Function at 0x14003d1b0
Capabilities:
Copy file

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1d0]
sub rsp, 0x2d0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x1c0], rax
movups xmm0, xmmword [rcx]
movups xmm2, xmmword [rcx + 0x10]
movups xmm1, xmmword [rdx + 0x10]
mov rdi, r8
mov qword [rbp - 0x78], r8
movaps xmmword [rbp + 0x30], xmm0
movd r14d, xmm2
movaps xmmword [rbp + 0x40], xmm2
add r14d, r8d
mov dword [rsp + 0x78], r14d
movaps xmmword [rbp + 0x90], xmm1
movups xmmword [rbp - 0x70], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rbp - 0x60], xmm0
movups xmm0, xmmword [rcx + 0x30]
movaps xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x20], xmm0
movsd xmm0, qword [rcx + 0x40]
movsd qword [rbp + 0x70], xmm0
movups xmm0, xmmword [rdx]
movaps xmmword [rbp + 0x80], xmm0
movups xmm0, xmmword [rdx + 0x20]
movups xmmword [rbp - 0x50], xmm0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
movups xmm0, xmmword [rbp - 0x50]
movsxd r13, eax
psrldq xmm0, 8
movd ebx, xmm0
movups xmm0, xmmword [rbp + 0x20]
psrldq xmm0, 8
movd r15d, xmm0
add r15d, ebx
mov dword [rsp + 0x74], r15d
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rbp - 8], 0
movups xmm0, xmmword [rbp - 0x60]
psrldq xmm0, 8
mov qword [rbp - 0x10], rax
movd ecx, xmm0
sub ecx, dword [rbp - 0x50]
movd dword [rsp + 0x70], xmm0
mov dword [rbp], ecx
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov esi, dword [rbp - 0x70]
movups xmm0, xmmword [rbp - 0x10]
mov qword [rbp + 8], rax
lea rax, [rbp - 0x40]
mov dword [rsp + 0x30], esi
movaps xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [rbp]
mov qword [rsp + 0x28], rax
lea rax, str.cocktail
mov dword [rbp + 0x10], 0x40
movaps xmmword [rbp - 0x30], xmm1
movsd xmm0, qword [rbp + 0x10]
movsd qword [rbp - 0x20], xmm0
lea r9, str.panties
mov r8d, r15d
mov edx, r13d
mov ecx, r14d
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x68], esi
call fcn.140078f20
mov r12, qword [rbp - 0x60]
imul ebx, r15d
add ebx, dword [rbp + 0x70]
mov byte [rsp + 0x60], al
lea eax, [rsi - 1]
add eax, ebx
or rsi, 0xffffffffffffffff
mov rbx, rsi
mov dword [rsp + 0x64], eax
nop dword [rax + rax]
inc rbx
cmp byte [r12 + rbx], 0
jne 0x14003d320
movzx eax, r15b
lea rdx, str.cocktail
lea rcx, str.panties
shl al, 3
mov r8d, r14d
sub bl, al
sub bl, r13b
sub bl, r14b
sub bl, dil
call qword [sym.imp.KERNEL32.dll_CopyFileA]
mov r15, qword [rbp + 0x60]
mov dword [rsp + 0x6c], eax
mov rdi, rsi
nop
inc rdi
cmp byte [r15 + rdi], 0
jne 0x14003d360
mov edx, dword [rsp + 0x64]
shl edi, 3
lea r9, str.cameo
lea rcx, str.c0a4
movzx r8d, bl
mov dword [rsp + 0x28], edi
mov byte [rsp + 0x20], al
call fcn.1400b8290
lea rcx, str.terrapin
mov qword [rbp - 0x70], rax
call fcn.14006d240
mov byte [rsp + 0x61], al
call fcn.14009f000
mov ecx, dword [rsp + 0x64]
mov qword [rbp - 0x50], rax
cmp ecx, r13d
jg 0x14003d5a9
movsx ecx, byte [rsp + 0x6c]
movsx r14, byte [rsp + 0x61]
movsx r9d, byte [rsp + 0x60]
xor edx, edx
lea r8, str.terrapin
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x38], r13d
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x28], ecx
lea rdx, str.cameo
mov dword [rsp + 0x20], edi
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov qword [rbp - 0x80], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov rcx, qword [rbp - 0x80]
mov r8d, eax
call fcn.140074920
lea rdx, [0x1400ed360]
lea rcx, str.c4a1
call fcn.1400d4610
mov rdx, r14
mov r14, rsi
mov qword [rbp + 0x20], rax
mov qword [rbp - 0x60], rdx
nop
inc r14
cmp byte [r12 + r14], 0
jne 0x14003d440
mov r8d, dword [rsp + 0x74]
mov r12, qword [rbp - 0x70]
mov r11, qword [rbp - 0x78]
imul ecx, r8d, 0xfffffff9
mov r9d, dword [rsp + 0x78]
mov r10, qword [rbp + 0x20]
mov eax, r12d
imul eax, dword [rsp + 0x64]
lea eax, [rax + rax*4]
sub ecx, eax
lea eax, [r9 - 4]
sub ecx, r11d
sub ecx, r13d
add ecx, edx
movsx rdx, byte [rsp + 0x6c]
add eax, ecx
lea ecx, [rdx + rdx*4]
add r14d, eax
mov eax, dword [rbp + 0x88]
imul eax, r11d
sub ecx, eax
sub ecx, dword [rsp + 0x68]
sub ecx, dword [rsp + 0x64]
sub ecx, r8d
add ecx, dword [rsp + 0x70]
lea eax, [r12 + rcx]
mov ecx, r10d
add eax, 0xfffffff9
add eax, r13d
mov dword [rsp + 0x70], eax
imul eax, r8d, 0xe
sub ecx, eax
mov eax, r12d
shl ecx, 2
mov r8, rsi
imul eax, edi
sub ecx, eax
mov eax, r13d
imul eax, r9d
sub ecx, eax
movsx eax, byte [rsp + 0x60]
imul eax, dword [rsp + 0x68]
add ecx, eax
mov eax, dword [rbp + 0x48]
sub ecx, dword [rbp - 0x80]
add eax, 0x4d
add ecx, edx
add ecx, eax
lea rax, str.sheet
mov qword [rbp - 0x38], rax
mov dword [rbp - 0x40], ecx
nop dword [rax + rax]
inc r8
cmp byte [r15 + r8], 0
jne 0x14003d500
movsx r15, byte [rsp + 0x60]
mov rax, r15
imul eax, r13d
imul ecx, eax, 7
lea eax, [r10 - 3]
lea edx, [rax + rax*2]
mov rax, qword [rbp - 0x60]
sub edx, ecx
lea rcx, [rbp + 0xb0]
sub edx, edi
sub edx, r9d
add eax, edx
mov edx, 0x104
add r8d, eax
add r8d, r11d
mov dword [rbp - 0x30], r8d
call qword [sym.imp.KERNEL32.dll_FindFirstVolumeA]
mov qword [rbp - 0x28], rax
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov qword [rbp - 0x20], rax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov r9d, dword [rsp + 0x70]
movups xmm0, xmmword [rbp - 0x40]
movups xmm1, xmmword [rbp - 0x30]
mov qword [rbp - 0x18], rax
lea rax, [rbp - 0x10]
lea rdx, str.microlending
movaps xmmword [rbp - 0x10], xmm0
movaps xmmword [rbp], xmm1
movups xmm0, xmmword [rbp - 0x20]
xor r8d, r8d
mov ecx, r14d
mov qword [rsp + 0x20], rax
movaps xmmword [rbp + 0x10], xmm0
call fcn.140089560
mov rax, qword [rbp - 0x50]
mov r14d, dword [rsp + 0x78]
mov ecx, dword [rsp + 0x64]
jmp 0x14003d5b3
mov r12, qword [rbp - 0x70]
movzx r15d, byte [rsp + 0x60]
inc rsi
cmp byte [rax + rsi], 0
jne 0x14003d5b3
movzx eax, bl
imul r12d, edi
imul r13d, r14d
imul eax, ecx
imul ecx, eax, 0xffffffec
mov eax, dword [rbp + 0x90]
imul eax, dword [rbp - 0x78]
sub ecx, eax
movsx rax, byte [rsp + 0x61]
add ecx, r12d
add ecx, r13d
sub ecx, eax
movsx rax, byte [rsp + 0x6c]
sub ecx, eax
movsx rax, r15b
sub ecx, eax
mov eax, dword [rsp + 0x74]
sub ecx, dword [rsp + 0x68]
add eax, 0x1ff
add ecx, dword [rbp + 0x38]
add esi, ecx
add eax, esi
mov rcx, qword [rbp + 0x1c0]
xor rcx, rsp
call fcn.1400dd340
mov rbx, qword [rsp + 0x328]
add rsp, 0x2d0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret