Function at 0x140075b30
Capabilities:
Check if file exists

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], r8
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
xor r14d, r14d
mov r15d, r9d
and dword [rsp + 0x44], r14d
mov r12d, edx
mov esi, r9d
test r8, r8
jne 0x140075b81
test r9d, r9d
je 0x140075b81
mov ecx, 0x6f8
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_SetLastError]
nop dword [rax + rax]
xor eax, eax
jmp 0x140075d43
call sym.spoolsv.exe_PrvWaitForSpoolerInitialization
mov r13, qword [0x1400ca100]
xor edx, edx
mov rdi, qword [rsp + 0xb8]
mov eax, edx
mov rbx, qword [rsp + 0xb0]
mov ebp, edx
mov dword [rsp + 0x40], edx
test r13, r13
je 0x140075cdc
mov rcx, qword [rsp + 0xa0]
mov dword [rdi], edx
mov dword [rbx], edx
movabs r10, 0xd08c3e9f3ed03a70
mov rax, qword [r13 + 0x150]
mov r8, rcx
mov rcx, qword [rsp + 0x90]
mov r9d, esi
mov qword [rsp + 0x28], rdi
mov edx, r12d
mov qword [rsp + 0x20], rbx
call qword [0x1400a9400]
xor edx, edx
mov dword [rsp + 0xa8], eax
mov ecx, eax
test eax, eax
jne 0x140075c98
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov ecx, eax
cmp r12d, 2
jne 0x140075c56
add eax, 0xffffff85
cmp eax, 1
ja 0x140075c56
mov r8, qword [rsp + 0xa0]
mov r9d, esi
mov rdx, qword [rsp + 0x90]
mov rcx, r13
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
call fcn.140075254
xor edx, edx
test eax, eax
jne 0x140075c8e
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov ecx, eax
xor edx, edx
test ecx, ecx
je 0x140075c68
mov dword [rdi], edx
mov r14d, ecx
cmp ecx, 0x7a
je 0x140075c68
mov dword [rbx], edx
mov ecx, dword [rsp + 0xa8]
mov eax, dword [rsp + 0x40]
add eax, dword [rdi]
mov dword [rsp + 0x40], eax
mov eax, r12d
sub eax, 1
je 0x140075ca2
cmp eax, 1
jne 0x140075cef
mov eax, dword [rdi]
shl rax, 5
jmp 0x140075ca8
mov dword [rsp + 0x44], 1
jmp 0x140075c68
mov dword [rsp + 0x44], 1
jmp 0x140075c6f
mov eax, dword [rdi]
shl rax, 3
add ebp, dword [rbx]
cmp ecx, 2
je 0x140075cd8
mov rcx, qword [rsp + 0xa0]
mov r13, qword [r13]
add rcx, rax
mov eax, esi
mov qword [rsp + 0xa0], rcx
sub esi, dword [rbx]
cmp dword [rbx], eax
cmova esi, edx
test r13, r13
jne 0x140075bb8
mov eax, dword [rsp + 0x40]
mov dword [rbx], ebp
mov dword [rdi], eax
cmp ebp, r15d
jbe 0x140075d2a
mov ecx, 0x7a
jmp 0x140075b6e
mov rcx, qword [0x1400c82a8]
lea rax, [0x1400c82a8]
cmp rcx, rax
je 0x140075d20
test byte [rcx + 0x44], 0x20
je 0x140075d20
mov rcx, qword [rcx + 0x38]
lea r8, [0x1400bd218]
mov edx, 0xa
mov r9d, r12d
call fcn.140016ccc
mov ecx, 0x7c
jmp 0x140075b6e
cmp dword [rsp + 0x44], edx
je 0x140075d5c
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_SetLastError]
nop dword [rax + rax]
mov eax, 1
mov rbx, qword [rsp + 0x98]
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
test r14d, r14d
je 0x140075d3e
mov ecx, r14d
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_SetLastError]
nop dword [rax + rax]
mov rcx, qword [0x1400c82a8]
lea rax, [0x1400c82a8]
cmp rcx, rax
je 0x140075b7a
test byte [rcx + 0x44], 0x20
je 0x140075b7a
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov rcx, qword [0x1400c82a8]
lea r8, [0x1400bd218]
mov edx, 0xb
mov r9d, eax
mov rcx, qword [rcx + 0x38]
call fcn.140016c88
jmp 0x140075b7a