Function at 0x180038a00
Capabilities:
Check if file exists

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x980
mov qword [rsp + 0x938], 0xfffffffffffffffe
mov rax, qword [0x1800c34c8]
xor rax, rsp
mov qword [rsp + 0x970], rax
xor eax, eax
mov word [rsp + 0x40], ax
lea rdi, [rsp + 0x42]
xor eax, eax
mov ecx, 0x206
rep stosb byte [rdi], al
xor eax, eax
mov word [rsp + 0x250], ax
lea rdi, [rsp + 0x252]
xor eax, eax
mov ecx, 0x206
rep stosb byte [rdi], al
lea rdx, [0x1800a3420]
lea rcx, [rsp + 0x460]
call fcn.180035b60
nop
lea rdx, [rsp + 0x250]
lea rcx, [rsp + 0x460]
call fcn.180035bc0
lea r8, [0x1800a3398]
mov edx, 0x104
lea rcx, [rsp + 0x250]
call fcn.18003ca58
lea r8, str.DouRar.exe
mov edx, 0x104
lea rcx, [rsp + 0x250]
call fcn.18003ca58
lea rcx, [rsp + 0x250]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x180038da9
xor eax, eax
mov word [rsp + 0x670], ax
lea rdi, [rsp + 0x672]
xor eax, eax
mov ecx, 0x206
rep stosb byte [rdi], al
mov rcx, qword [rsp + 0x990]
call fcn.180011f90
mov r8, rax
mov edx, 0x104
lea rcx, [rsp + 0x670]
call fcn.18003c9d4
call fcn.1800366b0
movzx eax, al
test eax, eax
jne 0x180038c13
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
call fcn.180034c70
mov dword [rsp + 0x8b0], eax
cmp dword [rsp + 0x8b0], 0x4000
jne 0x180038b9d
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x670]
lea rcx, [rsp + 0x250]
call fcn.180034b30
movzx eax, al
test eax, eax
je 0x180038b9b
mov byte [rsp + 0x8b4], 1
lea rcx, [rsp + 0x460]
call fcn.1800378d0
nop
mov rcx, qword [rsp + 0x990]
call fcn.180011f30
mov al, byte [rsp + 0x8b4]
jmp 0x180038dec
jmp 0x180038c11
cmp dword [rsp + 0x8b0], 0x3000
je 0x180038bb7
cmp dword [rsp + 0x8b0], 0x2000
jne 0x180038c11
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x670]
lea rcx, [rsp + 0x250]
call fcn.180034bd0
movzx eax, al
test eax, eax
je 0x180038c11
mov byte [rsp + 0x8b5], 1
lea rcx, [rsp + 0x460]
call fcn.1800378d0
nop
mov rcx, qword [rsp + 0x990]
call fcn.180011f30
mov al, byte [rsp + 0x8b5]
jmp 0x180038dec
jmp 0x180038c6d
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x670]
lea rcx, [rsp + 0x250]
call fcn.180034b30
movzx eax, al
test eax, eax
je 0x180038c6d
mov byte [rsp + 0x8b6], 1
lea rcx, [rsp + 0x460]
call fcn.1800378d0
nop
mov rcx, qword [rsp + 0x990]
call fcn.180011f30
mov al, byte [rsp + 0x8b6]
jmp 0x180038dec
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x880], eax
lea rdx, [rsp + 0x250]
lea rcx, [rsp + 0x888]
call fcn.1800118d0
nop
lea r8, [0x1800a339c]
lea rdx, [rsp + 0x888]
lea rcx, [rsp + 0x8b8]
call fcn.18003ae20
mov qword [rsp + 0x940], rax
mov rax, qword [rsp + 0x940]
mov qword [rsp + 0x948], rax
mov r8, qword [rsp + 0x990]
mov rdx, qword [rsp + 0x948]
lea rcx, [rsp + 0x8e0]
call fcn.18003aeb0
mov qword [rsp + 0x950], rax
mov rax, qword [rsp + 0x950]
mov qword [rsp + 0x958], rax
mov rdx, qword [rsp + 0x958]
lea rcx, [rsp + 0x888]
call fcn.180015c80
nop
lea rcx, [rsp + 0x8e0]
call fcn.180011f30
nop
lea rcx, [rsp + 0x8b8]
call fcn.180011f30
lea r8, [rsp + 0x888]
lea rdx, [0x1800a3450]
lea rcx, [rsp + 0x908]
call fcn.18003af40
mov qword [rsp + 0x960], rax
mov rax, qword [rsp + 0x960]
mov qword [rsp + 0x968], rax
mov rdx, qword [rsp + 0x968]
lea rcx, [rsp + 0x888]
call fcn.180015c80
nop
lea rcx, [rsp + 0x908]
call fcn.180011f30
cmp qword [rsp + 0x998], 0
je 0x180038d9a
mov rax, qword [rsp + 0x998]
mov dword [rax], 0x1f43
lea rcx, [rsp + 0x888]
call fcn.180011f30
jmp 0x180038dc2
cmp qword [rsp + 0x998], 0
je 0x180038dc2
mov rax, qword [rsp + 0x998]
mov dword [rax], 0x1f42
mov byte [rsp + 0x930], 0
lea rcx, [rsp + 0x460]
call fcn.1800378d0
nop
mov rcx, qword [rsp + 0x990]
call fcn.180011f30
mov al, byte [rsp + 0x930]
mov rcx, qword [rsp + 0x970]
xor rcx, rsp
call fcn.18003c690
add rsp, 0x980
pop rdi
ret