Function at 0x140067e00
Capabilities:
Copy file
Delete file

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1058]
mov eax, 0x1158
call fcn.140149570
sub rsp, rax
mov rax, qword [0x1401f3030]
xor rax, rsp
mov qword [rbp + 0x1040], rax
mov rdi, r9
mov rsi, r8
mov r14, rdx
mov rbx, rcx
xor r12d, r12d
mov r15b, 1
mov rdx, r9
lea rcx, [rbp - 8]
call fcn.1400353e0
nop
mov rcx, qword [rbp + 8]
test rcx, rcx
je 0x14006837d
mov rdx, qword [rbp + 0x10]
mov rax, rdx
sub rax, rcx
cmp rax, 4
jb 0x140067e9a
lea rax, [rcx + 4]
mov qword [rbp + 8], rax
lea rax, [rbp - 8]
cmp rdx, 8
cmovae rax, qword [rbp - 8]
movabs rdx, 0x70006d0074002e
mov qword [rax + rcx*2], rdx
mov word [rax + rcx*2 + 8], r12w
jmp 0x140067ebd
lfence
mov qword [rsp + 0x20], 4
lea r9, str..tmp
xor r8d, r8d
lea edx, [r8 + 4]
lea rcx, [rbp - 8]
call fcn.1400310a0
lea rdx, [rbp - 8]
lea rcx, [rbp - 0x28]
call fcn.1400bc4c0
nop
cmp qword [rbp - 0x18], 0
je 0x14006833c
lea rdx, [rbp - 0x28]
mov rcx, rsi
call fcn.14003f720
movzx r15d, al
test al, al
jne 0x140068231
lea r13, [0x14018f828]
mov rcx, qword [0x1401fee88]
cmp dword [rcx], 2
jbe 0x140067fa7
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], 0x101
lea rcx, str.D:jenk11workspacewsg_citKiller_Release_3.5_srcKillerNetwork_ServiceServiceSharedSourceBWCLogicBWCXMLFiles.cpp
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], eax
lea r9, str.__d___hs__d__:__ls__
mov r14d, 0x7ff
mov r8d, r14d
mov ebx, 0x800
mov edx, ebx
lea rcx, [rbp + 0x40]
call fcn.140050da0
mov edx, ebx
lea rcx, [rbp + 0x40]
call fcn.14015039c
mov r8, rdi
cmp qword [rdi + 0x18], 8
jb 0x140067f60
mov r8, qword [rdi]
mov rdx, rsi
cmp qword [rsi + 0x18], 8
jb 0x140067f6d
mov rdx, qword [rsi]
sub r14, rax
sub rbx, rax
lea rcx, [rbp + 0x40]
lea rcx, [rcx + rax*2]
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x20], rdx
lea r9, str.Error_Downloading__ls_to_file__ls
mov r8, r14
mov rdx, rbx
call fcn.140050da0
lea rdx, [rbp + 0x40]
lea rcx, [0x1401fee78]
call fcn.14006e6b0
mov qword [rbp - 0x68], r12
mov qword [rbp - 0x58], r12
mov qword [rbp - 0x50], 7
mov word [rbp - 0x68], r12w
mov r8d, reloc.OLEAUT32.dll_SafeArrayAccessData
mov rdx, r13
lea rcx, [rbp - 0x68]
call fcn.140020fa0
nop
mov r8, rsi
lea rdx, str.Error_Downloading
lea rcx, [rbp - 0x48]
call fcn.14002dbe0
mov rbx, rax
mov rcx, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 9
jb 0x14006802a
lea r14, [rcx + 9]
mov qword [rbx + 0x10], r14
mov rsi, rbx
cmp rdx, 8
jb 0x14006800d
mov rsi, qword [rbx]
lea rcx, [rsi + rcx*2]
mov r8d, SafeArrayUnlock
lea rdx, str._to_file
call fcn.14014b350
mov word [rsi + r14*2], r12w
jmp 0x14006804f
lfence
mov qword [rsp + 0x20], 9
lea r9, str._to_file
xor r8d, r8d
lea edx, [r8 + 9]
mov rcx, rbx
call fcn.1400310a0
mov rbx, rax
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], r12
movups xmm0, xmmword [rbx]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], 7
mov word [rbx], r12w
mov rdx, rdi
cmp qword [rdi + 0x18], 8
jb 0x14006808c
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
lea rcx, [rsp + 0x60]
call fcn.140030b20
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
mov edx, 1
lea r8d, [rdx + 1]
lea rax, [rbp - 0x68]
mov qword [rsp + 0x20], rax
lea r9d, [rdx + 0xf]
lea rcx, [rsp + 0x40]
call fcn.14002d730
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x14006812d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140068128
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400683e6
call fcn.140149194
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], 7
mov word [rsp + 0x40], r12w
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x140068183
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006817e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400683ec
call fcn.140149194
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], r12w
mov rdx, qword [rbp - 0x30]
cmp rdx, 8
jb 0x1400681d7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400681d2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400683f2
call fcn.140149194
mov qword [rbp - 0x38], r12
mov qword [rbp - 0x30], 7
mov word [rbp - 0x48], r12w
mov rdx, qword [rbp - 0x50]
cmp rdx, 8
jb 0x14006833c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140068227
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400683f8
call fcn.140149194
jmp 0x14006833c
lea rcx, [rbp - 0x28]
call fcn.1400bfa10
movzx r15d, al
test al, al
je 0x140068327
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
mov qword [rbp - 0x78], rbx
mov byte [rbp - 0x70], 0
mov rcx, rbx
call fcn.140121310
test eax, eax
jne 0x1400683fe
mov byte [rbp - 0x70], 1
mov rcx, qword [r14]
mov qword [r14], r12
test rcx, rcx
je 0x140068286
mov rax, qword [rcx]
mov edx, 1
mov rax, qword [rax + 8]
call qword [case.0x140026a06.0]
mov rdx, rdi
lea rcx, [rbp + 0x18]
call fcn.1400bc4c0
nop
lea rdx, [rbp + 0x18]
cmp qword [rbp + 0x30], 8
cmovae rdx, qword [rbp + 0x18]
lea rcx, [rbp - 0x28]
cmp qword [rbp - 0x10], 8
cmovae rcx, qword [rbp - 0x28]
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x1400682ce
mov r8, rdi
mov rdx, r14
mov rcx, rbx
call fcn.14006bcf0
movzx r15d, al
mov rdx, qword [rbp + 0x30]
cmp rdx, 8
jb 0x14006830e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140068309
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140068406
call fcn.140149194
mov qword [rbp + 0x28], r12
mov qword [rbp + 0x30], 7
mov word [rbp + 0x18], r12w
mov rcx, rbx
call fcn.140121318
lea rcx, [rbp - 0x28]
cmp qword [rbp - 0x10], 8
cmovae rcx, qword [rbp - 0x28]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, 8
jb 0x14006837d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140068377
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006840c
call fcn.140149194
nop
mov rdx, qword [rbp + 0x10]
cmp rdx, 8
jb 0x1400683b9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400683b4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400683e0
call fcn.140149194
movzx eax, r15b
mov rcx, qword [rbp + 0x1040]
xor rcx, rsp
call fcn.140149500
add rsp, 0x1158
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.1401501d4
nop
call fcn.1401501d4
nop
call fcn.1401501d4
nop
call fcn.1401501d4
nop
call fcn.1401501d4
int3
mov ecx, eax
call fcn.140121534
nop
call fcn.1401501d4
nop
call fcn.1401501d4
int3