Function at 0x18000b310
Capabilities:
Check if file exists

Disassembly:
mov rax, rsp
push rbp
lea rbp, [rax - 0xb8]
sub rsp, 0x1b0
mov qword [rsp + 0x38], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r14
mov rax, qword [0x18006e080]
xor rax, rsp
mov qword [rbp + 0xa0], rax
movzx esi, dl
call fcn.18000bab0
test rax, rax
je 0x18000b36b
mov r8, qword [rax]
mov rcx, rax
call qword [r8 + 0x18]
test al, al
jne 0x18000ba2f
mov qword [rbp + 0x58], 7
xor r14d, r14d
mov qword [rbp + 0x50], r14
mov word [rbp + 0x40], r14w
lea r8d, [r14 + 0xd]
lea rdx, str.WinPetrNs.exe
lea rcx, [rbp + 0x40]
call fcn.180004c30
nop
mov qword [rbp - 0x28], 7
mov qword [rbp - 0x30], r14
mov word [rbp - 0x40], r14w
lea r8d, [r14 + 0xc]
lea rdx, str.WinTpwer.exe
lea rcx, [rbp - 0x40]
call fcn.180004c30
nop
cmp qword [rbp + 0x50], r14
je 0x18000b9ea
cmp qword [rbp - 0x30], r14
je 0x18000b9ea
call fcn.18000ba60
mov rcx, rax
call fcn.180003260
test al, al
jne 0x18000b9ea
call fcn.18000ba60
mov rcx, rax
call fcn.180003030
test al, al
jne 0x18000b9ea
xor ecx, ecx
call fcn.180037af4
mov rdi, rax
call fcn.18000ba60
mov rcx, rax
lea r9d, [r14 + 1]
lea r8, str.08b675
lea rdx, str.Setting
call fcn.1800019c0
test eax, eax
jne 0x18000b4d5
call fcn.18000ba60
mov rcx, rax
call fcn.180003220
test al, al
jne 0x18000b4d5
call fcn.18000ba60
mov rcx, rax
xor r9d, r9d
lea r8, str.219d64
lea rdx, str.Setting
call fcn.1800019c0
mov ebx, eax
cmp eax, 0x64
jg 0x18000b4d5
call fcn.18000ba60
mov rcx, rax
xor r9d, r9d
lea r8, str.b96d63
lea rdx, str.Setting
call fcn.1800019c0
mov ecx, edi
sub ecx, eax
mov eax, ecx
cdq
xor eax, edx
sub eax, edx
cmp eax, 0x708
jl 0x18000b4b2
call fcn.18000ba60
mov rcx, rax
lea r9d, [rbx + 1]
lea r8, str.219d64
lea rdx, str.Setting
call fcn.1800041a0
call fcn.18000ba60
mov rcx, rax
mov r9d, edi
lea r8, str.b96d63
lea rdx, str.Setting
call fcn.1800041a0
jmp 0x18000b9ea
test sil, sil
jne 0x18000b52d
call fcn.18000ba60
mov rcx, rax
or r9d, 0xffffffff
lea r8, str.2a4fe3
lea rdx, str.Setting
call fcn.1800019c0
mov ecx, edi
sub ecx, eax
mov eax, ecx
cdq
xor eax, edx
sub eax, edx
cmp eax, 0x708
jle 0x18000b9ea
call fcn.18000ba60
mov rcx, rax
mov r9d, edi
lea r8, str.2a4fe3
lea rdx, str.Setting
call fcn.1800041a0
mov qword [rbp + 0x38], 7
mov qword [rbp + 0x30], r14
mov word [rbp + 0x20], r14w
mov qword [rbp - 0x48], 7
mov qword [rbp - 0x50], r14
mov word [rbp - 0x60], r14w
xor sil, sil
call fcn.18000ba60
mov rcx, rax
xor r9d, r9d
lea r8, str.66918c
lea rdx, str.Setting
call fcn.1800019c0
mov ebx, eax
lea rcx, [rbp + 0x20]
test al, 1
jne 0x18000b598
mov sil, 1
mov r8d, 0xd
lea rdx, str.WinPetrNs.exe
call fcn.180004c30
lea rdx, str.6b4fa8
jmp 0x18000b5b1
mov r8d, 0xc
lea rdx, str.WinTpwer.exe
call fcn.180004c30
lea rdx, str.9f10f3
mov r8d, 6
lea rcx, [rbp - 0x60]
call fcn.180004c30
call fcn.18000ba60
mov rcx, rax
call fcn.18000de80
mov rdx, rax
lea rcx, [rbp + 0x80]
call fcn.18000b220
nop
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x80]
call fcn.180004720
lea eax, [rbx + 1]
mov ebx, r14d
cmp eax, 0x3e8
cmovl ebx, eax
call fcn.18000ba60
mov rcx, rax
mov r9d, ebx
lea r8, str.66918c
lea rdx, str.Setting
call fcn.1800041a0
cmp qword [rbp + 0x30], 0
je 0x18000b9c9
mov qword [rbp - 0x68], 7
mov qword [rbp - 0x70], r14
mov word [rbp - 0x80], r14w
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 0x80]
call fcn.180004af0
nop
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rcx, qword [rbp - 0x80]
call fcn.180006960
test eax, eax
jne 0x18000b9bf
mov qword [rsp + 0x58], 7
mov qword [rsp + 0x50], r14
mov word [rsp + 0x40], r14w
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 0x80]
lea rcx, [rsp + 0x40]
call fcn.180004af0
nop
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rcx, qword [rsp + 0x40]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x18000b6ee
lea rdi, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae rdi, qword [rbp - 0x60]
lea rbx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rbx, qword [rsp + 0x40]
call fcn.18000ba60
mov rcx, rax
mov r8, rdi
mov rdx, rbx
call fcn.18000de70
test eax, eax
jne 0x18000b9b4
mov qword [rbp - 8], 0xf
mov qword [rbp - 0x10], r14
mov byte [rbp - 0x20], 0
mov r8d, 0x30
lea rdx, str.281932555036223952635040112612497018500842602929
lea rcx, [rbp - 0x20]
call fcn.180005030
nop
lea rcx, [rbp - 0x20]
test sil, sil
je 0x18000b72d
mov r8d, 0x30
lea rdx, str.281932555036223952635040112612497018500842602929
jmp 0x18000b73a
mov r8d, 0x28
lea rdx, str.1620540613574500132827623163410031632045
call fcn.180005030
lea rdx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rdx, qword [rbp - 0x20]
lea rcx, [rbp + 0x60]
call fcn.18000c3d0
nop
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x78], 0xf
mov qword [rsp + 0x70], r14
mov byte [rsp + 0x60], 0
mov r8d, 1
lea rdx, [0x18005159c]
lea rcx, [rsp + 0x60]
call fcn.180005030
nop
lea rdx, [rbp + 0x60]
cmp qword [rbp + 0x78], 0x10
cmovae rdx, qword [rbp + 0x60]
mov qword [rbp + 0x18], 0xf
mov qword [rbp + 0x10], r14
mov byte [rbp], 0
cmp byte [rdx], 0
jne 0x18000b7b8
mov r8, r14
jmp 0x18000b7ca
or r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x18000b7c0
lea rcx, [rbp]
call fcn.180005030
nop
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x60]
lea rcx, [rbp]
call fcn.18000cdd0
nop
lea rcx, [rbp]
call fcn.180001480
nop
lea rcx, [rsp + 0x60]
call fcn.180001480
mov rbx, qword [rsp + 0x20]
mov rax, qword [rsp + 0x28]
cmp rbx, rax
je 0x18000b995
nop
cmp qword [rbx + 0x18], 0x10
jb 0x18000b81c
mov rdx, qword [rbx]
jmp 0x18000b81f
mov rdx, rbx
mov qword [rsp + 0x78], 0xf
mov qword [rsp + 0x70], r14
mov byte [rsp + 0x60], 0
cmp byte [rdx], 0
jne 0x18000b83c
mov r8, r14
jmp 0x18000b84a
or r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x18000b840
lea rcx, [rsp + 0x60]
call fcn.180005030
nop
lea rdx, [rsp + 0x60]
lea rcx, [rbp]
call fcn.18000d210
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.180001800
lea rcx, [rbp]
call fcn.180001510
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rcx, qword [rbp - 0x80]
call fcn.180006960
nop
lea rcx, [rsp + 0x60]
call fcn.180001480
add rbx, 0x20
mov rax, qword [rsp + 0x28]
cmp rbx, rax
jne 0x18000b810
mov rbx, qword [rsp + 0x20]
cmp rbx, rax
je 0x18000b995
cmp qword [rbx + 0x18], 0x10
jb 0x18000b8c2
mov rdx, qword [rbx]
jmp 0x18000b8c5
mov rdx, rbx
lea rcx, [rsp + 0x60]
call fcn.18000b1e0
nop
lea rdx, [rsp + 0x60]
lea rcx, [rbp]
call fcn.18000d210
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.180001800
lea rcx, [rbp]
call fcn.180001510
call fcn.18000ba60
mov rcx, rax
call fcn.18000de80
cmp word [rax], 0
jne 0x18000b90b
mov r8, r14
jmp 0x18000b91b
or r8, 0xffffffffffffffff
nop
inc r8
cmp word [rax + r8*2], 0
jne 0x18000b910
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.180004c30
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x40]
call fcn.180004720
lea rsi, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae rsi, qword [rbp - 0x60]
lea rdi, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rdi, qword [rsp + 0x40]
call fcn.18000ba60
mov rcx, rax
mov r8, rsi
mov rdx, rdi
call fcn.18000de70
nop
lea rcx, [rsp + 0x60]
test eax, eax
jne 0x18000b98f
call fcn.180001480
add rbx, 0x20
cmp rbx, qword [rsp + 0x28]
jne 0x18000b8b6
jmp 0x18000b995
call fcn.180001480
nop
lea rcx, [rsp + 0x20]
call fcn.18000b280
nop
lea rcx, [rbp + 0x60]
call fcn.180001480
nop
lea rcx, [rbp - 0x20]
call fcn.180001480
nop
lea rcx, [rsp + 0x40]
call fcn.180001510
nop
lea rcx, [rbp - 0x80]
call fcn.180001510
nop
lea rcx, [rbp + 0x80]
call fcn.180001510
nop
lea rcx, [rbp - 0x60]
call fcn.180001510
nop
lea rcx, [rbp + 0x20]
call fcn.180001510
nop
mov r8, qword [rbp - 0x28]
cmp r8, 8
jb 0x18000ba04
inc r8
mov rdx, qword [rbp - 0x40]
lea rcx, [rbp - 0x40]
call fcn.180004d80
mov qword [rbp - 0x28], 7
mov qword [rbp - 0x30], r14
mov word [rbp - 0x40], r14w
mov r8, qword [rbp + 0x58]
cmp r8, 8
jb 0x18000ba2f
inc r8
mov rdx, qword [rbp + 0x40]
lea rcx, [rbp + 0x40]
call fcn.180004d80
mov rcx, qword [rbp + 0xa0]
xor rcx, rsp
call fcn.1800118e0
lea r11, [rsp + 0x1b0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret