Function at 0x1400ed7c0
Capabilities:
Copy file
Delete file
Move file

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xa8
mov rsi, r8
mov rax, qword [0x1403a8f38]
xor rax, rsp
mov qword [rsp + 0xa0], rax
lea r14, [0x1402d1940]
mov qword [rsp + 0x50], r14
lea rbx, [rsp + 0x50]
mov qword [rsp + 0x88], rbx
lea rcx, [rsp + 0x90]
mov r8b, 1
mov r9, rbx
call fcn.1400ec370
mov rdi, qword [rsp + 0x98]
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x88], rbx
lea rcx, [rsp + 0x90]
mov rdx, rsi
mov r8b, 1
mov r9, rbx
call fcn.1400ec370
mov rsi, qword [rsp + 0x98]
mov rdx, rdi
xor r8d, r8d
call fcn.1400ecfe0
test eax, eax
je 0x1400ed868
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_SetLastError]
xor esi, esi
jmp 0x1400edd6d
mov rcx, rsi
mov edx, 0x5c
call fcn.140269c68
mov rbx, rax
mov rcx, rsi
mov edx, 0x2f
call fcn.140269c68
mov rcx, rbx
or rcx, rax
je 0x1400edc8d
mov rcx, rbx
sub rcx, rsi
mov rdx, rax
sub rdx, rsi
cmp rcx, rdx
mov r12d, eax
cmovg r12d, ebx
test rax, rax
cmove r12d, ebx
sub r12d, esi
lea eax, [r12 + 9]
cmp eax, 0x104
jg 0x1400edc8d
lea ebp, [r12 + 1]
mov dword [rsp + 0x4c], 0
lea rdx, [rsp + 0x4c]
mov ecx, 4
call fcn.1400e1ec0
test al, al
je 0x1400eda3c
lea rbx, [rsp + 0x50]
mov rcx, rbx
call fcn.1400e5ca0
movsxd r14, ebp
lea rcx, [r14 + 1]
call sym.dart_precompiled_runtime_product.exe_Dart_ScopeAllocate
mov r15, rax
mov rcx, rax
mov rdx, rsi
mov r8, r14
call fcn.1402695f0
mov byte [r15 + r14], 0
mov rcx, rbx
mov rdx, r15
call fcn.1400e5d00
test al, al
je 0x1400eda0f
mov r9d, dword [rsp + 0x4c]
lea r8, [0x1402d178e]
lea rcx, [rsp + 0x90]
mov edx, 9
call fcn.1400254c0
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov r13, qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
xor r15d, r15d
mov ecx, 0xfde9
xor edx, edx
mov r8, rdi
mov r9d, 0xffffffff
call r13
movsxd rbx, eax
lea rcx, [rbx + rbx]
call fcn.140023a40
mov r14, rax
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
mov ecx, 0xfde9
xor edx, edx
mov r8, rdi
mov r9d, 0xffffffff
call r13
lea rcx, [rsp + 0x50]
lea rdx, [rsp + 0x90]
call fcn.1400e5d00
test al, al
je 0x1400eda1e
lea rcx, [rsp + 0x50]
call fcn.1400321a0
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov rcx, r14
mov rdx, rax
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CopyFileExW]
test eax, eax
je 0x1400eda22
lea rcx, [rsp + 0x50]
call fcn.1400321a0
mov r15, rax
mov ecx, 0x209
call sym.dart_precompiled_runtime_product.exe_Dart_ScopeAllocate
mov rbx, rax
mov rcx, rax
mov rdx, r15
call fcn.140285ca0
xor r15d, r15d
jmp 0x1400eda25
lea rcx, [rsp + 0x50]
call fcn.1400e5cd0
jmp 0x1400edc8d
xor ebx, ebx
jmp 0x1400eda25
mov r15b, 1
mov rcx, r14
call fcn.14026f0c8
lea rcx, [rsp + 0x50]
call fcn.1400e5cd0
test r15b, r15b
je 0x1400eda7d
add r12d, 0x25
cmp r12d, 0x104
jg 0x1400edc8d
lea rcx, [rsp + 0x50]
call qword [sym.imp.RPCRT4.dll_UuidCreateSequential]
cmp eax, 0x720
je 0x1400eda63
test eax, eax
jne 0x1400eda7b
lea rcx, [rsp + 0x50]
lea rdx, [rsp + 0x40]
call qword [sym.imp.RPCRT4.dll_UuidToStringW]
test eax, eax
je 0x1400edb27
xor ebx, ebx
test rbx, rbx
je 0x1400edc8d
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov r14, qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov ecx, 0xfde9
xor edx, edx
mov r8, rsi
mov r9d, 0xffffffff
call r14
movsxd r15, eax
lea rcx, [r15 + r15]
call fcn.140023a40
mov rdi, rax
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], rax
mov ecx, 0xfde9
xor edx, edx
mov r8, rsi
mov r9d, 0xffffffff
call r14
mov rdx, rsi
call fcn.1400ecbf0
test al, al
je 0x1400edaf2
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rcx, rbx
mov rdx, rdi
call qword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
setne sil
jne 0x1400edb1f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, ebp
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, rdi
jmp 0x1400edd68
lea r15, [rsp + 0x90]
mov rcx, r15
call fcn.1400e5ca0
movsxd rbx, ebp
lea rcx, [rbx + 1]
call sym.dart_precompiled_runtime_product.exe_Dart_ScopeAllocate
mov r12, rax
mov rcx, rax
mov rdx, rsi
mov r8, rbx
call fcn.1402695f0
mov byte [r12 + rbx], 0
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov r13, qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
xor ebx, ebx
mov ecx, 0xfde9
xor edx, edx
mov r8, r12
mov r9d, 0xffffffff
call r13
movsxd rbp, eax
lea rcx, [rbp*2]
call fcn.140023a40
mov r14, rax
mov dword [rsp + 0x28], ebp
mov qword [rsp + 0x20], rax
mov ecx, 0xfde9
xor edx, edx
mov r8, r12
mov r9d, 0xffffffff
call r13
mov rcx, r15
mov rdx, r14
call fcn.1400e5df0
test al, al
je 0x1400edc6f
mov rdx, qword [rsp + 0x40]
lea rcx, [rsp + 0x90]
call fcn.1400e5df0
test al, al
je 0x1400edc6d
lea rcx, [rsp + 0x40]
call qword [sym.imp.RPCRT4.dll_RpcStringFreeW]
lea rcx, [rsp + 0x30]
mov rdx, rdi
mov r8, 0xffffffffffffffff
call fcn.1400ec960
lea rcx, [rsp + 0x90]
call fcn.1400321a0
mov rcx, qword [rsp + 0x38]
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
xor ebx, ebx
mov rdx, rax
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CopyFileExW]
test eax, eax
je 0x1400edc61
lea rcx, [rsp + 0x90]
call fcn.1400321a0
mov r15, rax
mov ecx, 0x209
call sym.dart_precompiled_runtime_product.exe_Dart_ScopeAllocate
mov rbx, rax
mov rcx, rax
mov rdx, r15
call fcn.140285ca0
mov rcx, qword [rsp + 0x38]
call fcn.14026f0c8
jmp 0x1400edc6f
xor ebx, ebx
mov rcx, r14
call fcn.14026f0c8
lea rcx, [rsp + 0x90]
call fcn.1400e5cd0
test rbx, rbx
jne 0x1400eda86
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov r14, qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov ecx, 0xfde9
xor edx, edx
mov r8, rdi
mov r9d, 0xffffffff
call r14
movsxd r15, eax
lea rcx, [r15 + r15]
call fcn.140023a40
mov rbx, rax
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], rax
mov ecx, 0xfde9
xor edx, edx
mov r8, rdi
mov r9d, 0xffffffff
call r14
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov ecx, 0xfde9
xor edx, edx
mov r8, rsi
mov r9d, 0xffffffff
call r14
movsxd r15, eax
lea rcx, [r15 + r15]
call fcn.140023a40
mov rdi, rax
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], rax
mov ecx, 0xfde9
xor edx, edx
mov r8, rsi
mov r9d, 0xffffffff
call r14
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov rcx, rbx
mov rdx, rdi
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CopyFileExW]
test eax, eax
setne sil
mov rcx, rdi
call fcn.14026f0c8
mov rcx, rbx
call fcn.14026f0c8
mov rcx, qword [rsp + 0xa0]
xor rcx, rsp
call fcn.140265f80
mov eax, esi
add rsp, 0xa8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret