Function at 0x140013210
Capabilities:
Check if file exists
Get file attributes

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rsp - 0x47]
sub rsp, 0xc0
mov rax, qword [0x14005a318]
xor rax, rsp
mov qword [rbp + 0x37], rax
xor r14d, r14d
mov ebx, r14d
mov dword [rbp - 0x31], ebx
lea r15, [0x14005cdf0]
cmp dword [0x14005af60], ebx
je 0x1400136eb
mov dword [0x14005af60], r14d
mov dword [rbp - 0x35], r14d
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rdi, rax
test rax, rax
je 0x1400136eb
lea rdx, [0x1400500c8]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
test rax, rax
je 0x1400132b1
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea rdx, [rbp - 0x35]
mov rax, rsi
call qword [case.0x14000eb75.0]
mov qword [rbp - 0x31], r14
lea rdx, [0x1400500b0]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400132e0
lea r8, [rbp - 0x31]
lea rdx, [0x1400131c0]
mov ecx, 4
call qword [case.0x14000eb75.0]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rcx, qword [rbp - 0x31]
test rcx, rcx
je 0x1400136eb
mov r8d, 0x104
mov rdx, r15
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x14001331f
mov edx, 0x5c
mov rcx, r15
call fcn.1400264ac
test rax, rax
je 0x14001331f
mov word [rax], r14w
mov qword [rbp - 0x19], r14
mov qword [rbp - 0x11], 7
mov word [rbp - 0x29], r14w
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [r15 + r8*2], bx
jne 0x140013340
mov rdx, r15
lea rcx, [rbp - 0x29]
call fcn.14000cfd0
nop
movabs rdi, 0x7ffffffffffffffe
lea r12, str.SynCom32.dll.manifest
cmp dword [rbp - 0x35], 0
je 0x14001344a
mov rax, rdi
mov rcx, qword [rbp - 0x19]
sub rax, rcx
cmp rax, 0xd
jb 0x140013721
lea r9, [rbp - 0x29]
cmp qword [rbp - 0x11], 8
cmovae r9, qword [rbp - 0x29]
mov qword [rsp + 0x30], 0xd
lea rax, str.SynCom32.dll
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r8, [rbp - 0x29]
movzx edx, byte [rbp - 0x39]
lea rcx, [rbp + 0x17]
call fcn.14000e420
nop
mov ebx, 0x11
mov dword [rbp - 0x31], ebx
lea rcx, [rbp + 0x17]
cmp qword [rbp + 0x2f], 8
cmovae rcx, qword [rbp + 0x17]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x14001344a
mov rax, rdi
mov rcx, qword [rbp - 0x19]
sub rax, rcx
cmp rax, 0x16
jb 0x140013727
lea r9, [rbp - 0x29]
cmp qword [rbp - 0x11], 8
cmovae r9, qword [rbp - 0x29]
mov qword [rsp + 0x30], 0x16
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], rcx
lea r8, [rbp - 0x29]
movzx edx, byte [rbp - 0x39]
lea rcx, [rbp - 9]
call fcn.14000e420
mov ebx, 0x33
lea rcx, [rbp - 9]
cmp qword [rbp + 0xf], 8
cmovae rcx, qword [rbp - 9]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x14001344a
mov sil, 1
jmp 0x14001344d
xor sil, sil
test bl, 2
je 0x1400134a6
and ebx, 0xfffffffd
mov rdx, qword [rbp + 0xf]
cmp rdx, 8
jb 0x140013495
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 9]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013490
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001372d
call fcn.1400243b8
mov qword [rbp + 7], r14
mov qword [rbp + 0xf], 7
mov word [rbp - 9], r14w
test bl, 1
je 0x1400134ee
and ebx, 0xfffffffe
mov rdx, qword [rbp + 0x2f]
cmp rdx, 8
jb 0x1400134ee
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x17]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400134e9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013733
call fcn.1400243b8
test sil, sil
je 0x140013508
mov r8, r12
mov edx, 0x104
mov rcx, r15
call fcn.140031630
jmp 0x1400136af
lea rsi, str.SynCom.dll.manifest
cmp dword [rbp - 0x35], 0
jne 0x1400135ef
mov rax, rdi
mov rcx, qword [rbp - 0x19]
sub rax, rcx
cmp rax, 0xb
jb 0x140013739
lea r9, [rbp - 0x29]
cmp qword [rbp - 0x11], 8
cmovae r9, qword [rbp - 0x29]
mov qword [rsp + 0x30], 0xb
lea rax, str.SynCom.dll
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r8, [rbp - 0x29]
movzx edx, byte [rbp - 0x39]
lea rcx, [rbp + 0x17]
call fcn.14000e420
or ebx, 0x40
or ebx, 4
mov dword [rbp - 0x31], ebx
lea rcx, [rbp + 0x17]
cmp qword [rbp + 0x2f], 8
cmovae rcx, qword [rbp + 0x17]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x1400135ef
mov rax, qword [rbp - 0x19]
sub rdi, rax
cmp rdi, 0x14
jb 0x14001373f
lea r9, [rbp - 0x29]
cmp qword [rbp - 0x11], 8
cmovae r9, qword [rbp - 0x29]
mov qword [rsp + 0x30], 0x14
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x29]
movzx edx, byte [rbp - 0x39]
lea rcx, [rbp - 9]
call fcn.14000e420
or ebx, 0x88
lea rcx, [rbp - 9]
cmp qword [rbp + 0xf], 8
cmovae rcx, qword [rbp - 9]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x1400135ef
mov dil, 1
jmp 0x1400135f2
xor dil, dil
test bl, 8
je 0x14001364b
and ebx, 0xfffffff7
mov rdx, qword [rbp + 0xf]
cmp rdx, 8
jb 0x14001363a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 9]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013635
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013745
call fcn.1400243b8
mov qword [rbp + 7], r14
mov qword [rbp + 0xf], 7
mov word [rbp - 9], r14w
test bl, 4
je 0x140013690
mov rdx, qword [rbp + 0x2f]
cmp rdx, 8
jb 0x140013690
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x17]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001368b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001374b
call fcn.1400243b8
test dil, dil
je 0x1400136a7
mov r8, rsi
mov edx, 0x104
mov rcx, r15
call fcn.140031630
jmp 0x1400136af
mov word [0x14005cdf0], r14w
mov rdx, qword [rbp - 0x11]
cmp rdx, 8
jb 0x1400136eb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400136e6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001371b
call fcn.1400243b8
mov rax, r15
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.140023ea0
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.1400303f4
nop
call fcn.140003e20
nop
call fcn.140003e20
int3
call fcn.1400303f4
nop
call fcn.1400303f4
int3
call fcn.140003e20
nop
call fcn.140003e20
int3
call fcn.1400303f4
nop
call fcn.1400303f4
int3