Function at 0x1400562ac
Capabilities:
Check if file exists

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x238]
sub rsp, 0x300
mov qword [rsp + 0x48], 0xfffffffffffffffe
mov qword [rax + 0x20], rbx
mov rax, qword [0x1400da318]
xor rax, rsp
mov qword [rbp + 0x1f0], rax
mov rdi, r8
mov r14, rdx
mov r12, rcx
mov qword [rbp + 0x90], rdx
mov qword [rbp + 0x98], r8
xor r13d, r13d
mov dword [rsp + 0x38], r13d
mov rdx, r8
mov rcx, r14
call fcn.140055968
test eax, eax
je 0x14005632c
mov rcx, r14
call fcn.14001456c
nop
mov rcx, rdi
call fcn.14001456c
mov al, 1
jmp 0x140056ae1
test byte [0x1400dc881], 8
je 0x140056349
mov r9, qword [rdi + 8]
mov r8, qword [r14 + 8]
lea rdx, [0x1400b4708]
call fcn.14005762c
mov esi, r13d
mov dword [rsp + 0x34], 0xa
mov rdx, rdi
lea rcx, [rsp + 0x50]
call fcn.14001bbb4
mov rdx, rax
lea rcx, [rbp + 0xa0]
call fcn.140055a2c
nop
mov dword [rsp + 0x38], 1
mov rcx, qword [rax + 8]
call fcn.14001c72c
test al, al
je 0x1400563af
mov rdx, rdi
lea rcx, [rbp - 0x10]
call fcn.14001bbb4
mov rdx, rax
lea rcx, [rbp + 0x140]
call fcn.140055a2c
mov rdx, rax
call fcn.140056bb4
test al, al
mov bl, 1
jne 0x1400563b2
mov bl, r13b
lea rcx, [rbp + 0xa0]
call fcn.14001456c
test bl, bl
je 0x1400563eb
mov rdx, rdi
lea rcx, [rbp + 0xa0]
call fcn.14001bbb4
mov rdx, rax
lea rcx, [rbp + 0x140]
call fcn.140055a2c
mov rdx, rax
mov rcx, r12
call fcn.140055e8c
mov rdx, rdi
lea rcx, [rbp + 0xa0]
call fcn.14001bbb4
mov rdx, rax
lea rcx, [rbp + 0x140]
call fcn.14001bff8
mov rcx, qword [rax + 8]
call qword [sym.imp.api_ms_win_core_shlwapi_legacy_l1_1_0.dll_PathFileExistsW]
nop dword [rax + rax]
mov ebx, eax
lea rcx, [rbp + 0x140]
call fcn.14001456c
test ebx, ebx
je 0x140056477
mov esi, 0x800700b7
mov rax, qword [rdi + 8]
mov qword [rsp + 0x28], rax
lea rax, str.NewDir:__ls
mov r9d, esi
mov edx, 0x1c6
lea r15, str.onecoreuap_base_appmodel_searchcommonpkmutillindexmove.cxx
mov r8, r15
mov qword [rsp + 0x20], rax
mov rcx, qword [rbp + 0x238]
call fcn.14004a324
mov byte [rsp + 0x30], r13b
mov byte [rsp + 0x31], 0
mov byte [rsp + 0x32], 0
jmp 0x140056790
mov dword [rsp + 0x34], SafeArrayPutElement
mov r9d, dword [r14 + 0x14]
cmp dword [rdi + 0x14], r9d
jb 0x1400564f4
xor r8d, r8d
lea rdx, [rsp + 0x38]
mov rcx, rdi
call fcn.140015cf4
mov dword [rbp + 0x1e0], r13d
mov eax, dword [r14 + 0x14]
mov dword [rbp + 0x1e4], eax
mov qword [rbp + 0x1e8], r14
lea rdx, [rbp + 0x1e0]
lea rcx, [rsp + 0x38]
call fcn.140015abc
test eax, eax
je 0x1400564f4
mov rdx, qword [rdi + 8]
mov eax, dword [r14 + 0x14]
cmp word [rdx + rax*2], 0x5c
jne 0x1400564f4
mov r9d, 0x8007007b
mov esi, r9d
mov qword [rsp + 0x28], rdx
lea rax, str.NewDirChild:__ls
mov edx, 0x1d1
jmp 0x140056448
mov r9d, dword [rdi + 0x14]
lea r15, str.onecoreuap_base_appmodel_searchcommonpkmutillindexmove.cxx
cmp dword [r14 + 0x14], r9d
jb 0x140056581
xor r8d, r8d
lea rdx, [rsp + 0x38]
mov rcx, r14
call fcn.140015cf4
mov dword [rbp + 0x1e0], r13d
mov eax, dword [rdi + 0x14]
mov dword [rbp + 0x1e4], eax
mov qword [rbp + 0x1e8], rdi
lea rdx, [rbp + 0x1e0]
lea rcx, [rsp + 0x38]
call fcn.140015abc
test eax, eax
je 0x140056581
mov ecx, dword [rdi + 0x14]
mov rax, qword [r14 + 8]
cmp word [rax + rcx*2], 0x5c
jne 0x140056581
mov r9d, 0x8007007b
mov esi, r9d
mov rax, qword [rdi + 8]
mov rcx, qword [rbp + 0x238]
mov qword [rsp + 0x28], rax
lea rax, str.NewDirParent:__ls
mov qword [rsp + 0x20], rax
mov r8, r15
mov edx, 0x1d6
call fcn.14004a324
mov byte [rsp + 0x30], r13b
test esi, esi
js 0x1400566b3
mov dword [rsp + 0x34], 0x1e
mov rdx, rdi
lea rcx, [rbp + 0xa0]
call fcn.14001bbb4
xor r8d, r8d
mov rdx, rax
mov rcx, r12
call fcn.14001c650
test byte [0x1400dc881], 8
je 0x1400565d0
mov r9, qword [rdi + 8]
mov r8, qword [r14 + 8]
lea rdx, [0x1400b4548]
call fcn.14005762c
lea rax, [rbp + 0x140]
mov qword [rbp + 0x1e0], rax
mov rdx, rdi
lea rcx, [rbp + 0xa0]
call fcn.14001bbb4
mov rdx, rax
lea rcx, [rbp + 0x140]
call fcn.14001bff8
mov rbx, rax
mov rdx, r14
lea rcx, [rbp - 0x10]
call fcn.14001bbb4
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.14001bff8
nop
mov r8, rbx
mov rdx, rax
mov rcx, r12
call fcn.140055b24
mov esi, eax
mov rcx, qword [rbp + 0x238]
test eax, eax
jns 0x140056644
mov r9d, eax
mov r8, r15
mov edx, 0x1e7
call fcn.140042700
mov byte [rsp + 0x30], 1
test esi, esi
js 0x1400566b3
mov dword [rsp + 0x34], 0x28
lea rax, [rbp + 0xa0]
mov qword [rbp + 0x1e0], rax
mov rdx, rdi
lea rcx, [rbp + 0xa0]
call fcn.14001bbb4
mov rbx, rax
mov rdx, r14
lea rcx, [rbp + 0x140]
call fcn.14001bbb4
nop
mov r8, rbx
mov rdx, rax
mov rcx, r12
call fcn.140056e34
mov esi, eax
mov rcx, qword [rbp + 0x238]
test eax, eax
jns 0x1400566b0
mov r9d, eax
mov r8, r15
mov edx, 0x1f0
call fcn.140042700
mov r13b, 1
mov byte [rsp + 0x31], 0
test esi, esi
js 0x1400566ff
mov dword [rsp + 0x34], 0x32
mov rdx, r14
lea rcx, [rbp + 0xa0]
call fcn.14001bbb4
mov rdx, rax
call fcn.140056cb8
mov esi, eax
mov rcx, qword [rbp + 0x238]
test eax, eax
jns 0x1400566fa
mov r9d, eax
mov r8, r15
mov edx, 0x1f9
call fcn.140042700
jmp 0x1400566ff
mov byte [rsp + 0x31], 1
mov byte [rsp + 0x32], 0
test esi, esi
js 0x140056790
mov dword [rsp + 0x34], 0x3c
mov rdx, rdi
lea rcx, [rbp + 0xa0]
call fcn.14001bbb4
mov rdx, rax
mov rcx, r12
call fcn.14005749c
mov esi, eax
mov rcx, qword [rbp + 0x238]
test eax, eax
jns 0x14005674d
mov r9d, eax
mov r8, r15
mov edx, 0x206
call fcn.140042700
jmp 0x140056752
mov byte [rsp + 0x32], 1
test esi, esi
js 0x140056790
test byte [0x1400dc881], 8
je 0x140056776
mov r8, qword [r14 + 8]
lea rdx, [0x1400b4648]
lea rcx, [0x1400d9440]
call fcn.14004c814
mov rdx, r14
lea rcx, [rbp + 0xa0]
call fcn.14001bbb4
mov rdx, rax
mov rcx, r12
call fcn.140055d7c
lea rax, [rbp + 0xa0]
mov qword [rbp + 0x1e0], rax
mov rdx, rdi
lea rcx, [rbp + 0xa0]
call fcn.14001bbb4
mov rbx, rax
mov rdx, r14
lea rcx, [rbp + 0x140]
call fcn.14001bbb4
nop
mov dword [rsp + 0x20], esi
mov r9d, dword [rsp + 0x34]
mov r8, rbx
mov rdx, rax
mov rcx, r12
call fcn.140057214
test esi, esi
jns 0x140056ac6
test byte [0x1400dc881], 8
je 0x14005680d
lea rax, [rbp + 0x1e0]
mov qword [rsp + 0x20], rax
mov r9d, 1
lea rdx, [0x1400b4388]
lea rcx, [0x1400d9440]
call fcn.140029054
lea rbx, str.Rollback:__ls
test r13b, r13b
je 0x1400568de
lea rax, [rbp + 0xa0]
mov qword [rbp + 0x1e0], rax
mov rdx, r14
lea rcx, [rbp + 0xa0]
call fcn.14001bbb4
mov rbx, rax
mov rdx, rdi
lea rcx, [rbp + 0x140]
call fcn.14001bbb4
nop
mov r8, rbx
mov rdx, rax
mov rcx, r12
call fcn.140056e34
mov r13d, eax
test eax, eax
jns 0x1400568d7
mov rdx, qword [rdi + 8]
mov rcx, qword [rbp + 0x238]
mov qword [rsp + 0x28], rdx
lea rax, str.Rollback:__ls
mov qword [rsp + 0x20], rax
mov r9d, r13d
mov r8, r15
mov edx, 0x21f
call fcn.14004a324
lea rax, [rbp + 0xa0]
mov qword [rbp + 0x1e0], rax
mov rdx, rdi
lea rcx, [rbp + 0xa0]
call fcn.14001bbb4
mov rbx, rax
mov rdx, r14
lea rcx, [rbp + 0x140]
call fcn.14001bbb4
nop
mov dword [rsp + 0x20], r13d
mov r9d, 0xc8
mov r8, rbx
mov rdx, rax
mov rcx, r12
call fcn.14005736c
lea rbx, str.Rollback:__ls
cmp byte [rsp + 0x30], 0
je 0x140056998
test byte [0x1400dc881], 8
je 0x140056909
mov r8, qword [rdi + 8]
lea rdx, [0x1400b46f8]
lea rcx, [0x1400d9440]
call fcn.14004c814
mov rdx, rdi
lea rcx, [rbp + 0xa0]
call fcn.14001bbb4
mov rdx, rax
mov rcx, r12
call fcn.140055d7c
mov r13d, eax
test eax, eax
jns 0x140056998
mov rdx, qword [rdi + 8]
mov rcx, qword [rbp + 0x238]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rbx
mov r9d, eax
mov r8, r15
mov edx, 0x229
call fcn.14004a324
lea rax, [rbp + 0xa0]
mov qword [rbp + 0x1e0], rax
mov rdx, rdi
lea rcx, [rbp + 0xa0]
call fcn.14001bbb4
mov rbx, rax
mov rdx, r14
lea rcx, [rbp + 0x140]
call fcn.14001bbb4
nop
mov dword [rsp + 0x20], r13d
mov r9d, 0xd2
mov r8, rbx
mov rdx, rax
mov rcx, r12
call fcn.14005736c
cmp byte [rsp + 0x31], 0
je 0x140056a24
call fcn.140056d98
mov r13d, eax
test eax, eax
jns 0x140056a24
mov rdx, qword [r14 + 8]
mov rcx, qword [rbp + 0x238]
mov qword [rsp + 0x28], rdx
lea rax, str.Rollback:__ls
mov qword [rsp + 0x20], rax
mov r9d, r13d
mov r8, r15
mov edx, 0x232
call fcn.14004a324
lea rax, [rbp + 0xa0]
mov qword [rbp + 0x1e0], rax
mov rdx, rdi
lea rcx, [rbp + 0xa0]
call fcn.14001bbb4
mov rbx, rax
mov rdx, r14
lea rcx, [rbp + 0x140]
call fcn.14001bbb4
nop
mov dword [rsp + 0x20], r13d
mov r9d, 0xdc
mov r8, rbx
mov rdx, rax
mov rcx, r12
call fcn.14005736c
cmp byte [rsp + 0x32], 0
je 0x140056ac6
mov rdx, r14
lea rcx, [rbp + 0xa0]
call fcn.14001bbb4
mov rdx, rax
mov rcx, r12
call fcn.14005749c
mov r13d, eax
test eax, eax
jns 0x140056ac6
mov rdx, qword [r14 + 8]
mov rcx, qword [rbp + 0x238]
mov qword [rsp + 0x28], rdx
lea rax, str.Rollback:__ls
mov qword [rsp + 0x20], rax
mov r9d, r13d
mov r8, r15
mov edx, 0x23b
call fcn.14004a324
lea rax, [rbp + 0xa0]
mov qword [rbp + 0x1e0], rax
mov rdx, rdi
lea rcx, [rbp + 0xa0]
call fcn.14001bbb4
mov rbx, rax
mov rdx, r14
lea rcx, [rbp + 0x140]
call fcn.14001bbb4
nop
mov dword [rsp + 0x20], r13d
mov r9d, 0xe6
mov r8, rbx
mov rdx, rax
mov rcx, r12
call fcn.14005736c
nop
shr esi, 0x1f
xor sil, 1
mov rcx, r14
call fcn.14001456c
nop
mov rcx, rdi
call fcn.14001456c
mov al, sil
mov rcx, qword [rbp + 0x1f0]
xor rcx, rsp
call fcn.140029fb0
mov rbx, qword [rsp + 0x358]
add rsp, 0x300
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret