Function at 0x14009e8b0
Capabilities:
Check if file exists

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov rsi, rdx
mov rdi, rcx
mov bpl, 1
lea eax, [r8 - 2]
cmp eax, 2
jae 0x14009e90e
mov ebx, 4
movzx r14d, byte [0x140226768]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test bpl, bpl
je 0x14009e8fd
test r14b, r14b
je 0x14009e8fd
test rax, rax
je 0x14009e93e
test rax, rax
setne al
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
cmp r8d, 6
ja case.0x14009e92e.2
mov ebx, 2
mov eax, r8d
lea rcx, [0x14009ec28]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov ebx, 0x40
jmp case.0x14009e92e.1
mov ebx, 0x20
jmp case.0x14009e92e.1
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x14009e95f
cmp eax, 0x27b
je 0x14009e95f
cmp eax, 8
jne 0x14009ebfc
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x14009e8fd
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x14009e9a9
cmp eax, 0x27b
je 0x14009e9a9
cmp eax, 8
jne 0x14009ebfc
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x14009e8fd
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x14009e9f3
cmp eax, 0x27b
je 0x14009e9f3
cmp eax, 8
jne 0x14009ebfc
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x14009e8fd
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x14009ea3d
cmp eax, 0x27b
je 0x14009ea3d
cmp eax, 8
jne 0x14009ebfc
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x14009e8fd
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x14009ea87
cmp eax, 0x27b
je 0x14009ea87
cmp eax, 8
jne 0x14009ebfc
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x14009e8fd
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x14009ead1
cmp eax, 0x27b
je 0x14009ead1
cmp eax, 8
jne 0x14009ebfc
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x14009e8fd
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x14009eb1b
cmp eax, 0x27b
je 0x14009eb1b
cmp eax, 8
jne 0x14009ebfc
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x14009e8fd
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x14009eb65
cmp eax, 0x27b
je 0x14009eb65
cmp eax, 8
jne 0x14009ebfc
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x14009e8fd
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x14009ebab
cmp eax, 0x27b
je 0x14009ebab
cmp eax, 8
jne 0x14009ebfc
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x14009e8fd
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x14009ebf1
cmp eax, 0x27b
je 0x14009ebf1
cmp eax, 8
jne 0x14009ebfc
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
jmp 0x14009e8fd
mov ebx, 1
xor ebp, ebp
jmp case.0x14009e92e.1
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x4000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
jmp 0x14009e900