Function at 0x180008ee0
Capabilities:
Check if file exists

Disassembly:
mov rax, rsp
push rbp
push r14
push r15
lea rbp, [rax - 0xd8]
sub rsp, 0x1c0
mov qword [rsp + 0x48], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov rax, qword [0x1800470b0]
xor rax, rsp
mov qword [rbp + 0xb0], rax
movzx esi, dl
mov r14, rcx
call fcn.1800096e0
test rax, rax
je 0x180008f3e
mov r8, qword [rax]
mov rcx, rax
call qword [r8 + 0x18]
test al, al
jne 0x180009648
mov qword [rbp + 0x68], 7
xor r15d, r15d
mov qword [rbp + 0x60], r15
mov word [rbp + 0x50], r15w
lea r8d, [r15 + 0xb]
lea rdx, str.Ruoters.exe
lea rcx, [rbp + 0x50]
call fcn.180002fc0
nop
mov qword [rbp - 0x18], 7
mov qword [rbp - 0x20], r15
mov word [rbp - 0x30], r15w
lea r8d, [r15 + 9]
lea rdx, str.Cerko.exe
lea rcx, [rbp - 0x30]
call fcn.180002fc0
nop
cmp qword [rbp + 0x60], r15
je 0x180009603
cmp qword [rbp - 0x20], r15
je 0x180009603
call fcn.180009690
mov rcx, rax
call fcn.180005350
test al, al
jne 0x180009603
call fcn.180009690
mov rcx, rax
call fcn.180005120
test al, al
jne 0x180009603
xor ecx, ecx
call fcn.18001c0d0
mov rdi, rax
call fcn.180009690
mov rcx, rax
lea r9d, [r15 + 1]
lea r8, str.f85bb
lea rdx, str.QJSetting
call fcn.180003a50
test eax, eax
jne 0x1800090a8
call fcn.180009690
mov rcx, rax
call fcn.180005310
test al, al
jne 0x1800090a8
call fcn.180009690
mov rcx, rax
xor r9d, r9d
lea r8, str.58f59
lea rdx, str.QJSetting
call fcn.180003a50
mov ebx, eax
cmp eax, 0x64
jg 0x1800090a8
call fcn.180009690
mov rcx, rax
xor r9d, r9d
lea r8, str.a0a14
lea rdx, str.QJSetting
call fcn.180003a50
mov ecx, edi
sub ecx, eax
mov eax, ecx
cdq
xor eax, edx
sub eax, edx
cmp eax, 0x708
jl 0x180009085
call fcn.180009690
mov rcx, rax
lea r9d, [rbx + 1]
lea r8, str.58f59
lea rdx, str.QJSetting
call fcn.180006300
call fcn.180009690
mov rcx, rax
mov r9d, edi
lea r8, str.a0a14
lea rdx, str.QJSetting
call fcn.180006300
jmp 0x180009603
test sil, sil
jne 0x180009100
call fcn.180009690
mov rcx, rax
or r9d, 0xffffffff
lea r8, str.46d22
lea rdx, str.QJSetting
call fcn.180003a50
mov ecx, edi
sub ecx, eax
mov eax, ecx
cdq
xor eax, edx
sub eax, edx
cmp eax, 0x708
jle 0x180009603
call fcn.180009690
mov rcx, rax
mov r9d, edi
lea r8, str.46d22
lea rdx, str.QJSetting
call fcn.180006300
mov qword [rbp + 0x48], 7
mov qword [rbp + 0x40], r15
mov word [rbp + 0x30], r15w
mov qword [rbp - 0x78], 7
mov qword [rbp - 0x80], r15
mov word [rsp + 0x70], r15w
xor dil, dil
call fcn.180009690
mov rcx, rax
xor r9d, r9d
lea r8, str.8f167
lea rdx, str.QJSetting
call fcn.180003a50
mov ebx, eax
lea rcx, [rbp + 0x30]
test al, 1
jne 0x18000916c
mov dil, 1
mov r8d, 0xb
lea rdx, str.Ruoters.exe
call fcn.180002fc0
lea rdx, [0x180030f90]
jmp 0x180009185
mov r8d, 9
lea rdx, str.Cerko.exe
call fcn.180002fc0
lea rdx, [0x180030f98]
mov r8d, 3
lea rcx, [rsp + 0x70]
call fcn.180002fc0
call fcn.180009690
mov rcx, rax
call fcn.180003890
mov rdx, rax
lea rcx, [rbp + 0x90]
call fcn.180008df0
nop
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x90]
call fcn.180002d50
lea eax, [rbx + 1]
mov ebx, r15d
cmp eax, 0x3e8
cmovl ebx, eax
call fcn.180009690
mov rcx, rax
mov r9d, ebx
lea r8, str.8f167
lea rdx, str.QJSetting
call fcn.180006300
cmp qword [rbp + 0x40], 0
je 0x1800095e1
mov qword [rbp - 0x38], 7
mov qword [rbp - 0x40], r15
mov word [rbp - 0x50], r15w
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x50]
call fcn.180002e80
nop
lea rcx, [rbp - 0x50]
cmp qword [rbp - 0x38], 8
cmovae rcx, qword [rbp - 0x50]
call fcn.18000c1f0
test eax, eax
jne 0x1800095d7
mov qword [rsp + 0x68], 7
mov qword [rsp + 0x60], r15
mov word [rsp + 0x50], r15w
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 0x90]
lea rcx, [rsp + 0x50]
call fcn.180002e80
nop
lea rcx, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rcx, qword [rsp + 0x50]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1800092ec
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x50]
cmp dword [r14], 0
je 0x1800092bd
cmp qword [rbp - 0x78], 8
cmovae rdx, qword [rsp + 0x70]
cmp qword [rsp + 0x68], 8
cmovae rcx, qword [rsp + 0x50]
mov r8b, 1
call fcn.18000b890
movzx eax, al
jmp 0x1800092e4
cmp qword [rbp - 0x78], 8
cmovae rdx, qword [rsp + 0x70]
cmp qword [rsp + 0x68], 8
cmovae rcx, qword [rsp + 0x50]
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
call fcn.18000b600
test eax, eax
jne 0x1800095cc
mov qword [rbp + 8], 0xf
mov qword [rbp], r15
mov byte [rbp - 0x10], 0
mov r8d, 0x20
lea rdx, str.07237442215325351607544820642126
lea rcx, [rbp - 0x10]
call fcn.180001a10
nop
mov r8d, 0x20
lea rcx, [rbp - 0x10]
test dil, dil
lea rdx, str.07237442215325351607544820642126
jne 0x180009330
lea rdx, str.57049302192539045104462644193030
call fcn.180001a10
lea rdx, [rbp - 0x10]
cmp qword [rbp + 8], 0x10
cmovae rdx, qword [rbp - 0x10]
lea rcx, [rbp + 0x70]
call fcn.18000a3d0
nop
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r15
mov qword [rbp - 0x58], 0xf
mov qword [rbp - 0x60], r15
mov byte [rbp - 0x70], 0
mov r8d, 1
lea rdx, [0x180030fec]
lea rcx, [rbp - 0x70]
call fcn.180001a10
nop
lea rdx, [rbp + 0x70]
cmp qword [rbp + 0x88], 0x10
cmovae rdx, qword [rbp + 0x70]
mov qword [rbp + 0x28], 0xf
mov qword [rbp + 0x20], r15
mov byte [rbp + 0x10], 0
cmp byte [rdx], 0
jne 0x1800093ad
mov r8, r15
jmp 0x1800093bb
or r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x1800093b1
lea rcx, [rbp + 0x10]
call fcn.180001a10
nop
lea r8, [rsp + 0x30]
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x10]
call fcn.18000d8e0
nop
lea rcx, [rbp + 0x10]
call fcn.180001460
nop
lea rcx, [rbp - 0x70]
call fcn.180001460
mov rbx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x38]
cmp rbx, rax
je 0x1800095ad
nop
cmp qword [rbx + 0x18], 0x10
jb 0x18000940c
mov rdx, qword [rbx]
jmp 0x18000940f
mov rdx, rbx
mov qword [rbp - 0x58], 0xf
mov qword [rbp - 0x60], r15
mov byte [rbp - 0x70], 0
cmp byte [rdx], 0
jne 0x180009429
mov r8, r15
jmp 0x18000943a
or r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x180009430
lea rcx, [rbp - 0x70]
call fcn.180001a10
nop
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x10]
call fcn.18000dd20
mov rdx, rax
lea rcx, [rbp - 0x50]
call fcn.180002a70
lea rcx, [rbp + 0x10]
call fcn.180002a10
lea rcx, [rbp - 0x50]
cmp qword [rbp - 0x38], 8
cmovae rcx, qword [rbp - 0x50]
call fcn.18000c1f0
nop
lea rcx, [rbp - 0x70]
call fcn.180001460
add rbx, 0x20
mov rax, qword [rsp + 0x38]
cmp rbx, rax
jne 0x180009400
mov rbx, qword [rsp + 0x30]
cmp rbx, rax
je 0x1800095ad
cmp qword [rbx + 0x18], 0x10
jb 0x1800094af
mov rdx, qword [rbx]
jmp 0x1800094b2
mov rdx, rbx
lea rcx, [rbp - 0x70]
call fcn.180008db0
nop
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x10]
call fcn.18000dd20
mov rdx, rax
lea rcx, [rbp - 0x50]
call fcn.180002a70
lea rcx, [rbp + 0x10]
call fcn.180002a10
call fcn.180009690
mov rcx, rax
call fcn.180003890
cmp word [rax], 0
jne 0x1800094f6
mov r8, r15
jmp 0x18000950b
or r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x180009500
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.180002fc0
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x50]
call fcn.180002d50
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x50]
cmp dword [r14], 0
je 0x180009561
cmp qword [rbp - 0x78], 8
cmovae rdx, qword [rsp + 0x70]
cmp qword [rsp + 0x68], 8
cmovae rcx, qword [rsp + 0x50]
mov r8b, 1
call fcn.18000b890
movzx eax, al
jmp 0x180009589
cmp qword [rbp - 0x78], 8
cmovae rdx, qword [rsp + 0x70]
cmp qword [rsp + 0x68], 8
cmovae rcx, qword [rsp + 0x50]
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
call fcn.18000b600
nop
lea rcx, [rbp - 0x70]
test eax, eax
jne 0x1800095a7
call fcn.180001460
add rbx, 0x20
cmp rbx, qword [rsp + 0x38]
jne 0x1800094a3
jmp 0x1800095ad
call fcn.180001460
nop
lea rcx, [rsp + 0x30]
call fcn.180008e50
nop
lea rcx, [rbp + 0x70]
call fcn.180001460
nop
lea rcx, [rbp - 0x10]
call fcn.180001460
nop
lea rcx, [rsp + 0x50]
call fcn.180002a10
nop
lea rcx, [rbp - 0x50]
call fcn.180002a10
nop
lea rcx, [rbp + 0x90]
call fcn.180002a10
nop
lea rcx, [rsp + 0x70]
call fcn.180002a10
nop
lea rcx, [rbp + 0x30]
call fcn.180002a10
nop
mov r8, qword [rbp - 0x18]
cmp r8, 8
jb 0x18000961d
inc r8
mov rdx, qword [rbp - 0x30]
lea rcx, [rbp - 0x30]
call fcn.180003110
mov qword [rbp - 0x18], 7
mov qword [rbp - 0x20], r15
mov word [rbp - 0x30], r15w
mov r8, qword [rbp + 0x68]
cmp r8, 8
jb 0x180009648
inc r8
mov rdx, qword [rbp + 0x50]
lea rcx, [rbp + 0x50]
call fcn.180003110
mov rcx, qword [rbp + 0xb0]
xor rcx, rsp
call fcn.180014180
lea r11, [rsp + 0x1c0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret