Function at 0x140007550
Capabilities:
Check if file exists
Get file attributes
Link many functions at runtime

Disassembly:
mov r11, rsp
push rbp
push rbx
push rsi
push rdi
push r14
lea rbp, [r11 - 0xb8]
sub rsp, 0x190
mov rax, qword [0x14000c030]
xor rax, rsp
mov qword [rbp + 0x70], rax
xor eax, eax
mov qword [r11 + 0x18], r12
mov qword [r11 - 0x30], r13
mov r14, rcx
mov qword [r11 - 0x38], r15
xor ecx, ecx
mov r15d, eax
mov qword [rsp + 0x68], rax
mov r13, rdx
mov qword [rsp + 0x70], rax
mov r12d, eax
mov esi, eax
mov edi, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x140007a87
test al, 0x50
jne 0x140007a87
mov rax, qword [0x14000c568]
test rax, rax
jne 0x1400075e9
xor edx, edx
lea rcx, str.crypt32.dll
call fcn.140006770
mov qword [0x14000c568], rax
test rax, rax
je 0x140007786
cmp qword [0x14000c4a8], rsi
jne 0x140007619
lea rdx, str.CryptMsgClose
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14000c4a8], rax
test rax, rax
je 0x140007786
mov rax, qword [0x14000c568]
cmp qword [0x14000c4b0], rsi
jne 0x140007649
lea rdx, str.CertCloseStore
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14000c4b0], rax
test rax, rax
je 0x140007786
mov rax, qword [0x14000c568]
cmp qword [0x14000c4b8], rsi
jne 0x140007679
lea rdx, str.CertFreeCertificateContext
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14000c4b8], rax
test rax, rax
je 0x140007786
mov rax, qword [0x14000c568]
cmp qword [0x14000c4c0], rsi
jne 0x1400076a9
lea rdx, str.CertFindCertificateInStore
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14000c4c0], rax
test rax, rax
je 0x140007786
mov rax, qword [0x14000c568]
cmp qword [0x14000c4c8], rsi
jne 0x1400076d9
lea rdx, str.CryptMsgGetParam
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14000c4c8], rax
test rax, rax
je 0x140007786
mov rax, qword [0x14000c568]
cmp qword [0x14000c4d0], rsi
jne 0x140007709
lea rdx, str.CryptQueryObject
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14000c4d0], rax
test rax, rax
je 0x140007786
mov rax, qword [0x14000c568]
cmp qword [0x14000c4d8], rsi
jne 0x140007735
lea rdx, str.CertGetNameStringA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14000c4d8], rax
test rax, rax
je 0x140007786
mov rax, qword [0x14000c568]
cmp qword [0x14000c4e0], rsi
jne 0x140007761
lea rdx, str.CryptDecodeObjectEx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14000c4e0], rax
test rax, rax
je 0x140007786
mov rax, qword [0x14000c568]
cmp qword [0x14000c4e8], rsi
jne 0x140007790
lea rdx, str.CertGetIssuerCertificateFromStore
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14000c4e8], rax
test rax, rax
jne 0x140007790
mov edi, 0x7e
jmp 0x140007a8c
mov rbx, qword [0x14000c4d0]
mov rcx, rbx
call qword [fcn.140008580]
xor ecx, ecx
lea rax, [rsp + 0x70]
mov qword [rsp + 0x50], rcx
mov r8d, 0x400
mov qword [rsp + 0x48], rax
mov rdx, r14
lea rax, [rsp + 0x68]
mov qword [rsp + 0x40], rax
lea r9d, [rcx + 2]
lea rax, [rbp - 0x78]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x74]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x70]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
lea ecx, [r9 - 1]
call rbx
mov esi, eax
test eax, eax
jne 0x140007800
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
jmp 0x140007a8c
mov rbx, qword [0x14000c4c8]
mov rcx, rbx
call qword [fcn.140008580]
mov rcx, qword [rsp + 0x70]
lea rax, [rsp + 0x60]
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor r8d, r8d
lea edx, [r9 + 6]
call rbx
mov esi, eax
test eax, eax
jne 0x14000783e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
jmp 0x140007a8c
mov edx, dword [rsp + 0x60]
mov ecx, 0x40
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov r15, rax
test rax, rax
jne 0x140007864
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
xor esi, esi
jmp 0x140007a8c
mov rbx, qword [0x14000c4c8]
mov rcx, rbx
call qword [fcn.140008580]
mov rcx, qword [rsp + 0x70]
lea rax, [rsp + 0x60]
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov r9, r15
lea edx, [r8 + 6]
call rbx
mov esi, eax
test eax, eax
jne 0x1400078a2
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
jmp 0x140007a8c
movups xmm0, xmmword [r15 + 8]
mov rbx, qword [0x14000c4c0]
mov rcx, rbx
movaps xmmword [rbp - 0x30], xmm0
movups xmm0, xmmword [r15 + 0x18]
movups xmmword [rbp - 0x58], xmm0
call qword [fcn.140008580]
mov rcx, qword [rsp + 0x68]
lea rax, [rbp - 0x60]
mov qword [rsp + 0x28], rdi
mov r9d, 0xb0000
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov edx, 0x10001
call rbx
mov r12, rax
test rax, rax
jne 0x1400078fe
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
xor esi, esi
jmp 0x140007a8c
test r13, r13
je 0x14000791f
mov rcx, r12
call fcn.1400062e0
mov dword [r13], eax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
test eax, eax
jne 0x140007a8c
lea rdx, [rbp - 0x80]
mov rcx, r15
call fcn.140004fe0
test eax, eax
jne 0x140007935
xor eax, eax
mov qword [rbp - 0x80], rax
mov rdx, qword [rsp + 0x68]
lea r8, [rbp - 0x80]
mov rcx, r15
call fcn.140007020
test eax, eax
jne 0x140007976
lea rdx, [rbp - 0x80]
mov rcx, r15
call fcn.140006eb0
test eax, eax
jne 0x140007976
xor esi, esi
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
test eax, eax
jne 0x140007a8c
mov edi, 0x80096005
jmp 0x140007a8c
mov ecx, 0x23f0
call fcn.140006540
test eax, eax
jne 0x1400079a3
mov rcx, r14
call fcn.140006380
test eax, eax
je 0x1400079a3
call fcn.1400050c0
test eax, eax
jne 0x1400079a3
lea esi, [rax + 1]
xor edi, edi
jmp 0x140007a8c
mov rax, qword [0x14000c5b8]
test rax, rax
jne 0x1400079c9
xor edx, edx
lea rcx, str.wintrust.dll
call fcn.140006770
mov qword [0x14000c5b8], rax
test rax, rax
je 0x1400079ef
cmp qword [0x14000c538], 0
jne 0x1400079f9
lea rdx, str.WinVerifyTrust
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14000c538], rax
test rax, rax
jne 0x1400079f9
xor esi, esi
lea edi, [rsi + 0x7e]
jmp 0x140007a8c
xor esi, esi
xor ebx, ebx
nop dword [rax]
mov edx, ebx
mov rcx, r14
call fcn.140006dd0
test eax, eax
je 0x140007a19
inc ebx
mov edi, eax
cmp ebx, 1
jb 0x140007a00
jmp 0x140007a1e
mov esi, 1
cmp edi, 0x800b010a
jne 0x140007a8c
mov rbx, qword [0x14000c4e8]
mov rcx, rbx
mov dword [rsp + 0x78], 0
call qword [fcn.140008580]
mov rcx, qword [rsp + 0x68]
lea r9, [rsp + 0x78]
xor r8d, r8d
mov rdx, r12
call rbx
mov r14, rax
test rax, rax
je 0x140007a8c
mov rcx, qword [rax + 0x18]
add rcx, 0x78
call fcn.1400052c0
test eax, eax
je 0x140007a70
mov esi, 1
xor edi, edi
mov rbx, qword [0x14000c4b8]
mov rcx, rbx
call qword [fcn.140008580]
mov rcx, r14
call rbx
jmp 0x140007a8c
mov edi, 2
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov r15, qword [rsp + 0x180]
mov r13, qword [rsp + 0x188]
test r12, r12
je 0x140007abf
mov rbx, qword [0x14000c4b8]
mov rcx, rbx
call qword [fcn.140008580]
mov rcx, r12
call rbx
mov r14, qword [rsp + 0x68]
mov r12, qword [rsp + 0x1d0]
test r14, r14
je 0x140007ae8
mov rbx, qword [0x14000c4b0]
mov rcx, rbx
call qword [fcn.140008580]
xor edx, edx
mov rcx, r14
call rbx
mov r14, qword [rsp + 0x70]
test r14, r14
je 0x140007b07
mov rbx, qword [0x14000c4a8]
mov rcx, rbx
call qword [fcn.140008580]
mov rcx, r14
call rbx
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, esi
mov rcx, qword [rbp + 0x70]
xor rcx, rsp
call fcn.140007b40
add rsp, 0x190
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret