Function at 0x1400686f0
Capabilities:
Copy file
Delete file

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1058]
mov eax, 0x1158
call fcn.140149570
sub rsp, rax
mov rax, qword [0x1401f3030]
xor rax, rsp
mov qword [rbp + 0x1040], rax
mov rdi, r9
mov rsi, r8
mov r14, rdx
mov rbx, rcx
xor r12d, r12d
mov r15b, 1
mov rdx, r9
lea rcx, [rbp - 8]
call fcn.1400353e0
nop
mov rcx, qword [rbp + 8]
test rcx, rcx
je 0x140068c6d
mov rdx, qword [rbp + 0x10]
mov rax, rdx
sub rax, rcx
cmp rax, 4
jb 0x14006878a
lea rax, [rcx + 4]
mov qword [rbp + 8], rax
lea rax, [rbp - 8]
cmp rdx, 8
cmovae rax, qword [rbp - 8]
movabs rdx, 0x70006d0074002e
mov qword [rax + rcx*2], rdx
mov word [rax + rcx*2 + 8], r12w
jmp 0x1400687ad
lfence
mov qword [rsp + 0x20], 4
lea r9, str..tmp
xor r8d, r8d
lea edx, [r8 + 4]
lea rcx, [rbp - 8]
call fcn.1400310a0
lea rdx, [rbp - 8]
lea rcx, [rbp - 0x28]
call fcn.1400bc4c0
nop
cmp qword [rbp - 0x18], 0
je 0x140068c2c
lea rdx, [rbp - 0x28]
mov rcx, rsi
call fcn.14003f720
movzx r15d, al
test al, al
jne 0x140068b21
lea r13, [0x14018f828]
mov rcx, qword [0x1401fee88]
cmp dword [rcx], 2
jbe 0x140068897
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], 0x101
lea rcx, str.D:jenk11workspacewsg_citKiller_Release_3.5_srcKillerNetwork_ServiceServiceSharedSourceBWCLogicBWCXMLFiles.cpp
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], eax
lea r9, str.__d___hs__d__:__ls__
mov r14d, 0x7ff
mov r8d, r14d
mov ebx, 0x800
mov edx, ebx
lea rcx, [rbp + 0x40]
call fcn.140050da0
mov edx, ebx
lea rcx, [rbp + 0x40]
call fcn.14015039c
mov r8, rdi
cmp qword [rdi + 0x18], 8
jb 0x140068850
mov r8, qword [rdi]
mov rdx, rsi
cmp qword [rsi + 0x18], 8
jb 0x14006885d
mov rdx, qword [rsi]
sub r14, rax
sub rbx, rax
lea rcx, [rbp + 0x40]
lea rcx, [rcx + rax*2]
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x20], rdx
lea r9, str.Error_Downloading__ls_to_file__ls
mov r8, r14
mov rdx, rbx
call fcn.140050da0
lea rdx, [rbp + 0x40]
lea rcx, [0x1401fee78]
call fcn.14006e6b0
mov qword [rbp - 0x68], r12
mov qword [rbp - 0x58], r12
mov qword [rbp - 0x50], 7
mov word [rbp - 0x68], r12w
mov r8d, reloc.OLEAUT32.dll_SafeArrayAccessData
mov rdx, r13
lea rcx, [rbp - 0x68]
call fcn.140020fa0
nop
mov r8, rsi
lea rdx, str.Error_Downloading
lea rcx, [rbp - 0x48]
call fcn.14002dbe0
mov rbx, rax
mov rcx, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 9
jb 0x14006891a
lea r14, [rcx + 9]
mov qword [rbx + 0x10], r14
mov rsi, rbx
cmp rdx, 8
jb 0x1400688fd
mov rsi, qword [rbx]
lea rcx, [rsi + rcx*2]
mov r8d, SafeArrayUnlock
lea rdx, str._to_file
call fcn.14014b350
mov word [rsi + r14*2], r12w
jmp 0x14006893f
lfence
mov qword [rsp + 0x20], 9
lea r9, str._to_file
xor r8d, r8d
lea edx, [r8 + 9]
mov rcx, rbx
call fcn.1400310a0
mov rbx, rax
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], r12
movups xmm0, xmmword [rbx]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], 7
mov word [rbx], r12w
mov rdx, rdi
cmp qword [rdi + 0x18], 8
jb 0x14006897c
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
lea rcx, [rsp + 0x60]
call fcn.140030b20
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
mov edx, 1
lea r8d, [rdx + 1]
lea rax, [rbp - 0x68]
mov qword [rsp + 0x20], rax
lea r9d, [rdx + 0xf]
lea rcx, [rsp + 0x40]
call fcn.14002d730
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x140068a1d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140068a18
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140068cd6
call fcn.140149194
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], 7
mov word [rsp + 0x40], r12w
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x140068a73
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140068a6e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140068cdc
call fcn.140149194
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], r12w
mov rdx, qword [rbp - 0x30]
cmp rdx, 8
jb 0x140068ac7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140068ac2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140068ce2
call fcn.140149194
mov qword [rbp - 0x38], r12
mov qword [rbp - 0x30], 7
mov word [rbp - 0x48], r12w
mov rdx, qword [rbp - 0x50]
cmp rdx, 8
jb 0x140068c2c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140068b17
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140068ce8
call fcn.140149194
jmp 0x140068c2c
lea rcx, [rbp - 0x28]
call fcn.1400c0160
movzx r15d, al
test al, al
je 0x140068c17
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
mov qword [rbp - 0x78], rbx
mov byte [rbp - 0x70], 0
mov rcx, rbx
call fcn.140121310
test eax, eax
jne 0x140068cee
mov byte [rbp - 0x70], 1
mov rcx, qword [r14]
mov qword [r14], r12
test rcx, rcx
je 0x140068b76
mov rax, qword [rcx]
mov edx, 1
mov rax, qword [rax + 8]
call qword [case.0x140026a06.0]
mov rdx, rdi
lea rcx, [rbp + 0x18]
call fcn.1400bc4c0
nop
lea rdx, [rbp + 0x18]
cmp qword [rbp + 0x30], 8
cmovae rdx, qword [rbp + 0x18]
lea rcx, [rbp - 0x28]
cmp qword [rbp - 0x10], 8
cmovae rcx, qword [rbp - 0x28]
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x140068bbe
mov r8, rdi
mov rdx, r14
mov rcx, rbx
call fcn.14006c1c0
movzx r15d, al
mov rdx, qword [rbp + 0x30]
cmp rdx, 8
jb 0x140068bfe
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140068bf9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140068cf6
call fcn.140149194
mov qword [rbp + 0x28], r12
mov qword [rbp + 0x30], 7
mov word [rbp + 0x18], r12w
mov rcx, rbx
call fcn.140121318
lea rcx, [rbp - 0x28]
cmp qword [rbp - 0x10], 8
cmovae rcx, qword [rbp - 0x28]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, 8
jb 0x140068c6d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140068c67
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140068cfc
call fcn.140149194
nop
mov rdx, qword [rbp + 0x10]
cmp rdx, 8
jb 0x140068ca9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140068ca4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140068cd0
call fcn.140149194
movzx eax, r15b
mov rcx, qword [rbp + 0x1040]
xor rcx, rsp
call fcn.140149500
add rsp, 0x1158
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.1401501d4
nop
call fcn.1401501d4
nop
call fcn.1401501d4
nop
call fcn.1401501d4
nop
call fcn.1401501d4
int3
mov ecx, eax
call fcn.140121534
nop
call fcn.1401501d4
nop
call fcn.1401501d4
int3