Function at 0x140009c50
Capabilities:
Check if file exists
Get file attributes

Disassembly:
mov rax, rsp
push rbp
push r14
push r15
lea rbp, [rax - 0x3f8]
sub rsp, 0x4e0
mov qword [rsp + 0x28], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x14003e010]
xor rax, rsp
mov qword [rbp + 0x3d0], rax
mov r14, rdx
mov rsi, rcx
call fcn.14000b2c0
lea rbx, [rsi + 0x18]
mov qword [rsp + 0x20], rbx
test rbx, rbx
je 0x140009cb4
mov rcx, qword [rbx]
test rcx, rcx
je 0x140009cb4
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
nop
mov rdi, qword [rsi]
xor r15d, r15d
test rdi, rdi
jne 0x14000a039
lea rdx, [rbp - 0x70]
call fcn.14000a7d0
nop
lea rdi, [rbp - 0x70]
cmp qword [rbp - 0x58], 8
jb 0x140009ce5
mov rdi, qword [rbp - 0x70]
test rdi, rdi
je 0x140009dea
cmp word [rdi], 0
je 0x140009dea
xor edx, edx
mov r8d, 0x412
lea rcx, [rbp - 0x50]
call fcn.140019d60
lea rcx, [rbp - 0x50]
sub rcx, rdi
nop word [rax + rax]
movzx eax, word [rdi]
mov word [rcx + rdi], ax
lea rdi, [rdi + 2]
test ax, ax
jne 0x140009d10
mov edx, 0x5c
lea rcx, [rbp - 0x50]
call fcn.140019a7c
mov rdi, rax
test rax, rax
jne 0x140009d4a
lea edx, [rax + 0x2f]
lea rcx, [rbp - 0x50]
call fcn.140019a7c
mov rdi, rax
test rax, rax
je 0x140009d4f
mov word [rdi + 2], r15w
lea rcx, [rbp - 0x50]
sub rcx, 2
nop word [rax + rax]
lea rcx, [rcx + 2]
cmp word [rcx], 0
jne 0x140009d60
movups xmm0, xmmword [str.vcruntime140.dll]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [0x140034e00]
movups xmmword [rcx + 0x10], xmm1
movzx eax, word [0x140034e10]
mov word [rcx + 0x20], ax
lea rcx, [rbp - 0x50]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsi + 8], rax
test rdi, rdi
je 0x140009da2
mov word [rdi + 2], r15w
lea rcx, [rbp - 0x50]
sub rcx, 2
nop word [rax + rax]
lea rcx, [rcx + 2]
cmp word [rcx], 0
jne 0x140009db0
movups xmm0, xmmword [str.msvcp140.dll]
movups xmmword [rcx], xmm0
movsd xmm1, qword [0x140034e28]
movsd qword [rcx + 0x10], xmm1
movzx eax, word [0x140034e30]
mov word [rcx + 0x18], ax
lea rcx, [rbp - 0x50]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsi + 0x10], rax
lea rdx, [rsp + 0x50]
call fcn.14000a8b0
nop
lea r8, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae r8, qword [rsp + 0x50]
mov rdx, r14
call fcn.140009330
test al, al
jne 0x140009e1a
mov rdi, r15
jmp 0x140009f95
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x140035b60]
movdqu xmmword [rsp + 0x40], xmm1
mov word [rsp + 0x30], r15w
mov r8d, 0xe
lea rdx, str.2345PdfApp.dll
lea rcx, [rsp + 0x30]
call fcn.140002b40
nop
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x70]
call fcn.140007da0
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x140009ea6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009ea1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a086
call fcn.14001845c
movdqa xmm0, xmmword [0x140035b60]
movdqu xmmword [rsp + 0x40], xmm0
mov word [rsp + 0x30], r15w
lea rdi, [rsp + 0x70]
cmp qword [rbp - 0x78], 8
jb 0x140009ed0
mov rdi, qword [rsp + 0x70]
test rdi, rdi
je 0x140009f3e
cmp qword [rsi], 0
jne 0x140009f3e
call fcn.140008ee0
cmp qword [rax], 0
jne 0x140009eec
mov rdx, r14
mov rcx, rax
call fcn.140008f80
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x140009f1d
test al, 0x10
jne 0x140009f1d
call fcn.14000c530
xor r8d, r8d
mov rdx, rdi
mov rcx, rax
call fcn.14000c620
test al, al
jne 0x140009f22
mov rdx, rdi
call fcn.140009040
mov rdi, r15
jmp 0x140009f41
xor edx, edx
lea r8d, [rdx + 8]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov rdi, rax
test rax, rax
je 0x140009f1d
mov qword [rsi], rax
jmp 0x140009f41
mov rdi, qword [rsi]
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x140009f82
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009f7d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a08c
call fcn.14001845c
movdqa xmm0, xmmword [0x140035b60]
movdqu xmmword [rbp - 0x80], xmm0
mov word [rsp + 0x70], r15w
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x140009fd7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009fd2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a092
call fcn.14001845c
movdqa xmm0, xmmword [0x140035b60]
movdqu xmmword [rsp + 0x60], xmm0
mov word [rsp + 0x50], r15w
mov rdx, qword [rbp - 0x58]
cmp rdx, 8
jb 0x14000a027
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a022
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a080
call fcn.14001845c
movdqa xmm0, xmmword [0x140035b60]
movdqu xmmword [rbp - 0x60], xmm0
mov word [rbp - 0x70], r15w
test rbx, rbx
je 0x14000a051
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000a04c
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov qword [rsp + 0x20], r15
mov rax, rdi
mov rcx, qword [rbp + 0x3d0]
xor rcx, rsp
call fcn.140018190
lea r11, [rsp + 0x4e0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.14001c324
nop
call fcn.14001c324
nop
call fcn.14001c324
nop
call fcn.14001c324
int3