Function at 0x18000b2b0
Capabilities:
Check if file exists

Disassembly:
mov rax, rsp
push rbp
lea rbp, [rax - 0xb8]
sub rsp, 0x1b0
mov qword [rsp + 0x38], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r14
mov rax, qword [0x18006e080]
xor rax, rsp
mov qword [rbp + 0xa0], rax
movzx esi, dl
call fcn.18000ba50
test rax, rax
je 0x18000b30b
mov r8, qword [rax]
mov rcx, rax
call qword [r8 + 0x18]
test al, al
jne 0x18000b9cf
mov qword [rbp + 0x58], 7
xor r14d, r14d
mov qword [rbp + 0x50], r14
mov word [rbp + 0x40], r14w
lea r8d, [r14 + 0xd]
lea rdx, str.WinPetrNs.exe
lea rcx, [rbp + 0x40]
call fcn.180004c30
nop
mov qword [rbp - 0x28], 7
mov qword [rbp - 0x30], r14
mov word [rbp - 0x40], r14w
lea r8d, [r14 + 0xc]
lea rdx, str.WinTpwer.exe
lea rcx, [rbp - 0x40]
call fcn.180004c30
nop
cmp qword [rbp + 0x50], r14
je 0x18000b98a
cmp qword [rbp - 0x30], r14
je 0x18000b98a
call fcn.18000ba00
mov rcx, rax
call fcn.180003260
test al, al
jne 0x18000b98a
call fcn.18000ba00
mov rcx, rax
call fcn.180003030
test al, al
jne 0x18000b98a
xor ecx, ecx
call fcn.180037b00
mov rdi, rax
call fcn.18000ba00
mov rcx, rax
lea r9d, [r14 + 1]
lea r8, str.08b675
lea rdx, str.Setting
call fcn.1800019c0
test eax, eax
jne 0x18000b475
call fcn.18000ba00
mov rcx, rax
call fcn.180003220
test al, al
jne 0x18000b475
call fcn.18000ba00
mov rcx, rax
xor r9d, r9d
lea r8, str.219d64
lea rdx, str.Setting
call fcn.1800019c0
mov ebx, eax
cmp eax, 0x64
jg 0x18000b475
call fcn.18000ba00
mov rcx, rax
xor r9d, r9d
lea r8, str.b96d63
lea rdx, str.Setting
call fcn.1800019c0
mov ecx, edi
sub ecx, eax
mov eax, ecx
cdq
xor eax, edx
sub eax, edx
cmp eax, 0x708
jl 0x18000b452
call fcn.18000ba00
mov rcx, rax
lea r9d, [rbx + 1]
lea r8, str.219d64
lea rdx, str.Setting
call fcn.1800041a0
call fcn.18000ba00
mov rcx, rax
mov r9d, edi
lea r8, str.b96d63
lea rdx, str.Setting
call fcn.1800041a0
jmp 0x18000b98a
test sil, sil
jne 0x18000b4cd
call fcn.18000ba00
mov rcx, rax
or r9d, 0xffffffff
lea r8, str.2a4fe3
lea rdx, str.Setting
call fcn.1800019c0
mov ecx, edi
sub ecx, eax
mov eax, ecx
cdq
xor eax, edx
sub eax, edx
cmp eax, 0x708
jle 0x18000b98a
call fcn.18000ba00
mov rcx, rax
mov r9d, edi
lea r8, str.2a4fe3
lea rdx, str.Setting
call fcn.1800041a0
mov qword [rbp + 0x38], 7
mov qword [rbp + 0x30], r14
mov word [rbp + 0x20], r14w
mov qword [rbp - 0x48], 7
mov qword [rbp - 0x50], r14
mov word [rbp - 0x60], r14w
xor sil, sil
call fcn.18000ba00
mov rcx, rax
xor r9d, r9d
lea r8, str.66918c
lea rdx, str.Setting
call fcn.1800019c0
mov ebx, eax
lea rcx, [rbp + 0x20]
test al, 1
jne 0x18000b538
mov sil, 1
mov r8d, 0xd
lea rdx, str.WinPetrNs.exe
call fcn.180004c30
lea rdx, str.6b4fa8
jmp 0x18000b551
mov r8d, 0xc
lea rdx, str.WinTpwer.exe
call fcn.180004c30
lea rdx, str.9f10f3
mov r8d, 6
lea rcx, [rbp - 0x60]
call fcn.180004c30
call fcn.18000ba00
mov rcx, rax
call fcn.18000de90
mov rdx, rax
lea rcx, [rbp + 0x80]
call fcn.18000b1c0
nop
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x80]
call fcn.180004720
lea eax, [rbx + 1]
mov ebx, r14d
cmp eax, 0x3e8
cmovl ebx, eax
call fcn.18000ba00
mov rcx, rax
mov r9d, ebx
lea r8, str.66918c
lea rdx, str.Setting
call fcn.1800041a0
cmp qword [rbp + 0x30], 0
je 0x18000b969
mov qword [rbp - 0x68], 7
mov qword [rbp - 0x70], r14
mov word [rbp - 0x80], r14w
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 0x80]
call fcn.180004af0
nop
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rcx, qword [rbp - 0x80]
call fcn.1800068f0
test eax, eax
jne 0x18000b95f
mov qword [rsp + 0x58], 7
mov qword [rsp + 0x50], r14
mov word [rsp + 0x40], r14w
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 0x80]
lea rcx, [rsp + 0x40]
call fcn.180004af0
nop
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rcx, qword [rsp + 0x40]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x18000b68e
lea rdi, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae rdi, qword [rbp - 0x60]
lea rbx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rbx, qword [rsp + 0x40]
call fcn.18000ba00
mov rcx, rax
mov r8, rdi
mov rdx, rbx
call fcn.18000de80
test eax, eax
jne 0x18000b954
mov qword [rbp - 8], 0xf
mov qword [rbp - 0x10], r14
mov byte [rbp - 0x20], 0
mov r8d, 0x30
lea rdx, str.955073594836064150654840111030516802483242582424
lea rcx, [rbp - 0x20]
call fcn.180005030
nop
lea rcx, [rbp - 0x20]
test sil, sil
je 0x18000b6cd
mov r8d, 0x30
lea rdx, str.955073594836064150654840111030516802483242582424
jmp 0x18000b6da
mov r8d, 0x28
lea rdx, str.2467704612404722126856442820702228203147
call fcn.180005030
lea rdx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rdx, qword [rbp - 0x20]
lea rcx, [rbp + 0x60]
call fcn.18000c3e0
nop
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x78], 0xf
mov qword [rsp + 0x70], r14
mov byte [rsp + 0x60], 0
mov r8d, 1
lea rdx, [0x18005159c]
lea rcx, [rsp + 0x60]
call fcn.180005030
nop
lea rdx, [rbp + 0x60]
cmp qword [rbp + 0x78], 0x10
cmovae rdx, qword [rbp + 0x60]
mov qword [rbp + 0x18], 0xf
mov qword [rbp + 0x10], r14
mov byte [rbp], 0
cmp byte [rdx], 0
jne 0x18000b758
mov r8, r14
jmp 0x18000b76a
or r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x18000b760
lea rcx, [rbp]
call fcn.180005030
nop
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x60]
lea rcx, [rbp]
call fcn.18000cde0
nop
lea rcx, [rbp]
call fcn.180001480
nop
lea rcx, [rsp + 0x60]
call fcn.180001480
mov rbx, qword [rsp + 0x20]
mov rax, qword [rsp + 0x28]
cmp rbx, rax
je 0x18000b935
nop
cmp qword [rbx + 0x18], 0x10
jb 0x18000b7bc
mov rdx, qword [rbx]
jmp 0x18000b7bf
mov rdx, rbx
mov qword [rsp + 0x78], 0xf
mov qword [rsp + 0x70], r14
mov byte [rsp + 0x60], 0
cmp byte [rdx], 0
jne 0x18000b7dc
mov r8, r14
jmp 0x18000b7ea
or r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x18000b7e0
lea rcx, [rsp + 0x60]
call fcn.180005030
nop
lea rdx, [rsp + 0x60]
lea rcx, [rbp]
call fcn.18000d220
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.180001800
lea rcx, [rbp]
call fcn.180001510
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rcx, qword [rbp - 0x80]
call fcn.1800068f0
nop
lea rcx, [rsp + 0x60]
call fcn.180001480
add rbx, 0x20
mov rax, qword [rsp + 0x28]
cmp rbx, rax
jne 0x18000b7b0
mov rbx, qword [rsp + 0x20]
cmp rbx, rax
je 0x18000b935
cmp qword [rbx + 0x18], 0x10
jb 0x18000b862
mov rdx, qword [rbx]
jmp 0x18000b865
mov rdx, rbx
lea rcx, [rsp + 0x60]
call fcn.18000b180
nop
lea rdx, [rsp + 0x60]
lea rcx, [rbp]
call fcn.18000d220
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.180001800
lea rcx, [rbp]
call fcn.180001510
call fcn.18000ba00
mov rcx, rax
call fcn.18000de90
cmp word [rax], 0
jne 0x18000b8ab
mov r8, r14
jmp 0x18000b8bb
or r8, 0xffffffffffffffff
nop
inc r8
cmp word [rax + r8*2], 0
jne 0x18000b8b0
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.180004c30
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x40]
call fcn.180004720
lea rsi, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae rsi, qword [rbp - 0x60]
lea rdi, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rdi, qword [rsp + 0x40]
call fcn.18000ba00
mov rcx, rax
mov r8, rsi
mov rdx, rdi
call fcn.18000de80
nop
lea rcx, [rsp + 0x60]
test eax, eax
jne 0x18000b92f
call fcn.180001480
add rbx, 0x20
cmp rbx, qword [rsp + 0x28]
jne 0x18000b856
jmp 0x18000b935
call fcn.180001480
nop
lea rcx, [rsp + 0x20]
call fcn.18000b220
nop
lea rcx, [rbp + 0x60]
call fcn.180001480
nop
lea rcx, [rbp - 0x20]
call fcn.180001480
nop
lea rcx, [rsp + 0x40]
call fcn.180001510
nop
lea rcx, [rbp - 0x80]
call fcn.180001510
nop
lea rcx, [rbp + 0x80]
call fcn.180001510
nop
lea rcx, [rbp - 0x60]
call fcn.180001510
nop
lea rcx, [rbp + 0x20]
call fcn.180001510
nop
mov r8, qword [rbp - 0x28]
cmp r8, 8
jb 0x18000b9a4
inc r8
mov rdx, qword [rbp - 0x40]
lea rcx, [rbp - 0x40]
call fcn.180004d80
mov qword [rbp - 0x28], 7
mov qword [rbp - 0x30], r14
mov word [rbp - 0x40], r14w
mov r8, qword [rbp + 0x58]
cmp r8, 8
jb 0x18000b9cf
inc r8
mov rdx, qword [rbp + 0x40]
lea rcx, [rbp + 0x40]
call fcn.180004d80
mov rcx, qword [rbp + 0xa0]
xor rcx, rsp
call fcn.180011890
lea r11, [rsp + 0x1b0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret