Function at 0x1800131f0
Capabilities:
Check if file exists
Delete file
Print debug messages
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r12
push r14
push r15
sub rsp, 0x370
mov rax, qword [0x1800680c0]
xor rax, rsp
mov qword [rsp + 0x360], rax
mov edi, ecx
lea rcx, [0x18006b760]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
je 0x18001323e
lea rcx, [0x18006b760]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
lea rax, vtable.AutoLock.0
mov qword [rsp + 0x50], rax
lea r12, [0x18006b9c0]
mov qword [rsp + 0x58], r12
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
nop
mov dword [0x18006b68c], 1
xor esi, esi
mov ebx, esi
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x328], xmm0
movups xmmword [rsp + 0x338], xmm0
movups xmmword [rsp + 0x348], xmm0
mov word [rsp + 0x358], ax
xorps xmm1, xmm1
movups xmmword [rsp + 0x2f0], xmm1
movups xmmword [rsp + 0x300], xmm1
movups xmmword [rsp + 0x310], xmm1
mov word [rsp + 0x320], ax
mov dword [0x18006b454], edi
cmp dword [0x18006b234], eax
jne 0x1800132f1
mov dword [0x18006b234], 1
mov edx, 0x4e20
lea rcx, [0x180012010]
call fcn.180005310
mov dword [0x180068dd8], esi
mov dword [0x18006b960], esi
mov edi, dword [0x18006b454]
lea r15, vtable.BoosterLog.0
lea r14, [0x18006b480]
nop
cmp ebx, 4
jne 0x180013314
mov eax, esi
test edi, edi
sete al
mov edi, eax
mov dword [0x18006b454], eax
test edi, edi
je 0x180013342
cmp edi, 1
jne 0x18001337a
mov r9d, ebx
lea r8, str.JSBProxyW_d
mov edx, 0x32
lea rcx, [rsp + 0x328]
call fcn.18000f2c0
lea r8, str.JSBProxyW_d.sys
jmp 0x180013365
mov r9d, ebx
lea r8, str.JSBProxyA_d
mov edx, 0x32
lea rcx, [rsp + 0x328]
call fcn.18000f2c0
lea r8, str.JSBProxyA_d.sys
mov r9d, ebx
mov edx, 0x32
lea rcx, [rsp + 0x2f0]
call fcn.18000f2c0
lea r9, [rsp + 0x2f0]
lea r8, [rsp + 0x328]
mov ecx, ebx
call fcn.180010730
test eax, eax
jne 0x1800136a6
call fcn.18001d460
test eax, eax
jne 0x1800135e4
mov dword [0x18006b67c], esi
cmp dword [0x18006b678], esi
jne 0x18001349a
mov dword [0x18006b678], 1
lea rdi, [rsp + 0x60]
mov ecx, 0x283
rep stosb byte [rdi], al
mov dword [rsp + 0xaf], esi
mov eax, 0x17
mov word [rsp + 0x6d], ax
mov byte [rsp + 0x9e], 1
movdqa xmm0, xmmword [0x18005e2f0]
movups xmmword [rsp + 0x9f], xmm0
lea rcx, [rsp + 0x60]
call fcn.18001ec00
lea rdi, [rsp + 0x60]
xor eax, eax
mov ecx, 0x283
rep stosb byte [rdi], al
mov ebx, 2
mov word [rsp + 0x6d], bx
mov dword [rsp + 0x60], 6
mov byte [rsp + 0x68], bl
mov eax, dword [0x18006b684]
mov dword [rsp + 0x2df], eax
mov dword [rsp + 0xaf], 0x10
lea rcx, str.127.0.0.1
call qword [sym.imp.WS2_32.dll_inet_addr]
mov dword [rsp + 0x8f], eax
lea rcx, str.255.0.0.0
call qword [sym.imp.WS2_32.dll_inet_addr]
mov dword [rsp + 0x9f], eax
lea rcx, [rsp + 0x60]
call fcn.18001ec00
lea rdi, [rsp + 0x60]
xor eax, eax
mov ecx, 0x283
rep stosb byte [rdi], al
mov dword [rsp + 0xaf], esi
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x64], eax
lea rcx, [rsp + 0x60]
call fcn.18001ec00
jmp 0x18001349f
mov ebx, 2
call fcn.180012d30
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], esi
xor r9d, r9d
lea r8, [0x180012c00]
xor edx, edx
xor ecx, ecx
call fcn.1800302f4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rsp + 0x40], esi
lea rcx, [0x18006ba90]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [0x180068dc8]
cmp rcx, 0xffffffffffffffff
jne 0x1800134f8
lea rcx, [0x18006ba90]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ebx, esi
jmp 0x18001355c
mov qword [rsp + 0x38], rsi
lea rax, [rsp + 0x44]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 4
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x22019c
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x18001354a
cmp dword [rsp + 0x44], esi
jbe 0x18001354a
lea rcx, [0x18006ba90]
cmp dword [rsp + 0x40], 2
jne 0x180013551
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x18001355c
lea rcx, [0x18006ba90]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ebx, 1
mov rdi, qword [0x18006b968]
test rdi, rdi
jne 0x1800135ab
lea rdx, [0x180050d6e]
mov ecx, 8
call fcn.180023cf0
mov rdi, rax
test rax, rax
je 0x180013586
mov qword [rax], r15
jmp 0x180013589
mov rdi, rsi
mov rcx, qword [0x18006b968]
cmp rdi, rcx
je 0x1800135a4
test rcx, rcx
je 0x1800135a4
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
mov qword [0x18006b968], rdi
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], ebx
mov r9d, dword [0x18006b454]
lea r8, [0x18005d740]
mov edx, dword [0x18006b688]
mov rcx, rdi
call fcn.18000f4b0
nop
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, 1
jmp 0x18001378a
mov r9, r14
lea r8, [0x18005d790]
mov edx, 0x350
lea rcx, str.C:UserscjsworkJSBPartTunnelJSBProxyJSBProxy.cpp
call fcn.180004d20
mov rdi, qword [0x18006b968]
test rdi, rdi
jne 0x18001364e
lea rdx, [0x180050d6e]
mov ecx, 8
call fcn.180023cf0
mov rdi, rax
test rax, rax
je 0x180013629
mov qword [rax], r15
jmp 0x18001362c
mov rdi, rsi
mov rcx, qword [0x18006b968]
cmp rdi, rcx
je 0x180013647
test rcx, rcx
je 0x180013647
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
mov qword [0x18006b968], rdi
mov r9, r14
lea r8, [0x18005d790]
mov edx, dword [0x18006b688]
mov rcx, rdi
call fcn.18000f4b0
call fcn.18000fe10
cmp dword [0x18006b67c], esi
jne 0x180013684
mov edx, 0x2710
lea rcx, [0x180010590]
call fcn.180005310
mov rcx, r14
call fcn.180001d50
mov rcx, r14
call fcn.180001e60
inc ebx
cmp ebx, 5
jge 0x1800136a6
mov edi, dword [0x18006b454]
jmp 0x180013300
mov edx, 0x3a98
lea rcx, [0x1800117e0]
call fcn.180005310
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], esi
xor r9d, r9d
lea r8, [0x180012c00]
xor edx, edx
xor ecx, ecx
call fcn.1800302f4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [0x18005d7d0]
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov rdi, qword [0x18006b968]
test rdi, rdi
jne 0x180013738
lea rdx, [0x180050d6e]
mov ecx, 8
call fcn.180023cf0
mov rdi, rax
test rax, rax
je 0x180013713
mov qword [rax], r15
jmp 0x180013716
mov rdi, rsi
mov rcx, qword [0x18006b968]
cmp rdi, rcx
je 0x180013731
test rcx, rcx
je 0x180013731
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
mov qword [0x18006b968], rdi
lea r8, [0x18005d808]
mov edx, dword [0x18006b688]
mov rcx, rdi
call fcn.18000f4b0
mov r9d, 0x40010
lea r8, [0x18005d83c]
lea rdx, [0x18005d848]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
nop
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor eax, eax
jmp 0x18001378a
mov rcx, qword [rsp + 0x360]
xor rcx, rsp
call fcn.180023640
lea r11, [rsp + 0x370]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r12
ret