Function at 0x14000372c
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x198]
sub rsp, 0x298
mov rax, qword [0x14003d0f8]
xor rax, rsp
mov qword [rbp + 0x180], rax
mov rsi, qword [0x140041918]
xor r13d, r13d
mov r15, qword [rbp + 0x200]
or rdi, 0xffffffffffffffff
mov r12, qword [rbp + 0x210]
mov r14, r8
mov rax, qword [rbp + 0x218]
mov rbx, rdx
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x50], rax
test rsi, rsi
je 0x140003863
lea rcx, str.COPYCMD
call fcn.1400109f4
mov rcx, rax
call fcn.14000b900
xor edx, edx
mov r14, rax
test rax, rax
je 0x1400037e9
lea edx, [rdi + 0x21]
mov rcx, rax
call qword [sym.imp.msvcrt.dll_wcsrchr]
nop dword [rax + rax]
xor edx, edx
test rax, rax
jne 0x1400216bc
mov r12, rdi
inc r12
cmp word [r14 + r12*2], dx
jne 0x1400037ec
mov rbx, rdi
inc rbx
cmp word [rsi + rbx*2], dx
jne 0x1400037f9
test ebx, ebx
je 0x14000384c
cmp dword [0x140041924], edx
jne 0x140003847
mov r8d, r12d
mov rdx, rsi
mov rcx, r14
mov r15d, r12d
call qword [sym.imp.msvcrt.dll__wcsnicmp]
nop dword [rax + rax]
xor edx, edx
test eax, eax
je 0x140003b50
lea eax, [rbx + 1]
mov rbx, rdi
lea rsi, [rsi + rax*2]
inc rbx
cmp word [rsi + rbx*2], dx
jne 0x14000383a
test ebx, ebx
jne 0x140003806
mov r15, qword [rsp + 0x28]
mov rcx, r14
call fcn.14000ff70
mov r14, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x38]
mov r12, qword [rsp + 0x40]
mov rdx, rbx
mov rcx, r13
call fcn.140003be4
mov rcx, qword [rsp + 0x48]
xor r8d, r8d
xor edx, edx
mov rcx, qword [rcx + 0x78]
call fcn.14000d3f0
mov rdx, rbx
mov rcx, rax
mov rsi, rax
call fcn.140003be4
xor r13d, r13d
test eax, eax
je 0x1400038a2
movzx ecx, word [rsi]
add rsi, 2
test cx, cx
jne 0x140003896
mov rbx, rdi
inc rbx
cmp word [rsi + rbx*2], r13w
jne 0x1400038a5
test ebx, ebx
je 0x140021820
cmp ebx, 0x7fe7
jae 0x140021815
mov rcx, rsi
call fcn.140011ea0
mov rdx, rdi
inc rdx
cmp word [rsi + rdx*2], r13w
jne 0x1400038ce
inc rdx
mov r8, rax
mov rcx, rsi
call fcn.1400113e0
mov rcx, rsi
call fcn.1400091c0
mov qword [r12], rax
cmp rax, 1
je 0x1400216c4
mov qword [rbp + 0x168], r13
lea rcx, [rsp + 0x60]
mov r13d, 0x104
mov byte [rbp + 0x170], 1
mov r8d, r13d
mov qword [rbp + 0x178], r13
xor edx, edx
call sub.msvcrt.dll_memset
mov al, byte [rbp + 0x170]
lea rcx, [rsp + 0x60]
neg al
sbb rdx, rdx
and edx, 0x7ee3
add rdx, r13
call fcn.14000ca40
xor r13d, r13d
test eax, eax
js 0x1400216d0
mov ebx, ebx
inc rbx
lea rbx, [rsi + rbx*2]
cmp word [rbx], r13w
je 0x1400216db
mov rax, rdi
inc rax
cmp word [rbx + rax*2], r13w
jne 0x140003965
cmp word [rbx + rax*2 + 2], r13w
jne 0x140021820
mov rax, rdi
inc rax
cmp word [rbx + rax*2], r13w
jne 0x14000397e
cmp eax, 0x7fe7
ja 0x140021815
mov rcx, rbx
call fcn.140011ea0
mov rdx, rdi
inc rdx
cmp word [rbx + rdx*2], r13w
jne 0x14000399e
inc rdx
mov r8, rax
mov rcx, rbx
call fcn.1400113e0
mov r8d, 0x3a
cmp word [rbx + 2], r8w
jne 0x140021736
mov rdx, rbx
lea rcx, [rsp + 0x60]
call fcn.14000b364
mov r8, rsi
mov rcx, r14
movsxd rsi, dword [rsp + 0x20]
mov edx, esi
call fcn.140013060
test eax, eax
jne 0x140021815
mov rcx, qword [r12]
mov rax, qword [rcx + 0x30]
test byte [rax], 0x10
jne 0x140003a68
test r14, r14
je 0x1400217e8
mov edx, 0x5c
mov rcx, r14
call qword [sym.imp.msvcrt.dll_wcsrchr]
nop dword [rax + rax]
mov rcx, qword [r12]
mov rcx, qword [rcx + 0x20]
lea rbx, [rax + 2]
test rax, rax
cmove rbx, r14
test rcx, rcx
je 0x140003a49
mov edx, 0x5c
call qword [sym.imp.msvcrt.dll_wcsrchr]
nop dword [rax + rax]
mov r8, rax
test rax, rax
jne 0x140003a51
mov rax, qword [r12]
mov r8, qword [rax + 0x20]
mov rax, rbx
mov rdx, rsi
sub rax, r14
mov rcx, rbx
sar rax, 1
sub rdx, rax
call fcn.1400113e0
mov rax, qword [rbp + 0x168]
lea r8, [rsp + 0x60]
mov edx, dword [rbp + 0x208]
test rax, rax
mov rcx, r15
cmovne r8, rax
call fcn.140013060
test eax, eax
jne 0x140021815
xor ecx, ecx
mov dword [0x140045ba8], r13d
mov ebx, r13d
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_SetLastError]
nop dword [rax + rax]
mov rsi, qword [rsp + 0x50]
mov rcx, r15
mov dword [rsi], r13d
call fcn.140012378
mov r12d, 0x5c
cmp word [rax], r12w
je 0x1400217f0
mov rcx, r15
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_GetFileAttributesW]
nop dword [rax + rax]
cmp eax, 0xffffffff
jne 0x140003bc0
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov dword [0x140045ba8], eax
test eax, 0xfffffffc
jne 0x14002180d
cmp eax, 1
je 0x14002180d
test ebx, ebx
jne 0x140003b68
mov rcx, qword [rbp + 0x168]
mov qword [rbp + 0x168], r13
test rcx, rcx
je 0x140003b2a
call qword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void____ptr64_]
nop dword [rax + rax]
xor eax, eax
mov rcx, qword [rbp + 0x180]
xor rcx, rsp
call fcn.140018f80
add rsp, 0x298
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
cmp word [rsi + r15*2], 0x3d
jne 0x140003830
inc r15
lea r13, [rsi + r15*2]
jmp 0x140003847
test r14, r14
je 0x140003bd8
mov edx, r12d
mov rcx, r14
call qword [sym.imp.msvcrt.dll_wcsrchr]
nop dword [rax + rax]
mov r8, rax
mov rdx, rdi
inc rdx
cmp word [r15 + rdx*2], r13w
jne 0x140003b85
inc rdi
cmp word [r8 + rdi*2], r13w
jne 0x140003b8f
lea rax, [rdi + 1]
add rax, rdx
cmp rax, 0x7fe7
ja 0x140021815
movsxd rdx, dword [rbp + 0x208]
mov rcx, r15
call fcn.140011300
jmp 0x140003b0b
test al, 0x10
je 0x140003b07
mov dword [rsi], 1
mov ebx, 1
jmp 0x140003b07
mov r8, r13
jmp 0x140003b82
mov word [rax], dx
jmp 0x1400037e9
mov ecx, dword [0x140045ba8]
call fcn.14002afbc
int3
mov ecx, 0x2374
call fcn.14002afbc
int3
mov rax, qword [rbp + 0x168]
lea rdx, [rsp + 0x60]
test rax, rax
mov r8d, 0x3a
cmovne rdx, rax
mov rax, qword [0x140045ba0]
movzx ecx, word [rax]
mov word [rdx], cx
lea rcx, [rsp + 0x60]
mov rax, qword [rbp + 0x168]
test rax, rax
cmovne rcx, rax
mov word [rcx + 2], r8w
lea rcx, [rsp + 0x60]
mov rax, qword [rbp + 0x168]
test rax, rax
cmovne rcx, rax
mov word [rcx + 4], r13w
jmp 0x1400039d4
mov eax, 0x5c
cmp word [rbx], ax
jne 0x14002174a
cmp word [rbx + 2], ax
je 0x1400039c7
mov rax, qword [rbp + 0x168]
lea rdx, [rsp + 0x60]
test rax, rax
cmovne rdx, rax
mov rax, qword [0x140045ba0]
movzx ecx, word [rax]
mov word [rdx], cx
lea rcx, [rsp + 0x60]
mov rax, qword [rbp + 0x168]
lea rdx, [rsp + 0x60]
test rax, rax
cmovne rcx, rax
mov word [rcx + 2], r8w
lea rcx, [rsp + 0x60]
mov rax, qword [rbp + 0x168]
test rax, rax
cmovne rcx, rax
mov word [rcx + 4], r13w
mov rcx, rdi
mov rax, qword [rbp + 0x168]
test rax, rax
cmovne rdx, rax
inc rcx
cmp word [rdx + rcx*2], r13w
jne 0x1400217b0
mov rax, rdi
inc rax
cmp word [rbx + rax*2], r13w
jne 0x1400217bd
inc rax
add rax, rcx
cmp rax, 0x7fe7
ja 0x140021815
mov rdx, rbx
lea rcx, [rsp + 0x60]
call fcn.140008940
nop
jmp 0x1400039d4
mov rax, r13
jmp 0x140003a1c
mov ebx, 1
mov rax, rdi
inc rax
cmp word [r15 + rax*2], r13w
jne 0x1400217f8
mov word [r15 + rax*2 - 2], r13w
jmp 0x140003ac9
mov ecx, eax
call fcn.14002afbc
int3
mov ecx, 0x232e
call fcn.14002afbc
int3
mov ecx, 0x232a
call fcn.14002afbc
int3