Function at 0x4361a0
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push rbp
push r14
push r13
push rdi
push rsi
push rbx
sub rsp, 0x58
mov rbp, rsp
mov qword [rbp + 0x20], rcx
mov qword [rbp + 0x30], 0
mov qword [rbp + 0x48], 0
nop
lea rax, [0x004366ca]
mov qword [rbp + 0x28], rax
xor r13, r13
mov rax, qword [0x00489ad8]
mov dword [rax], 0
mov rax, qword [rbp + 0x20]
mov rax, qword [rax]
test rax, rax
je 0x4361f7
mov rcx, rax
call fcn.0040aa60
mov edi, eax
jmp 0x4361fa
xor rdi, rdi
mov rax, qword [rbp + 0x20]
mov rcx, qword [rax]
call fcn.00429f20
mov rsi, rax
cmp word [rsi], 0x3a
jne 0x43633b
cmp edi, 2
jle 0x43633b
mov word [rsi], 0
sub rsi, 2
xor rcx, rcx
call sub.kernel32.dll_SetErrorMode
mov ebx, eax
mov rax, qword [rbp + 0x20]
mov rcx, qword [rax]
mov edx, 0x8000
call fcn.0043d350
mov r14d, eax
cmp r14d, 0xffffffff
je 0x43626a
mov ecx, r14d
call fcn.004345c0
test eax, eax
jne 0x436314
mov ecx, r14d
call fcn.004346a0
test eax, eax
jne 0x436314
add rsi, 2
mov word [rsi], 0x3a
mov rax, qword [0x00489c98]
cmp dword [rax], 4
jne 0x4362cf
mov rax, qword [0x00489d20]
cmp dword [rax], 0
jne 0x4362c0
lea rcx, [rbp + 0x48]
mov rdx, qword [0x00489cf8]
call fcn.0040eed0
mov rax, qword [rbp + 0x20]
mov rax, qword [rax]
mov qword [rbp + 0x38], rax
mov byte [rbp + 0x40], 0xa
mov rcx, qword [rbp + 0x48]
mov edx, 1
lea r8, [rbp + 0x38]
xor r9, r9
call fcn.0043cde0
mov rax, qword [0x00489a08]
mov dword [rax], 1
jmp 0x436304
lea rcx, [rbp + 0x30]
mov rdx, qword [0x00489cf8]
call fcn.0040eed0
mov rax, qword [rbp + 0x20]
mov rax, qword [rax]
mov qword [rbp + 0x38], rax
mov byte [rbp + 0x40], 0xa
mov rcx, qword [rbp + 0x30]
mov edx, 1
lea r8, [rbp + 0x38]
xor r9, r9
call fcn.0043cde0
cmp r14d, 0xffffffff
je 0x436334
mov ecx, r14d
call fcn.0043d480
jmp 0x436334
mov ecx, r14d
call fcn.004345c0
test eax, eax
jne 0x43632c
mov ecx, r14d
call fcn.004346a0
test eax, eax
je 0x436334
mov ecx, r14d
call fcn.0043d480
mov ecx, ebx
call sub.kernel32.dll_SetErrorMode
mov ecx, 0x250
call fcn.0042ac70
mov rcx, qword [rbp + 0x20]
mov qword [rcx + 0x28], rax
movzx r14, word [rsi]
cmp r14w, 0x5c
jne 0x436362
mov r13d, 1
jmp 0x4363d9
mov rax, qword [rbp + 0x20]
mov rcx, qword [rax]
mov dx, 0x5c
call fcn.00429ce0
mov rsi, rax
test rsi, rsi
jne 0x4363a8
mov rax, qword [rbp + 0x20]
mov rsi, qword [rax]
test rsi, rsi
je 0x436393
mov rax, rsi
mov rcx, rax
call fcn.0040aa60
jmp 0x436396
xor rax, rax
cmp eax, 2
jl 0x4363ac
cmp word [rsi + 2], 0x3a
jne 0x4363ac
add rsi, 4
jmp 0x4363ac
add rsi, 2
mov rcx, rsi
lea rdx, [0x004366d2]
call fcn.0041dae0
test eax, eax
je 0x4363d2
mov rcx, rsi
lea rdx, [0x004366d6]
call fcn.0041dae0
test eax, eax
jne 0x4363d9
mov r13d, 1
test r13d, r13d
jne 0x4364f6
mov rax, qword [0x00489c98]
cmp dword [rax], 4
jne 0x4364b2
mov rax, qword [0x00489c28]
cmp dword [rax], 1
jne 0x43644f
mov rax, qword [rbp + 0x20]
mov rcx, qword [rax]
call sub.kernel32.dll_GetFileAttributesW
mov ebx, eax
cmp ebx, 0xffffffff
je 0x436420
mov rax, qword [0x00489ad8]
mov dword [rax], 0
jmp 0x43642e
call sub.kernel32.dll_GetLastError_2
mov rcx, qword [0x00489ad8]
mov dword [rcx], eax
cmp ebx, 0xffffffff
je 0x4364f6
test ebx, 0x10
je 0x4364f6
mov r13d, 1
jmp 0x4364f6
mov rax, qword [0x00489cd0]
cmp dword [rax], 1
jne 0x4364f6
mov rax, qword [0x00489cd0]
mov dword [rax], 0
mov rax, qword [rbp + 0x20]
mov rcx, qword [rax]
call sub.kernel32.dll_GetFileAttributesW
mov ebx, eax
cmp ebx, 0xffffffff
je 0x43648e
mov rax, qword [0x00489ad8]
mov dword [rax], 0
jmp 0x43649c
call sub.kernel32.dll_GetLastError_2
mov rcx, qword [0x00489ad8]
mov dword [rcx], eax
cmp ebx, 0xffffffff
je 0x4364f6
test ebx, 0x10
je 0x4364f6
mov r13d, 1
jmp 0x4364f6
mov rax, qword [rbp + 0x20]
mov rcx, qword [rax]
call sub.kernel32.dll_GetFileAttributesW
mov ebx, eax
cmp ebx, 0xffffffff
je 0x4364d4
mov rax, qword [0x00489ad8]
mov dword [rax], 0
jmp 0x4364e2
call sub.kernel32.dll_GetLastError_2
mov rcx, qword [0x00489ad8]
mov dword [rcx], eax
cmp ebx, 0xffffffff
je 0x4364f6
test ebx, 0x10
je 0x4364f6
mov r13d, 1
test r13d, r13d
je 0x436559
cmp r14w, 0x5c
jne 0x43650d
lea rax, [0x004366cc]
mov qword [rbp + 0x28], rax
mov rax, qword [rbp + 0x20]
mov rcx, qword [rax]
call fcn.00436150
test al, al
jne 0x43654b
mov ecx, edi
add ecx, 5
add ecx, ecx
call fcn.0042ac70
mov rcx, rax
mov rax, qword [rbp + 0x20]
mov rdx, qword [rax]
call fcn.00429d70
mov rcx, qword [rbp + 0x20]
mov qword [rcx], rax
mov rcx, qword [rcx]
mov rdx, qword [rbp + 0x28]
call fcn.00429d90
mov rax, qword [rbp + 0x20]
mov rax, qword [rax + 0x28]
mov dword [rax], 0x10
mov edi, 1
xor rsi, rsi
mov rax, qword [rbp + 0x20]
mov rax, qword [rax]
jmp 0x436588
cmp r14w, 0x5c
je 0x43657e
cmp r14w, 0x3a
jne 0x436581
cmp edi, 2
jne 0x436581
mov rsi, rax
add rax, 2
add edi, 1
cmp r14w, word [rax]
je 0x43656b
mov rax, qword [rbp + 0x20]
mov qword [rax + 0x10], rsi
test rsi, rsi
je 0x4365b9
cmp word [rsi], 0
je 0x4365af
lea rax, [rsi + 2]
mov rcx, qword [rbp + 0x20]
mov qword [rcx + 0x18], rax
jmp 0x4365c8
mov rax, qword [rbp + 0x20]
mov qword [rax + 0x18], rsi
jmp 0x4365c8
mov rcx, qword [rbp + 0x20]
mov rax, qword [rcx]
mov qword [rcx + 0x18], rax
mov rsi, qword [rcx + 0x18]
xor rax, rax
test rsi, rsi
je 0x4365eb
mov rcx, rsi
jmp 0x4365e4
cmp word [rcx], 0x2a
jne 0x4365e0
mov rax, rcx
jmp 0x4365ea
add rcx, 2
cmp word [rcx], 0
jne 0x4365d5
nop
test rax, rax
je 0x4365f4
mov al, 1
jmp 0x43661d
xor rax, rax
test rsi, rsi
je 0x436617
mov rcx, rsi
jmp 0x436610
cmp word [rcx], 0x3f
jne 0x43660c
mov rax, rcx
jmp 0x436616
add rcx, 2
cmp word [rcx], 0
jne 0x436601
nop
test rax, rax
setne al
test al, al
je 0x436636
mov rax, qword [rbp + 0x20]
or dword [rax + 0x30], 8
mov rax, qword [0x004895a0]
mov dword [rax], 1
xor rax, rax
test rsi, rsi
je 0x436656
jmp 0x43664f
cmp word [rsi], 0x2e
jne 0x43664b
mov rax, rsi
jmp 0x436655
add rsi, 2
cmp word [rsi], 0
jne 0x436640
nop
mov rcx, qword [rbp + 0x20]
mov qword [rcx + 0x20], rax
nop
lea rcx, [rbp + 0x30]
call fcn.0040a270
lea rcx, [rbp + 0x48]
call fcn.0040a270
lea rsp, [rbp + 0x58]
pop rbx
pop rsi
pop rdi
pop r13
pop r14
pop rbp
ret