Function at 0x1400afe40
Capabilities:
Check if file exists

Disassembly:
push rbp
push rsi
push rdi
push r12
push r14
sub rsp, 0x60
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov qword [rsp + 0xa0], rbx
mov rax, qword [0x1403a0088]
xor rax, rsp
mov qword [rsp + 0x58], rax
mov r14, rdx
mov rsi, rcx
mov qword [rsp + 0x28], rdx
xor ebp, ebp
mov rdx, qword [rdx + 8]
sub rdx, qword [r14]
movabs r12, 0xe38e38e38e38e39
mov rax, r12
imul rdx
sar rdx, 1
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x1400b00d4
mov rbx, qword [rcx + 0x480]
test rbx, rbx
je 0x1400b00d4
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_PathIsRootW]
test eax, eax
jne 0x1400b00d4
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1400b00d4
or rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [rbx + rax*2], bp
jne 0x1400afee0
cmp rax, 2
jbe 0x1400b00d4
mov r8d, 1
lea rdx, str._HOMEDRIVE___USERPROFILE___HOMEPATH___temp___PATH___SystemDrive___APPDATA___ProgramFiles_x86____ProgramFiles___windir___windir___systemroot___systemroot____systemroot____systemroot__:_Recycle.Bin_:_Recycle.Bin_:Windows_:Windows_:Users_:Documents_and_Settings_:ProgramData_:ProgramDataPackages_:ProgramDataPackages_:ProgramDataPackage_Cache_:Program_Files__x86__:Program_Files__x86_Microsoft_:Program_Files__x86_Microsoft_:Program_Files__x86_Microsoft_:Program_Files__x86_Microsoft_:Program_Files__x86_Windows_:Program_Files__x86_Windows_:Program_Files__x86_Windows_:Program_Files__x86_Windows_:Program_Files__x86_Common_Files_:Program_Files__x86_Common_Files_:Program_Files_:Program_FilesMicrosoft_:Program_FilesMicrosoft_:Program_FilesMicrosoft_:Program_FilesMicrosoft_:Program_FilesWindows_:Program_FilesWindows_:Program_FilesWindows_:Program_FilesWindows_:Program_FilesWindowsCommon_Files_:Program_FilesWindowsCommon_Files_:Program_FilesWindowsApps_:Program_FilesWindowsApps_:UsersAppDataLocal_:UsersAppDataLocalOneDrive_:UsersAppDataLocalOneDrive_:UsersAppDataLocalPackages_:UsersAppDataLocalPackages_:UsersAppDataLocalMicrosoft_:UsersAppDataLocalMicrosoft_:UsersAppDataLocalMicrosoft_:UsersAppDataLocalMicrosoft_:UsersAppDataLocalLow_:UsersAppDataLocalLowMicrosoft_:UsersAppDataLocalLowMicrosoft_:UsersAppDataLocalLowMicrosoft_:UsersAppDataLocalLowMicrosoft_:UsersAppDataRoaming_:UsersAppDataRoamingMicrosoft_:UsersAppDataRoamingMicrosoft_:UsersAppDataRoamingMicrosoft_:UsersAppDataRoamingMicrosoft_:UsersAppData_:UsersDocuments_:UsersDesktop_:UsersDesktop_:UsersOneDrive_:UsersOneDrive_
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_PathMatchSpecExW]
test eax, eax
je 0x1400b00d4
mov rbx, qword [r14]
cmp rbx, qword [r14 + 8]
je 0x1400b00d4
lea rdi, [rbx + 4]
cmp dword [0x140455b64], 0
jne 0x1400b00d4
cmp qword [rdi + 0x18], 8
jb 0x1400aff3b
mov r8, qword [rdi]
jmp 0x1400aff3e
mov r8, rdi
lea rdx, [0x140335590]
lea rcx, [rsp + 0x38]
call fcn.14004bce0
nop
cmp qword [rdi + 0x18], 8
jb 0x1400aff5c
mov rdx, qword [rdi]
jmp 0x1400aff5f
mov rdx, rdi
xor r8d, r8d
mov rcx, qword [rsi + 0x480]
call qword [sym.imp.SHLWAPI.dll_PathMatchSpecExW]
test eax, eax
je 0x1400affcc
lea rdx, [rsp + 0x38]
cmp qword [rsp + 0x50], 8
cmovae rdx, qword [rsp + 0x38]
xor r8d, r8d
mov rcx, qword [rsi + 0x480]
call qword [sym.imp.SHLWAPI.dll_PathMatchSpecExW]
test eax, eax
je 0x1400affcc
mov r8, qword [rsp + 0x50]
cmp r8, 8
jb 0x1400affb5
inc r8
mov rdx, qword [rsp + 0x38]
lea rcx, [rsp + 0x38]
call fcn.14004e100
add rbx, 0x24
add rdi, 0x24
cmp rbx, qword [r14 + 8]
jne 0x1400aff22
jmp 0x1400b00d4
mov rcx, qword [rsi + 0x480]
call fcn.14004baa0
mov rdi, rax
mov rcx, qword [rsi + 0x480]
call fcn.14004baa0
mov rsi, rax
test rdi, rdi
je 0x1400b00ab
mov rcx, rdi
call qword [sym.imp.SHLWAPI.dll_PathIsRootW]
test eax, eax
jne 0x1400b00ab
mov rcx, rdi
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1400b00ab
or rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [rdi + rax*2], 0
jne 0x1400b0020
cmp rax, 2
jbe 0x1400b00ab
mov r8d, 1
lea rdx, str._HOMEDRIVE___USERPROFILE___HOMEPATH___temp___PATH___SystemDrive___APPDATA___ProgramFiles_x86____ProgramFiles___windir___windir___systemroot___systemroot____systemroot____systemroot__:_Recycle.Bin_:_Recycle.Bin_:Windows_:Windows_:Users_:Documents_and_Settings_:ProgramData_:ProgramDataPackages_:ProgramDataPackages_:ProgramDataPackage_Cache_:Program_Files__x86__:Program_Files__x86_Microsoft_:Program_Files__x86_Microsoft_:Program_Files__x86_Microsoft_:Program_Files__x86_Microsoft_:Program_Files__x86_Windows_:Program_Files__x86_Windows_:Program_Files__x86_Windows_:Program_Files__x86_Windows_:Program_Files__x86_Common_Files_:Program_Files__x86_Common_Files_:Program_Files_:Program_FilesMicrosoft_:Program_FilesMicrosoft_:Program_FilesMicrosoft_:Program_FilesMicrosoft_:Program_FilesWindows_:Program_FilesWindows_:Program_FilesWindows_:Program_FilesWindows_:Program_FilesWindowsCommon_Files_:Program_FilesWindowsCommon_Files_:Program_FilesWindowsApps_:Program_FilesWindowsApps_:UsersAppDataLocal_:UsersAppDataLocalOneDrive_:UsersAppDataLocalOneDrive_:UsersAppDataLocalPackages_:UsersAppDataLocalPackages_:UsersAppDataLocalMicrosoft_:UsersAppDataLocalMicrosoft_:UsersAppDataLocalMicrosoft_:UsersAppDataLocalMicrosoft_:UsersAppDataLocalLow_:UsersAppDataLocalLowMicrosoft_:UsersAppDataLocalLowMicrosoft_:UsersAppDataLocalLowMicrosoft_:UsersAppDataLocalLowMicrosoft_:UsersAppDataRoaming_:UsersAppDataRoamingMicrosoft_:UsersAppDataRoamingMicrosoft_:UsersAppDataRoamingMicrosoft_:UsersAppDataRoamingMicrosoft_:UsersAppData_:UsersDocuments_:UsersDesktop_:UsersDesktop_:UsersOneDrive_:UsersOneDrive_
mov rcx, rdi
call qword [sym.imp.SHLWAPI.dll_PathMatchSpecExW]
test eax, eax
je 0x1400b00ab
mov rcx, rdi
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
test eax, eax
je 0x1400b00ab
lea rdx, [rbx + 4]
cmp qword [rdx + 0x18], 8
jb 0x1400b0065
mov rdx, qword [rdx]
xor r8d, r8d
mov rcx, rdi
call qword [sym.imp.SHLWAPI.dll_PathMatchSpecExW]
test eax, eax
je 0x1400b0096
lea rdx, [rsp + 0x38]
cmp qword [rsp + 0x50], 8
cmovae rdx, qword [rsp + 0x38]
xor r8d, r8d
mov rcx, rdi
call qword [sym.imp.SHLWAPI.dll_PathMatchSpecExW]
test eax, eax
jne 0x1400b00ab
test rsi, rsi
je 0x1400b00a3
mov rcx, rsi
call fcn.140125e14
mov rcx, rdi
jmp 0x1400affe2
mov rcx, rsi
call fcn.14004baa0
mov rbp, rax
mov r8, qword [rsp + 0x50]
cmp r8, 8
jb 0x1400b00d4
inc r8
mov rdx, qword [rsp + 0x38]
lea rcx, [rsp + 0x38]
call fcn.14004e100
nop
mov rcx, qword [r14]
test rcx, rcx
je 0x1400b011e
mov rdx, qword [r14 + 8]
call fcn.1400ae380
mov rcx, qword [r14 + 0x10]
sub rcx, qword [r14]
mov rax, r12
imul rcx
sar rdx, 1
mov r8, rdx
shr r8, 0x3f
add r8, rdx
mov rdx, qword [r14]
call fcn.1400ae130
mov qword [r14], 0
mov qword [r14 + 8], 0
mov qword [r14 + 0x10], 0
mov rax, rbp
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.140125a70
mov rbx, qword [rsp + 0xa0]
add rsp, 0x60
pop r14
pop r12
pop rdi
pop rsi
pop rbp
ret