Function at 0x180014da0
Capabilities:
Check if file exists
Print debug messages

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xf0
mov qword [rsp + 0x30], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x1800a21e8]
xor rax, rsp
mov qword [rbp + 0x27], rax
movzx r14d, dl
mov r15, rcx
call fcn.180014880
mov rcx, rax
call fcn.18000a620
test al, al
jne 0x18001527f
call fcn.180014880
mov rcx, rax
lea rdx, [rbp - 0x39]
call fcn.1800095f0
nop
call fcn.180014880
mov rcx, rax
movzx r8d, r14b
lea rdx, [rbp + 7]
call fcn.18000a360
nop
xor r12d, r12d
mov qword [rbp - 0x69], r12
mov qword [rbp - 0x61], r12
mov rdi, qword [rbp + 0x17]
lea rsi, [rbp + 7]
cmp qword [rbp + 0x1f], 8
cmovae rsi, qword [rbp + 7]
movabs r13, 0x7ffffffffffffffe
cmp rdi, 8
jae 0x180014e5c
movups xmm0, xmmword [rsi]
movups xmmword [rbp - 0x79], xmm0
mov qword [rbp - 0x61], 7
jmp 0x180014e92
mov rbx, rdi
or rbx, 7
cmp rbx, r13
cmova rbx, r13
lea rdx, [rbx + 1]
lea rcx, [rbp - 0x79]
call fcn.180003fd0
mov qword [rbp - 0x79], rax
lea r8, [rdi*2 + 2]
mov rdx, rsi
mov rcx, rax
call fcn.1800481e0
mov qword [rbp - 0x61], rbx
mov qword [rbp - 0x69], rdi
lea rcx, [rbp - 0x79]
call fcn.1800076f0
mov rcx, rax
call fcn.180022620
test eax, eax
jne 0x1800150a6
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x69], xmm0
mov rdi, qword [rbp - 0x29]
lea rsi, [rbp - 0x39]
cmp qword [rbp - 0x21], 8
cmovae rsi, qword [rbp - 0x39]
cmp rdi, 8
jae 0x180014ee0
movups xmm0, xmmword [rsi]
movups xmmword [rbp - 0x79], xmm0
mov qword [rbp - 0x61], 7
jmp 0x180014f16
mov rbx, rdi
or rbx, 7
cmp rbx, r13
cmova rbx, r13
lea rdx, [rbx + 1]
lea rcx, [rbp - 0x79]
call fcn.180003fd0
mov qword [rbp - 0x79], rax
lea r8, [rdi*2 + 2]
mov rdx, rsi
mov rcx, rax
call fcn.1800481e0
mov qword [rbp - 0x61], rbx
mov qword [rbp - 0x69], rdi
mov r8d, 0xc
lea rdx, str.HaoKaTiy.exe
lea rcx, [rbp - 0x79]
call fcn.180004040
lea rdx, str.CMD_REPORT_SHELL
lea rcx, [rbp - 0x19]
call fcn.18000f350
nop
cmp qword [rax + 0x18], 8
jb 0x180014f4b
mov rax, qword [rax]
movzx r9d, r14b
xor r9d, 1
inc r9d
mov r8, rax
lea rdx, [0x18007a0a8]
lea rcx, [rbp - 0x59]
call fcn.180007120
nop
mov rdx, qword [rbp - 1]
cmp rdx, 8
jb 0x180014faa
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180014fa5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800152b2
call fcn.18002a370
movdqa xmm0, xmmword [0x1800783e0]
movdqu xmmword [rbp - 9], xmm0
mov word [rbp - 0x19], r12w
lea rcx, [rbp - 0x59]
cmp qword [rbp - 0x41], 8
cmovae rcx, qword [rbp - 0x59]
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea rcx, [rbp - 0x79]
cmp qword [rbp - 0x61], 8
cmovae rcx, qword [rbp - 0x79]
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea rdx, [rbp - 0x79]
cmp qword [rbp - 0x61], 8
cmovae rdx, qword [rbp - 0x79]
lea rcx, [rbp - 0x59]
cmp qword [rbp - 0x41], 8
cmovae rcx, qword [rbp - 0x59]
mov dword [rsp + 0x20], r12d
mov r9d, 0xffffffff
xor r8d, r8d
call fcn.180022440
nop
mov rdx, qword [rbp - 0x41]
cmp rdx, 8
jb 0x180015054
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001504f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800152b8
call fcn.18002a370
movdqa xmm0, xmmword [0x1800783e0]
movdqu xmmword [rbp - 0x49], xmm0
mov word [rbp - 0x59], r12w
mov rdx, qword [rbp - 0x61]
cmp rdx, 8
jb 0x1800150a6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x79]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800150a1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800152be
call fcn.18002a370
xor edx, edx
mov rcx, r15
call fcn.1800152e0
test al, al
jne 0x1800151f1
xor edx, edx
mov rcx, r15
call fcn.180014920
mov r8d, 0xc
lea rdx, str.HaoKaTiy.exe
lea rcx, [rbp - 0x39]
call fcn.180004040
lea rcx, [rbp - 0x39]
cmp qword [rbp - 0x21], 8
cmovae rcx, qword [rbp - 0x39]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1800151f1
lea rdx, str.CMD_SOFT_DISPATCH
lea rcx, [rbp - 0x19]
call fcn.18000f350
nop
cmp qword [rax + 0x18], 8
jb 0x18001510f
mov rax, qword [rax]
movzx r9d, r14b
xor r9d, 1
inc r9d
mov r8, rax
lea rdx, str._s_d
lea rcx, [rbp - 0x59]
call fcn.180007120
nop
mov rdx, qword [rbp - 1]
cmp rdx, 8
jb 0x18001516e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180015169
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800152c4
call fcn.18002a370
movdqa xmm0, xmmword [0x1800783e0]
movdqu xmmword [rbp - 9], xmm0
mov word [rbp - 0x19], r12w
lea rdx, [rbp - 0x39]
cmp qword [rbp - 0x21], 8
cmovae rdx, qword [rbp - 0x39]
lea rcx, [rbp - 0x59]
cmp qword [rbp - 0x41], 8
cmovae rcx, qword [rbp - 0x59]
mov dword [rsp + 0x20], r12d
mov r9d, 0xffffffff
xor r8d, r8d
call fcn.180022440
nop
mov rdx, qword [rbp - 0x41]
cmp rdx, 8
jb 0x1800151f1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800151eb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800152ca
call fcn.18002a370
nop
mov rdx, qword [rbp + 0x1f]
cmp rdx, 8
jb 0x180015231
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001522c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800152d0
call fcn.18002a370
movdqa xmm0, xmmword [0x1800783e0]
movdqu xmmword [rbp + 0x17], xmm0
mov word [rbp + 7], r12w
mov rdx, qword [rbp - 0x21]
cmp rdx, 8
jb 0x18001527f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001527a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800152ac
call fcn.18002a370
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.18002a480
lea r11, [rsp + 0xf0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.18004bf34
nop
call fcn.18004bf34
nop
call fcn.18004bf34
nop
call fcn.18004bf34
nop
call fcn.18004bf34
nop
call fcn.18004bf34
nop
call fcn.18004bf34
int3