Function at 0x140006ba0
Capabilities:
Copy file

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x820]
sub rsp, 0x920
mov rax, qword [0x14004f678]
xor rax, rsp
mov qword [rbp + 0x810], rax
mov r12, r9
mov edi, r8d
mov rsi, rdx
mov rbx, rcx
mov r15d, 1
mov edx, r15d
lea rcx, str.kvpins.exe
call fcn.1400038b0
mov edx, r15d
lea r13, [0x14002cae0]
mov rcx, r13
call fcn.1400038b0
lea rcx, str.kvpins
call fcn.140004bb0
lea rcx, str.kvpuins
call fcn.140004bb0
test r15b, dil
je 0x140006c43
mov r8, rsi
mov rdx, rbx
lea rcx, str.kvpins
call fcn.140003980
xor r14d, r14d
test eax, eax
sete r14b
mov eax, r14d
jmp 0x140006d3c
test dil, 2
jne 0x140006c53
mov eax, 0x667
jmp 0x140006d3c
call fcn.1400051a0
mov qword [rsp + 0x40], rax
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x50]
call fcn.140001360
nop
mov rax, qword [rbp - 0x70]
test rax, rax
je 0x140006cf1
lea r8, str.3kvpuni
mov rdx, rax
lea rcx, [rbp + 0x1e0]
call qword [sym.imp.SHLWAPI.dll_PathCombineW]
test rax, rax
je 0x140006cf1
mov edx, 0x104
lea rcx, [rbp + 0x600]
lea rax, [rbp + 0x600]
sub rbx, rax
nop dword [rax + rax]
lea rax, [rdx + 0x7ffffefa]
test rax, rax
je 0x140006cd2
movzx eax, word [rbx + rcx]
test ax, ax
je 0x140006cd2
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x140006cb0
lea rax, [rcx - 2]
test rdx, rdx
cmovne rax, rcx
xor r14d, r14d
mov word [rax], r14w
test rdx, rdx
jne 0x140006d66
mov word [rbp + 0x600], r14w
mov r15d, 0x6f
mov rax, qword [rbp - 0x70]
test rax, rax
je 0x140006d1d
mov qword [rsp + 0x40], rax
mov rcx, qword [rbp - 0x78]
test rcx, rcx
je 0x140006f3e
mov rax, qword [rcx]
lea rdx, [rsp + 0x40]
call qword [rax + 0x10]
mov rcx, qword [rbp - 0x78]
test rcx, rcx
je 0x140006d39
mov r8, qword [rcx]
lea rax, [rsp + 0x50]
cmp rcx, rax
setne dl
call qword [r8 + 0x20]
nop
mov eax, r15d
mov rcx, qword [rbp + 0x810]
xor rcx, rsp
call fcn.1400153e0
mov rbx, qword [rsp + 0x970]
add rsp, 0x920
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea rcx, [rbp + 0x600]
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
test eax, eax
je 0x140006cf1
lea rdx, [rbp + 0x1e0]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHCreateDirectory]
test eax, eax
je 0x140006db2
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x140006db2
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r15d, 0xffffffff
test eax, eax
cmovne r15d, eax
jmp 0x140006cf7
lea rax, str.setup64.vbs
mov qword [rbp - 0x60], rax
lea rax, [0x14002cb50]
mov qword [rbp - 0x58], rax
lea rax, str.kvpvbsext.dll
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], r12
mov qword [rbp - 0x40], r13
mov ebx, r14d
lea rdi, [rbp - 0x60]
lea r13, [0x14002c4ec]
nop dword [rax]
mov rsi, qword [rdi]
mov rcx, rsi
call qword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
mov r8, rax
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0x3f0]
call qword [sym.imp.SHLWAPI.dll_PathCombineW]
test rax, rax
je 0x140006eab
mov rcx, rsi
call qword [sym.imp.SHLWAPI.dll_PathIsRelativeW]
lea rdx, [rbp + 0x600]
test eax, eax
cmove rdx, r13
mov r8, rsi
lea rcx, [rbp - 0x30]
call qword [sym.imp.SHLWAPI.dll_PathCombineW]
test rax, rax
je 0x140006eab
lea rdx, [rbp + 0x3f0]
lea rcx, [rbp - 0x30]
call qword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x140006eab
xor r8d, r8d
lea rdx, [rbp + 0x3f0]
lea rcx, [rbp - 0x30]
call qword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x140006eab
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x50
je 0x140006e87
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x20
jne 0x140006eab
lea rcx, [rbp + 0x3f0]
call fcn.140007480
test eax, eax
je 0x140006eab
xor r8d, r8d
lea rdx, [rbp + 0x3f0]
lea rcx, [rbp - 0x30]
call qword [sym.imp.KERNEL32.dll_CopyFileW]
inc ebx
add rdi, 8
cmp ebx, 5
jb 0x140006df0
mov rcx, r12
call qword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
mov r8, rax
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp - 0x30]
call qword [sym.imp.SHLWAPI.dll_PathCombineW]
test rax, rax
je 0x140006f36
lea rax, [rbp - 0x30]
mov qword [rsp + 0x30], rax
lea rax, str._u__s__s
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x1800
xor r9d, r9d
xor r8d, r8d
mov edx, 0x104
lea rcx, [rbp + 0x1e0]
call fcn.140007bc0
test eax, eax
js 0x140006f36
lea r8, [rbp + 0x1e0]
lea rdx, [rbp + 0x3f0]
lea rcx, str.kvpuins
call fcn.140003980
test eax, eax
jne 0x140006cf7
mov r15d, r14d
jmp 0x140006cf7
call fcn.140014ea8
int3