Function at 0x1400f1a20
Capabilities:
Check if file exists

Disassembly:
push rsi
push rdi
push r12
mov eax, 0x1700
call fcn.14024c240
sub rsp, rax
mov qword [rsp + 0x60], 0xfffffffffffffffe
mov qword [rsp + 0x1730], rbx
mov rax, qword [0x140398250]
xor rax, rsp
mov qword [rsp + 0x16f0], rax
mov r12, rdx
mov rbx, rcx
mov qword [rsp + 0x58], rcx
xor edi, edi
mov word [rsp + 0x80], di
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x82]
call fcn.14024b970
mov word [rsp + 0x8c0], di
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x8c2]
call fcn.14024b970
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0x4a0]
call fcn.14024b970
xor edx, edx
mov r8d, 0x800
lea rcx, [rsp + 0xef0]
call fcn.14024b970
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0x290]
call fcn.14024b970
test r12, r12
jne 0x1400f1af4
mov dword [0x1403b95bc], 1
mov eax, 0x80010001
jmp 0x1400f1d77
mov rcx, qword [rbx + 0x4228]
test rcx, rcx
je 0x1400f1b0c
call fcn.140246710
mov qword [rbx + 0x4228], rdi
mov qword [rsp + 0x40], 0x104
lea rax, [rsp + 0x8c0]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], 0x104
lea rax, [rsp + 0x80]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x400
lea r9, [rsp + 0xef0]
mov r8d, 0x104
lea rdx, [rsp + 0x4a0]
mov rcx, r12
call fcn.140247424
lea r11, [rsp + 0xef0]
mov qword [rsp + 0x28], r11
lea rax, [rsp + 0x4a0]
mov qword [rsp + 0x20], rax
lea r9, [0x1402e3978]
or r8, 0xffffffffffffffff
mov edx, 0x104
lea rcx, [rsp + 0x290]
call fcn.14024679c
lea rdx, [0x1402dc4e0]
lea rcx, [rsp + 0x80]
call qword [sym.imp.KERNEL32.dll_lstrcmpW]
lea rcx, [rsp + 0x80]
test eax, eax
jne 0x1400f1bc6
lea rdx, str.Silent.log
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x1400f1bd4
lea rdx, [rsp + 0x8c0]
call qword [sym.imp.KERNEL32.dll_lstrcatW]
lea rcx, [rsp + 0x290]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x1400f1c45
mov rcx, qword [0x1403b9750]
mov rax, qword [rcx]
call qword [rax + 0x48]
mov r10, qword [rax]
lea r8, [rsp + 0xef0]
lea rdx, str.WindowsFolder
mov rcx, rax
call qword [r10 + 0x18]
lea r11, [rsp + 0x80]
mov qword [rsp + 0x28], r11
lea rax, [rsp + 0xef0]
mov qword [rsp + 0x20], rax
lea r9, [0x1402e3978]
or r8, 0xffffffffffffffff
mov edx, 0x104
lea rcx, [rsp + 0x290]
call fcn.14024679c
jmp 0x1400f1ca2
cmp word [rsp + 0xef0], 0x5c
je 0x1400f1c5e
lea rcx, [rsp + 0x4a0]
call qword [sym.imp.SHLWAPI.dll_PathAddBackslashW]
lea rax, [rsp + 0x80]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0xef0]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x4a0]
mov qword [rsp + 0x20], rax
lea r9, [0x1402e9a78]
or r8, 0xffffffffffffffff
mov edx, 0x104
lea rcx, [rsp + 0x290]
call fcn.14024679c
mov word [rsp + 0x6b0], di
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x6b2]
call fcn.14024b970
lea r8, [rsp + 0x290]
mov edx, 0x104
lea rcx, [rsp + 0x6b0]
call fcn.140246628
nop
lea r8, str.wt_ccsUNICODE
lea rdx, [rsp + 0x6b0]
lea rcx, [rbx + 0x4228]
call fcn.140245760
nop
jmp 0x1400f1d01
cmp qword [rbx + 0x4228], 0
jne 0x1400f1d1c
mov dword [0x1403b95bc], 5
mov eax, 0x80010005
jmp 0x1400f1d77
mov r9, qword [rbx]
mov r8d, 0x104
lea rdx, [rsp + 0xad0]
mov rcx, rbx
call qword [r9 + 0x1d8]
lea r11, [rsp + 0xad0]
mov qword [rsp + 0x20], r11
lea r9, str._Logging_started:__s__n
or r8, 0xffffffffffffffff
mov edx, 0x104
lea rcx, [rsp + 0xce0]
call fcn.14024679c
mov rdx, qword [rbx + 0x4228]
lea rcx, [rsp + 0xce0]
call fcn.14024ab9c
mov eax, edi
mov rcx, qword [rsp + 0x16f0]
xor rcx, rsp
call fcn.140245660
mov rbx, qword [rsp + 0x1730]
add rsp, 0x1700
pop r12
pop rdi
pop rsi
ret