Function at 0x14006aea0
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x258
mov rsi, rcx
mov r14, qword [0x1400f6380]
mov rax, qword [r14]
xor rax, rsp
mov qword [rsp + 0x250], rax
lea rdi, [rcx + 2]
test byte [rcx], 1
mov rcx, rdi
je 0x14006aedb
mov rcx, qword [rsi + 0x10]
lea rdx, [0x1400fd128]
mov r8d, 4
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
xor ecx, ecx
test eax, eax
sete cl
mov eax, dword [0x1400fd13a]
mov dword [rsp + 0x48], eax
mov rax, qword [str.pipe_]
mov qword [rsp + 0x40], rax
movzx eax, byte [rsi]
test al, 1
je 0x14006af18
mov rdx, qword [rsi + 8]
jmp 0x14006af1e
mov rdx, rax
shr rdx, 1
lea rbp, [rcx*4 + 5]
cmp rdx, rbp
jb 0x14006af54
shl rcx, 2
test al, 1
je 0x14006af37
mov rdi, qword [rsi + 0x10]
lea rcx, [rdi + rcx*2]
lea rdx, [rsp + 0x40]
mov r8d, 5
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
je 0x14006b13b
xorps xmm0, xmm0
movaps xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], 0
lea rdx, [rsp + 0x20]
mov rcx, rsi
call fcn.14006b1a0
mov ebx, eax
mov al, byte [rsp + 0x20]
test al, 1
jne 0x14006af97
cmp al, 6
jb 0x14006afc5
cmp word [rsp + 0x24], 0x3a
jne 0x14006afc5
cmp word [rsp + 0x26], 0x5c
jne 0x14006afc5
lea rax, [rsp + 0x22]
jmp 0x14006afb2
cmp qword [rsp + 0x28], 3
jb 0x14006afc5
mov rax, qword [rsp + 0x30]
cmp word [rax + 2], 0x3a
jne 0x14006afc5
cmp word [rax + 4], 0x5c
jne 0x14006afc5
movzx eax, word [rax]
and eax, 0xffffffdf
add eax, 0xffffffbf
cmp ax, 0x1a
setb dil
jmp 0x14006afc7
xor edi, edi
lea rcx, [rsp + 0x20]
mov rdx, rcx
call fcn.14006b270
mov esi, eax
mov eax, edi
or al, sil
or bl, al
mov ebp, 0x7b
cmp bl, 1
jne 0x14006b152
test dil, dil
jne 0x14006b003
lea r8, str.._
lea rcx, [rsp + 0x20]
xor edx, edx
call fcn.14007ae20
test byte [rsp + 0x20], 1
lea r13, [rsp + 0x22]
mov rcx, r13
je 0x14006b017
mov rcx, qword [rsp + 0x30]
lea rdx, [rsp + 0x40]
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetVolumePathNameW]
test eax, eax
je 0x14006b142
lea rdi, [rsp + 0x40]
mov rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
mov rsi, rax
add rsi, 0xffffffffffffffff
test byte [rsp + 0x20], 1
mov rcx, r13
je 0x14006b053
mov rcx, qword [rsp + 0x30]
mov rdx, rdi
mov r8, rsi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
mov ebp, 0x7b
test eax, eax
jne 0x14006b152
mov al, byte [rsp + 0x20]
mov r15, qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov r12, qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdi, [rsp + 0x20]
jmp 0x14006b09e
mov rcx, qword [rsp + 0x28]
cmp rcx, rsi
jbe 0x14006b12d
mov rcx, r13
test al, 1
je 0x14006b0aa
mov rcx, qword [rsp + 0x30]
call r15
cmp eax, 0xffffffff
je 0x14006b0c0
test eax, 0x400
je 0x14006b0f0
jmp 0x14006b18c
call r12
lea ecx, [rax - 1]
cmp ecx, 3
jb 0x14006b0d2
mov ebp, eax
cmp eax, 0x7b
jne 0x14006b0d4
mov ebp, ebx
cmp ecx, 3
jae 0x14006b0dd
mov ebx, ebp
jmp 0x14006b0f0
mov ebx, ebp
cmp eax, 0x7b
jne 0x14006b152
nop word cs:[rax + rax]
nop
mov rcx, rdi
mov dx, 0x5c
mov r8, 0xffffffffffffffff
call fcn.14007b180
mov rcx, rdi
mov rdx, rax
xor r8d, r8d
call fcn.14007bf00
movzx eax, byte [rsp + 0x20]
test al, 1
jne 0x14006b090
mov rcx, rax
shr rcx, 1
cmp rcx, rsi
ja 0x14006b09e
mov ebp, 0x1126
test byte [rsp + 0x20], 1
jne 0x14006b159
jmp 0x14006b163
mov ebp, 0x1126
jmp 0x14006b163
test sil, sil
mov eax, 0x1126
mov ebp, 0x7b
cmovne ebp, eax
test byte [rsp + 0x20], 1
je 0x14006b163
mov rcx, qword [rsp + 0x30]
call fcn.1400c0490
mov rax, qword [rsp + 0x250]
xor rax, rsp
mov rcx, qword [r14]
cmp rcx, rax
jne 0x14006b197
mov eax, ebp
add rsp, 0x258
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
xor ebp, ebp
test byte [rsp + 0x20], 1
jne 0x14006b159
jmp 0x14006b163
call fcn.140072349
int3