Function at 0x1000b226c
Capabilities:
Copy file

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r15
sub rsp, 0x570
mov rax, qword [0x100165138]
xor rax, rsp
mov qword [rsp + 0x560], rax
xor r13d, r13d
mov rsi, r9
mov r12d, r8d
mov rbx, rdx
mov rbp, rcx
mov dword [r9], r13d
cmp r8d, r13d
je 0x1000b2318
lea r9, [rsp + 0x30]
lea r8, [0x100002918]
call fcn.1000b1edc
mov edi, eax
cmp eax, 0x80070002
je 0x1000b2522
cmp eax, r13d
mov rcx, qword [rsp + 0x30]
jge 0x1000b2312
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x1001653b8]
lea rax, [0x1001653b8]
cmp rcx, rax
je 0x1000b230b
test byte [rcx + 0x1c], 1
je 0x1000b230b
cmp byte [rcx + 0x19], 2
jb 0x1000b230b
mov rcx, qword [rcx + 0x10]
lea edx, [r13 + 0x55]
lea r8, [0x1000036a8]
mov r9d, edi
call fcn.10001c878
mov eax, edi
jmp 0x1000b2524
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r15d, 0x143
cmp rbx, r13
je 0x1000b239b
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, rbx
repne scasw ax, word [rdi]
not rcx
dec rcx
cmp rcx, 0x104
jb 0x1000b2356
lea r8, [0x10000b190]
lea rcx, [0x10000b0c0]
mov edx, 0xa0d
call fcn.10009a050
lea rax, [rsp + 0x40]
mov rdi, rbx
mov rdx, r15
sub rdi, rax
lea rcx, [rsp + 0x40]
lea rax, [rdx + 0x7ffffebb]
cmp rax, r13
je 0x1000b238c
movzx eax, word [rdi + rcx]
cmp ax, r13w
je 0x1000b238c
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x1000b2369
cmp rdx, r13
jne 0x1000b2395
sub rcx, 2
mov word [rcx], r13w
jmp 0x1000b23b9
lea rcx, [rsp + 0x40]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x105
call fcn.1000b2b5c
cmp eax, r13d
jl 0x1000b2524
lea r8, [0x100002934]
lea rcx, [rsp + 0x40]
mov rdx, r15
call fcn.100059424
lea rdi, [rsp + 0x40]
lea rax, [rsp + 0x2d0]
sub rdi, rax
mov rdx, r15
lea rcx, [rsp + 0x2d0]
lea rax, [rdx + 0x7ffffebb]
cmp rax, r13
je 0x1000b240b
movzx eax, word [rdi + rcx]
cmp ax, r13w
je 0x1000b240b
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x1000b23e8
cmp rdx, r13
jne 0x1000b2414
sub rcx, 2
mov word [rcx], r13w
or rcx, 0xffffffffffffffff
xor eax, eax
lea rdi, [rsp + 0x40]
repne scasw ax, word [rdi]
not rcx
add rcx, 0x14
cmp rcx, r15
jb 0x1000b244a
lea r8, [0x10000b6a0]
lea rcx, [0x10000b0c0]
mov edx, 0xa24
call fcn.10009a050
lea r8, [0x1000028b8]
lea rcx, [rsp + 0x40]
mov rdx, r15
call fcn.100059424
lea r8, [0x100002934]
lea rcx, [rsp + 0x40]
mov rdx, r15
call fcn.100059424
lea r8, [0x100002918]
lea rcx, [rsp + 0x40]
mov rdx, r15
call fcn.100059424
or rcx, 0xffffffffffffffff
xor eax, eax
lea rdi, [rsp + 0x2d0]
repne scasw ax, word [rdi]
not rcx
add rcx, 0x1a
cmp rcx, r15
jb 0x1000b24bb
lea r8, [0x10000b710]
lea rcx, [0x10000b0c0]
mov edx, 0xa2d
call fcn.10009a050
lea r8, [0x1000028b8]
lea rcx, [rsp + 0x2d0]
mov rdx, r15
call fcn.100059424
lea r8, [0x100002934]
lea rcx, [rsp + 0x2d0]
mov rdx, r15
call fcn.100059424
lea r8, [0x1000028f0]
lea rcx, [rsp + 0x2d0]
mov rdx, r15
call fcn.100059424
cmp r12d, r13d
je 0x1000b2546
lea rdx, [rsp + 0x2d0]
lea rcx, [rsp + 0x40]
call fcn.1000b2138
cmp eax, r13d
jl 0x1000b2524
mov dword [rsi], 1
xor eax, eax
mov rcx, qword [rsp + 0x560]
xor rcx, rsp
call fcn.10014e600
add rsp, 0x570
pop r15
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
lea r9, [rsp + 0x30]
lea r8, [0x1000028f0]
mov rdx, rbx
mov rcx, rbp
call fcn.1000b1edc
cmp eax, r13d
mov edi, eax
jge 0x1000b25bb
cmp eax, 0x80070002
je 0x1000b2522
mov rcx, qword [0x1001653b8]
lea rax, [0x1001653b8]
cmp rcx, rax
je 0x1000b230b
test byte [rcx + 0x1c], 2
je 0x1000b230b
cmp byte [rcx + 0x19], 2
jb 0x1000b230b
mov rcx, qword [rcx + 0x10]
lea r9, [0x1000028f0]
lea r8, [0x1000036a8]
mov edx, 0x56
mov dword [rsp + 0x20], edi
call fcn.10001ddb0
jmp 0x1000b230b
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x2d0]
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_CopyFileExW]
cmp eax, r13d
jne 0x1000b2522
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov rcx, qword [0x1001653b8]
lea rax, [0x1001653b8]
cmp rcx, rax
je 0x1000b2631
test byte [rcx + 0x1c], 1
je 0x1000b2631
cmp byte [rcx + 0x19], 2
jb 0x1000b2631
mov rcx, qword [rcx + 0x10]
lea r8, [0x1000036a8]
mov edx, 0x57
mov r9d, edi
call fcn.10001c878
movzx eax, di
or eax, 0x80070000
cmp edi, r13d
cmovle eax, edi
jmp 0x1000b2524