Function at 0x140001c48
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x198]
sub rsp, 0x298
mov rax, qword [0x1400400b0]
xor rax, rsp
mov qword [rbp + 0x180], rax
mov rax, qword [rbp + 0x210]
xor esi, esi
mov rbx, qword [0x1400449a8]
or rdi, 0xffffffffffffffff
mov r15, qword [rbp + 0x200]
mov r14, r8
mov qword [rsp + 0x48], rax
mov r12, rdx
mov rax, qword [rbp + 0x218]
mov r13d, esi
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x28], r15
test rbx, rbx
je 0x140001d86
lea rcx, str.COPYCMD
call fcn.14000fbec
mov rcx, rax
call fcn.14000fcb0
mov r14, rax
test rax, rax
je 0x140001d02
lea edx, [rsi + 0x20]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll_wcsrchr]
nop dword [rax + rax]
test rax, rax
je 0x140001d02
mov word [rax], si
mov r12, rdi
inc r12
cmp word [r14 + r12*2], si
jne 0x140001d05
mov rsi, rdi
xor edx, edx
inc rsi
cmp word [rbx + rsi*2], dx
jne 0x140001d14
test esi, esi
je 0x140001d74
cmp dword [0x1400449b4], edx
jne 0x140001d6f
mov r8d, r12d
mov rdx, rbx
mov rcx, r14
mov r15d, r12d
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o__wcsnicmp]
nop dword [rax + rax]
xor edx, edx
test eax, eax
jne 0x140001d4f
cmp word [rbx + r15*2], 0x3d
je 0x140001d68
lea eax, [rsi + 1]
mov rsi, rdi
lea rbx, [rbx + rax*2]
inc rsi
cmp word [rbx + rsi*2], dx
jne 0x140001d59
test esi, esi
je 0x140001d6f
jmp 0x140001d21
inc r15
lea r13, [rbx + r15*2]
mov r15, qword [rsp + 0x28]
mov rcx, r14
call fcn.140014240
mov r14, qword [rsp + 0x30]
mov r12, qword [rsp + 0x38]
mov rdx, r12
mov rcx, r13
call fcn.14000222c
mov rcx, qword [rsp + 0x40]
xor r8d, r8d
xor edx, edx
mov rcx, qword [rcx + 0x78]
call fcn.140011180
mov rdx, r12
mov rcx, rax
mov rsi, rax
call fcn.14000222c
xor r13d, r13d
test eax, eax
je 0x140001dc5
movzx ecx, word [rsi]
add rsi, 2
test cx, cx
jne 0x140001db9
mov rbx, rdi
inc rbx
cmp word [rsi + rbx*2], r13w
jne 0x140001dc8
test ebx, ebx
je 0x1400021f9
cmp ebx, 0x7fe7
jae 0x1400021ee
mov rcx, rsi
call fcn.140015950
mov rdx, rdi
inc rdx
cmp word [rsi + rdx*2], r13w
jne 0x140001df1
inc rdx
mov r8, rax
mov rcx, rsi
call fcn.1400158f0
mov rcx, rsi
call fcn.14000d2d0
mov r12, qword [rsp + 0x48]
mov qword [r12], rax
cmp rax, 1
je 0x140002204
mov qword [rbp + 0x168], r13
lea rcx, [rsp + 0x60]
mov r13d, 0x104
mov byte [rbp + 0x170], 1
mov r8d, r13d
mov qword [rbp + 0x178], r13
xor edx, edx
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov al, byte [rbp + 0x170]
lea rcx, [rsp + 0x60]
neg al
sbb rdx, rdx
and edx, 0x7ee3
add rdx, r13
call fcn.140010e10
xor r13d, r13d
test eax, eax
js 0x140002210
mov ebx, ebx
inc rbx
lea rbx, [rsi + rbx*2]
cmp word [rbx], r13w
jne 0x140001edf
mov rax, qword [0x14004cc48]
lea rcx, [rsp + 0x60]
lea r8d, [r13 + 0x3a]
movzx edx, word [rax]
mov rax, qword [rbp + 0x168]
test rax, rax
cmovne rcx, rax
mov word [rcx], dx
lea rcx, [rsp + 0x60]
mov rax, qword [rbp + 0x168]
test rax, rax
cmovne rcx, rax
mov word [rcx + 2], r8w
lea rcx, [rsp + 0x60]
mov rax, qword [rbp + 0x168]
test rax, rax
cmovne rcx, rax
mov word [rcx + 4], r13w
jmp 0x140002002
mov rax, rdi
inc rax
cmp word [rbx + rax*2], r13w
jne 0x140001ee2
cmp word [rbx + rax*2 + 2], r13w
jne 0x1400021f9
mov rax, rdi
inc rax
cmp word [rbx + rax*2], r13w
jne 0x140001efb
cmp eax, 0x7fe7
ja 0x1400021ee
mov rcx, rbx
call fcn.140015950
mov rdx, rdi
inc rdx
cmp word [rbx + rdx*2], r13w
jne 0x140001f1b
inc rdx
mov r8, rax
mov rcx, rbx
call fcn.1400158f0
mov r8d, 0x3a
cmp word [rbx + 2], r8w
je 0x140001ff5
lea eax, [r8 + 0x22]
cmp word [rbx], ax
jne 0x140001f57
cmp word [rbx + 2], ax
je 0x140001ff5
mov rax, qword [0x14004cc48]
lea rcx, [rsp + 0x60]
movzx edx, word [rax]
mov rax, qword [rbp + 0x168]
test rax, rax
cmovne rcx, rax
mov word [rcx], dx
lea rcx, [rsp + 0x60]
mov rax, qword [rbp + 0x168]
lea rdx, [rsp + 0x60]
test rax, rax
cmovne rcx, rax
mov word [rcx + 2], r8w
lea rcx, [rsp + 0x60]
mov rax, qword [rbp + 0x168]
test rax, rax
cmovne rcx, rax
mov word [rcx + 4], r13w
mov rcx, rdi
mov rax, qword [rbp + 0x168]
test rax, rax
cmovne rdx, rax
inc rcx
cmp word [rdx + rcx*2], r13w
jne 0x140001fbd
mov rax, rdi
inc rax
cmp word [rbx + rax*2], r13w
jne 0x140001fca
inc rax
add rax, rcx
cmp rax, 0x7fe7
ja 0x1400021ee
mov rdx, rbx
lea rcx, [rsp + 0x60]
call fcn.14001b7dc
jmp 0x140002002
mov rdx, rbx
lea rcx, [rsp + 0x60]
call fcn.140016cc0
mov r8, rsi
mov rcx, r14
movsxd rsi, dword [rsp + 0x20]
mov edx, esi
call fcn.140018ed8
test eax, eax
jne 0x1400021ee
mov rcx, qword [r12]
mov rax, qword [rcx + 0x30]
test byte [rax], 0x10
jne 0x140002098
test r14, r14
je 0x140002054
mov edx, 0x5c
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll_wcsrchr]
nop dword [rax + rax]
mov rcx, qword [r12]
mov rbx, rax
test rax, rax
je 0x140002054
add rbx, 2
jmp 0x140002057
mov rbx, r14
mov rcx, qword [rcx + 0x20]
test rcx, rcx
je 0x140002079
mov edx, 0x5c
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll_wcsrchr]
nop dword [rax + rax]
mov r8, rax
test rax, rax
jne 0x140002081
mov rax, qword [r12]
mov r8, qword [rax + 0x20]
mov rax, rbx
mov rdx, rsi
sub rax, r14
mov rcx, rbx
sar rax, 1
sub rdx, rax
call fcn.1400158f0
mov rax, qword [rbp + 0x168]
lea r8, [rsp + 0x60]
mov edx, dword [rbp + 0x208]
test rax, rax
mov rcx, r15
cmovne r8, rax
call fcn.140018ed8
test eax, eax
jne 0x1400021ee
xor ecx, ecx
mov dword [0x14004cc50], r13d
mov ebx, r13d
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_SetLastError]
nop dword [rax + rax]
mov rsi, qword [rsp + 0x50]
mov rcx, r15
mov dword [rsi], r13d
call fcn.140016ca4
mov r12d, 0x5c
cmp word [rax], r12w
jne 0x14000210d
lea ebx, [r12 - 0x5b]
mov rax, rdi
inc rax
cmp word [r15 + rax*2], r13w
jne 0x1400020fd
mov word [r15 + rax*2 - 2], r13w
mov rcx, r15
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_GetFileAttributesW]
nop dword [rax + rax]
cmp eax, 0xffffffff
je 0x140002132
test al, 0x10
je 0x140002158
mov dword [rsi], 1
mov ebx, 1
jmp 0x140002158
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov dword [0x14004cc50], eax
test eax, 0xfffffffc
jne 0x14000221b
cmp eax, 1
je 0x14000221b
test ebx, ebx
je 0x1400021b0
test r14, r14
jne 0x140002166
mov r8, r13
jmp 0x14000217b
mov edx, r12d
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll_wcsrchr]
nop dword [rax + rax]
mov r8, rax
mov rdx, rdi
inc rdx
cmp word [r15 + rdx*2], r13w
jne 0x14000217e
inc rdi
cmp word [r8 + rdi*2], r13w
jne 0x140002188
lea rax, [rdi + 1]
add rax, rdx
cmp rax, 0x7fe7
ja 0x1400021ee
movsxd rdx, dword [rbp + 0x208]
mov rcx, r15
call fcn.1400157fc
mov rcx, qword [rbp + 0x168]
mov qword [rbp + 0x168], r13
test rcx, rcx
je 0x1400021c8
call fcn.14001fe90
xor eax, eax
mov rcx, qword [rbp + 0x180]
xor rcx, rsp
call fcn.14001f920
add rsp, 0x298
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov ecx, 0x232e
call fcn.14002f09c
int3
mov ecx, 0x232a
call fcn.14002f09c
int3
mov ecx, dword [0x14004cc50]
call fcn.14002f09c
int3
mov ecx, 0x2374
call fcn.14002f09c
int3
mov ecx, eax
call fcn.14002f09c
int3