Function at 0x1400034e4
Capabilities:
Check if file exists
Create directory

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x458]
sub rsp, 0x558
mov rax, qword [0x1400581d0]
xor rax, rsp
mov qword [rbp + 0x440], rax
mov r12, r9
mov rdi, r8
mov rsi, rdx
mov r14, rcx
mov r15, qword [rbp + 0x4c0]
mov r13, qword [rbp + 0x4d0]
mov ebx, 0x208
mov r8d, ebx
xor edx, edx
lea rcx, [rbp + 0x20]
call fcn.14001ea10
mov r8d, ebx
xor edx, edx
lea rcx, [rbp + 0x230]
call fcn.14001ea10
xor ebx, ebx
test rsi, rsi
je 0x140003573
cmp word [rsi], bx
je 0x140003573
mov r8, rsi
mov esi, 0x104
mov edx, esi
lea rcx, [rbp + 0x230]
call fcn.140026350
jmp 0x140003593
lea rdx, [rbp + 0x230]
mov rcx, qword [0x14005b988]
call fcn.140003378
test eax, eax
je 0x14000377b
mov esi, 0x104
mov rdx, r14
lea rcx, [rbp + 0x230]
call qword [sym.imp.SHLWAPI.dll_PathAppendW]
test rdi, rdi
je 0x1400035be
cmp word [rdi], bx
je 0x1400035be
mov r8, rdi
mov rdx, rsi
lea rcx, [rbp + 0x20]
call fcn.140026350
jmp 0x1400035e6
lea rcx, [rbp + 0x20]
call fcn.1400033b8
test eax, eax
je 0x14000377b
cmp byte [rbp + 0x4c8], bl
je 0x1400035e6
xor r8d, r8d
lea rdx, [rbp + 0x20]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHCreateDirectoryExW]
mov rdx, r14
lea rcx, [rbp + 0x20]
call qword [sym.imp.SHLWAPI.dll_PathAppendW]
test r12, r12
je 0x14000360a
lea r8, [rbp + 0x230]
mov rdx, rsi
mov rcx, r12
call fcn.140026350
test r15, r15
je 0x14000361e
lea r8, [rbp + 0x20]
mov rdx, rsi
mov rcx, r15
call fcn.140026350
lea rcx, [rbp + 0x20]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov edi, eax
mov rdx, r14
lea r14, str.CptService.exe
mov rcx, r14
call fcn.14002512c
mov esi, 0x40
mov r8d, esi
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.14001ea10
mov r8d, esi
xor edx, edx
lea rcx, [rbp - 0x60]
call fcn.14001ea10
lea rcx, [rsp + 0x60]
call fcn.140014cf4
nop
lea rcx, [rsp + 0x28]
call fcn.140014cf4
nop
lea rcx, [rbp + 0x230]
call qword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
mov rdx, rax
mov rcx, r14
call fcn.14002512c
mov r8d, esi
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x230]
test eax, eax
jne 0x1400036a4
call fcn.14000c210
jmp 0x1400036a9
call fcn.14000c3d4
test al, al
je 0x140003762
lea rdx, [rbp + 0x230]
lea rcx, [rsp + 0x60]
call fcn.140014dfc
test al, al
je 0x140003762
mov dword [rsp + 0x20], ebx
test r13, r13
je 0x1400036ee
lea r8, [rsp + 0x20]
mov rdx, r13
lea rcx, [rbp - 0x60]
call fcn.14000d848
test al, al
je 0x140003762
cmp dword [rsp + 0x20], ebx
jl 0x140003762
test edi, edi
je 0x14000375d
lea rdx, [rbp + 0x20]
lea rcx, [rsp + 0x28]
call fcn.140014dfc
test al, al
je 0x14000375d
mov eax, dword [rbp - 0x70]
cmp dword [rsp + 0x58], eax
jne 0x14000375d
lea rcx, [rbp + 0x20]
call qword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
mov rdx, rax
mov rcx, r14
call fcn.14002512c
mov r8d, esi
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x20]
test eax, eax
jne 0x140003738
call fcn.14000c210
jmp 0x14000373d
call fcn.14000c3d4
test al, al
je 0x14000375d
lea r8, [rsp + 0x20]
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x60]
call fcn.14000d848
test al, al
je 0x14000375d
cmp dword [rsp + 0x20], ebx
je 0x140003762
mov ebx, 1
lea rcx, [rsp + 0x28]
call fcn.140014d08
nop
lea rcx, [rsp + 0x60]
call fcn.140014d08
mov eax, ebx
jmp 0x140003788
mov ecx, 3
call qword [sym.imp.KERNEL32.dll_SetLastError]
xor eax, eax
mov rcx, qword [rbp + 0x440]
xor rcx, rsp
call fcn.14001bec0
add rsp, 0x558
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret