Function at 0x1400d6260
Capabilities:
Copy file

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x1d0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x1c0], rax
mov rbp, qword [rsp + 0x220]
movsxd r12, r9d
mov qword [rsp + 0x30], rcx
mov eax, dword [rbp + 4]
mov dword [rsp + 0x40], r12d
mov qword [rsp + 0x78], rbp
lea edx, [rax + r12*4]
mov dword [rsp + 0x98], edx
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov rdi, rax
mov qword [rsp + 0x58], rax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov qword [rsp + 0x48], rax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rsi, rax
mov qword [rsp + 0x28], rax
call qword [sym.imp.USER32.dll_GetActiveWindow]
sub sil, byte [rbp + 8]
mov r8, rax
mov qword [rsp + 0x38], rax
movzx eax, byte [rsp + 0x228]
add sil, 0xd
mov ecx, 2
add sil, dil
movsx edx, sil
imul byte [rbp + 4]
sub cl, al
sub cl, r12b
movsx eax, cl
imul edx, eax
mov dword [rsp + 0x24], edx
lea eax, [rdx + r8]
mov dword [rsp + 0x20], eax
cmp r12d, 0x10
jg 0x1400d633c
call qword [sym.imp.USER32.dll_GetActiveWindow]
call qword [sym.imp.USER32.dll_GetActiveWindow]
call qword [sym.imp.USER32.dll_GetActiveWindow]
lea rdx, str.reading
lea rcx, str.c1a1
mov r8d, 0xfffffff9
call qword [sym.imp.KERNEL32.dll_CopyFileA]
movsxd r15, dword [rsp + 0x230]
lea rcx, str.c1a1
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, [0x1400ed4d4]
mov r9, r15
mov rcx, rax
mov r8, r12
call qword [sym.imp.KERNEL32.dll_EnumResourceNamesA]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov qword [rsp + 0x80], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessorNumber]
movsx r9, sil
imul ebx, dword [rbp], 7
add ebx, 0xffffffe4
mov r13d, eax
add ebx, r12d
add ebx, r9d
mov dword [rsp + 0x50], ebx
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rdx, str.c1a1
lea rcx, str.reading
mov r8d, r15d
mov rbp, rax
mov qword [rsp + 0x70], rax
call qword [sym.imp.KERNEL32.dll_CopyFileA]
mov r14d, eax
mov dword [rsp + 0x54], eax
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov ecx, r14d
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, r14d
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x68], rax
call qword [sym.imp.USER32.dll_GetActiveWindow]
lea rcx, [rsp + 0xb0]
mov edx, 0x104
call qword [sym.imp.KERNEL32.dll_FindFirstVolumeA]
xor ecx, ecx
mov edx, 0x3b9
lea r8d, [rcx + 3]
call qword [sym.imp.KERNEL32.dll_FindResourceA]
dec r12b
mov rdx, rax
mov qword [rsp + 0x60], rax
movzx eax, byte [rsp + 0x98]
imul r15b
mov r15, qword [rsp + 0x58]
movzx ecx, al
movzx eax, byte [rsp + 0x228]
imul cl
movzx ecx, byte [rsp + 0x48]
shl cl, 4
lea edi, [rcx + rax]
mov al, 7
xor ecx, ecx
lea r8d, [rcx + 2]
imul byte [rsp + 0x28]
sub dil, al
sub dil, bl
sub dil, r14b
sub dil, byte [rsp + 0x38]
sub dil, r15b
add dil, r12b
add dil, r13b
movzx ebx, dil
sub bl, dl
mov edx, 0x27a
add bl, 0x10
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov rdx, qword [rsp + 0x30]
imul ebp, r14d
mov r8, qword [rsp + 0x48]
mov qword [rdx], rax
imul r14d, r8d, 0xfffffff9
add r15d, r15d
mov ecx, dword [rsp + 0x24]
mov rax, qword [rsp + 0x38]
shl esi, 4
lea eax, [rax + rax*2]
movsx r12, bl
movzx ebx, dil
imul ecx, dword [rsp + 0x20]
mov rdi, qword [rsp + 0x80]
add ecx, esi
mov esi, dword [rsp + 0x50]
sub ecx, eax
mov rax, qword [rsp + 0x228]
mov qword [rdx + 0x20], 0
sub ecx, r14d
add eax, 0x11
sub ecx, ebx
sub ecx, ebp
sub ecx, dword [rsp + 0x28]
sub ecx, r8d
add ecx, r15d
add ecx, r12d
add ecx, dword [rsp + 0x60]
add ecx, edi
add ecx, esi
add eax, ecx
xor ecx, ecx
mov dword [rdx + 8], eax
lea rax, [0x1400ed4d4]
lea r8d, [rcx + 0x16]
mov qword [rdx + 0x10], rax
lea rax, str.misogyny
mov qword [rdx + 0x18], rax
mov edx, 0x305
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov rcx, qword [rsp + 0x30]
mov r9, qword [rsp + 0x68]
mov r10, qword [rsp + 0x60]
mov qword [rcx + 0x28], rax
mov rax, qword [rsp + 0x78]
mov r8d, dword [rax + 0x20]
mov r11d, dword [rsp + 0x230]
movzx edx, r13b
mov r13, qword [rsp + 0x38]
mov ecx, r9d
mov eax, r8d
imul eax, dword [rsp + 0x228]
imul ecx, ebx
imul ecx, r10d
shl ecx, 4
add ecx, eax
lea eax, [rsi + rsi*4]
add ecx, eax
lea eax, [r11 + 0x17]
sub ecx, ebp
mov ebp, dword [rsp + 0x24]
sub ecx, ebp
sub ecx, r12d
sub ecx, dword [rsp + 0x28]
sub ecx, r13d
add ecx, r15d
add ecx, r14d
mov r14, qword [rsp + 0x48]
add ecx, edx
add ecx, edi
mov rdi, qword [rsp + 0x30]
imul edx, dword [rsp + 0x70]
add ecx, r14d
shl r14d, 4
add ecx, dword [rsp + 0x20]
imul edx, esi
add eax, ecx
lea ecx, [rbp + 1]
add ecx, r14d
mov dword [rdi + 0x30], eax
lea eax, [rdx + rdx*4]
imul ecx, r13d
add ecx, eax
lea eax, [r9 + 1]
imul eax, dword [rsp + 0x28]
add ecx, eax
shl r15d, 4
mov eax, dword [rsp + 0x20]
add ecx, r15d
mov qword [rdi + 0x40], 0
sub ecx, dword [rsp + 0x54]
add eax, 9
sub ecx, dword [rsp + 0x228]
sub ecx, r11d
add ecx, r8d
add ecx, ebx
add ecx, dword [rsp + 0x40]
add ecx, r12d
add ecx, r10d
add eax, ecx
mov dword [rdi + 0x34], eax
mov rax, qword [rsp + 0x58]
mov qword [rdi + 0x38], rax
mov rax, rdi
mov rcx, qword [rsp + 0x1c0]
xor rcx, rsp
call fcn.1400dd340
lea r11, [rsp + 0x1d0]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret