Function at 0x18000bd90
Capabilities:
Check if file exists

Disassembly:
mov rax, rsp
push rbp
lea rbp, [rax - 0xb8]
sub rsp, 0x1b0
mov qword [rsp + 0x38], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r14
mov rax, qword [0x18004d370]
xor rax, rsp
mov qword [rbp + 0xa0], rax
movzx esi, dl
call fcn.18000c540
test rax, rax
je 0x18000bdeb
mov r8, qword [rax]
mov rcx, rax
call qword [r8 + 0x18]
test al, al
jne 0x18000c49f
mov qword [rbp + 0x58], 7
xor r14d, r14d
mov qword [rbp + 0x50], r14
mov word [rbp + 0x40], r14w
lea r8d, [r14 + 0xa]
lea rdx, str.Ceallo.exe
lea rcx, [rbp + 0x40]
call fcn.180009150
nop
mov qword [rbp - 0x28], 7
mov qword [rbp - 0x30], r14
mov word [rbp - 0x40], r14w
lea r8d, [r14 + 0xa]
lea rdx, str.Luteic.exe
lea rcx, [rbp - 0x40]
call fcn.180009150
nop
cmp qword [rbp + 0x50], r14
je 0x18000c45a
cmp qword [rbp - 0x30], r14
je 0x18000c45a
call fcn.18000c4f0
mov rcx, rax
call fcn.1800079b0
test al, al
jne 0x18000c45a
call fcn.18000c4f0
mov rcx, rax
call fcn.180007780
test al, al
jne 0x18000c45a
xor ecx, ecx
call fcn.18001d274
mov rdi, rax
call fcn.18000c4f0
mov rcx, rax
lea r9d, [r14 + 1]
lea r8, str.08b675
lea rdx, str.Setting
call fcn.180006120
test eax, eax
jne 0x18000bf55
call fcn.18000c4f0
mov rcx, rax
call fcn.180007970
test al, al
jne 0x18000bf55
call fcn.18000c4f0
mov rcx, rax
xor r9d, r9d
lea r8, str.219d64
lea rdx, str.Setting
call fcn.180006120
mov ebx, eax
cmp eax, 0x64
jg 0x18000bf55
call fcn.18000c4f0
mov rcx, rax
xor r9d, r9d
lea r8, str.b96d63
lea rdx, str.Setting
call fcn.180006120
mov ecx, edi
sub ecx, eax
mov eax, ecx
cdq
xor eax, edx
sub eax, edx
cmp eax, 0x708
jl 0x18000bf32
call fcn.18000c4f0
mov rcx, rax
lea r9d, [rbx + 1]
lea r8, str.219d64
lea rdx, str.Setting
call fcn.180008970
call fcn.18000c4f0
mov rcx, rax
mov r9d, edi
lea r8, str.b96d63
lea rdx, str.Setting
call fcn.180008970
jmp 0x18000c45a
test sil, sil
jne 0x18000bfad
call fcn.18000c4f0
mov rcx, rax
or r9d, 0xffffffff
lea r8, str.2a4fe3
lea rdx, str.Setting
call fcn.180006120
mov ecx, edi
sub ecx, eax
mov eax, ecx
cdq
xor eax, edx
sub eax, edx
cmp eax, 0x708
jle 0x18000c45a
call fcn.18000c4f0
mov rcx, rax
mov r9d, edi
lea r8, str.2a4fe3
lea rdx, str.Setting
call fcn.180008970
mov qword [rbp + 0x38], 7
mov qword [rbp + 0x30], r14
mov word [rbp + 0x20], r14w
mov qword [rbp - 0x48], 7
mov qword [rbp - 0x50], r14
mov word [rbp - 0x60], r14w
xor sil, sil
call fcn.18000c4f0
mov rcx, rax
xor r9d, r9d
lea r8, str.66918c
lea rdx, str.Setting
call fcn.180006120
mov ebx, eax
mov r8d, 0xa
lea rcx, [rbp + 0x20]
test al, 1
jne 0x18000c018
mov sil, 1
lea rdx, str.Ceallo.exe
call fcn.180009150
lea rdx, str.6b4fa8
jmp 0x18000c02b
lea rdx, str.Luteic.exe
call fcn.180009150
lea rdx, str.9f10f3
mov r8d, 6
lea rcx, [rbp - 0x60]
call fcn.180009150
call fcn.18000c4f0
mov rcx, rax
call fcn.1800123b0
mov rdx, rax
lea rcx, [rbp + 0x80]
call fcn.18000bcb0
nop
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x80]
call fcn.180008d70
lea eax, [rbx + 1]
mov ebx, r14d
cmp eax, 0x3e8
cmovl ebx, eax
call fcn.18000c4f0
mov rcx, rax
mov r9d, ebx
lea r8, str.66918c
lea rdx, str.Setting
call fcn.180008970
cmp qword [rbp + 0x30], 0
je 0x18000c439
mov qword [rbp - 0x68], 7
mov qword [rbp - 0x70], r14
mov word [rbp - 0x80], r14w
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 0x80]
call fcn.180009010
nop
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rcx, qword [rbp - 0x80]
call fcn.18000ed90
test eax, eax
jne 0x18000c42f
mov qword [rsp + 0x58], 7
mov qword [rsp + 0x50], r14
mov word [rsp + 0x40], r14w
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 0x80]
lea rcx, [rsp + 0x40]
call fcn.180009010
nop
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rcx, qword [rsp + 0x40]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x18000c168
lea rdi, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae rdi, qword [rbp - 0x60]
lea rbx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rbx, qword [rsp + 0x40]
call fcn.18000c4f0
mov rcx, rax
mov r8, rdi
mov rdx, rbx
call fcn.180012380
test eax, eax
jne 0x18000c424
mov qword [rbp - 8], 0xf
mov qword [rbp - 0x10], r14
mov byte [rbp - 0x20], 0
mov r8d, 0x28
lea rdx, str.9506002904565941122565703411594868040202
lea rcx, [rbp - 0x20]
call fcn.180004900
nop
mov r8d, 0x28
lea rcx, [rbp - 0x20]
test sil, sil
lea rdx, str.9506002904565941122565703411594868040202
jne 0x18000c1ac
lea rdx, str.5731157053664939414724206926493141591515
call fcn.180004900
lea rdx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rdx, qword [rbp - 0x20]
lea rcx, [rbp + 0x60]
call fcn.18000d650
nop
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x78], 0xf
mov qword [rsp + 0x70], r14
mov byte [rsp + 0x60], 0
mov r8d, 1
lea rdx, [0x18003509c]
lea rcx, [rsp + 0x60]
call fcn.180004900
nop
lea rdx, [rbp + 0x60]
cmp qword [rbp + 0x78], 0x10
cmovae rdx, qword [rbp + 0x60]
mov qword [rbp + 0x18], 0xf
mov qword [rbp + 0x10], r14
mov byte [rbp], 0
cmp byte [rdx], 0
jne 0x18000c22a
mov r8, r14
jmp 0x18000c23a
or r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rdx + r8], 0
jne 0x18000c230
lea rcx, [rbp]
call fcn.180004900
nop
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x60]
lea rcx, [rbp]
call fcn.180010a60
nop
lea rcx, [rbp]
call fcn.1800042d0
nop
lea rcx, [rsp + 0x60]
call fcn.1800042d0
mov rbx, qword [rsp + 0x20]
mov rax, qword [rsp + 0x28]
cmp rbx, rax
je 0x18000c405
nop
cmp qword [rbx + 0x18], 0x10
jb 0x18000c28c
mov rdx, qword [rbx]
jmp 0x18000c28f
mov rdx, rbx
mov qword [rsp + 0x78], 0xf
mov qword [rsp + 0x70], r14
mov byte [rsp + 0x60], 0
cmp byte [rdx], 0
jne 0x18000c2ac
mov r8, r14
jmp 0x18000c2ba
or r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x18000c2b0
lea rcx, [rsp + 0x60]
call fcn.180004900
nop
lea rdx, [rsp + 0x60]
lea rcx, [rbp]
call fcn.1800116c0
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.180005e60
lea rcx, [rbp]
call fcn.180005b70
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rcx, qword [rbp - 0x80]
call fcn.18000ed90
nop
lea rcx, [rsp + 0x60]
call fcn.1800042d0
add rbx, 0x20
mov rax, qword [rsp + 0x28]
cmp rbx, rax
jne 0x18000c280
mov rbx, qword [rsp + 0x20]
cmp rbx, rax
je 0x18000c405
cmp qword [rbx + 0x18], 0x10
jb 0x18000c332
mov rdx, qword [rbx]
jmp 0x18000c335
mov rdx, rbx
lea rcx, [rsp + 0x60]
call fcn.18000bc70
nop
lea rdx, [rsp + 0x60]
lea rcx, [rbp]
call fcn.1800116c0
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.180005e60
lea rcx, [rbp]
call fcn.180005b70
call fcn.18000c4f0
mov rcx, rax
call fcn.1800123b0
cmp word [rax], 0
jne 0x18000c37b
mov r8, r14
jmp 0x18000c38b
or r8, 0xffffffffffffffff
nop
inc r8
cmp word [rax + r8*2], 0
jne 0x18000c380
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.180009150
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x40]
call fcn.180008d70
lea rsi, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae rsi, qword [rbp - 0x60]
lea rdi, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rdi, qword [rsp + 0x40]
call fcn.18000c4f0
mov rcx, rax
mov r8, rsi
mov rdx, rdi
call fcn.180012380
nop
lea rcx, [rsp + 0x60]
test eax, eax
jne 0x18000c3ff
call fcn.1800042d0
add rbx, 0x20
cmp rbx, qword [rsp + 0x28]
jne 0x18000c326
jmp 0x18000c405
call fcn.1800042d0
nop
lea rcx, [rsp + 0x20]
call fcn.18000bd00
nop
lea rcx, [rbp + 0x60]
call fcn.1800042d0
nop
lea rcx, [rbp - 0x20]
call fcn.1800042d0
nop
lea rcx, [rsp + 0x40]
call fcn.180005b70
nop
lea rcx, [rbp - 0x80]
call fcn.180005b70
nop
lea rcx, [rbp + 0x80]
call fcn.180005b70
nop
lea rcx, [rbp - 0x60]
call fcn.180005b70
nop
lea rcx, [rbp + 0x20]
call fcn.180005b70
nop
mov r8, qword [rbp - 0x28]
cmp r8, 8
jb 0x18000c474
inc r8
mov rdx, qword [rbp - 0x40]
lea rcx, [rbp - 0x40]
call fcn.1800092a0
mov qword [rbp - 0x28], 7
mov qword [rbp - 0x30], r14
mov word [rbp - 0x40], r14w
mov r8, qword [rbp + 0x58]
cmp r8, 8
jb 0x18000c49f
inc r8
mov rdx, qword [rbp + 0x40]
lea rcx, [rbp + 0x40]
call fcn.1800092a0
mov rcx, qword [rbp + 0xa0]
xor rcx, rsp
call fcn.180017e40
lea r11, [rsp + 0x1b0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret