Function at 0x180027ee0
Capabilities:
Delete file

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x248]
sub rsp, 0x320
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
mov rax, qword [0x180143ae0]
xor rax, rsp
mov qword [rbp + 0x1b0], rax
lea r12d, [rcx + 0x7fc]
xor r10d, r10d
mov rbx, r8
mov r15, rdx
mov qword [rsp + 0x48], rbx
mov r13d, ecx
mov r14d, ecx
cmp ecx, r12d
jae 0x180028137
movss xmm8, dword [0x180138aa4]
lea eax, [r10 + 0x77]
movss xmm9, dword [0x180138a90]
mov ecx, 0x6c6f
movss xmm10, dword [0x1801389f0]
xorps xmm7, xmm7
movss xmm11, dword [0x1801389cc]
movss xmm6, dword [rsp + 0x40]
cmp r14d, 0x1a7
ja 0x1800281e6
je 0x1800281dc
cmp r14d, 0xdf
ja 0x180028192
je 0x1800280f7
mov eax, r14d
sub eax, 0x1e
je 0x18002807f
sub eax, 0x65
je 0x180028065
cmp eax, 0x2d
jne 0x180028112
mov esi, r10d
lea rdi, [rbp - 0x50]
nop dword [rax + rax]
mov ebx, 0xaf
cmp ebx, 0xaf
je 0x18002801d
cmp ebx, 0x38bd
je 0x180028006
cmp ebx, 0x70cb
jne 0x180028044
cvttss2si eax, xmm6
mov word [rdi], ax
jmp 0x180028044
comiss xmm7, xmm6
jbe 0x180028010
movaps xmm6, xmm7
jmp 0x180028044
movaps xmm0, xmm8
minss xmm0, xmm6
movaps xmm6, xmm0
jmp 0x180028044
movaps xmm1, xmm10
movd xmm0, esi
divss xmm1, dword [r15]
cvtdq2ps xmm0, xmm0
divss xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
movaps xmm6, xmm0
mulss xmm6, xmm8
addss xmm6, xmm11
add ebx, 0x380e
cmp ebx, 0xa82a
jbe 0x180027fe5
inc esi
add rdi, 2
cmp esi, 0x100
jl 0x180027fe0
jmp 0x180028112
mov eax, dword [0x18012ceb4]
mov dword [rsp + 0x70], eax
movzx eax, byte [0x18012ceb8]
mov byte [rsp + 0x74], al
jmp 0x180028112
cmp byte [0x180143bb9], 0
jne 0x1800280ba
mov ebx, 0xc5
nop dword [rax]
mov eax, ebx
sub eax, 0xc5
je 0x1800280a4
cmp eax, 1
je 0x180028448
jmp 0x1800280b0
xor edx, edx
mov ecx, 0x10001
call fcn.18003e500
inc ebx
cmp ebx, 0xc7
jb 0x180028090
comiss xmm7, dword [r15]
jb 0x180028112
mov ebx, 0xaf
mov eax, ebx
sub eax, 0xaf
je 0x1800280d9
cmp eax, 0xb
je 0x180028448
jmp 0x1800280ea
lea rdx, str.IPDL::PContent::RecvPNeckoConstructor
mov ecx, 0x10004
call fcn.18003e500
add ebx, 0xb
cmp ebx, 0xc5
jb 0x1800280c5
jmp 0x180028112
mov byte [rbp - 0x78], 0
lea rdx, [0x18012cf5c]
mov r8d, 5
lea rcx, [rbp - 0x78]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov eax, 0x77
add r14d, 0x92
mov ecx, 0x6c6f
mov r10d, 0
cmp r14d, r12d
jb 0x180027f90
mov rbx, qword [rsp + 0x48]
lea r14d, [r13 + 0xe]
cmp r13d, r14d
jae 0x180028448
mov r15, qword [rsp + 0x48]
lea esi, [r13 - 0x1e]
mov edi, dword [rsp + 0x40]
lea r12, [0x180000000]
mov edx, 0x73
lea r8d, [rdx - 0x45]
lea r9d, [rdx - 0xf]
nop word [rax + rax]
cmp esi, 0xc7
ja case.0x180028190.14
movzx eax, byte [r12 + rsi + 0x284d4]
mov ecx, dword [r12 + rax*4 + 0x28498]
add rcx, r12
jmp rcx
mov eax, r14d
sub eax, 0x115
je 0x1800281d2
sub eax, 0x2d
je 0x1800281c4
cmp eax, 0x2f
jne 0x180028112
lea r8d, [rax - 0x2d]
lea rdx, [0x18012cf72]
lea rcx, [rbp - 0x73]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
jmp 0x180028112
lea rax, [rbp - 0x50]
mov qword [rsp + 0x50], rax
jmp 0x180028112
mov word [rsp + 0x75], cx
jmp 0x180028112
mov byte [rsp + 0x77], 0
jmp 0x180028117
cmp r14d, 0x295
ja 0x18002825e
je 0x180028251
mov eax, r14d
sub eax, 0x1d4
je 0x18002823a
sub eax, 0x2f
je 0x18002821a
cmp eax, 0x36
mov eax, 0x77
jne 0x180028117
mov word [rsp + 0x77], 0x6f
jmp 0x180028117
mov r8d, 1
mov byte [rbp - 0x71], 0
lea rdx, [0x18012cf7e]
lea rcx, [rbp - 0x71]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
jmp 0x180028112
lea rax, [rbp - 0x50]
mov qword [rsp + 0x58], rax
lea rax, [rbp - 0x50]
mov qword [rsp + 0x60], rax
jmp 0x180028112
mov byte [rbp - 0x70], 0
mov word [rbp - 0x68], ax
jmp 0x180028117
cmp r14d, 0x2cb
je 0x180028290
cmp r14d, 0x35d
jne 0x180028117
mov byte [rsp + 0x79], 0
lea rdx, [0x18012cfa8]
mov r8d, 4
lea rcx, [rsp + 0x70]
jmp 0x18002810c
mov byte [rsp + 0x78], 0x72
jmp 0x180028117
mov rcx, qword [rbx]
mov edx, 2
call r15
jmp 0x180028424
xor r9d, r9d
mov qword [rsp + 0x28], r10
xor edx, edx
mov byte [rbp - 0x80], 0
xor ecx, ecx
mov qword [rsp + 0x20], r10
lea r8d, [r9 + 0x7c]
call fcn.180033470
jmp 0x180028424
mov r8, rbx
mov dword [rsp + 0x68], 0x100
lea rdx, [rsp + 0x50]
mov ecx, 0xde
call fcn.1800549a0
jmp 0x180028424
mov word [rbp - 0x54], r10w
jmp case.0x180028190.14
mov word [rbp - 0x66], dx
mov dword [rbp - 0x64], 0x5f0032
jmp case.0x180028190.14
mov dword [rbp - 0x60], 0x320033
mov word [rbp - 0x5c], r8w
jmp case.0x180028190.14
mov byte [rsp + 0x7e], 0x3f
jmp case.0x180028190.14
mov dword [rbp - 0x58], 0x6c006c
jmp case.0x180028190.14
mov r9d, 0x78
lea r8, [rbp - 0x78]
lea rdx, [rbp - 0x68]
xor ecx, ecx
call fcn.180097890
mov r15, rax
xor r9d, r9d
xor eax, eax
xor r8d, r8d
mov qword [rsp + 0x30], rax
mov rcx, rbx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rax
lea edx, [rax + 0x75]
call fcn.180035860
test al, al
jne 0x180028424
mov ebx, 0x8a
cmp ebx, 0x2d6
ja 0x18002838e
cmp ebx, 0x212
jne 0x1800283c0
mov dword [rsp + 0x40], 0
jmp 0x1800283c0
cmp ebx, 0x39a
je 0x1800283bb
cmp ebx, 0x45e
je 0x1800283ac
cmp ebx, 0x522
je 0x180028448
jmp 0x1800283c0
mov edx, edi
lea rcx, [rsp + 0x40]
call qword [sym.imp.SHELL32.dll_SHGetSettings]
jmp 0x1800283c0
mov edi, 0x200
add ebx, 0xc4
cmp ebx, 0x5e6
jb 0x180028374
jmp 0x180028424
mov word [rbp - 0x5a], r9w
jmp case.0x180028190.14
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
xor r10d, r10d
mov qword [0x180143ba0], r10
jmp 0x180028427
mov byte [rsp + 0x7f], 0x20
jmp case.0x180028190.14
mov rcx, qword [0x180143ba0]
mov edx, 8
mov rcx, qword [rcx + 0x48]
call fcn.1800c9704
jmp 0x180028424
mov r8d, 1
lea rdx, [0x18012cfce]
lea rcx, [rsp + 0x7d]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
xor r10d, r10d
mov r9d, 0x64
lea r8d, [r9 - 0x36]
lea edx, [r9 + 0xf]
mov rbx, qword [rsp + 0x48]
inc r13d
inc esi
cmp r13d, r14d
jb 0x180028170
mov rcx, qword [rbp + 0x1b0]
xor rcx, rsp
call fcn.1800c9c10
lea r11, [rsp + 0x320]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret