Function at 0x1400ff960
Capabilities:
Check if file exists

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov rsi, rdx
mov rdi, rcx
mov bpl, 1
lea eax, [r8 - 2]
cmp eax, 2
jae 0x1400ff9be
mov ebx, 4
movzx r14d, byte [0x1402348c8]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test bpl, bpl
je 0x1400ff9ad
test r14b, r14b
je 0x1400ff9ad
test rax, rax
je 0x1400ff9e7
test rax, rax
setne al
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
cmp r8d, 6
ja case.0x1400ff9de.2
mov ebx, 2
mov eax, r8d
lea rcx, [0x1401fe36c]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov ebx, 0x40
jmp case.0x1400ff9de.1
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x1400ffa08
cmp eax, 0x27b
je 0x1400ffa08
cmp eax, 8
jne 0x1400ffca1
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x1400ff9ad
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x1400ffa4e
cmp eax, 0x27b
je 0x1400ffa4e
cmp eax, 8
jne 0x1400ffca1
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x1400ff9ad
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x1400ffa98
cmp eax, 0x27b
je 0x1400ffa98
cmp eax, 8
jne 0x1400ffca1
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x1400ff9ad
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x1400ffae2
cmp eax, 0x27b
je 0x1400ffae2
cmp eax, 8
jne 0x1400ffca1
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x1400ff9ad
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x1400ffb2c
cmp eax, 0x27b
je 0x1400ffb2c
cmp eax, 8
jne 0x1400ffca1
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x1400ff9ad
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x1400ffb76
cmp eax, 0x27b
je 0x1400ffb76
cmp eax, 8
jne 0x1400ffca1
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x1400ff9ad
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x1400ffbc0
cmp eax, 0x27b
je 0x1400ffbc0
cmp eax, 8
jne 0x1400ffca1
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x1400ff9ad
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x1400ffc0a
cmp eax, 0x27b
je 0x1400ffc0a
cmp eax, 8
jne 0x1400ffca1
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
ror byte [rdi], 0x85
jp 0x1400ffc2e
invalid
invalid
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x1400ffc50
cmp eax, 0x27b
je 0x1400ffc50
cmp eax, 8
jne 0x1400ffca1
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x1400ff9ad
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x1400ffc96
cmp eax, 0x27b
je 0x1400ffc96
cmp eax, 8
jne 0x1400ffca1
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
jmp 0x1400ff9ad
mov ebx, 1
xor ebp, ebp
jmp case.0x1400ff9de.1
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x4000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
jmp 0x1400ff9b0
mov ebx, 0x20
jmp case.0x1400ff9de.1