Function at 0x18000f2c8
Capabilities:
Delete file

Disassembly:
mov r11, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x190
mov qword [rsp + 0xc0], 0xfffffffffffffffe
mov qword [r11 + 0x20], rbx
mov rax, qword [0x1800754d0]
xor rax, rsp
mov qword [rsp + 0x180], rax
mov rsi, r8
mov r13, rdx
mov r14, rcx
xor r15d, r15d
mov r12d, r15d
mov dword [rsp + 0x34], r15d
lea edi, [r15 + 7]
mov qword [r11 - 0x50], rdi
mov qword [r11 - 0x58], r15
mov word [r11 - 0x68], r15w
add rdx, 0xa8
or rbx, 0xffffffffffffffff
mov r9, rbx
xor r8d, r8d
lea rcx, [r11 - 0x70]
call fcn.1800023b8
nop
lea rdx, [rsp + 0x100]
lea rcx, [rsp + 0x158]
call fcn.180010928
movdqu xmm0, xmmword [rax]
movdqu xmmword [rsp + 0xd0], xmm0
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0x158]
call fcn.1800109a4
movdqu xmm0, xmmword [rax]
movdqu xmmword [rsp + 0xb0], xmm0
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x158]
call fcn.180010928
movdqu xmm0, xmmword [rax]
movdqu xmmword [rsp + 0xe0], xmm0
lea rax, [fcn.18003c7d4]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0xd0]
lea r8, [rsp + 0xb0]
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + 0x110]
call fcn.180011b8c
lea edx, [rdi - 6]
lea rcx, [rsp + 0x88]
call fcn.180038e64
nop
lea rcx, [rsp + 0x160]
cmp qword [rsp + 0x178], 8
cmovae rcx, qword [rsp + 0x160]
cmp qword [rax + 0x20], 0x10
jb 0x18000f40e
mov r8, qword [rax + 8]
jmp 0x18000f412
lea r8, [rax + 8]
mov qword [rsp + 0x20], rcx
mov r9d, 0x32e3
lea rdx, str.https:___hs:_d_globalSmallFile_patch_installer__ls
lea rcx, [rsp + 0x130]
call fcn.180022a24
nop
cmp qword [rsp + 0xa8], 0x10
jb 0x18000f44a
mov rcx, qword [rsp + 0x90]
call fcn.18003c228
mov qword [rsp + 0xa8], 0xf
mov qword [rsp + 0xa0], r15
mov byte [rsp + 0x90], r15b
mov dword [rsp + 0x30], r15d
mov r8, r13
lea rdx, [rsp + 0x60]
mov rcx, r14
call fcn.18000efc4
nop
mov r9, rbx
xor r8d, r8d
mov rdx, rax
mov rcx, rsi
call fcn.1800023b8
nop
cmp qword [rsp + 0x80], 8
jb 0x18000f4a3
mov rcx, qword [rsp + 0x68]
call fcn.18003c228
mov qword [rsp + 0x80], rdi
mov qword [rsp + 0x78], r15
mov word [rsp + 0x68], r15w
cmp qword [rsi + 0x20], 8
jb 0x18000f4c6
lea rbx, [rsi + 8]
mov rbp, qword [rbx]
jmp 0x18000f4cd
lea rbx, [rsi + 8]
mov rbp, rbx
lea rdi, [rsp + 0x138]
cmp qword [rsp + 0x150], 0x10
cmovae rdi, qword [rsp + 0x138]
mov rax, qword [0x180079f58]
cmp rax, r15
jne 0x18000f514
call fcn.18001fb24
mov rcx, rax
lea rdx, str.E2FE52CB
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180079f58], rax
cmp rax, r15
je 0x18000f58c
lea r8, [rsp + 0x30]
mov rdx, rbp
mov rcx, rdi
call rax
cmp eax, r15d
je 0x18000f58c
cmp qword [rsi + 0x20], 8
jb 0x18000f532
mov rdx, qword [rbx]
jmp 0x18000f535
mov rdx, rbx
mov qword [rsp + 0x58], 7
mov qword [rsp + 0x50], r15
mov word [rsp + 0x40], r15w
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rdx
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rcx, [rsp + 0x38]
call fcn.180002a18
nop
mov r12d, 1
mov dword [rsp + 0x34], r12d
lea r8, [rsp + 0x38]
mov rdx, r13
mov rcx, r14
call fcn.18000f0d4
cmp al, r15b
je 0x18000f58c
mov dil, r12b
jmp 0x18000f58f
mov dil, r15b
test r12b, 1
je 0x18000f5a7
cmp qword [rsp + 0x58], 8
jb 0x18000f5a7
mov rcx, qword [rsp + 0x40]
call fcn.18003c228
cmp dil, r15b
je 0x18000f616
cmp qword [rsi + 0x20], 8
jb 0x18000f5b6
mov rbx, qword [rbx]
mov rdx, rbx
lea rcx, str.download_success:_ls
call fcn.180039ab0
nop
cmp qword [rsp + 0x150], 0x10
jb 0x18000f5de
mov rcx, qword [rsp + 0x138]
call fcn.18003c228
mov qword [rsp + 0x150], 0xf
mov qword [rsp + 0x148], r15
mov byte [rsp + 0x138], r15b
cmp qword [rsp + 0x178], 8
jb 0x18000f612
mov rcx, qword [rsp + 0x160]
call fcn.18003c228
mov al, 1
jmp 0x18000f688
mov edx, dword [rsp + 0x30]
lea rcx, str.download_error:_d
call fcn.180039ab0
cmp qword [rsi + 0x20], 8
jb 0x18000f630
mov rbx, qword [rbx]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
nop
cmp qword [rsp + 0x150], 0x10
jb 0x18000f652
mov rcx, qword [rsp + 0x138]
call fcn.18003c228
mov qword [rsp + 0x150], 0xf
mov qword [rsp + 0x148], r15
mov byte [rsp + 0x138], r15b
cmp qword [rsp + 0x178], 8
jb 0x18000f686
mov rcx, qword [rsp + 0x160]
call fcn.18003c228
xor al, al
mov rcx, qword [rsp + 0x180]
xor rcx, rsp
call fcn.18003c1d0
mov rbx, qword [rsp + 0x1e8]
add rsp, 0x190
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret