Function at 0x1400072f0
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push rsi
push r13
sub rsp, 0x38
mov qword [rsp + 0x50], rbx
xor esi, esi
mov qword [rsp + 0x58], rbp
mov r13, rcx
mov qword [rsp + 0x60], rdi
or rbp, 0xffffffffffffffff
mov qword [rsp + 0x30], r12
mov rbx, rbp
mov dword [0x140046d88], esi
lea r12, [0x140028614]
mov rcx, qword [rcx]
nop dword [rax + rax]
inc rbx
cmp word [rcx + rbx*2], si
jne 0x140007330
call fcn.14000e900
mov rdi, rax
cmp word [rax], 0x3a
je 0x1400185fe
mov ecx, 0x250
call fcn.140008d68
mov qword [r13 + 0x30], rax
cmp word [rdi], 0x5c
je 0x1400074d2
mov rcx, qword [r13]
mov edx, 0x5c
call fcn.14000e3dc
mov rdi, rax
test rax, rax
je 0x1400186dd
add rdi, 2
lea rdx, [0x140028848]
mov rcx, rdi
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
je 0x1400074d9
lea rdx, [0x140028840]
mov rcx, rdi
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
je 0x1400074d9
cmp dword [0x14002f03c], 4
je 0x14000749d
mov rcx, qword [r13]
call qword [sym.imp.api_ms_win_core_file_l1_2_1.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x1400074c2
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_1.dll_GetLastError]
mov dword [0x140046d88], eax
mov r8, qword [r13]
mov edx, 1
mov r12, qword [rsp + 0x30]
mov rcx, r8
mov rdi, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x58]
movzx eax, word [r8]
mov rbx, qword [rsp + 0x50]
test ax, ax
je 0x140007421
cmp ax, 0x5c
je 0x140007484
cmp ax, 0x3a
je 0x14000747f
movzx eax, word [rcx + 2]
add rcx, 2
inc edx
test ax, ax
jne 0x140007406
mov qword [r13 + 0x18], rsi
test rsi, rsi
je 0x140018736
cmp word [rsi], 0
je 0x14001872e
lea rax, [rsi + 2]
mov qword [r13 + 0x20], rax
mov edx, 0x2a
mov rcx, rsi
call fcn.140008434
test rax, rax
je 0x140007489
or dword [r13 + 0x38], 8
mov dword [0x140046d40], 1
mov edx, 0x2e
mov rcx, rsi
call fcn.140008434
mov qword [r13 + 0x28], rax
mov eax, 1
add rsp, 0x38
pop r13
pop rsi
ret
cmp edx, 2
jne 0x140007412
mov rsi, rcx
jmp 0x140007412
mov edx, 0x3f
mov rcx, rsi
call fcn.140008434
test rax, rax
je 0x140007461
jmp 0x140007452
cmp dword [0x140046d48], 1
je 0x1400073be
cmp dword [0x14002f038], 1
jne 0x1400073dd
mov dword [0x14002f038], esi
jmp 0x1400073be
mov dword [0x140046d88], esi
test al, 0x10
je 0x1400073dd
jmp 0x1400074d9
lea r12, [0x140028616]
mov rdi, qword [r13]
mov edx, 0x5c
mov rcx, rdi
call fcn.14000e3dc
test rax, rax
je 0x14001870b
mov rdi, qword [r13]
add ebx, 5
lea ecx, [rbx + rbx]
call fcn.140008d68
movsxd rbx, ebx
mov r8, rdi
mov rdx, rbx
mov qword [r13], rax
mov rcx, rax
call fcn.14000dc10
mov rcx, qword [r13]
mov r8, r12
mov rdx, rbx
call fcn.14000db30
mov rax, qword [r13 + 0x30]
mov dword [rax], 0x10
jmp 0x1400073dd
cmp ebx, 2
jle 0x14000734b
mov qword [rsp + 0x28], r14
xor ecx, ecx
mov qword [rsp + 0x20], r15
sub rdi, 2
mov word [rax], si
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_1.dll_SetErrorMode]
mov rcx, qword [r13]
mov edx, 0x8000
mov r15d, eax
call fcn.1400145e0
mov r14d, eax
cmp eax, 0xffffffff
je 0x14001866a
mov ecx, eax
call fcn.14000b708
test eax, eax
jne 0x140018650
mov ecx, r14d
call fcn.140003528
test eax, eax
je 0x14001866a
mov ecx, r14d
call fcn.14000b708
test eax, eax
jne 0x1400186bd
mov ecx, r14d
call fcn.140003528
test eax, eax
jne 0x1400186bd
jmp 0x1400186c5
add rdi, 2
mov eax, 0x3a
cmp dword [0x14002f03c], 4
mov word [rdi], ax
jne 0x1400186a4
cmp dword [0x140046d44], esi
jne 0x140018698
mov r8, qword [r13]
lea edx, [rax - 0x39]
mov ecx, 0x236b
call fcn.1400057e4
mov dword [0x14003036c], 1
jmp 0x1400186b7
mov r8, qword [r13]
mov edx, 1
mov ecx, 0x236b
call fcn.1400057e4
cmp r14d, 0xffffffff
je 0x1400186c5
mov ecx, r14d
call fcn.140008c50
mov ecx, r15d
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_1.dll_SetErrorMode]
mov r15, qword [rsp + 0x20]
mov r14, qword [rsp + 0x28]
jmp 0x14000734b
mov rdi, qword [r13]
mov rax, rbp
inc rax
cmp word [rdi + rax*2], si
jne 0x1400186e4
cmp rax, 2
jb 0x140007381
cmp word [rdi + 2], 0x3a
jne 0x140007381
add rdi, 4
jmp 0x140007381
inc rbp
cmp word [rdi + rbp*2], si
jne 0x14001870b
cmp rbp, 2
jne 0x1400074f3
cmp word [rdi + 2], 0x3a
je 0x140007526
jmp 0x1400074f3
mov rax, rsi
jmp 0x14000743c
mov qword [r13 + 0x20], r8
mov rsi, r8
jmp 0x140007440