Function at 0x1400142d0
Capabilities:
Copy file
Delete file

Disassembly:
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x5c0
mov rax, qword [0x140025100]
xor rax, rsp
mov qword [rsp + 0x5b8], rax
mov dword [rsp + 0x40], 0
mov rax, qword [rsp + 0x5d0]
mov eax, dword [rax + 8]
and eax, 1
test eax, eax
je 0x140014327
lea rdx, [0x140004220]
mov ecx, 2
call fcn.1400058d0
mov dword [rsp + 0x40], 0x57
jmp 0x14001462e
mov rax, qword [rsp + 0x5d0]
mov eax, dword [rax + 8]
and eax, 2
test eax, eax
je 0x140014357
lea rdx, [0x140004258]
mov ecx, 2
call fcn.1400058d0
mov dword [rsp + 0x40], 0x57
jmp 0x14001462e
mov rax, qword [rsp + 0x5d0]
cmp qword [rax + 0x10], 0
je 0x140014384
lea rdx, [0x140004290]
mov ecx, 2
call fcn.1400058d0
mov dword [rsp + 0x40], 0x57
jmp 0x14001462e
mov rax, qword [rsp + 0x5d0]
cmp qword [rax + 0x20], 0
je 0x1400143b1
lea rdx, [0x1400042d0]
mov ecx, 2
call fcn.1400058d0
mov dword [rsp + 0x40], 0x57
jmp 0x14001462e
mov rax, qword [rsp + 0x5d0]
cmp qword [rax + 0x28], 0
je 0x1400143de
lea rdx, [0x140004310]
mov ecx, 2
call fcn.1400058d0
mov dword [rsp + 0x40], 0x57
jmp 0x14001462e
mov rax, qword [rsp + 0x5d0]
mov eax, dword [rax + 8]
and eax, 0x300
test eax, eax
je 0x140014410
lea rdx, [0x140004350]
mov ecx, 2
call fcn.1400058d0
mov dword [rsp + 0x40], 0x57
jmp 0x14001462e
mov rax, qword [rsp + 0x5d0]
mov eax, dword [rax + 8]
and eax, 4
test eax, eax
je 0x140014440
lea rdx, [0x140004388]
mov ecx, 2
call fcn.1400058d0
mov dword [rsp + 0x40], 0x57
jmp 0x14001462e
mov rax, qword [rsp + 0x5d0]
cmp qword [rax + 0x38], 0
je 0x14001446d
lea rdx, [0x1400043c0]
mov ecx, 2
call fcn.1400058d0
mov dword [rsp + 0x40], 0x57
jmp 0x14001462e
mov rax, qword [rsp + 0x5d0]
mov eax, dword [rax + 8]
and eax, 0x10
test eax, eax
je 0x14001449d
lea rdx, [0x140004400]
mov ecx, 2
call fcn.1400058d0
mov dword [rsp + 0x40], 0x57
jmp 0x14001462e
mov rax, qword [rsp + 0x5d0]
cmp qword [rax + 0x48], 0
je 0x1400144ca
lea rdx, [0x140004438]
mov ecx, 2
call fcn.1400058d0
mov dword [rsp + 0x40], 0x57
jmp 0x14001462e
mov rax, qword [rsp + 0x5d0]
cmp qword [rax + 0x50], 0
je 0x1400144f7
lea rdx, [0x140004470]
mov ecx, 2
call fcn.1400058d0
mov dword [rsp + 0x40], 0x57
jmp 0x14001462e
mov rax, qword [rsp + 0x5d0]
cmp qword [rax + 0x58], 0
je 0x140014524
lea rdx, [0x1400044a8]
mov ecx, 2
call fcn.1400058d0
mov dword [rsp + 0x40], 0x57
jmp 0x14001462e
mov rax, qword [rsp + 0x5d0]
cmp qword [rax + 0x60], 0
je 0x140014551
lea rdx, [0x1400044e0]
mov ecx, 2
call fcn.1400058d0
mov dword [rsp + 0x40], 0x57
jmp 0x14001462e
mov rax, qword [rsp + 0x5d0]
mov eax, dword [rax + 8]
and eax, 0xc00
test eax, eax
je 0x140014583
lea rdx, [0x140004518]
mov ecx, 2
call fcn.1400058d0
mov dword [rsp + 0x40], 0x57
jmp 0x14001462e
mov rax, qword [rsp + 0x5d0]
mov eax, dword [rax + 8]
and eax, 0x20000
test eax, eax
je 0x1400145b2
lea rdx, [0x140004550]
mov ecx, 2
call fcn.1400058d0
mov dword [rsp + 0x40], 0x57
jmp 0x14001462e
mov rax, qword [rsp + 0x5d0]
cmp qword [rax + 0x68], 0
je 0x1400145dc
lea rdx, [0x140004588]
mov ecx, 2
call fcn.1400058d0
mov dword [rsp + 0x40], 0x57
jmp 0x14001462e
mov rax, qword [rsp + 0x5d0]
cmp qword [rax + 0x30], 0
jne 0x140014606
lea rdx, [0x1400045c8]
mov ecx, 2
call fcn.1400058d0
mov dword [rsp + 0x40], 0x57
jmp 0x14001462e
mov rax, qword [rsp + 0x5d0]
cmp qword [rax + 0x40], 0
jne 0x14001462e
lea rdx, [0x140004600]
mov ecx, 2
call fcn.1400058d0
mov dword [rsp + 0x40], 0x57
cmp dword [rsp + 0x40], 0
jne 0x140014b33
mov rcx, qword [rsp + 0x5d0]
call fcn.140014b60
test eax, eax
je 0x140014b10
mov rax, qword [rsp + 0x5d0]
mov rcx, qword [rax + 0x40]
call fcn.14000b810
test eax, eax
jne 0x140014685
mov rax, qword [rsp + 0x5d0]
mov r8, qword [rax + 0x40]
lea rdx, [0x140004638]
mov ecx, 1
call fcn.1400058d0
jmp 0x140014b0e
mov rax, qword [rsp + 0x5d0]
mov r9, qword [rax + 0x30]
lea r8, [0x140004660]
mov edx, 0x400
lea rcx, [rsp + 0x60]
call fcn.14001f670
mov dword [rsp + 0x44], eax
cmp dword [rsp + 0x44], 0
jne 0x140014ad8
xor eax, eax
mov rcx, 0xffffffffffffffff
lea rdx, [rsp + 0x60]
mov rdi, rdx
repne scasb al, byte [rdi]
not rcx
dec rcx
mov rax, rcx
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x20], rcx
mov r9d, eax
lea r8, [rsp + 0x50]
mov edx, 0xb
mov rax, qword [rsp + 0x5d0]
mov rcx, qword [rax + 0x40]
call fcn.14000af30
test eax, eax
je 0x140014aa7
mov rax, qword [rsp + 0x5d0]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x5d0]
mov r9, qword [rax + 0x40]
lea r8, [0x140003900]
mov edx, 0x105
lea rcx, [rsp + 0x4a0]
call fcn.14001f670
mov dword [rsp + 0x44], eax
cmp dword [rsp + 0x44], 0
jne 0x140014a6f
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rsp + 0x4a0]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x468], rax
cmp qword [rsp + 0x468], 0xffffffffffffffff
je 0x140014a3e
mov qword [rsp + 0x5b0], 0
cmp dword [0x140025a3c], 0
jne 0x1400148a8
lea r9, [rsp + 0x498]
lea r8, [rsp + 0x60]
mov edx, 0x400
mov rcx, qword [rsp + 0x468]
call fcn.140020a50
mov dword [rsp + 0x460], eax
cmp dword [rsp + 0x460], 1
jbe 0x1400148a8
xor eax, eax
mov rcx, 0xffffffffffffffff
lea rdx, [rsp + 0x60]
mov rdi, rdx
repne scasb al, byte [rdi]
not rcx
dec rcx
mov rax, rcx
lea r8, [rsp + 0x60]
mov edx, eax
mov cl, 0x2c
call fcn.140020490
lea rax, [rsp + 0x60]
mov qword [rsp + 0x5b0], rax
mov rax, qword [rsp + 0x5b0]
movsx eax, byte [rax]
test eax, eax
jne 0x140014838
mov rax, qword [rsp + 0x5b0]
inc rax
mov qword [rsp + 0x5b0], rax
jmp 0x140014814
mov rax, qword [rsp + 0x5d0]
mov rax, qword [rax + 0x40]
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x5b0]
mov qword [rsp + 0x478], rax
mov rax, qword [rsp + 0x5d0]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x480], rax
mov rax, qword [rsp + 0x5d0]
mov rax, qword [rax + 0x38]
mov qword [rsp + 0x488], rax
mov rax, qword [rsp + 0x5d0]
mov eax, dword [rax + 8]
mov dword [rsp + 0x490], eax
lea rcx, [rsp + 0x470]
call fcn.140014180
jmp 0x14001479c
cmp dword [0x140025a3c], 0
je 0x1400148da
mov edx, 0xffffffff
mov rax, qword [0x140025a08]
mov rcx, qword [rax + 8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rax, qword [0x140025a08]
mov rcx, qword [rax + 8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
jmp 0x1400148e8
xor edx, edx
mov rcx, qword [0x140025a08]
call fcn.140016be0
mov rcx, qword [rsp + 0x468]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x140025a3c], 0
jne 0x140014a3c
lea r9, [rsp + 0x4a0]
lea r8, [0x140004668]
mov edx, 0x400
lea rcx, [rsp + 0x60]
call fcn.14001f670
mov dword [rsp + 0x44], eax
cmp dword [rsp + 0x44], 0
jne 0x140014949
mov r8d, 1
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x4a0]
call qword [sym.imp.KERNEL32.dll_CopyFileA]
test eax, eax
jne 0x140014983
mov rax, qword [rsp + 0x5d0]
mov eax, dword [rax + 8]
and eax, 8
test eax, eax
je 0x140014979
lea rdx, [0x140004678]
mov ecx, 1
call fcn.1400058d0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.140005800
lea rax, [0x1400259f8]
lock inc dword [rax]
lea rcx, [rsp + 0x4a0]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
jne 0x1400149cf
mov rax, qword [rsp + 0x5d0]
mov eax, dword [rax + 8]
and eax, 8
test eax, eax
je 0x1400149c5
lea rdx, [0x1400046a0]
mov ecx, 1
call fcn.1400058d0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.140005800
lea rax, [0x1400259f8]
lock inc dword [rax]
cmp dword [rsp + 0x40], 0
jne 0x140014a3c
mov rax, qword [rsp + 0x5d0]
mov rdx, qword [rax + 0x30]
mov rax, qword [rsp + 0x5d0]
mov rcx, qword [rax + 0x40]
call fcn.14000abe0
test eax, eax
jne 0x140014a3c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x40], eax
mov rax, qword [rsp + 0x5d0]
mov eax, dword [rax + 8]
and eax, 8
test eax, eax
je 0x140014a32
mov r8d, dword [rsp + 0x40]
lea rdx, [0x1400046c8]
mov ecx, 1
call fcn.1400058d0
mov ecx, dword [rsp + 0x40]
call fcn.140005800
lea rax, [0x1400259f8]
lock inc dword [rax]
jmp 0x140014a6d
mov rax, qword [rsp + 0x5d0]
mov r8, qword [rax + 0x30]
lea rdx, [0x1400046f0]
mov ecx, 1
call fcn.1400058d0
lea rax, [0x1400259f8]
lock inc dword [rax]
mov dword [rsp + 0x40], 0x57
jmp 0x140014aa5
mov eax, dword [rsp + 0x44]
and eax, 0xffff
mov dword [rsp + 0x40], eax
mov r8d, dword [rsp + 0x40]
lea rdx, [0x140004728]
mov ecx, 3
call fcn.1400058d0
mov ecx, dword [rsp + 0x40]
call fcn.140005800
lea rax, [0x1400259f8]
lock inc dword [rax]
jmp 0x140014ad6
mov rax, qword [rsp + 0x5d0]
mov r8, qword [rax + 0x40]
lea rdx, [0x140004748]
mov ecx, 1
call fcn.1400058d0
lea rax, [0x1400259f8]
lock inc dword [rax]
mov dword [rsp + 0x40], 1
jmp 0x140014b0e
mov eax, dword [rsp + 0x44]
and eax, 0xffff
mov dword [rsp + 0x40], eax
mov r8d, dword [rsp + 0x40]
lea rdx, [0x140004728]
mov ecx, 3
call fcn.1400058d0
mov ecx, dword [rsp + 0x40]
call fcn.140005800
lea rax, [0x1400259f8]
lock inc dword [rax]
jmp 0x140014b33
mov dword [rsp + 0x40], 0x57
lea rdx, [0x140004770]
mov ecx, 1
call fcn.1400058d0
lea rax, [0x1400259f8]
lock inc dword [rax]
mov eax, dword [rsp + 0x40]
mov rcx, qword [rsp + 0x5b8]
xor rcx, rsp
call fcn.140021740
add rsp, 0x5c0
pop rdi
ret