Function at 0x140018f30
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push rbp
push rbx
push rdi
lea rbp, [rsp - 0x60]
sub rsp, 0x160
mov qword [rbp - 0x40], 0xfffffffffffffffe
mov rax, qword [0x1403ad830]
xor rax, rsp
mov qword [rbp + 0x50], rax
mov rdi, r8
mov rbx, rdx
lea rdx, [rbp]
call fcn.1400222a0
nop
lea rdx, [rbp - 0x28]
lea rcx, [rbp]
call fcn.1400222a0
nop
lea rcx, [rbp - 0x28]
call fcn.14002aa20
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x140018fa5
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop
lea rcx, [rbp - 0x28]
call fcn.14001d440
mov ebx, 0xffffffff
jmp 0x1400191a6
lea rcx, [rbp - 0x28]
call fcn.14001d440
movdqa xmm0, xmmword [0x1402d0510]
movdqu xmmword [rbp - 0x18], xmm0
mov byte [rbp - 0x28], 0
mov r8d, SQLFreeStmt
lea rdx, str.WinVerifyTrust
lea rcx, [rbp - 0x28]
call fcn.140004c40
nop
lea rdx, str.Wintrust.dll
lea rcx, [rbp + 0x28]
call fcn.14001c840
nop
lea r8, [rbp - 0x28]
lea rdx, [rbp + 0x28]
lea rcx, [rsp + 0x20]
call fcn.14004ba50
nop
lea rcx, [rbp + 0x28]
call fcn.14001d440
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, 0x10
jb 0x14001903f
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001903a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400191c8
call fcn.140283144
movdqa xmm0, xmmword [0x1402d0510]
movdqu xmmword [rbp - 0x18], xmm0
mov byte [rbp - 0x28], 0
cmp qword [rsp + 0x20], 0
jne 0x140019062
mov ebx, 0xffffff9c
jmp 0x14001919b
xor eax, eax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rax
mov dword [rsp + 0x30], 0x40
mov rcx, rbx
call fcn.14002aa20
mov qword [rsp + 0x38], rax
lea rcx, [rbp]
call fcn.14002aa20
mov qword [rsp + 0x48], rax
mov rcx, rdi
call fcn.14002aa20
mov qword [rsp + 0x40], rax
mov dword [rbp - 0x38], 0xaac56b
mov dword [rbp - 0x34], 0x11d0cd44
mov dword [rbp - 0x30], 0xc000c28c
mov dword [rbp - 0x2c], 0xee95c24f
xor ebx, ebx
mov qword [rsp + 0x70], 0x50
mov qword [rbp - 0x70], 2
mov qword [rbp - 0x60], rbx
mov qword [rbp - 0x48], 0x100
mov qword [rsp + 0x78], rbx
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], 2
mov qword [rbp - 0x58], rbx
mov qword [rbp - 0x50], rbx
lea rax, [rsp + 0x30]
mov qword [rbp - 0x68], rax
lea r8, [rsp + 0x70]
lea rdx, [rbp - 0x38]
xor ecx, ecx
call qword [rsp + 0x20]
cmp eax, 0x800b0101
jg 0x14001917d
je 0x14001919b
cmp eax, 0x80092026
je 0x140019176
cmp eax, 0x800b0004
je 0x14001916f
cmp eax, 0x800b0100
jne 0x14001918f
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x800b0100
je 0x140019168
cmp eax, 0x800b0003
je 0x140019168
cmp eax, 0x800b0001
je 0x140019168
mov ebx, 0xfffffffd
jmp 0x14001919b
mov ebx, 0xfffffffe
jmp 0x14001919b
mov ebx, 0xfffffffb
jmp 0x14001919b
mov ebx, 0xfffffffa
jmp 0x14001919b
cmp eax, 0x800b010a
je 0x14001919b
cmp eax, 0x800b0111
je 0x140019196
test eax, eax
je 0x14001919b
mov ebx, 0xfffffff9
jmp 0x14001919b
mov ebx, 0xfffffffc
lea rcx, [rsp + 0x20]
call fcn.14004bab0
nop
lea rcx, [rbp]
call fcn.14001d440
mov eax, ebx
mov rcx, qword [rbp + 0x50]
xor rcx, rsp
call fcn.140283120
add rsp, 0x160
pop rdi
pop rbx
pop rbp
ret
call fcn.140287d84
nop
int3