Function at 0x140008360
Capabilities:
Copy file
Set file attributes

Disassembly:
mov dword [rsp + 0x20], r9d
mov dword [rsp + 0x18], r8d
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x3d0
mov rax, qword [0x140025100]
xor rax, rsp
mov qword [rsp + 0x3c8], rax
mov byte [rsp + 0x160], 0
lea rax, [rsp + 0x161]
mov rdi, rax
xor eax, eax
mov ecx, 0x105
rep stosb byte [rdi], al
mov byte [rsp + 0x50], 0
lea rax, [rsp + 0x51]
mov rdi, rax
xor eax, eax
mov ecx, 0x105
rep stosb byte [rdi], al
mov dword [rsp + 0x38], 0
mov r8, qword [rsp + 0x3e0]
mov edx, 0x106
lea rcx, [rsp + 0x160]
call fcn.1400053e0
mov r8, qword [rsp + 0x3e8]
mov edx, 0x106
lea rcx, [rsp + 0x50]
call fcn.1400053e0
lea rdx, [rsp + 0x270]
lea rcx, [rsp + 0x160]
call fcn.14001fb20
test eax, eax
jne 0x1400084d6
xor eax, eax
mov rcx, 0xffffffffffffffff
lea rdx, [rsp + 0x160]
mov rdi, rdx
repne scasb al, byte [rdi]
not rcx
dec rcx
mov rax, rcx
mov qword [rsp + 0x30], rax
cmp qword [rsp + 0x30], 2
jbe 0x14000845a
cmp qword [rsp + 0x30], 0x106
jae 0x14000845a
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x15f], 0x5f
lea rdx, [rsp + 0x270]
lea rcx, [rsp + 0x160]
call fcn.14001fb20
test eax, eax
jne 0x140008487
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_SetLastError]
xor eax, eax
jmp 0x140008684
mov dword [rsp + 0x38], 1
xor eax, eax
mov rcx, 0xffffffffffffffff
lea rdx, [rsp + 0x50]
mov rdi, rdx
repne scasb al, byte [rdi]
not rcx
dec rcx
mov rax, rcx
mov qword [rsp + 0x30], rax
cmp qword [rsp + 0x30], 2
jbe 0x1400084cf
cmp qword [rsp + 0x30], 0x106
jae 0x1400084cf
mov rax, qword [rsp + 0x30]
mov byte [rsp + rax + 0x4f], 0x5f
jmp 0x1400084d6
xor eax, eax
jmp 0x140008684
cmp dword [0x140025a38], 0
je 0x140008565
cmp dword [rsp + 0x3f0], 0
je 0x1400084fe
lea rax, [0x140002c14]
mov qword [rsp + 0x3b0], rax
jmp 0x14000850d
lea rax, [0x140002c18]
mov qword [rsp + 0x3b0], rax
cmp dword [rsp + 0x3f8], 0
je 0x140008528
lea rax, [0x140002c14]
mov qword [rsp + 0x3b8], rax
jmp 0x140008537
lea rax, [0x140002c18]
mov qword [rsp + 0x3b8], rax
mov rax, qword [rsp + 0x3b0]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x3b8]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x160]
lea rcx, [0x140002c20]
call fcn.140005ae0
cmp dword [rsp + 0x38], 0
jne 0x1400085dc
cmp dword [rsp + 0x3f0], 0
je 0x1400085dc
cmp dword [rsp + 0x3f8], 0
jne 0x140008596
lea rdx, [rsp + 0x270]
lea rcx, [rsp + 0x50]
call fcn.14001fb20
test eax, eax
jne 0x1400085d2
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x160]
call fcn.140016850
test eax, eax
jne 0x1400085b9
mov dword [rsp + 0x3c0], 1
jmp 0x1400085c4
mov dword [rsp + 0x3c0], 0
mov eax, dword [rsp + 0x3c0]
jmp 0x140008684
mov eax, 1
jmp 0x140008684
cmp dword [rsp + 0x3f8], 0
jne 0x1400085fc
lea rdx, [rsp + 0x270]
lea rcx, [rsp + 0x50]
call fcn.14001fb20
test eax, eax
jne 0x14000863f
cmp dword [rsp + 0x3f8], 0
jne 0x140008613
mov dword [rsp + 0x3c4], 1
jmp 0x14000861e
mov dword [rsp + 0x3c4], 0
mov r8d, dword [rsp + 0x3c4]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x160]
call qword [sym.imp.KERNEL32.dll_CopyFileA]
mov dword [rsp + 0x38], eax
jmp 0x140008646
mov eax, 1
jmp 0x140008684
cmp dword [rsp + 0x38], 0
je 0x140008666
mov edx, 0x80
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_SetFileAttributesA]
mov eax, 1
jmp 0x140008684
cmp dword [rsp + 0x3f8], 0
jne 0x140008682
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x50
jne 0x140008682
mov eax, 1
jmp 0x140008684
xor eax, eax
mov rcx, qword [rsp + 0x3c8]
xor rcx, rsp
call fcn.140021740
add rsp, 0x3d0
pop rdi
ret