Function at 0x1800149d0
Capabilities:
Check if file exists
Print debug messages

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xf0
mov qword [rsp + 0x30], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x1800a21e8]
xor rax, rsp
mov qword [rbp + 0x27], rax
movzx r14d, dl
mov r15, rcx
call fcn.1800144b0
mov rcx, rax
call fcn.18000a620
test al, al
jne 0x180014eaf
call fcn.1800144b0
mov rcx, rax
lea rdx, [rbp - 0x39]
call fcn.1800095f0
nop
call fcn.1800144b0
mov rcx, rax
movzx r8d, r14b
lea rdx, [rbp + 7]
call fcn.18000a360
nop
xor r12d, r12d
mov qword [rbp - 0x69], r12
mov qword [rbp - 0x61], r12
mov rdi, qword [rbp + 0x17]
lea rsi, [rbp + 7]
cmp qword [rbp + 0x1f], 8
cmovae rsi, qword [rbp + 7]
movabs r13, 0x7ffffffffffffffe
cmp rdi, 8
jae 0x180014a8c
movups xmm0, xmmword [rsi]
movups xmmword [rbp - 0x79], xmm0
mov qword [rbp - 0x61], 7
jmp 0x180014ac2
mov rbx, rdi
or rbx, 7
cmp rbx, r13
cmova rbx, r13
lea rdx, [rbx + 1]
lea rcx, [rbp - 0x79]
call fcn.180003fd0
mov qword [rbp - 0x79], rax
lea r8, [rdi*2 + 2]
mov rdx, rsi
mov rcx, rax
call fcn.180047dd0
mov qword [rbp - 0x61], rbx
mov qword [rbp - 0x69], rdi
lea rcx, [rbp - 0x79]
call fcn.1800076f0
mov rcx, rax
call fcn.1800222d0
test eax, eax
jne 0x180014cd6
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x69], xmm0
mov rdi, qword [rbp - 0x29]
lea rsi, [rbp - 0x39]
cmp qword [rbp - 0x21], 8
cmovae rsi, qword [rbp - 0x39]
cmp rdi, 8
jae 0x180014b10
movups xmm0, xmmword [rsi]
movups xmmword [rbp - 0x79], xmm0
mov qword [rbp - 0x61], 7
jmp 0x180014b46
mov rbx, rdi
or rbx, 7
cmp rbx, r13
cmova rbx, r13
lea rdx, [rbx + 1]
lea rcx, [rbp - 0x79]
call fcn.180003fd0
mov qword [rbp - 0x79], rax
lea r8, [rdi*2 + 2]
mov rdx, rsi
mov rcx, rax
call fcn.180047dd0
mov qword [rbp - 0x61], rbx
mov qword [rbp - 0x69], rdi
mov r8d, 0xa
lea rdx, str.Female.exe
lea rcx, [rbp - 0x79]
call fcn.180004040
lea rdx, str.CMD_REPORT_SHELL
lea rcx, [rbp - 0x19]
call fcn.18000f550
nop
cmp qword [rax + 0x18], 8
jb 0x180014b7b
mov rax, qword [rax]
movzx r9d, r14b
xor r9d, 1
inc r9d
mov r8, rax
lea rdx, [0x18007a0f8]
lea rcx, [rbp - 0x59]
call fcn.180007120
nop
mov rdx, qword [rbp - 1]
cmp rdx, 8
jb 0x180014bda
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180014bd5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180014ee2
call fcn.180029f54
movdqa xmm0, xmmword [0x1800783e0]
movdqu xmmword [rbp - 9], xmm0
mov word [rbp - 0x19], r12w
lea rcx, [rbp - 0x59]
cmp qword [rbp - 0x41], 8
cmovae rcx, qword [rbp - 0x59]
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea rcx, [rbp - 0x79]
cmp qword [rbp - 0x61], 8
cmovae rcx, qword [rbp - 0x79]
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea rdx, [rbp - 0x79]
cmp qword [rbp - 0x61], 8
cmovae rdx, qword [rbp - 0x79]
lea rcx, [rbp - 0x59]
cmp qword [rbp - 0x41], 8
cmovae rcx, qword [rbp - 0x59]
mov dword [rsp + 0x20], r12d
mov r9d, 0xffffffff
xor r8d, r8d
call fcn.1800220f0
nop
mov rdx, qword [rbp - 0x41]
cmp rdx, 8
jb 0x180014c84
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180014c7f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180014ee8
call fcn.180029f54
movdqa xmm0, xmmword [0x1800783e0]
movdqu xmmword [rbp - 0x49], xmm0
mov word [rbp - 0x59], r12w
mov rdx, qword [rbp - 0x61]
cmp rdx, 8
jb 0x180014cd6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x79]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180014cd1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180014eee
call fcn.180029f54
xor edx, edx
mov rcx, r15
call fcn.180014f10
test al, al
jne 0x180014e21
xor edx, edx
mov rcx, r15
call fcn.180014550
mov r8d, 0xa
lea rdx, str.Female.exe
lea rcx, [rbp - 0x39]
call fcn.180004040
lea rcx, [rbp - 0x39]
cmp qword [rbp - 0x21], 8
cmovae rcx, qword [rbp - 0x39]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x180014e21
lea rdx, str.CMD_SOFT_DISPATCH
lea rcx, [rbp - 0x19]
call fcn.18000f550
nop
cmp qword [rax + 0x18], 8
jb 0x180014d3f
mov rax, qword [rax]
movzx r9d, r14b
xor r9d, 1
inc r9d
mov r8, rax
lea rdx, str._s_d
lea rcx, [rbp - 0x59]
call fcn.180007120
nop
mov rdx, qword [rbp - 1]
cmp rdx, 8
jb 0x180014d9e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180014d99
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180014ef4
call fcn.180029f54
movdqa xmm0, xmmword [0x1800783e0]
movdqu xmmword [rbp - 9], xmm0
mov word [rbp - 0x19], r12w
lea rdx, [rbp - 0x39]
cmp qword [rbp - 0x21], 8
cmovae rdx, qword [rbp - 0x39]
lea rcx, [rbp - 0x59]
cmp qword [rbp - 0x41], 8
cmovae rcx, qword [rbp - 0x59]
mov dword [rsp + 0x20], r12d
mov r9d, 0xffffffff
xor r8d, r8d
call fcn.1800220f0
nop
mov rdx, qword [rbp - 0x41]
cmp rdx, 8
jb 0x180014e21
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180014e1b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180014efa
call fcn.180029f54
nop
mov rdx, qword [rbp + 0x1f]
cmp rdx, 8
jb 0x180014e61
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180014e5c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180014f00
call fcn.180029f54
movdqa xmm0, xmmword [0x1800783e0]
movdqu xmmword [rbp + 0x17], xmm0
mov word [rbp + 7], r12w
mov rdx, qword [rbp - 0x21]
cmp rdx, 8
jb 0x180014eaf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180014eaa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180014edc
call fcn.180029f54
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.18002a070
lea r11, [rsp + 0xf0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.18004bb24
nop
call fcn.18004bb24
nop
call fcn.18004bb24
nop
call fcn.18004bb24
nop
call fcn.18004bb24
nop
call fcn.18004bb24
nop
call fcn.18004bb24
int3