Function at 0x18000faf0
Capabilities:
Check if file exists

Disassembly:
mov rax, rsp
push rbp
lea rbp, [rax - 0xb8]
sub rsp, 0x1b0
mov qword [rsp + 0x38], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r14
mov rax, qword [0x18004f0b0]
xor rax, rsp
mov qword [rbp + 0xa0], rax
movzx esi, dl
call fcn.180010240
test rax, rax
je 0x18000fb4b
mov r8, qword [rax]
mov rcx, rax
call qword [r8 + 0x18]
test al, al
jne 0x1800101ff
mov qword [rbp + 0x58], 7
xor r14d, r14d
mov qword [rbp + 0x50], r14
mov word [rbp + 0x40], r14w
lea r8d, [r14 + 0xa]
lea rdx, str.Ceallo.exe
lea rcx, [rbp + 0x40]
call fcn.180008580
nop
mov qword [rbp - 0x28], 7
mov qword [rbp - 0x30], r14
mov word [rbp - 0x40], r14w
lea r8d, [r14 + 0xa]
lea rdx, str.Luteic.exe
lea rcx, [rbp - 0x40]
call fcn.180008580
nop
cmp qword [rbp + 0x50], r14
je 0x1800101ba
cmp qword [rbp - 0x30], r14
je 0x1800101ba
call fcn.1800061a0
mov rcx, rax
call fcn.18000c350
test al, al
jne 0x1800101ba
call fcn.1800061a0
mov rcx, rax
call fcn.18000c120
test al, al
jne 0x1800101ba
xor ecx, ecx
call fcn.180021510
mov rdi, rax
call fcn.1800061a0
mov rcx, rax
lea r9d, [r14 + 1]
lea r8, str.08b675
lea rdx, str.Setting
call fcn.18000aab0
test eax, eax
jne 0x18000fcb5
call fcn.1800061a0
mov rcx, rax
call fcn.18000c310
test al, al
jne 0x18000fcb5
call fcn.1800061a0
mov rcx, rax
xor r9d, r9d
lea r8, str.219d64
lea rdx, str.Setting
call fcn.18000aab0
mov ebx, eax
cmp eax, 0x64
jg 0x18000fcb5
call fcn.1800061a0
mov rcx, rax
xor r9d, r9d
lea r8, str.b96d63
lea rdx, str.Setting
call fcn.18000aab0
mov ecx, edi
sub ecx, eax
mov eax, ecx
cdq
xor eax, edx
sub eax, edx
cmp eax, 0x708
jl 0x18000fc92
call fcn.1800061a0
mov rcx, rax
lea r9d, [rbx + 1]
lea r8, str.219d64
lea rdx, str.Setting
call fcn.18000d250
call fcn.1800061a0
mov rcx, rax
mov r9d, edi
lea r8, str.b96d63
lea rdx, str.Setting
call fcn.18000d250
jmp 0x1800101ba
test sil, sil
jne 0x18000fd0d
call fcn.1800061a0
mov rcx, rax
or r9d, 0xffffffff
lea r8, str.2a4fe3
lea rdx, str.Setting
call fcn.18000aab0
mov ecx, edi
sub ecx, eax
mov eax, ecx
cdq
xor eax, edx
sub eax, edx
cmp eax, 0x708
jle 0x1800101ba
call fcn.1800061a0
mov rcx, rax
mov r9d, edi
lea r8, str.2a4fe3
lea rdx, str.Setting
call fcn.18000d250
mov qword [rbp + 0x38], 7
mov qword [rbp + 0x30], r14
mov word [rbp + 0x20], r14w
mov qword [rbp - 0x48], 7
mov qword [rbp - 0x50], r14
mov word [rbp - 0x60], r14w
xor sil, sil
call fcn.1800061a0
mov rcx, rax
xor r9d, r9d
lea r8, str.66918c
lea rdx, str.Setting
call fcn.18000aab0
mov ebx, eax
mov r8d, 0xa
lea rcx, [rbp + 0x20]
test al, 1
jne 0x18000fd78
mov sil, 1
lea rdx, str.Ceallo.exe
call fcn.180008580
lea rdx, str.6b4fa8
jmp 0x18000fd8b
lea rdx, str.Luteic.exe
call fcn.180008580
lea rdx, str.9f10f3
mov r8d, 6
lea rcx, [rbp - 0x60]
call fcn.180008580
call fcn.1800061a0
mov rcx, rax
call fcn.18000a9f0
mov rdx, rax
lea rcx, [rbp + 0x80]
call fcn.180004e00
nop
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x80]
call fcn.180008170
lea eax, [rbx + 1]
mov ebx, r14d
cmp eax, 0x3e8
cmovl ebx, eax
call fcn.1800061a0
mov rcx, rax
mov r9d, ebx
lea r8, str.66918c
lea rdx, str.Setting
call fcn.18000d250
cmp qword [rbp + 0x30], 0
je 0x180010199
mov qword [rbp - 0x68], 7
mov qword [rbp - 0x70], r14
mov word [rbp - 0x80], r14w
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 0x80]
call fcn.180008410
nop
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rcx, qword [rbp - 0x80]
call fcn.180011b50
test eax, eax
jne 0x18001018f
mov qword [rsp + 0x58], 7
mov qword [rsp + 0x50], r14
mov word [rsp + 0x40], r14w
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 0x80]
lea rcx, [rsp + 0x40]
call fcn.180008410
nop
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rcx, qword [rsp + 0x40]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x18000fec8
lea rdi, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae rdi, qword [rbp - 0x60]
lea rbx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rbx, qword [rsp + 0x40]
call fcn.1800061a0
mov rcx, rax
mov r8, rdi
mov rdx, rbx
call fcn.180017190
test eax, eax
jne 0x180010184
mov qword [rbp - 8], 0xf
mov qword [rbp - 0x10], r14
mov byte [rbp - 0x20], 0
mov r8d, 0x28
lea rdx, str.9506002904565941122565703411594868040202
lea rcx, [rbp - 0x20]
call fcn.180009430
nop
mov r8d, 0x28
lea rcx, [rbp - 0x20]
test sil, sil
lea rdx, str.9506002904565941122565703411594868040202
jne 0x18000ff0c
lea rdx, str.5731157053664939414724206926493141591515
call fcn.180009430
lea rdx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rdx, qword [rbp - 0x20]
lea rcx, [rbp + 0x60]
call fcn.180010b70
nop
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x78], 0xf
mov qword [rsp + 0x70], r14
mov byte [rsp + 0x60], 0
mov r8d, 1
lea rdx, [0x180037434]
lea rcx, [rsp + 0x60]
call fcn.180009430
nop
lea rdx, [rbp + 0x60]
cmp qword [rbp + 0x78], 0x10
cmovae rdx, qword [rbp + 0x60]
mov qword [rbp + 0x18], 0xf
mov qword [rbp + 0x10], r14
mov byte [rbp], 0
cmp byte [rdx], 0
jne 0x18000ff8a
mov r8, r14
jmp 0x18000ff9a
or r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rdx + r8], 0
jne 0x18000ff90
lea rcx, [rbp]
call fcn.180009430
nop
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x60]
lea rcx, [rbp]
call fcn.1800126c0
nop
lea rcx, [rbp]
call fcn.180008e00
nop
lea rcx, [rsp + 0x60]
call fcn.180008e00
mov rbx, qword [rsp + 0x20]
mov rax, qword [rsp + 0x28]
cmp rbx, rax
je 0x180010165
nop
cmp qword [rbx + 0x18], 0x10
jb 0x18000ffec
mov rdx, qword [rbx]
jmp 0x18000ffef
mov rdx, rbx
mov qword [rsp + 0x78], 0xf
mov qword [rsp + 0x70], r14
mov byte [rsp + 0x60], 0
cmp byte [rdx], 0
jne 0x18001000c
mov r8, r14
jmp 0x18001001a
or r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x180010010
lea rcx, [rsp + 0x60]
call fcn.180009430
nop
lea rdx, [rsp + 0x60]
lea rcx, [rbp]
call fcn.180012b00
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.180005180
lea rcx, [rbp]
call fcn.180005000
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rcx, qword [rbp - 0x80]
call fcn.180011b50
nop
lea rcx, [rsp + 0x60]
call fcn.180008e00
add rbx, 0x20
mov rax, qword [rsp + 0x28]
cmp rbx, rax
jne 0x18000ffe0
mov rbx, qword [rsp + 0x20]
cmp rbx, rax
je 0x180010165
cmp qword [rbx + 0x18], 0x10
jb 0x180010092
mov rdx, qword [rbx]
jmp 0x180010095
mov rdx, rbx
lea rcx, [rsp + 0x60]
call fcn.18000fa20
nop
lea rdx, [rsp + 0x60]
lea rcx, [rbp]
call fcn.180012b00
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.180005180
lea rcx, [rbp]
call fcn.180005000
call fcn.1800061a0
mov rcx, rax
call fcn.18000a9f0
cmp word [rax], 0
jne 0x1800100db
mov r8, r14
jmp 0x1800100eb
or r8, 0xffffffffffffffff
nop
inc r8
cmp word [rax + r8*2], 0
jne 0x1800100e0
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.180008580
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x40]
call fcn.180008170
lea rsi, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae rsi, qword [rbp - 0x60]
lea rdi, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rdi, qword [rsp + 0x40]
call fcn.1800061a0
mov rcx, rax
mov r8, rsi
mov rdx, rdi
call fcn.180017190
nop
lea rcx, [rsp + 0x60]
test eax, eax
jne 0x18001015f
call fcn.180008e00
add rbx, 0x20
cmp rbx, qword [rsp + 0x28]
jne 0x180010086
jmp 0x180010165
call fcn.180008e00
nop
lea rcx, [rsp + 0x20]
call fcn.18000fa60
nop
lea rcx, [rbp + 0x60]
call fcn.180008e00
nop
lea rcx, [rbp - 0x20]
call fcn.180008e00
nop
lea rcx, [rsp + 0x40]
call fcn.180005000
nop
lea rcx, [rbp - 0x80]
call fcn.180005000
nop
lea rcx, [rbp + 0x80]
call fcn.180005000
nop
lea rcx, [rbp - 0x60]
call fcn.180005000
nop
lea rcx, [rbp + 0x20]
call fcn.180005000
nop
mov r8, qword [rbp - 0x28]
cmp r8, 8
jb 0x1800101d4
inc r8
mov rdx, qword [rbp - 0x40]
lea rcx, [rbp - 0x40]
call fcn.180008740
mov qword [rbp - 0x28], 7
mov qword [rbp - 0x30], r14
mov word [rbp - 0x40], r14w
mov r8, qword [rbp + 0x58]
cmp r8, 8
jb 0x1800101ff
inc r8
mov rdx, qword [rbp + 0x40]
lea rcx, [rbp + 0x40]
call fcn.180008740
mov rcx, qword [rbp + 0xa0]
xor rcx, rsp
call fcn.180019490
lea r11, [rsp + 0x1b0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret