Function at 0x14001e760
Capabilities:
Check if file exists
Copy file
Query environment variable

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x720
mov rax, qword [0x14010d268]
xor rax, rsp
mov qword [rsp + 0x710], rax
mov rsi, qword [rdx + 0x20]
mov r14, rcx
mov rbp, qword [rdx + 0x28]
lea rcx, [rsp + 0x30]
mov rdi, rdx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x38]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64_s]
lea r9, [rsp + 0x38]
mov edx, 0x40
lea r8, str.__m_d_y__H_M_S
lea rcx, [rsp + 0x270]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_wcsftime]
mov r8, qword [rdi + 8]
lea rcx, [rsp + 0x60]
mov edx, 0x104
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
mov rbx, 0xffffffffffffffff
lea rcx, [rsp + 0x60]
mov rax, rbx
inc rax
cmp word [rcx + rax*2], 0
jne 0x14001e7f6
test rax, rax
jne 0x14001e819
mov r8, qword [rdi + 0x10]
lea rcx, [rsp + 0x60]
mov edx, 0x104
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
lea r8, str.Crash
mov edx, 0x104
lea rcx, [rsp + 0x60]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscat_s]
lea r8, [rsp + 0x270]
mov edx, 0x104
lea rcx, [rsp + 0x60]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscat_s]
mov edx, 0x20
lea rcx, [rsp + 0x60]
call sub.VCRUNTIME140.dll_wcschr
test rax, rax
je 0x14001e87a
mov r15d, 0x5f
mov edx, 0x20
mov word [rax], r15w
lea rcx, [rsp + 0x60]
call sub.VCRUNTIME140.dll_wcschr
test rax, rax
jne 0x14001e862
lea r8, [rsp + 0x60]
mov rcx, r14
lea rdx, [0x1400cae58]
call fcn.140028b00
mov rcx, qword [r14]
xor edx, edx
lea r8d, [rdx + 2]
call fcn.1400043b0
mov rdx, qword [r14]
lea rcx, str.Failed_to_create_zip_file:
mov r15, rax
lea rax, str.Creating_zip_file:
test r15, r15
cmovne rcx, rax
call fcn.14001eff0
mov rcx, qword [rdi + 0x88]
mov edx, 0x5c
call sub.VCRUNTIME140.dll_wcsrchr
mov r8, qword [rdi + 0x88]
xor r9d, r9d
mov rcx, r15
mov dword [rsp + 0x20], 2
lea rdx, [rax + 2]
call fcn.1400046f0
mov rdx, qword [rdi + 0x88]
lea r14, str.Zip_failed_to_add:
test eax, eax
lea r12, str.Zip_added:
mov rcx, r14
cmove rcx, r12
call fcn.14001eff0
mov rax, rbx
inc rax
cmp word [rsi + rax*2], 0
jne 0x14001e911
test rax, rax
je 0x14001e958
mov edx, 0x5c
mov rcx, rsi
call sub.VCRUNTIME140.dll_wcsrchr
xor r9d, r9d
mov dword [rsp + 0x20], 2
mov r8, rsi
mov rcx, r15
lea rdx, [rax + 2]
call fcn.1400046f0
test eax, eax
mov rcx, r14
mov rdx, rsi
cmove rcx, r12
call fcn.14001eff0
mov rax, rbx
nop dword [rax + rax]
inc rax
cmp word [rbp + rax*2], 0
jne 0x14001e960
test rax, rax
je 0x14001e9a8
mov edx, 0x5c
mov rcx, rbp
call sub.VCRUNTIME140.dll_wcsrchr
xor r9d, r9d
mov dword [rsp + 0x20], 2
mov r8, rbp
mov rcx, r15
lea rdx, [rax + 2]
call fcn.1400046f0
test eax, eax
mov rdx, rbp
cmove r14, r12
mov rcx, r14
call fcn.14001eff0
mov rcx, r15
call fcn.1400040e0
mov rcx, qword [rdi + 0x70]
cmp dword [rcx - 0x10], 0
jle 0x14001ea6c
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x14001ea6c
lea r8, [rsp + 0x60]
mov edx, 0x104
lea rcx, [rsp + 0x500]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
lea r8, [0x1400ca7c8]
mov edx, 0x104
lea rcx, [rsp + 0x500]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscat_s]
mov r8, qword [rdi + 0x70]
lea rcx, [rsp + 0x2f0]
mov edx, 0x104
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
lea rdx, [rsp + 0x500]
lea rcx, [rsp + 0x2f0]
call qword [sym.imp.SHLWAPI.dll_PathAppendW]
mov rcx, qword [rdi + 0x88]
lea rdx, [rsp + 0x2f0]
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CopyFileW]
lea rcx, [rdi + 0x90]
lea rax, [rsp + 0x2f0]
inc rbx
cmp word [rax + rbx*2], 0
jne 0x14001ea52
mov r8d, ebx
lea rdx, [rsp + 0x2f0]
call fcn.140002f50
lea rcx, str.NITRO_LOG_LEVEL
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
jne 0x14001ea94
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wunlink]
mov rcx, qword [rdi + 0x88]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wunlink]
mov al, 1
mov rcx, qword [rsp + 0x710]
xor rcx, rsp
call fcn.14005f850
lea r11, [rsp + 0x720]
mov rbx, qword [r11 + 0x40]
mov rbp, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret