and al, 0x10
cmp al, 0x10
sete al
cmp qword [rsi + 0x18], 8
jb 0x1400111de
mov rsi, qword [rsi]
test al, al
cmovne ebx, r13d
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
mov qword [rbp - 0x59], rax
mov qword [rbp - 0x51], r12
cmp rdi, 0xffffffffffffffff
je 0x140011230
test rdi, rdi
je 0x140011230
cmp rax, 0xffffffffffffffff
je 0x14001123b
test rax, rax
je 0x14001123b
test rdi, rdi
jne 0x140011260
cmp rax, 0xffffffffffffffff
je 0x140011260
test rax, rax
je 0x140011260
cmp rax, 0xffffffffffffffff
je 0x14001124f
test rax, rax
je 0x14001124f
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 0x51], r12
mov qword [rbp - 0x59], 0xffffffffffffffff
jmp 0x140011399
cmp rdi, 0xffffffffffffffff
je 0x140011379
test rdi, rdi
je 0x140011379
cmp rax, 0xffffffffffffffff
je 0x140011379
test rax, rax
je 0x140011379
mov dword [rbp - 0x41], r12d
xor edx, edx
lea r8d, [rdx + 0x30]
lea rcx, [rbp - 0x3d]
call fcn.14001f5f0
lea rdx, [rbp - 0x41]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
test eax, eax
je 0x140011379
mov dword [rbp - 9], 1
xor edx, edx
lea r8d, [rdx + 0x30]
lea rcx, [rbp - 5]
call fcn.14001f5f0
lea rdx, [rbp - 9]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
test eax, eax
je 0x140011379
mov eax, dword [rbp - 9]
cmp dword [rbp - 0x41], eax
jne 0x140011346
mov eax, dword [rbp + 0x13]
cmp dword [rbp - 0x25], eax
jne 0x140011346
mov eax, dword [rbp - 1]
cmp dword [rbp - 0x39], eax
jne 0x140011346
mov eax, dword [rbp - 5]
cmp dword [rbp - 0x3d], eax
jne 0x140011346
mov eax, dword [rbp + 7]
cmp dword [rbp - 0x31], eax
jne 0x140011346
mov eax, dword [rbp + 3]
cmp dword [rbp - 0x35], eax
jne 0x140011346
mov eax, dword [rbp + 0xf]
cmp dword [rbp - 0x29], eax
jne 0x140011346
mov eax, dword [rbp + 0xb]
cmp dword [rbp - 0x2d], eax
jne 0x140011346
mov eax, dword [rbp + 0x23]
cmp dword [rbp - 0x15], eax
jne 0x140011346
mov eax, dword [rbp + 0x27]
cmp dword [rbp - 0x11], eax
jne 0x140011346
mov eax, dword [rbp + 0x17]
cmp dword [rbp - 0x21], eax
jne 0x140011346
mov eax, dword [rbp + 0x1b]
cmp dword [rbp - 0x1d], eax
jne 0x140011346
mov eax, dword [rbp + 0x1f]
cmp dword [rbp - 0x19], eax
jne 0x140011346
mov sil, 1
jmp 0x140011349
xor sil, sil
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 0x51], r12
mov qword [rbp - 0x59], 0xffffffffffffffff
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 0x61], r12
mov qword [rbp - 0x69], 0xffffffffffffffff
movzx eax, sil
jmp 0x1400113bb
cmp rbx, 0xffffffffffffffff
je 0x14001138d
test rbx, rbx
je 0x14001138d
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 0x51], r12
mov qword [rbp - 0x59], 0xffffffffffffffff
cmp rdi, 0xffffffffffffffff
je 0x1400113ad
test rdi, rdi
je 0x1400113ad
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 0x69], 0xffffffffffffffff
mov qword [rbp - 0x61], r12
xor al, al
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.140018e50
mov rbx, qword [rsp + 0x120]
add rsp, 0xe0
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret