Function at 0x1000b217c
Capabilities:
Copy file

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r15
sub rsp, 0x570
mov rax, qword [0x100165138]
xor rax, rsp
mov qword [rsp + 0x560], rax
xor r13d, r13d
mov rsi, r9
mov r12d, r8d
mov rbx, rdx
mov rbp, rcx
mov dword [r9], r13d
cmp r8d, r13d
je 0x1000b2228
lea r9, [rsp + 0x30]
lea r8, [0x100002938]
call fcn.1000b1dec
mov edi, eax
cmp eax, 0x80070002
je 0x1000b2432
cmp eax, r13d
mov rcx, qword [rsp + 0x30]
jge 0x1000b2222
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x1001653b8]
lea rax, [0x1001653b8]
cmp rcx, rax
je 0x1000b221b
test byte [rcx + 0x1c], 1
je 0x1000b221b
cmp byte [rcx + 0x19], 2
jb 0x1000b221b
mov rcx, qword [rcx + 0x10]
lea edx, [r13 + 0x55]
lea r8, [0x1000036e8]
mov r9d, edi
call fcn.10001c7dc
mov eax, edi
jmp 0x1000b2434
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r15d, 0x143
cmp rbx, r13
je 0x1000b22ab
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, rbx
repne scasw ax, word [rdi]
not rcx
dec rcx
cmp rcx, 0x104
jb 0x1000b2266
lea r8, [0x10000b220]
lea rcx, [0x10000b150]
mov edx, 0xa0d
call fcn.100099ad8
lea rax, [rsp + 0x40]
mov rdi, rbx
mov rdx, r15
sub rdi, rax
lea rcx, [rsp + 0x40]
lea rax, [rdx + 0x7ffffebb]
cmp rax, r13
je 0x1000b229c
movzx eax, word [rdi + rcx]
cmp ax, r13w
je 0x1000b229c
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x1000b2279
cmp rdx, r13
jne 0x1000b22a5
sub rcx, 2
mov word [rcx], r13w
jmp 0x1000b22c9
lea rcx, [rsp + 0x40]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x105
call fcn.1000b2a6c
cmp eax, r13d
jl 0x1000b2434
lea r8, [0x100002954]
lea rcx, [rsp + 0x40]
mov rdx, r15
call fcn.1000590dc
lea rdi, [rsp + 0x40]
lea rax, [rsp + 0x2d0]
sub rdi, rax
mov rdx, r15
lea rcx, [rsp + 0x2d0]
lea rax, [rdx + 0x7ffffebb]
cmp rax, r13
je 0x1000b231b
movzx eax, word [rdi + rcx]
cmp ax, r13w
je 0x1000b231b
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x1000b22f8
cmp rdx, r13
jne 0x1000b2324
sub rcx, 2
mov word [rcx], r13w
or rcx, 0xffffffffffffffff
xor eax, eax
lea rdi, [rsp + 0x40]
repne scasw ax, word [rdi]
not rcx
add rcx, 0x14
cmp rcx, r15
jb 0x1000b235a
lea r8, [0x10000b730]
lea rcx, [0x10000b150]
mov edx, 0xa24
call fcn.100099ad8
lea r8, [0x1000028d8]
lea rcx, [rsp + 0x40]
mov rdx, r15
call fcn.1000590dc
lea r8, [0x100002954]
lea rcx, [rsp + 0x40]
mov rdx, r15
call fcn.1000590dc
lea r8, [0x100002938]
lea rcx, [rsp + 0x40]
mov rdx, r15
call fcn.1000590dc
or rcx, 0xffffffffffffffff
xor eax, eax
lea rdi, [rsp + 0x2d0]
repne scasw ax, word [rdi]
not rcx
add rcx, 0x1a
cmp rcx, r15
jb 0x1000b23cb
lea r8, [0x10000b7a0]
lea rcx, [0x10000b150]
mov edx, 0xa2d
call fcn.100099ad8
lea r8, [0x1000028d8]
lea rcx, [rsp + 0x2d0]
mov rdx, r15
call fcn.1000590dc
lea r8, [0x100002954]
lea rcx, [rsp + 0x2d0]
mov rdx, r15
call fcn.1000590dc
lea r8, [0x100002910]
lea rcx, [rsp + 0x2d0]
mov rdx, r15
call fcn.1000590dc
cmp r12d, r13d
je 0x1000b2456
lea rdx, [rsp + 0x2d0]
lea rcx, [rsp + 0x40]
call fcn.1000b2048
cmp eax, r13d
jl 0x1000b2434
mov dword [rsi], 1
xor eax, eax
mov rcx, qword [rsp + 0x560]
xor rcx, rsp
call fcn.10014e480
add rsp, 0x570
pop r15
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
lea r9, [rsp + 0x30]
lea r8, [0x100002910]
mov rdx, rbx
mov rcx, rbp
call fcn.1000b1dec
cmp eax, r13d
mov edi, eax
jge 0x1000b24cb
cmp eax, 0x80070002
je 0x1000b2432
mov rcx, qword [0x1001653b8]
lea rax, [0x1001653b8]
cmp rcx, rax
je 0x1000b221b
test byte [rcx + 0x1c], 2
je 0x1000b221b
cmp byte [rcx + 0x19], 2
jb 0x1000b221b
mov rcx, qword [rcx + 0x10]
lea r9, [0x100002910]
lea r8, [0x1000036e8]
mov edx, 0x56
mov dword [rsp + 0x20], edi
call fcn.10001daa4
jmp 0x1000b221b
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x2d0]
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_CopyFileExW]
cmp eax, r13d
jne 0x1000b2432
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov rcx, qword [0x1001653b8]
lea rax, [0x1001653b8]
cmp rcx, rax
je 0x1000b2541
test byte [rcx + 0x1c], 1
je 0x1000b2541
cmp byte [rcx + 0x19], 2
jb 0x1000b2541
mov rcx, qword [rcx + 0x10]
lea r8, [0x1000036e8]
mov edx, 0x57
mov r9d, edi
call fcn.10001c7dc
movzx eax, di
or eax, 0x80070000
cmp edi, r13d
cmovle eax, edi
jmp 0x1000b2434