Function at 0x10003fdd4
Capabilities:
Check if file exists

Disassembly:
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x48
xor esi, esi
mov ebx, r9d
mov r12d, r9d
and dword [rsp + 0xa0], esi
mov rdi, r8
mov dword [rsp + 0xa8], ebx
test r8, r8
jne 0x10003fe22
test r9d, r9d
je 0x10003fe22
mov ecx, 0x6f8
call qword [sym.imp.KERNEL32.dll_SetLastError]
xor eax, eax
jmp 0x10004003a
call sym.spoolsv.exe_PrvWaitForSpoolerInitialization
mov rbp, qword [0x1000832b0]
mov r15, qword [rsp + 0xb8]
mov r13, qword [rsp + 0xb0]
xor eax, eax
xor r14d, r14d
mov dword [rsp + 0x30], eax
test rbp, rbp
je 0x10004001d
and dword [r15], 0
mov edx, dword [rsp + 0x98]
mov rcx, qword [rsp + 0x90]
and dword [r13], 0
mov r9d, ebx
mov r8, rdi
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r13
call qword [rbp + 0x150]
mov edx, eax
mov dword [rsp + 0x34], eax
test eax, eax
jne 0x10003ff11
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp dword [rsp + 0x98], 2
mov ebx, eax
jne 0x10003fedb
cmp eax, 0x7c
je 0x10003fea8
cmp eax, 0x7b
jne 0x10003fedb
mov r9d, dword [rsp + 0xa8]
mov rdx, qword [rsp + 0x90]
mov r8, rdi
mov rcx, rbp
mov qword [rsp + 0x28], r15
xor ebx, ebx
mov qword [rsp + 0x20], r13
call fcn.10003fce8
test eax, eax
jne 0x10003ff03
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov ecx, dword [rsp + 0xa0]
mov edx, dword [rsp + 0x34]
test ebx, ebx
je 0x10003ff1f
and dword [r15], 0
mov esi, ebx
cmp ebx, 0x7a
mov ebx, dword [rsp + 0xa8]
je 0x10003ff26
and dword [r13], 0
jmp 0x10003ff26
mov ecx, 1
mov dword [rsp + 0xa0], ecx
jmp 0x10003fee2
mov ecx, 1
mov dword [rsp + 0xa0], ecx
jmp 0x10003ff26
mov ebx, dword [rsp + 0xa8]
mov eax, dword [rsp + 0x30]
mov r8d, dword [rsp + 0x98]
add eax, dword [r15]
mov dword [rsp + 0x30], eax
mov eax, r8d
sub eax, 1
je 0x10003ff56
cmp eax, 1
jne 0x10003ffe2
mov eax, dword [r15]
shl rax, 5
add rdi, rax
jmp 0x10003ff5d
mov eax, dword [r15]
lea rdi, [rdi + rax*8]
cmp dword [r13], ebx
ja 0x10003ff69
sub ebx, dword [r13]
jmp 0x10003ff6b
xor ebx, ebx
add r14d, dword [r13]
mov dword [rsp + 0xa8], ebx
cmp edx, 2
je 0x10003ff88
mov rbp, qword [rbp]
test rbp, rbp
jne 0x10003fe50
mov eax, dword [rsp + 0x30]
mov dword [r13], r14d
mov dword [r15], eax
cmp r14d, r12d
jbe 0x100040029
mov ecx, 0x7a
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, qword [0x100083210]
lea rax, [0x100083210]
cmp rcx, rax
je 0x10003fe1b
test byte [rcx + 0x1c], 1
je 0x10003fe1b
mov rcx, qword [rcx + 0x10]
lea r8, [0x10007d190]
mov edx, 0xb
call fcn.10001c468
jmp 0x10003fe1b
mov rcx, qword [0x100083210]
lea rax, [0x100083210]
cmp rcx, rax
je 0x100040013
test byte [rcx + 0x1c], 1
je 0x100040013
mov rcx, qword [rcx + 0x10]
mov r9d, r8d
lea r8, [0x10007d190]
mov edx, 0xa
call fcn.10001c48c
mov ecx, 0x7c
jmp 0x10003fe15
mov ecx, dword [rsp + 0xa0]
jmp 0x10003ff8c
test ecx, ecx
je 0x10004004b
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, 1
add rsp, 0x48
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
test esi, esi
je 0x100040035
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, qword [0x100083210]
lea rax, [0x100083210]
cmp rcx, rax
je 0x10003fe1b
test byte [rcx + 0x1c], 1
je 0x10003fe1b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [0x100083210]
lea r8, [0x10007d190]
mov rcx, qword [rcx + 0x10]
mov r9d, eax
mov edx, 0xc
call fcn.10001c48c
jmp 0x10003fe1b