Function at 0x140227490
Capabilities:
Check if file exists

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov rsi, rdx
mov rdi, rcx
mov bpl, 1
lea eax, [r8 - 2]
cmp eax, 2
jae 0x1402274ee
mov ebx, 4
movzx r14d, byte [0x140468d38]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test bpl, bpl
je 0x1402274dd
test r14b, r14b
je 0x1402274dd
test rax, rax
je 0x140227517
test rax, rax
setne al
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
cmp r8d, 6
ja case.0x14022750e.2
mov ebx, 2
mov eax, r8d
lea rcx, [0x140429404]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov ebx, 0x40
jmp case.0x14022750e.1
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x140227538
cmp eax, 0x27b
je 0x140227538
cmp eax, 8
jne 0x1402277d1
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x1402274dd
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x14022757e
cmp eax, 0x27b
je 0x14022757e
cmp eax, 8
jne 0x1402277d1
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x1402274dd
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x1402275c8
cmp eax, 0x27b
je 0x1402275c8
cmp eax, 8
jne 0x1402277d1
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x1402274dd
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x140227612
cmp eax, 0x27b
je 0x140227612
cmp eax, 8
jne 0x1402277d1
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x1402274dd
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x14022765c
cmp eax, 0x27b
je 0x14022765c
cmp eax, 8
jne 0x1402277d1
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x1402274dd
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x1402276a6
cmp eax, 0x27b
je 0x1402276a6
cmp eax, 8
jne 0x1402277d1
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x1402274dd
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x1402276f0
cmp eax, 0x27b
je 0x1402276f0
cmp eax, 8
jne 0x1402277d1
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x1402274dd
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x14022773a
cmp eax, 0x27b
je 0x14022773a
cmp eax, 8
jne 0x1402277d1
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
ror byte [rdi], 0x85
jp 0x14022775e
invalid
invalid
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x140227780
cmp eax, 0x27b
je 0x140227780
cmp eax, 8
jne 0x1402277d1
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x1000
mov r9d, ebx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
test rax, rax
jne 0x1402274dd
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [rax - 0x5ae]
cmp ecx, 2
jb 0x1402277c6
cmp eax, 0x27b
je 0x1402277c6
cmp eax, 8
jne 0x1402277d1
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
jmp 0x1402274dd
mov ebx, 1
xor ebp, ebp
jmp case.0x14022750e.1
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x4000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test eax, eax
jmp 0x1402274e0
mov ebx, 0x20
jmp case.0x14022750e.1