Function at 0x7fffb6db53c0
Capabilities:
Check if file exists
Get file attributes

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x20], r9
mov dword [rsp + 0x10], edx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
xor r13d, r13d
mov rbp, r8
mov r14d, r13d
mov r15d, r13d
test r8, r8
je 0x7fffb6db5901
test r9, r9
je 0x7fffb6db5901
mov rax, qword [rsp + 0xa0]
test rax, rax
je 0x7fffb6db5901
mov rcx, qword [rsp + 0xa8]
test rcx, rcx
je 0x7fffb6db5901
mov dword [r9], 0x1000000
lea edi, [r13 + 2]
mov qword [rax], r13
mov dword [rcx], r13d
test dl, 8
je 0x7fffb6db543a
mov eax, 0x200000a
jmp 0x7fffb6db544b
mov al, dl
and al, dil
neg al
sbb eax, eax
and eax, 0xfffffffd
add eax, 0x2000005
and eax, edx
cmp edx, eax
je 0x7fffb6db546d
mov edx, 0x2870a
mov ebp, 0x80070057
mov cl, dil
mov r8d, ebp
mov ebx, ebp
call fcn.7fffb6dc60a0
jmp 0x7fffb6db5936
mov edx, 0x80e8
mov rcx, r8
mov eax, edx
cmp word [rcx], r13w
je 0x7fffb6db5486
add rcx, rdi
sub rax, 1
jne 0x7fffb6db5477
test rax, rax
je 0x7fffb6db58f7
mov rsi, rdx
sub rsi, rax
cmp rsi, rdx
jae 0x7fffb6db58f7
test esi, esi
je 0x7fffb6db58ed
mov r12d, esi
cmp word [r8 + r12*2], r13w
jne 0x7fffb6db58ed
mov rcx, 0xffffffffffffffff
lea r13d, [rsi + 2]
mov rax, rdi
mul r13
cmovo rax, rcx
mov rcx, rax
call qword [sym.imp.msvcrt.dll_malloc]
mov r14, rax
mov ebx, 0x8007000e
test rax, rax
jne 0x7fffb6db54ef
mov r8d, ebx
mov edx, 0x10303
mov cl, dil
call fcn.7fffb6dc60a0
mov r15, r14
test r14, r14
je 0x7fffb6db5928
mov r8, rbp
mov rdx, r13
mov rcx, r14
call fcn.7fffb6dafd5c
xor r13d, r13d
test eax, eax
je 0x7fffb6db552b
mov r8d, 0x8000ffff
mov edx, 0x28701
mov cl, dil
mov ebx, r8d
call fcn.7fffb6dc60a0
jmp 0x7fffb6db5928
mov ebp, dword [rsp + 0x88]
mov edx, 0x5c
and ebp, edi
jne 0x7fffb6db555a
lea eax, [rsi - 1]
cmp word [r14 + rax*2], dx
je 0x7fffb6db555a
cmp word [r14 + rax*2], 0x2f
je 0x7fffb6db555a
lea eax, [rsi + 1]
mov word [r14 + r12*2], dx
mov word [r14 + rax*2], r13w
mov rcx, r14
call qword [sym.imp.KernelBase.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x7fffb6db5570
mov ebx, r13d
jmp 0x7fffb6db5928
and eax, 0x10
test ebp, ebp
je 0x7fffb6db557d
test eax, eax
je 0x7fffb6db5581
jmp 0x7fffb6db5568
test eax, eax
je 0x7fffb6db5568
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, r14
mov r15, r13
call qword [sym.imp.KernelBase.dll_GetFullPathNameW]
xor ebp, ebp
mov r13d, eax
test eax, eax
jne 0x7fffb6db55b4
mov edx, 0x28704
mov r8d, 0x8000ffff
mov ebx, r8d
mov cl, dil
jmp 0x7fffb6db5915
mov rcx, 0xffffffffffffffff
mov rax, rdi
mul r13
cmovo rax, rcx
mov rcx, rax
call qword [sym.imp.msvcrt.dll_malloc]
mov r12, rax
test rax, rax
jne 0x7fffb6db55e6
mov r8d, ebx
mov edx, 0x10303
mov cl, dil
call fcn.7fffb6dc60a0
mov r15, r12
test r12, r12
je 0x7fffb6db591a
lea r9, [rsp + 0x38]
mov r8, r12
mov edx, r13d
mov rcx, r14
call qword [sym.imp.KernelBase.dll_GetFullPathNameW]
mov rcx, r14
mov ebp, eax
call qword [sym.imp.msvcrt.dll_free]
xor eax, eax
mov r14, r12
mov r15d, eax
test ebp, ebp
jne 0x7fffb6db5627
mov edx, 0x28705
jmp 0x7fffb6db55a3
cmp ebp, r13d
jb 0x7fffb6db563c
mov r8d, 0x80028016
mov edx, 0x28706
jmp 0x7fffb6db55a9
xor r8d, r8d
lea rdx, [rsp + 0x90]
mov rcx, r12
call qword [sym.imp.KernelBase.dll_GetLongPathNameW]
mov r13d, eax
test r13d, r13d
je 0x7fffb6db56de
mov rcx, 0xffffffffffffffff
mov rax, rdi
mul r13
cmovo rax, rcx
mov rcx, rax
call qword [sym.imp.msvcrt.dll_malloc]
xor ebp, ebp
mov r15, rax
test rax, rax
jne 0x7fffb6db5690
mov r8d, ebx
mov edx, 0x10303
mov cl, dil
call fcn.7fffb6dc60a0
test r15, r15
je 0x7fffb6db591a
mov r8d, r13d
mov rdx, r15
mov rcx, r12
call qword [sym.imp.KernelBase.dll_GetLongPathNameW]
mov rcx, r12
mov ebp, eax
call qword [sym.imp.msvcrt.dll_free]
xor eax, eax
mov r14, r15
mov r15d, eax
test ebp, ebp
jne 0x7fffb6db56c9
mov edx, 0x28707
jmp 0x7fffb6db55a3
cmp ebp, r13d
jb 0x7fffb6db56de
mov r8d, 0x80028016
mov edx, 0x28708
jmp 0x7fffb6db55a9
mov dword [rsp + 0x28], ebp
mov r9d, ebp
mov r8, r14
mov qword [rsp + 0x20], r14
mov edx, 0x100
mov ecx, 0x800
call qword [sym.imp.KernelBase.dll_LCMapStringW]
mov ecx, 0x5c
mov r12, r14
mov ebp, 0x80070057
cmp word [r14], cx
jne 0x7fffb6db5746
cmp word [r14 + 2], cx
jne 0x7fffb6db5746
lea r12, [r14 + 4]
cmp word [r12], 0x2e
lea eax, [rcx - 0x1d]
jne 0x7fffb6db572b
mov word [r12], ax
cmp word [r12], ax
jne 0x7fffb6db573d
cmp word [r14 + 6], cx
je 0x7fffb6db5855
lea rcx, str._unc_
jmp 0x7fffb6db574d
lea rcx, str.__
mov r9d, 0x80e8
mov qword [rsp + 0x30], rcx
mov eax, r9d
xor r13d, r13d
cmp word [rcx], r13w
je 0x7fffb6db576d
add rcx, rdi
sub rax, 1
jne 0x7fffb6db575e
test rax, rax
je 0x7fffb6db58e3
mov rsi, r9
sub rsi, rax
cmp rsi, r9
jae 0x7fffb6db58e3
lea r8d, [rsi + 1]
test r12, r12
je 0x7fffb6db57b2
mov rax, r9
mov rcx, r12
mov edx, r13d
cmp word [rcx], r13w
je 0x7fffb6db57a6
add rcx, rdi
sub rax, 1
jne 0x7fffb6db5797
test rax, rax
jne 0x7fffb6db584a
mov rsi, r13
mov edx, ebp
test edx, edx
cmovs rsi, r13
jne 0x7fffb6db58d9
cmp rsi, r9
ja 0x7fffb6db58d9
lea r13d, [rsi + r8]
mov rcx, 0xffffffffffffffff
mov rax, rdi
mul r13
cmovo rax, rcx
mov rcx, rax
call qword [sym.imp.msvcrt.dll_malloc]
mov r15, rax
test rax, rax
jne 0x7fffb6db5808
mov r8d, ebx
mov edx, 0x10303
mov cl, dil
call fcn.7fffb6dc60a0
test r15, r15
je 0x7fffb6db591a
mov r8, qword [rsp + 0x30]
mov rdx, r13
mov rcx, r15
call fcn.7fffb6dafd5c
test eax, eax
jne 0x7fffb6db58cf
mov r8, r12
mov rdx, r13
mov rcx, r15
call fcn.7fffb6db52f4
xor r13d, r13d
test eax, eax
jne 0x7fffb6db58cf
mov rcx, r14
call qword [sym.imp.msvcrt.dll_free]
mov r14, r15
mov r15d, r13d
jmp 0x7fffb6db5858
mov rsi, r9
sub rsi, rax
jmp 0x7fffb6db57b4
xor r13d, r13d
mov r8d, 0x80e8
test r14, r14
je 0x7fffb6db5883
mov eax, r8d
mov rdx, r14
mov ecx, r13d
cmp word [rdx], r13w
je 0x7fffb6db587b
add rdx, rdi
sub rax, 1
jne 0x7fffb6db586c
test rax, rax
jne 0x7fffb6db58bd
mov rsi, r13
mov ecx, ebp
test ecx, ecx
cmovs rsi, r13
jne 0x7fffb6db58c5
cmp rsi, r8
jae 0x7fffb6db58c5
mov rax, qword [rsp + 0xa8]
mov ebx, r13d
mov rcx, qword [rsp + 0x98]
mov dword [rax], esi
mov eax, dword [rsp + 0x88]
mov dword [rcx], eax
mov rax, qword [rsp + 0xa0]
mov qword [rax], r14
jmp 0x7fffb6db5936
mov rsi, r8
sub rsi, rax
jmp 0x7fffb6db5885
mov edx, 0x28729
jmp 0x7fffb6db55a3
mov edx, 0x28702
jmp 0x7fffb6db55a3
mov edx, 0x2870d
jmp 0x7fffb6db55a3
mov edx, 0x2870c
jmp 0x7fffb6db55a3
mov edx, 0x28703
jmp 0x7fffb6db5456
mov edx, 0x28709
jmp 0x7fffb6db5456
mov ebp, 0x80070057
mov edx, 0x2870b
mov ebx, ebp
mov r8d, ebp
mov ecx, 2
call fcn.7fffb6dc60a0
test r14, r14
je 0x7fffb6db5928
mov rcx, r14
call qword [sym.imp.msvcrt.dll_free]
test r15, r15
je 0x7fffb6db5936
mov rcx, r15
call qword [sym.imp.msvcrt.dll_free]
mov eax, ebx
mov rbx, qword [rsp + 0x80]
add rsp, 0x40
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret