Function at 0x14004fb40
Capabilities:
Check if file exists

Disassembly:
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov ebx, r8d
mov rsi, rdx
mov rdi, rcx
lea eax, [rbx - 3]
cmp eax, 2
jae 0x14004fb97
mov ebx, 4
movzx ebp, byte [0x1400f65b0]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
sete cl
and cl, bpl
cmp cl, 1
je 0x14004fbb9
test rax, rax
setne al
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
ret
cmp ebx, 8
ja case.0x14004fbb0.3
mov eax, ebx
lea rcx, [0x1400d4bf8]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov ebx, 0x40
jmp case.0x14004fbb0.2
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x14004fbda
cmp eax, 0x27b
je 0x14004fbda
cmp eax, 8
je 0x14004fbda
xor eax, eax
jmp 0x14004fb88
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x14004fb88
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x14004fc1c
cmp eax, 0x27b
je 0x14004fc1c
cmp eax, 8
jne 0x14004fbd6
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x14004fb88
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x14004fc66
cmp eax, 0x27b
je 0x14004fc66
cmp eax, 8
jne 0x14004fbd6
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x14004fb88
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x14004fcb0
cmp eax, 0x27b
je 0x14004fcb0
cmp eax, 8
jne 0x14004fbd6
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x14004fb88
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x14004fcfa
cmp eax, 0x27b
je 0x14004fcfa
cmp eax, 8
jne 0x14004fbd6
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x14004fb88
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x14004fd44
cmp eax, 0x27b
je 0x14004fd44
cmp eax, 8
jne 0x14004fbd6
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x14004fb88
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x14004fd8e
cmp eax, 0x27b
je 0x14004fd8e
cmp eax, 8
jne 0x14004fbd6
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x14004fb88
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x14004fdd8
cmp eax, 0x27b
je 0x14004fdd8
cmp eax, 8
jne 0x14004fbd6
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x14004fb88
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x14004fe22
cmp eax, 0x27b
je 0x14004fe22
cmp eax, 8
jne 0x14004fbd6
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x14004fb88
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x14004fe6c
cmp eax, 0x27b
je 0x14004fe6c
cmp eax, 8
jne 0x14004fbd6
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14004fbd6
int3
mov ebx, 0x20
jmp case.0x14004fbb0.2
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x4000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
jmp 0x14004fb8b