Function at 0x1400b35e0
Capabilities:
Check if file exists
Get file attributes

Disassembly:
mov rax, rsp
push rbp
push rdi
push r14
mov rbp, rsp
sub rsp, 0x60
mov qword [rbp - 0x30], 0xfffffffffffffffe
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rsi
mov rax, qword [0x1402c5168]
xor rax, rsp
mov qword [rbp - 8], rax
mov rsi, rdx
mov rdx, rcx
lea rcx, [rbp - 0x28]
call fcn.140006870
nop
mov rbx, qword [rbp - 0x18]
xor r14d, r14d
mov edi, r14d
test rbx, rbx
je 0x1400b3665
nop dword [rax + rax]
lea rax, [rbp - 0x28]
cmp qword [rbp - 0x10], 8
cmovae rax, qword [rbp - 0x28]
movzx ecx, word [rax + rdi*2]
call fcn.1401b79e4
lea rcx, [rbp - 0x28]
cmp qword [rbp - 0x10], 8
cmovae rcx, qword [rbp - 0x28]
mov word [rcx + rdi*2], ax
inc rdi
cmp rdi, rbx
jb 0x1400b3630
mov rbx, qword [rbp - 0x18]
cmp rbx, 2
jbe 0x1400b3797
lea rax, [rbp - 0x28]
mov rdx, qword [rbp - 0x28]
mov r8, qword [rbp - 0x10]
cmp r8, 8
cmovae rax, rdx
cmp word [rax], 0x5c
jne 0x1400b36a3
lea rax, [rbp - 0x28]
cmp r8, 8
cmovae rax, rdx
cmp word [rax + 2], 0x5c
jne 0x1400b36a3
mov bl, 1
jmp 0x1400b3863
lea rax, [rbp - 0x28]
cmp r8, 8
cmovae rax, rdx
cmp word [rax], 0x2f
jne 0x1400b36cc
lea rax, [rbp - 0x28]
cmp r8, 8
cmovae rax, rdx
cmp word [rax + 2], 0x2f
je 0x1400b3861
mov rcx, r14
test rbx, rbx
je 0x1400b3714
mov r9d, 0x2f
lea r10d, [r9 + 0x2d]
nop
lea rax, [rbp - 0x28]
cmp r8, 8
cmovae rax, rdx
cmp r9w, word [rax + rcx*2]
jne 0x1400b370c
lea rax, [rbp - 0x28]
cmp r8, 8
cmovae rax, rdx
mov word [rax + rcx*2], r10w
mov r8, qword [rbp - 0x10]
mov rdx, qword [rbp - 0x28]
inc rcx
cmp rcx, rbx
jb 0x1400b36e0
lea rax, [rbp - 0x28]
cmp r8, 8
cmovae rax, rdx
cmp word [rax + 2], 0x3a
jne 0x1400b3861
lea rax, [rbp - 0x28]
cmp r8, 8
cmovae rax, rdx
cmp word [rax + 4], 0x5c
jne 0x1400b3861
lea rax, [rbp - 0x28]
cmp r8, 8
cmovae rax, rdx
cmp word [rax], 0x61
jb 0x1400b3861
lea rax, [rbp - 0x28]
cmp r8, 8
cmovae rax, rdx
cmp word [rax], 0x7a
ja 0x1400b3861
lea rcx, [rbp - 0x28]
cmp r8, 8
cmovae rcx, rdx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x1400b3861
shr eax, 4
and al, 1
mov byte [rsi], al
mov bl, 1
jmp 0x1400b3863
jne 0x1400b3861
lea rax, [rbp - 0x28]
mov rdx, qword [rbp - 0x28]
mov rcx, qword [rbp - 0x10]
cmp rcx, 8
cmovae rax, rdx
cmp word [rax + 2], 0x3a
jne 0x1400b3861
lea rax, [rbp - 0x28]
cmp rcx, 8
cmovae rax, rdx
cmp word [rax], 0x61
jb 0x1400b3861
lea rax, [rbp - 0x28]
cmp rcx, 8
cmovae rax, rdx
cmp word [rax], 0x7a
ja 0x1400b3861
lea rax, [rcx - 2]
cmp rax, 1
jb 0x1400b381f
mov qword [rbp - 0x18], 3
lea rbx, [rbp - 0x28]
cmp rcx, 8
cmovae rbx, rdx
lea rcx, [rbx + 4]
mov r8d, 2
lea rdx, [0x140242458]
call fcn.14018d190
mov word [rbx + 6], r14w
jmp 0x1400b383d
mov qword [rsp + 0x20], 1
lea r9, [0x140242458]
mov edx, 1
lea rcx, [rbp - 0x28]
call fcn.1400074b0
lea rcx, [rbp - 0x28]
cmp qword [rbp - 0x10], 8
cmovae rcx, qword [rbp - 0x28]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x1400b3861
shr eax, 4
and al, 1
mov byte [rsi], al
mov bl, 1
jmp 0x1400b3863
xor bl, bl
mov rdx, qword [rbp - 0x10]
cmp rdx, 8
jb 0x1400b389f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b389a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b38d4
call fcn.140186ea4
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], 7
mov word [rbp - 0x28], r14w
movzx eax, bl
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.140187450
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret
call fcn.140199c8c
int3