Function at 0x14006f630
Capabilities:
Check if file exists

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], r8
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
xor r14d, r14d
mov r15d, r9d
and dword [rsp + 0x44], r14d
mov r12d, edx
mov esi, r9d
test r8, r8
jne 0x14006f681
test r9d, r9d
je 0x14006f681
mov ecx, 0x6f8
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_SetLastError]
nop dword [rax + rax]
xor eax, eax
jmp 0x14006f843
call sym.spoolsv.exe_PrvWaitForSpoolerInitialization
mov r13, qword [0x1400c02d8]
xor edx, edx
mov rdi, qword [rsp + 0xb8]
mov eax, edx
mov rbx, qword [rsp + 0xb0]
mov ebp, edx
mov dword [rsp + 0x40], edx
test r13, r13
je 0x14006f7dc
mov rcx, qword [rsp + 0xa0]
mov dword [rdi], edx
mov dword [rbx], edx
movabs r10, 0xd08c3e9f3ed03a70
mov rax, qword [r13 + 0x150]
mov r8, rcx
mov rcx, qword [rsp + 0x90]
mov r9d, esi
mov qword [rsp + 0x28], rdi
mov edx, r12d
mov qword [rsp + 0x20], rbx
call qword [case.0x140007f48.0]
xor edx, edx
mov dword [rsp + 0xa8], eax
mov ecx, eax
test eax, eax
jne 0x14006f798
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov ecx, eax
cmp r12d, 2
jne 0x14006f756
add eax, 0xffffff85
cmp eax, 1
ja 0x14006f756
mov r8, qword [rsp + 0xa0]
mov r9d, esi
mov rdx, qword [rsp + 0x90]
mov rcx, r13
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
call fcn.14006ed5c
xor edx, edx
test eax, eax
jne 0x14006f78e
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov ecx, eax
xor edx, edx
test ecx, ecx
je 0x14006f768
mov dword [rdi], edx
mov r14d, ecx
cmp ecx, 0x7a
je 0x14006f768
mov dword [rbx], edx
mov ecx, dword [rsp + 0xa8]
mov eax, dword [rsp + 0x40]
add eax, dword [rdi]
mov dword [rsp + 0x40], eax
mov eax, r12d
sub eax, 1
je 0x14006f7a2
cmp eax, 1
jne 0x14006f7ef
mov eax, dword [rdi]
shl rax, 5
jmp 0x14006f7a8
mov dword [rsp + 0x44], 1
jmp 0x14006f768
mov dword [rsp + 0x44], 1
jmp 0x14006f76f
mov eax, dword [rdi]
shl rax, 3
add ebp, dword [rbx]
cmp ecx, 2
je 0x14006f7d8
mov rcx, qword [rsp + 0xa0]
mov r13, qword [r13]
add rcx, rax
mov eax, esi
mov qword [rsp + 0xa0], rcx
sub esi, dword [rbx]
cmp dword [rbx], eax
cmova esi, edx
test r13, r13
jne 0x14006f6b8
mov eax, dword [rsp + 0x40]
mov dword [rbx], ebp
mov dword [rdi], eax
cmp ebp, r15d
jbe 0x14006f82a
mov ecx, 0x7a
jmp 0x14006f66e
mov rcx, qword [0x1400be2f8]
lea rax, [0x1400be2f8]
cmp rcx, rax
je 0x14006f820
test byte [rcx + 0x44], 0x20
je 0x14006f820
mov rcx, qword [rcx + 0x38]
lea r8, [0x1400b3660]
mov edx, 0xa
mov r9d, r12d
call fcn.14002c27c
mov ecx, 0x7c
jmp 0x14006f66e
cmp dword [rsp + 0x44], edx
je 0x14006f85c
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_SetLastError]
nop dword [rax + rax]
mov eax, 1
mov rbx, qword [rsp + 0x98]
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
test r14d, r14d
je 0x14006f83e
mov ecx, r14d
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_SetLastError]
nop dword [rax + rax]
mov rcx, qword [0x1400be2f8]
lea rax, [0x1400be2f8]
cmp rcx, rax
je 0x14006f67a
test byte [rcx + 0x44], 0x20
je 0x14006f67a
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov rcx, qword [0x1400be2f8]
lea r8, [0x1400b3660]
mov edx, 0xb
mov r9d, eax
mov rcx, qword [rcx + 0x38]
call fcn.14002c238
jmp 0x14006f67a