Function at 0x140320e40
Capabilities:
Check if file exists

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov rsi, rdx
mov rdi, rcx
mov bpl, 1
lea eax, [r8 - 2]
cmp eax, 2
jae 0x140320e9e
mov ebx, 4
movzx r14d, byte [0x14041fa68]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test bpl, bpl
je 0x140320e8d
test r14b, r14b
je 0x140320e8d
test rax, rax
je 0x140320ec7
test rax, rax
setne al
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
cmp r8d, 6
ja case.0x140320ebe.2
mov ebx, 2
mov eax, r8d
lea rcx, [0x1403ea5fc]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov ebx, 0x40
jmp case.0x140320ebe.1
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x140320ee8
cmp eax, 0x27b
je 0x140320ee8
cmp eax, 8
jne 0x140321181
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x140320e8d
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x140320f2e
cmp eax, 0x27b
je 0x140320f2e
cmp eax, 8
jne 0x140321181
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x140320e8d
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x140320f78
cmp eax, 0x27b
je 0x140320f78
cmp eax, 8
jne 0x140321181
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x140320e8d
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x140320fc2
cmp eax, 0x27b
je 0x140320fc2
cmp eax, 8
jne 0x140321181
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x140320e8d
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x14032100c
cmp eax, 0x27b
je 0x14032100c
cmp eax, 8
jne 0x140321181
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x140320e8d
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x140321056
cmp eax, 0x27b
je 0x140321056
cmp eax, 8
jne 0x140321181
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x140320e8d
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x1403210a0
cmp eax, 0x27b
je 0x1403210a0
cmp eax, 8
jne 0x140321181
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x140320e8d
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x1403210ea
cmp eax, 0x27b
je 0x1403210ea
cmp eax, 8
jne 0x140321181
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x140320e8d
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x140321130
cmp eax, 0x27b
je 0x140321130
cmp eax, 8
jne 0x140321181
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x140320e8d
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x140321176
cmp eax, 0x27b
je 0x140321176
cmp eax, 8
jne 0x140321181
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
jmp 0x140320e8d
mov ebx, 1
xor ebp, ebp
jmp case.0x140320ebe.1
mov ebx, 0x20
jmp case.0x140320ebe.1
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x4000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
jmp 0x140320e90