Function at 0x14000c390
Capabilities:
Check if file exists
Get file attributes

Disassembly:
jmp 0x14000c390
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1e8]
sub rsp, 0x2c0
mov qword [rbp - 0x68], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x140095790]
xor rax, rsp
mov qword [rbp + 0x1b0], rax
mov rdi, rcx
lea rbx, [rcx + 0x120]
mov qword [rsp + 0x48], rbx
test rbx, rbx
je 0x14000c3f6
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov r12b, 1
mov byte [rsp + 0x50], r12b
jmp 0x14000c3fc
movzx r12d, byte [rsp + 0x50]
lea rsi, [rdi + 0x150]
xor edx, edx
lea r14d, [rdx + 1]
mov r8d, 0x208
lea rcx, [rbp - 0x60]
call fcn.140002757
test rsi, rsi
je 0x14000c5af
mov r8, rsi
mov edx, 0x104
lea rcx, [rbp - 0x60]
call fcn.140003049
xor r13d, r13d
lea rcx, [rbp - 0x60]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x14000c44a
bt eax, 0xa
jb 0x14000c463
mov edx, 0x5c
lea rcx, [rbp - 0x60]
call fcn.1400039bd
test rax, rax
je 0x14000c476
mov word [rax], r13w
jmp 0x14000c435
lea rdx, [rbp - 0x60]
lea rcx, str.CLogger::ValidatePathForSymLink_:_Failed__s___
call fcn.1400029a5
mov r14d, r13d
test r14d, r14d
je 0x14000c5af
mov rdx, rsi
mov rcx, rdi
call fcn.140001974
test eax, eax
je 0x14000c5af
xor eax, eax
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rax
lea r14, [rsp + 0x58]
mov r9d, 0x1f01ff
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x58]
mov rcx, rdi
call fcn.140002b30
test eax, eax
jns 0x14000c4f5
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
mov rdx, rsi
lea rcx, str.CLogger::ReCreate_:_CreateSA_failed___s_._Error__0x_x_
call fcn.1400029a5
mov r14, r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
mov r9, r14
mov edx, 0x60004
mov r8d, 7
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rdi + 8], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r13d, eax
test r14, r14
je 0x14000c56f
xor eax, eax
mov dword [rsp + 0x44], eax
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x40], eax
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x44]
mov rcx, qword [r14 + 8]
call qword [sym.imp.ADVAPI32.dll_GetSecurityDescriptorDacl]
test eax, eax
je 0x14000c56f
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14000c56f
call qword [sym.imp.KERNEL32.dll_LocalFree]
cmp qword [rdi + 8], 0xffffffffffffffff
jne 0x14000c590
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
mov rdx, rsi
lea rcx, str.CLogger::ReCreate_:_Error_opening_log_file___s___Error__0x_x_
call fcn.1400029a5
jmp 0x14000c5af
mov r9d, r13d
lea r8, [rdi + 8]
mov rdx, rsi
mov rcx, rdi
call fcn.1400028d8
test eax, eax
jne 0x14000c5af
mov rcx, rdi
call fcn.140003c7e
nop
test rbx, rbx
je 0x14000c5c2
test r12b, r12b
je 0x14000c5c2
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor eax, eax
mov rcx, qword [rbp + 0x1b0]
xor rcx, rsp
call fcn.140003828
lea r11, [rsp + 0x2c0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret