Function at 0x1400f9850
Capabilities:
Check if file exists

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xd8]
sub rsp, 0x1d8
mov rax, qword [0x14057b900]
xor rax, rsp
mov qword [rbp + 0xc0], rax
mov r12, r9
mov r14, r8
mov rdi, rdx
mov r15, rcx
xor r13d, r13d
mov dword [rsp + 0x40], r13d
mov qword [r9], r13
mov byte [r8], r13b
test rdx, rdx
jne 0x1400f98a3
xor al, al
jmp 0x1400f9c38
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x80], xmm1
mov qword [rbp - 0x70], r13
mov ebx, r13d
cmp dword [rdx + 0x78], r13d
jbe 0x1400f992a
nop dword [rax + rax]
mov eax, ebx
lea rcx, [rax + rax*2]
mov rax, qword [rdi + 0x80]
lea rsi, [rax + rcx*8]
lea rdx, str.1.2.840.113549.1.9.6
mov rcx, qword [rsi]
call qword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
je 0x1400f98ee
inc ebx
cmp ebx, dword [rdi + 0x78]
jb 0x1400f98c0
jmp 0x1400f992a
mov byte [r14], 1
mov r9, qword [rsi + 0x10]
lea rax, [rbp - 0x80]
mov qword [rsp + 0x30], rax
mov eax, dword [r9]
mov dword [rsp + 0x20], eax
mov r9, qword [r9 + 8]
mov r8d, 0x1f4
mov rcx, r15
call fcn.1400f9300
test al, al
jne 0x1400f992a
mov rcx, qword [rbp - 0x80]
cmp rcx, qword [rbp - 0x78]
je 0x1400f992a
mov qword [rbp - 0x78], rcx
mov rax, qword [rbp - 0x78]
xor r14b, r14b
cmp qword [rbp - 0x80], rax
je 0x1400f9bfe
mov rdi, qword [rbp - 0x80]
mov ebx, r13d
cmp dword [rdi + 0x68], r13d
jbe 0x1400f9bfe
nop dword [rax]
mov eax, ebx
lea rcx, [rax + rax*2]
mov rax, qword [rdi + 0x70]
lea rsi, [rax + rcx*8]
mov rdx, qword [rsi]
lea rcx, str.1.2.840.113549.1.9.5
call qword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
je 0x1400f997e
inc ebx
cmp ebx, dword [rdi + 0x68]
jb 0x1400f9950
jmp 0x1400f9bfe
mov dword [rbp - 0x68], 8
mov r8, qword [rsi + 0x10]
lea rax, [rbp - 0x68]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], r13d
mov r9d, dword [r8]
mov r8, qword [r8 + 8]
lea rdx, str.1.2.840.113549.1.9.5
mov ecx, 0x10001
call qword [sym.imp.CRYPT32.dll_CryptDecodeObject]
test eax, eax
jne 0x1400f9bfb
mov rdi, qword [r15 + 8]
test rdi, rdi
je 0x1400f9bfe
mov rax, qword [rdi]
mov rsi, qword [rax + 0x20]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov edx, eax
lea rcx, [rbp - 0x60]
call fcn.1400f4110
nop
xor edx, edx
mov r8d, 0xf8
lea rcx, [rbp - 0x40]
call fcn.1403ec370
lea rcx, [rbp - 0x40]
call fcn.1400252f0
nop
lea rdx, [rbp - 0x60]
cmp qword [rbp - 0x48], 7
cmova rdx, qword [rbp - 0x60]
mov r8, qword [rbp - 0x50]
lea rcx, [rbp - 0x30]
call fcn.14001df00
lea rdx, str.__0x
mov rcx, rax
call fcn.140023f90
mov rcx, qword [rax]
movsxd rdx, dword [rcx + 4]
mov ecx, dword [rdx + rax + 0x18]
and ecx, 0xfffff9ff
bts ecx, 0xb
mov dword [rdx + rax + 0x18], ecx
mov edx, ebx
mov rcx, rax
call fcn.14008ee00
mov rcx, rax
lea rdx, [0x1404e22dc]
call fcn.140023f90
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x60], 7
mov word [rsp + 0x48], r13w
mov dword [rsp + 0x40], 0x12
mov rcx, qword [rbp + 0x48]
mov eax, ecx
and al, 0x22
cmp al, 2
je 0x1400f9aab
mov rax, qword [rbp + 0x18]
mov rdx, qword [rax]
test rdx, rdx
je 0x1400f9aab
mov rax, qword [rbp - 8]
mov r9, qword [rax]
cmp rdx, qword [rbp + 0x40]
cmovb rdx, qword [rbp + 0x40]
jmp 0x1400f9ace
test cl, 4
jne 0x1400f9b09
mov rax, qword [rbp + 0x10]
mov rdx, qword [rax]
test rdx, rdx
je 0x1400f9b09
mov rax, qword [rbp - 0x10]
mov r9, qword [rax]
mov rax, qword [rbp + 0x28]
movsxd rcx, dword [rax]
lea rdx, [rdx + rcx*2]
sub rdx, r9
mov rax, r9
sar rdx, 1
test rax, rax
je 0x1400f9b09
lea rcx, [rsp + 0x48]
cmp rdx, 7
ja 0x1400f9b03
mov qword [rsp + 0x58], rdx
lea rbx, [rdx + rdx]
mov r8, rbx
mov rdx, r9
call fcn.1403ebbf0
mov word [rsp + rbx + 0x48], r13w
jmp 0x1400f9b09
call fcn.140023ce0
nop
lea rcx, [rbp - 0x40]
call fcn.140024270
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 7
jbe 0x1400f9b53
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f9b4e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f9c61
call fcn.14014f510
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], r13w
lea rdx, [rsp + 0x48]
cmp qword [rsp + 0x60], 7
cmova rdx, qword [rsp + 0x48]
lea rax, [r15 + 0x10]
cmp qword [rax + 0x18], 7
jbe 0x1400f9b83
mov rax, qword [rax]
mov qword [rsp + 0x38], rdx
lea rcx, str.CryptDecodeObject_signing_time_failed__last_error_ls
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 2
mov r9d, 0x24a
lea r8, str.D:JenkinsworkspaceN_MBCommon_vs2022_srcmbcommonWVTSignatureVerifier.cpp
lea rdx, str.mb::common::crypto::WVTSignatureVerifier::GetRSATimestamp
mov rcx, rdi
call rsi
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 7
jbe 0x1400f9bfe
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f9bf4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f9c67
call fcn.14014f510
jmp 0x1400f9bfe
mov r14b, 1
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x1400f9c34
mov rdx, qword [rbp - 0x70]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f9c2f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f9c5b
call fcn.14014f510
movzx eax, r14b
mov rcx, qword [rbp + 0xc0]
xor rcx, rsp
call fcn.14014f4f0
add rsp, 0x1d8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.14015fa1c
nop
call fcn.14015fa1c
nop
call fcn.14015fa1c
int3