Function at 0x1400036d0
Capabilities:
Check if file exists
Get file attributes

Disassembly:
mov rax, rsp
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0xa0
mov qword [rbp - 0x19], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r14
mov rax, qword [0x140042088]
xor rax, rsp
mov qword [rbp + 0x4f], rax
xor r14d, r14d
mov edi, r14d
mov dword [rbp - 0x21], r14d
cmp dword [0x1400437f4], r14d
je 0x1400039f9
mov dword [0x1400437f4], r14d
mov dword [rbp - 0x29], r14d
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rbx, rax
test rax, rax
je 0x1400039f9
lea rdx, str.IsWow64Process
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
test rax, rax
je 0x140003767
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea rdx, [rbp - 0x29]
call rsi
mov qword [rbp - 0x21], r14
lea rdx, [0x14003cd28]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140003792
lea r8, [rbp - 0x21]
lea rdx, [0x140003680]
mov ecx, 4
call rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rcx, qword [rbp - 0x21]
test rcx, rcx
je 0x1400039f9
mov r8d, 0x104
lea rbx, [0x140045900]
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x1400037d8
mov edx, 0x5c
mov rcx, rbx
call fcn.14000b450
test rax, rax
je 0x1400037d8
mov word [rax], r14w
mov qword [rbp + 0x27], 7
mov qword [rbp + 0x1f], r14
mov word [rbp + 0xf], r14w
cmp word [0x140045900], di
jne 0x1400037f7
mov r8, r14
jmp 0x14000380a
or r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp word [rbx + r8*2], di
jne 0x140003800
mov rdx, rbx
lea rcx, [rbp + 0xf]
call fcn.140004c40
nop
cmp dword [rbp - 0x29], 0
je 0x140003888
lea r8, str.SynCom32.dll
lea rdx, [rbp + 0xf]
lea rcx, [rbp + 0x2f]
call fcn.1400054b0
nop
mov edi, 1
mov dword [rbp - 0x21], edi
cmp qword [rax + 0x18], 8
jb 0x140003844
mov rax, qword [rax]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x140003888
lea r8, str.SynCom32.dll.manifest
lea rdx, [rbp + 0xf]
lea rcx, [rbp - 0x11]
call fcn.1400054b0
mov edi, 3
cmp qword [rax + 0x18], 8
jb 0x140003875
mov rax, qword [rax]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x140003888
mov sil, 1
jmp 0x14000388b
xor sil, sil
test dil, 2
je 0x1400038bf
and edi, 0xfffffffd
mov r8, qword [rbp + 7]
cmp r8, 8
jb 0x1400038ae
inc r8
mov rdx, qword [rbp - 0x11]
lea rcx, [rbp - 0x11]
call fcn.140005070
mov qword [rbp + 7], 7
mov qword [rbp - 1], r14
mov word [rbp - 0x11], r14w
test dil, 1
je 0x1400038e2
and edi, 0xfffffffe
mov r8, qword [rbp + 0x47]
cmp r8, 8
jb 0x1400038e2
inc r8
mov rdx, qword [rbp + 0x2f]
lea rcx, [rbp + 0x2f]
call fcn.140005070
test sil, sil
je 0x1400038f3
lea r8, str.SynCom32.dll.manifest
jmp 0x1400039c3
cmp dword [rbp - 0x29], 0
jne 0x140003960
lea r8, str.SynCom.dll
lea rdx, [rbp + 0xf]
lea rcx, [rbp + 0x2f]
call fcn.1400054b0
nop
or edi, 4
mov dword [rbp - 0x21], edi
cmp qword [rax + 0x18], 8
jb 0x14000391e
mov rax, qword [rax]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x140003960
lea r8, str.SynCom.dll.manifest
lea rdx, [rbp + 0xf]
lea rcx, [rbp - 0x11]
call fcn.1400054b0
or edi, 8
cmp qword [rax + 0x18], 8
jb 0x14000394d
mov rax, qword [rax]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x140003960
mov sil, 1
jmp 0x140003963
xor sil, sil
test dil, 8
je 0x140003997
and edi, 0xfffffff7
mov r8, qword [rbp + 7]
cmp r8, 8
jb 0x140003986
inc r8
mov rdx, qword [rbp - 0x11]
lea rcx, [rbp - 0x11]
call fcn.140005070
mov qword [rbp + 7], 7
mov qword [rbp - 1], r14
mov word [rbp - 0x11], r14w
test dil, 4
je 0x1400039b7
mov r8, qword [rbp + 0x47]
cmp r8, 8
jb 0x1400039b7
inc r8
mov rdx, qword [rbp + 0x2f]
lea rcx, [rbp + 0x2f]
call fcn.140005070
test sil, sil
je 0x1400039d2
lea r8, str.SynCom.dll.manifest
mov edx, 0x104
mov rcx, rbx
call fcn.14000fb80
jmp 0x1400039da
mov word [0x140045900], r14w
mov r8, qword [rbp + 0x27]
cmp r8, 8
jb 0x1400039f4
inc r8
mov rdx, qword [rbp + 0xf]
lea rcx, [rbp + 0xf]
call fcn.140005070
mov rax, rbx
jmp 0x140003a00
lea rax, [0x140045900]
mov rcx, qword [rbp + 0x4f]
xor rcx, rsp
call fcn.140008790
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret