Function at 0x140051290
Capabilities:
Copy file

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1c8]
sub rsp, 0x2c8
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x1b0], rax
mov rdi, qword [rbp + 0x238]
movsx eax, dl
mov rdx, qword [rbp + 0x230]
or r13, 0xffffffffffffffff
mov rsi, rcx
mov qword [rbp - 0x58], rcx
mov byte [rsp + 0x60], al
mov dword [rsp + 0x70], eax
mov ecx, eax
mov qword [rbp - 0x60], rdx
mov r15, r9
mov r12, r8
mov qword [rsp + 0x78], rdi
mov rax, r13
inc rax
cmp byte [r8 + rax], 0
jne 0x1400512f5
mov r14d, esi
sub r14d, edx
mov edx, 0x20f
sub r14d, ecx
xor ecx, ecx
sub r14d, eax
lea r8d, [rcx + 7]
mov dword [rsp + 0x6c], r14d
mov dword [rbp - 0x40], r14d
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov qword [rbp - 0x38], rax
mov rax, r13
nop dword [rax]
inc rax
cmp byte [r15 + rax], 0
jne 0x140051330
mov rcx, r13
nop dword [rax]
inc rcx
cmp byte [r12 + rcx], 0
jne 0x140051340
imul eax, ecx
mov ebx, esi
add eax, esi
sub ebx, edi
mov dword [rbp - 0x30], eax
mov rax, r13
nop dword [rax]
inc rax
cmp byte [r15 + rax], 0
jne 0x140051360
mov ecx, dword [rsp + 0x70]
add eax, ebx
mov qword [rbp - 0x28], rdi
mov dword [rbp - 0x2c], eax
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [rbp - 0x20], rax
mov rax, r13
inc rax
cmp byte [r15 + rax], 0
jne 0x140051384
sub ebx, eax
mov rdi, r13
mov dword [rbp - 0x18], ebx
inc rdi
cmp byte [r15 + rdi], 0
jne 0x140051396
movups xmm0, xmmword [rbp - 0x40]
movups xmm1, xmmword [rbp - 0x30]
imul edi, esi
lea rax, [0x1400ed4fc]
lea r8, [rbp - 0x10]
lea rcx, str.nigeria
mov r9d, edi
mov edx, 0x20
mov qword [rbp - 0x80], rdi
movaps xmmword [rbp - 0x10], xmm0
movaps xmmword [rbp], xmm1
movups xmm0, xmmword [rbp - 0x20]
mov qword [rsp + 0x28], rax
movaps xmmword [rbp + 0x10], xmm0
call fcn.1400a23d0
mov rcx, r15
mov qword [rbp - 0x78], rax
movsxd rbx, edi
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, str.nigeria
mov r9d, 0x20
mov r8, rbx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_EnumResourceNamesA]
movsxd rbx, eax
mov dword [rsp + 0x64], ebx
call qword [sym.imp.USER32.dll_GetActiveWindow]
movsx rax, bl
lea rdx, str.songbird
mov r9, rax
mov r8, rax
xor ecx, ecx
mov qword [rbp - 0x50], rax
call qword [sym.imp.KERNEL32.dll_EnumResourceNamesA]
mov ebx, eax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, [0x1400ed4d4]
lea rcx, str.meaning
movzx r8d, bl
call qword [sym.imp.KERNEL32.dll_CopyFileA]
movzx eax, byte [rsp + 0x60]
cmp al, byte [rsp + 0x64]
jle 0x14005159e
mov edx, 0x68
xor ecx, ecx
lea r8d, [rdx - 0x57]
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov r11, qword [rbp - 0x78]
mov r9, qword [rsp + 0x78]
mov r8, qword [rbp - 0x50]
mov rbx, rax
lea ecx, [r9 - 3]
lea r10d, [r11 + r11]
mov edx, esi
mov dword [rbp - 0x6c], 0x10
mov eax, r10d
imul edx, dword [rsp + 0x70]
imul eax, edi
lea ecx, [rax + rcx*2]
sub ecx, r11d
add ecx, edx
add ecx, r8d
mov dword [rbp - 0x70], ecx
mov rcx, r13
inc rcx
cmp byte [r15 + rcx], 0
jne 0x1400514b3
mov rax, r13
inc rax
cmp byte [r12 + rax], 0
jne 0x1400514c0
movsd xmm0, qword [rbp - 0x70]
imul ecx, eax
lea eax, [r9 + r9*2]
imul ecx, dword [rbp - 0x60]
add eax, eax
lea r14d, [rsi - 9]
movsd qword [rbp - 0x70], xmm0
mov dword [rbp - 0x68], 0x20
sub ecx, eax
lea eax, [r11 + r11*4]
sub edx, eax
sub ecx, r10d
sub edx, r9d
add r14d, ecx
lea r9, str.c0a5
sub edx, r8d
lea r8, [rbp - 0x70]
lea rcx, str.demur
lea esi, [rdx - 7]
mov rdx, rbx
add esi, edi
mov dword [rsp + 0x30], esi
mov qword [rsp + 0x28], r11
mov dword [rsp + 0x20], r14d
call fcn.1400af810
xor ecx, ecx
mov edx, 0x1cf
lea r8d, [rcx + 0xf]
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetActiveProcessorGroupCount]
movzx ebx, ax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea r8, str.c1a4
mov r9, rax
movzx eax, byte [rbp - 0x58]
mov edx, ebx
imul byte [rsp + 0x78]
movzx ecx, al
movzx eax, byte [rbp - 0x78]
shl al, 3
add cl, al
sub cl, sil
mov rsi, qword [rbp - 0x58]
sub cl, r14b
mov qword [rsp + 0x28], rsi
sub cl, 4
add cl, byte [rbp - 0x80]
add cl, byte [rsp + 0x64]
mov byte [rsp + 0x20], cl
mov rcx, rdi
call fcn.140061240
mov rdi, qword [rbp - 0x80]
mov r14d, dword [rsp + 0x6c]
lea r8, str.canal
lea rcx, [rbp + 0x40]
xor edx, edx
call fcn.1400c5b30
movzx ecx, byte [rsp + 0x60]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x10], xmm0
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rbp], xmm1
mov eax, dword [rsp + 0x64]
movups xmmword [rbp + 0x10], xmm0
cmp cl, al
jge 0x1400519dd
sub cl, 2
movzx ebx, dil
sub bl, al
add bl, byte [rbp]
add bl, byte [rsp + 0x78]
add bl, sil
add bl, cl
add bl, byte [rbp - 0x78]
movzx ecx, bl
call fcn.14009cd60
mov dword [rsp + 0x68], eax
mov rax, r13
nop
inc rax
cmp byte [r15 + rax], 0
jne 0x140051600
mov rcx, r13
nop dword [rax]
inc rcx
cmp byte [r12 + rcx], 0
jne 0x140051610
mov rdx, qword [rsp + 0x78]
mov r8, qword [rbp - 0x78]
imul eax, ecx
imul eax, edx
imul eax, esi
imul eax, dword [rsp + 0x70]
imul ecx, eax, 0xe0
mov rax, qword [rbp - 0x50]
lea eax, [rax + rax*2]
add eax, eax
sub ecx, eax
lea eax, [r8 + r8*4]
sub ecx, eax
sub ecx, edx
mov rdx, qword [rbp - 0x60]
sub ecx, dword [rbp + 0x10]
sub ecx, r8d
lea eax, [rcx - 7]
xor ecx, ecx
add eax, edi
mov dword [rbp - 0x80], eax
call qword [sym.imp.KERNEL32.dll_SizeofResource]
lea rcx, [rbp + 0x30]
mov dword [rbp - 0x7c], eax
mov rdx, qword [rbp - 0x80]
call fcn.1400c3550
mov rcx, r13
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x20], xmm0
movq rax, xmm0
mov qword [rbp - 0x70], rax
inc rcx
cmp byte [rax + rcx], 0
jne 0x140051687
mov r11, qword [rbp - 0x78]
mov r9d, dword [rsp + 0x64]
mov r10, qword [rsp + 0x78]
movzx eax, sil
imul byte [rbp - 0x60]
movzx esi, al
mov al, 7
imul dil
add sil, al
movzx eax, r11b
shl al, 3
add sil, al
movzx eax, r11b
sub sil, byte [rsp + 0x68]
sub sil, bl
sub sil, r9b
add sil, r10b
sub sil, cl
mov rcx, r13
sub sil, 6
add al, al
mov byte [rsp + 0x62], al
nop dword [rax]
inc rcx
cmp byte [r12 + rcx], 0
jne 0x1400516e0
mov rdx, qword [rbp - 0x58]
movzx eax, r10b
imul cl
movzx ecx, al
movzx eax, dl
imul cl
movzx ecx, al
movzx eax, byte [rsp + 0x60]
imul cl
mov rcx, r13
movzx r8d, al
movzx eax, r9b
movzx r9d, bl
mov dword [rbp - 0x50], r9d
imul byte [rsp + 0x62]
sub r8b, al
mov al, 0x19
imul byte [rbp - 0x10]
sub r8b, al
movzx eax, bl
imul byte [rsp + 0x68]
add r8b, al
mov al, 0xe
imul byte [rbp - 0x2c]
add r8b, al
mov byte [rsp + 0x61], r8b
nop
inc rcx
cmp byte [r15 + rcx], 0
jne 0x140051740
mov rax, r13
nop dword [rax]
inc rax
cmp byte [r12 + rax], 0
jne 0x140051750
imul ecx, eax
lea eax, [r11*4]
imul ecx, edx
sub ecx, eax
sub ecx, r9d
movzx r9d, r8b
mov r8, r10
sub ecx, r14d
lea r14d, [rdi + 5]
add r14d, ecx
movzx ecx, sil
mov dword [rbp - 0x48], r14d
mov dword [rsp + 0x28], r14d
call fcn.1400909c0
mov dword [rsp + 0x6c], eax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
movzx ecx, byte [rsp + 0x61]
xor edx, edx
movsx eax, sil
mov esi, dword [rsp + 0x68]
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x40], 0x20
mov dword [rsp + 0x38], r14d
mov dword [rsp + 0x30], 0x20
mov dword [rsp + 0x28], eax
mov r9d, ecx
mov dword [rsp + 0x20], ecx
lea r8, [0x1400ed4fc]
lea rdx, str.c0ret
mov ecx, esi
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov ecx, r14d
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, r13
nop dword [rax + rax]
inc rcx
cmp byte [r15 + rcx], 0
jne 0x140051800
mov rax, r13
nop dword [rax]
inc rax
cmp byte [r12 + rax], 0
jne 0x140051810
mov rdx, qword [rbp - 0x70]
imul cl
movzx ecx, al
movzx eax, byte [rbp - 0x60]
imul cl
movzx r14d, al
movzx eax, sil
mov rsi, qword [rbp - 0x58]
shl r14b, 4
imul byte [rbp - 0x80]
add r14b, 0xe
add r14b, dil
add r14b, r14b
sub r14b, al
movzx eax, byte [rsp + 0x61]
imul byte [rsp + 0x6c]
movzx ecx, al
shl al, 3
add cl, al
mov rax, r13
add r14b, cl
add r14b, sil
add r14b, bl
add r14b, byte [rsp + 0x64]
nop dword [rax + rax]
inc rax
cmp byte [rdx + rax], 0
jne 0x140051870
sub r14b, al
call qword [sym.imp.KERNEL32.dll_GetActiveProcessorGroupCount]
lea rcx, [rbp + 0x70]
xor edx, edx
mov r8d, 0x140
call fcn.1400e27d0
lea rdx, [rbp + 0x70]
lea rcx, str.canal
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
xor ecx, ecx
mov edx, 0x1ec
lea r8d, [rcx + 0x12]
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov rdx, qword [rbp + 0x28]
mov rcx, r13
nop
inc rcx
cmp byte [rdx + rcx], 0
jne 0x1400518d0
movzx eax, byte [rsp + 0x78]
inc cl
imul cl
movzx ecx, al
movzx eax, byte [rsp + 0x60]
imul sil
movzx esi, al
mov rax, r13
sub sil, cl
inc rax
cmp byte [r15 + rax], 0
jne 0x1400518f6
mov ecx, dword [rsp + 0x64]
shl al, 5
add sil, al
movzx eax, cl
add al, al
add cl, al
add cl, cl
add sil, cl
sub sil, byte [rsp + 0x62]
sub sil, byte [rbp - 0x7c]
sub sil, r14b
sub sil, byte [rbp - 0x78]
sub sil, bl
add sil, byte [rsp + 0x6c]
add sil, byte [rsp + 0x68]
add sil, dil
inc r13
cmp byte [r12 + r13], 0
jne 0x140051936
lea rcx, [rbp + 0x70]
sub sil, r13b
mov edx, 0x104
add sil, 5
call qword [sym.imp.KERNEL32.dll_FindFirstVolumeA]
movzx ecx, byte [rsp + 0x61]
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, dword [rsp + 0x70]
mov rbx, rax
xor eax, eax
movsx r10, r14b
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rax
mov eax, dword [rbp - 0x48]
mov qword [rsp + 0x40], r10
movsx r11d, r14b
mov dword [rsp + 0x38], r11d
mov dword [rsp + 0x30], ecx
mov r9d, ecx
mov ecx, dword [rbp - 0x50]
lea r8, str.songbird
lea rdx, str.c0ret
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov rcx, qword [rsp + 0x78]
mov qword [rsp + 0x28], rax
lea r9, str.c0a0
mov r8, rdi
movzx edx, sil
mov qword [rsp + 0x20], rbx
call fcn.14006c1d0
lea rax, str.kohlrabi
mov rcx, qword [rbp + 0x1b0]
xor rcx, rsp
call fcn.1400dd340
add rsp, 0x2c8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret