Function at 0x14001dee0
Capabilities:
Copy file

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2d0]
sub rsp, 0x3d0
mov rax, qword [0x1400f0158]
xor rax, rsp
mov qword [rbp + 0x2c0], rax
mov rbx, rcx
mov qword [rsp + 0x28], rcx
xor r13d, r13d
mov qword [rcx], r13
add rcx, 0x30
call fcn.140008510
lea rcx, [rbx + 8]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov r8d, 0x104
lea rdx, [rbp + 0xb0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], 7
lea rax, [rbp + 0xb0]
mov rdi, 0xffffffffffffffff
mov r8, rdi
inc r8
cmp word [rax + r8*2], r13w
jne 0x14001df72
lea rdx, [rbp + 0xb0]
lea rcx, [rsp + 0x50]
call fcn.140003fa0
lea rsi, [rsp + 0x50]
mov r14, qword [rsp + 0x50]
mov r15, qword [rsp + 0x68]
cmp r15, 8
cmovae rsi, r14
mov rbx, qword [rsp + 0x60]
test rbx, rbx
je 0x14001e07f
mov r12d, 0x100
mov r8d, r12d
xor edx, edx
lea rcx, [rbp - 0x50]
call fcn.140079be0
lea rcx, [0x1400b847c]
lea rdx, [0x1400b8480]
movzx eax, word [rcx]
cmp ax, r12w
jae 0x14001e01b
movzx eax, al
mov byte [rbp + rax - 0x50], 1
add rcx, 2
cmp rcx, rdx
jne 0x14001dfd4
lea rcx, [rbx - 1]
mov rax, rdi
cmp rcx, rax
cmovb rax, rcx
lea rbx, [rsi + rax*2]
movzx eax, word [rbx]
cmp ax, r12w
jae 0x14001e010
cmp byte [rbp + rax - 0x50], r13b
jne 0x14001e077
cmp rbx, rsi
je 0x14001e07f
sub rbx, 2
jmp 0x14001e000
lea rcx, [rbx - 1]
mov rax, rdi
cmp rcx, rax
cmovb rax, rcx
lea rbx, [rsi + rax*2]
mov r8d, 0x5c
nop dword [rax]
nop word [rax + rax]
mov ecx, 2
movzx edx, word [rbx]
lea rax, [0x1400b847c]
cmp r8w, dx
je 0x14001e077
cmp rcx, 1
je 0x14001e06c
dec rcx
add rax, 2
cmp word [rax], dx
jne 0x14001e055
test rax, rax
jne 0x14001e077
cmp rbx, rsi
je 0x14001e07f
sub rbx, 2
jmp 0x14001e040
sub rbx, rsi
sar rbx, 1
jmp 0x14001e082
mov rbx, rdi
cmp r15, 8
jb 0x14001e0bd
lea rdx, [r15*2 + 2]
mov rax, r14
cmp rdx, 0x1000
jb 0x14001e0b5
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001e4eb
mov rcx, r14
call fcn.140071a3c
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x58], 7
mov word [rbp - 0x70], r13w
lea rax, [rbp + 0xb0]
nop dword [rax]
inc rdi
cmp word [rax + rdi*2], r13w
jne 0x14001e0e0
mov r8, rdi
lea rdx, [rbp + 0xb0]
lea rcx, [rbp - 0x70]
call fcn.140003fa0
nop
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r13w
cmp qword [rbp - 0x60], rbx
cmovb rbx, qword [rbp - 0x60]
lea rdx, [rbp - 0x70]
cmp qword [rbp - 0x58], 8
cmovae rdx, qword [rbp - 0x70]
mov r8, rbx
lea rcx, [rsp + 0x50]
call fcn.140003fa0
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 8
jb 0x14001e17c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001e177
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001e503
call fcn.140071a3c
movabs rdx, 0x7ffffffffffffffe
mov rsi, rdx
mov r14, qword [rsp + 0x60]
sub rsi, r14
cmp rsi, 0x16
jb 0x14001e4f1
lea rax, [rsp + 0x50]
mov rdi, qword [rsp + 0x50]
mov r13, qword [rsp + 0x68]
cmp r13, 8
cmovae rax, rdi
mov qword [rsp + 0x20], rax
xor ecx, ecx
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x48], rcx
lea r12, [r14 + 0x16]
mov ebx, 7
lea r15, [rsp + 0x30]
lea ecx, [rbx + 3]
cmp r12, rbx
jbe 0x14001e211
mov rbx, r12
or rbx, 7
cmp rbx, rdx
jbe 0x14001e1ef
mov rbx, rdx
jmp 0x14001e1f6
cmp rbx, rcx
cmovb rbx, rcx
lea rdx, [rbx + 1]
lea rcx, [rsp + 0x30]
call fcn.140003f10
mov r15, rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], rbx
lea rbx, [r14 + r14]
mov qword [rsp + 0x20], rbx
mov r8, rbx
mov rdx, rax
mov rcx, r15
call fcn.140079530
movups xmm0, xmmword [str.windscribeservice.log]
movups xmmword [rbx + r15], xmm0
movups xmm1, xmmword [0x1400b8498]
movups xmmword [rbx + r15 + 0x10], xmm1
movsd xmm0, qword [0x1400b84a8]
movsd qword [rbx + r15 + 0x20], xmm0
mov eax, dword [0x1400b84b0]
mov dword [rbx + r15 + 0x28], eax
xor eax, eax
mov word [r15 + r12*2], ax
cmp rsi, 0x1b
jb 0x14001e4f7
lea r15, [rsp + 0x50]
cmp r13, 8
cmovae r15, rdi
xor r12d, r12d
mov qword [rsp + 0x70], r12
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], r12
add r14, 0x1b
mov ebx, 7
lea rsi, [rsp + 0x70]
cmp r14, rbx
jbe 0x14001e2e4
mov rbx, r14
or rbx, 7
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
jbe 0x14001e2c1
mov rbx, rax
jmp 0x14001e2ce
cmp rbx, 0xa
mov eax, 0xa
cmovb rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rsp + 0x70]
call fcn.140003f10
mov rsi, rax
mov qword [rsp + 0x70], rax
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x78], rbx
mov rbx, qword [rsp + 0x20]
mov r8, rbx
mov rdx, r15
mov rcx, rsi
call fcn.140079530
movups xmm0, xmmword [str.windscribeservice_prev.log]
movups xmmword [rbx + rsi], xmm0
movups xmm1, xmmword [0x1400b84c8]
movups xmmword [rbx + rsi + 0x10], xmm1
movups xmm0, xmmword [0x1400b84d8]
movups xmmword [rbx + rsi + 0x20], xmm0
mov eax, dword [0x1400b84e8]
mov dword [rbx + rsi + 0x30], eax
movzx eax, word [0x1400b84ec]
mov word [rbx + rsi + 0x34], ax
mov word [rsi + r14*2], r12w
lea rcx, [rsp + 0x30]
cmp qword [rsp + 0x48], 8
cmovae rcx, qword [rsp + 0x30]
call fcn.140044710
test al, al
je 0x14001e381
lea rdx, [rsp + 0x70]
cmp qword [rbp - 0x78], 8
cmovae rdx, qword [rsp + 0x70]
lea rcx, [rsp + 0x30]
cmp qword [rsp + 0x48], 8
cmovae rcx, qword [rsp + 0x30]
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CopyFileW]
lea rcx, [rsp + 0x30]
cmp qword [rsp + 0x48], 8
cmovae rcx, qword [rsp + 0x30]
mov r8d, 0x20
lea rdx, str.wt_ccsUTF_8
call fcn.14008b734
mov rbx, qword [rsp + 0x28]
mov qword [rbx], rax
test rax, rax
jne 0x14001e3d2
lea r8, [rsp + 0x30]
cmp qword [rsp + 0x48], 8
cmovae r8, qword [rsp + 0x30]
lea rdx, str.Logger_could_not_open:__ls
mov rcx, rbx
call fcn.14001e540
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x14001e413
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001e40e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001e4fd
call fcn.140071a3c
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], r12w
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x14001e467
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001e462
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001e503
call fcn.140071a3c
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], r12w
cmp r13, 8
jb 0x14001e4b2
lea rdx, [r13*2 + 2]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14001e4aa
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001e4e5
mov rcx, rdi
call fcn.140071a3c
mov rax, rbx
mov rcx, qword [rbp + 0x2c0]
xor rcx, rsp
call fcn.140071b40
lea r11, [rsp + 0x3d0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140085c7c
int3
call fcn.140085c7c
nop
call fcn.140003e60
nop
call fcn.140003e60
int3
call fcn.140085c7c
nop
call fcn.140085c7c
int3