Function at 0x1400a5400
Capabilities:
Get common file path
Get file system object information

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x440]
sub rsp, 0x540
mov rax, qword [0x140263a80]
xor rax, rsp
mov qword [rbp + 0x430], rax
mov rbx, rcx
mov qword [rsp + 0x30], 0
lea rcx, [0x140269af0]
xor r8d, r8d
lea r9, [rsp + 0x30]
xor edx, edx
call qword [sym.imp.SHELL32.dll_SHGetKnownFolderPath]
mov edi, 4
test eax, eax
js 0x1400a5571
xor edx, edx
lea rcx, [rbp + 0x170]
mov r8d, 0x2b8
call sub.VCRUNTIME140.dll_memset
xor edx, edx
lea rcx, [rsp + 0x44]
mov r8d, 0x220
call sub.VCRUNTIME140.dll_memset
xor ecx, ecx
call qword [sym.imp.WS2_32.dll_htonl]
mov r8, qword [rsp + 0x30]
lea rcx, [rsp + 0x5c]
mov edx, 0x104
mov dword [rsp + 0x40], eax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
mov rcx, qword [rsp + 0x30]
lea r8, [rbp + 0x170]
mov r9d, 0x2b8
mov dword [rsp + 0x20], 0x800
mov edx, 0xffffffff
call qword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov ecx, dword [rbp + 0x17c]
call qword [sym.imp.WS2_32.dll_htonl]
mov rcx, qword [rsp + 0x30]
mov dword [rsp + 0x44], eax
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rdx, qword [rbx + 8]
cmp rdx, qword [rbx + 0x10]
je 0x1400a5564
lea rax, [rsp + 0x40]
mov ecx, edi
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rax]
lea rax, [rax + 0x80]
movups xmmword [rdx - 0x80], xmm0
movups xmm1, xmmword [rax - 0x70]
movups xmmword [rdx - 0x70], xmm1
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rdx - 0x60], xmm0
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rdx - 0x50], xmm1
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rdx - 0x40], xmm0
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rdx - 0x30], xmm1
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rdx - 0x20], xmm0
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rdx - 0x10], xmm1
sub rcx, 1
jne 0x1400a54f3
movups xmm0, xmmword [rax]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdx + 0x10], xmm1
mov eax, dword [rax + 0x20]
mov dword [rdx + 0x20], eax
add qword [rbx + 8], 0x224
jmp 0x1400a5571
lea r8, [rsp + 0x40]
mov rcx, rbx
call fcn.1400a46a0
lea r9, [rsp + 0x30]
xor r8d, r8d
xor edx, edx
lea rcx, [0x140269b00]
call qword [sym.imp.SHELL32.dll_SHGetKnownFolderPath]
test eax, eax
js 0x1400a56ae
xor edx, edx
lea rcx, [rbp + 0x170]
mov r8d, 0x2b8
call sub.VCRUNTIME140.dll_memset
xor edx, edx
lea rcx, [rsp + 0x40]
mov r8d, 0x224
call sub.VCRUNTIME140.dll_memset
xor ecx, ecx
call qword [sym.imp.WS2_32.dll_htonl]
mov r8, qword [rsp + 0x30]
lea rcx, [rsp + 0x5c]
mov edx, 0x104
mov dword [rsp + 0x40], eax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
mov rcx, qword [rsp + 0x30]
lea r8, [rbp + 0x170]
mov r9d, 0x2b8
mov dword [rsp + 0x20], 0x800
mov edx, 0xffffffff
call qword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov ecx, dword [rbp + 0x17c]
call qword [sym.imp.WS2_32.dll_htonl]
mov rcx, qword [rsp + 0x30]
mov dword [rsp + 0x44], eax
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rdx, qword [rbx + 8]
cmp rdx, qword [rbx + 0x10]
je 0x1400a56a1
lea rax, [rsp + 0x40]
mov rcx, rdi
nop dword [rax]
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rax]
lea rax, [rax + 0x80]
movups xmmword [rdx - 0x80], xmm0
movups xmm1, xmmword [rax - 0x70]
movups xmmword [rdx - 0x70], xmm1
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rdx - 0x60], xmm0
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rdx - 0x50], xmm1
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rdx - 0x40], xmm0
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rdx - 0x30], xmm1
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rdx - 0x20], xmm0
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rdx - 0x10], xmm1
sub rcx, 1
jne 0x1400a5630
movups xmm0, xmmword [rax]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdx + 0x10], xmm1
mov eax, dword [rax + 0x20]
mov dword [rdx + 0x20], eax
add qword [rbx + 8], 0x224
jmp 0x1400a56ae
lea r8, [rsp + 0x40]
mov rcx, rbx
call fcn.1400a46a0
lea r9, [rsp + 0x30]
xor r8d, r8d
xor edx, edx
lea rcx, [0x140269b10]
call qword [sym.imp.SHELL32.dll_SHGetKnownFolderPath]
test eax, eax
js 0x1400a57e4
xor edx, edx
lea rcx, [rbp + 0x170]
mov r8d, 0x2b8
call sub.VCRUNTIME140.dll_memset
xor edx, edx
lea rcx, [rsp + 0x40]
mov r8d, 0x224
call sub.VCRUNTIME140.dll_memset
xor ecx, ecx
call qword [sym.imp.WS2_32.dll_htonl]
mov r8, qword [rsp + 0x30]
lea rcx, [rsp + 0x5c]
mov edx, 0x104
mov dword [rsp + 0x40], eax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
mov rcx, qword [rsp + 0x30]
lea r8, [rbp + 0x170]
mov r9d, 0x2b8
mov dword [rsp + 0x20], 0x800
mov edx, 0xffffffff
call qword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov ecx, dword [rbp + 0x17c]
call qword [sym.imp.WS2_32.dll_htonl]
mov rcx, qword [rsp + 0x30]
mov dword [rsp + 0x44], eax
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rdx, qword [rbx + 8]
cmp rdx, qword [rbx + 0x10]
je 0x1400a57d7
lea rax, [rsp + 0x40]
mov rcx, rdi
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rax]
lea rax, [rax + 0x80]
movups xmmword [rdx - 0x80], xmm0
movups xmm1, xmmword [rax - 0x70]
movups xmmword [rdx - 0x70], xmm1
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rdx - 0x60], xmm0
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rdx - 0x50], xmm1
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rdx - 0x40], xmm0
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rdx - 0x30], xmm1
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rdx - 0x20], xmm0
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rdx - 0x10], xmm1
sub rcx, 1
jne 0x1400a5766
movups xmm0, xmmword [rax]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdx + 0x10], xmm1
mov eax, dword [rax + 0x20]
mov dword [rdx + 0x20], eax
add qword [rbx + 8], 0x224
jmp 0x1400a57e4
lea r8, [rsp + 0x40]
mov rcx, rbx
call fcn.1400a46a0
lea r9, [rsp + 0x30]
xor r8d, r8d
xor edx, edx
lea rcx, [0x140269b20]
call qword [sym.imp.SHELL32.dll_SHGetKnownFolderPath]
test eax, eax
js 0x1400a591e
xor edx, edx
lea rcx, [rbp + 0x170]
mov r8d, 0x2b8
call sub.VCRUNTIME140.dll_memset
xor edx, edx
lea rcx, [rsp + 0x40]
mov r8d, 0x224
call sub.VCRUNTIME140.dll_memset
xor ecx, ecx
call qword [sym.imp.WS2_32.dll_htonl]
mov r8, qword [rsp + 0x30]
lea rcx, [rsp + 0x5c]
mov edx, 0x104
mov dword [rsp + 0x40], eax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
mov rcx, qword [rsp + 0x30]
lea r8, [rbp + 0x170]
mov r9d, 0x2b8
mov dword [rsp + 0x20], 0x800
mov edx, 0xffffffff
call qword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov ecx, dword [rbp + 0x17c]
call qword [sym.imp.WS2_32.dll_htonl]
mov rcx, qword [rsp + 0x30]
mov dword [rsp + 0x44], eax
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rdx, qword [rbx + 8]
cmp rdx, qword [rbx + 0x10]
je 0x1400a5911
lea rax, [rsp + 0x40]
mov rcx, rdi
nop dword [rax]
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rax]
lea rax, [rax + 0x80]
movups xmmword [rdx - 0x80], xmm0
movups xmm1, xmmword [rax - 0x70]
movups xmmword [rdx - 0x70], xmm1
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rdx - 0x60], xmm0
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rdx - 0x50], xmm1
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rdx - 0x40], xmm0
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rdx - 0x30], xmm1
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rdx - 0x20], xmm0
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rdx - 0x10], xmm1
sub rcx, 1
jne 0x1400a58a0
movups xmm0, xmmword [rax]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdx + 0x10], xmm1
mov eax, dword [rax + 0x20]
mov dword [rdx + 0x20], eax
add qword [rbx + 8], 0x224
jmp 0x1400a591e
lea r8, [rsp + 0x40]
mov rcx, rbx
call fcn.1400a46a0
lea r9, [rsp + 0x30]
xor r8d, r8d
xor edx, edx
lea rcx, [0x140269b30]
call qword [sym.imp.SHELL32.dll_SHGetKnownFolderPath]
test eax, eax
js 0x1400a5a54
xor edx, edx
lea rcx, [rbp + 0x170]
mov r8d, 0x2b8
call sub.VCRUNTIME140.dll_memset
xor edx, edx
lea rcx, [rsp + 0x40]
mov r8d, 0x224
call sub.VCRUNTIME140.dll_memset
xor ecx, ecx
call qword [sym.imp.WS2_32.dll_htonl]
mov r8, qword [rsp + 0x30]
lea rcx, [rsp + 0x5c]
mov edx, 0x104
mov dword [rsp + 0x40], eax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
mov rcx, qword [rsp + 0x30]
lea r8, [rbp + 0x170]
mov r9d, 0x2b8
mov dword [rsp + 0x20], 0x800
mov edx, 0xffffffff
call qword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov ecx, dword [rbp + 0x17c]
call qword [sym.imp.WS2_32.dll_htonl]
mov rcx, qword [rsp + 0x30]
mov dword [rsp + 0x44], eax
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rdx, qword [rbx + 8]
cmp rdx, qword [rbx + 0x10]
je 0x1400a5a47
lea rax, [rsp + 0x40]
mov rcx, rdi
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rax]
lea rax, [rax + 0x80]
movups xmmword [rdx - 0x80], xmm0
movups xmm1, xmmword [rax - 0x70]
movups xmmword [rdx - 0x70], xmm1
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rdx - 0x60], xmm0
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rdx - 0x50], xmm1
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rdx - 0x40], xmm0
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rdx - 0x30], xmm1
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rdx - 0x20], xmm0
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rdx - 0x10], xmm1
sub rcx, 1
jne 0x1400a59d6
movups xmm0, xmmword [rax]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdx + 0x10], xmm1
mov eax, dword [rax + 0x20]
mov dword [rdx + 0x20], eax
add qword [rbx + 8], 0x224
jmp 0x1400a5a54
lea r8, [rsp + 0x40]
mov rcx, rbx
call fcn.1400a46a0
lea r9, [rsp + 0x30]
xor r8d, r8d
xor edx, edx
lea rcx, [0x140269b40]
call qword [sym.imp.SHELL32.dll_SHGetKnownFolderPath]
test eax, eax
js 0x1400a5b8e
xor edx, edx
lea rcx, [rbp + 0x170]
mov r8d, 0x2b8
call sub.VCRUNTIME140.dll_memset
xor edx, edx
lea rcx, [rsp + 0x40]
mov r8d, 0x224
call sub.VCRUNTIME140.dll_memset
xor ecx, ecx
call qword [sym.imp.WS2_32.dll_htonl]
mov r8, qword [rsp + 0x30]
lea rcx, [rsp + 0x5c]
mov edx, 0x104
mov dword [rsp + 0x40], eax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
mov rcx, qword [rsp + 0x30]
lea r8, [rbp + 0x170]
mov r9d, 0x2b8
mov dword [rsp + 0x20], 0x800
mov edx, 0xffffffff
call qword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov ecx, dword [rbp + 0x17c]
call qword [sym.imp.WS2_32.dll_htonl]
mov rcx, qword [rsp + 0x30]
mov dword [rsp + 0x44], eax
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rdx, qword [rbx + 8]
cmp rdx, qword [rbx + 0x10]
je 0x1400a5b81
lea rax, [rsp + 0x40]
nop dword [rax]
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rax]
lea rax, [rax + 0x80]
movups xmmword [rdx - 0x80], xmm0
movups xmm1, xmmword [rax - 0x70]
movups xmmword [rdx - 0x70], xmm1
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rdx - 0x60], xmm0
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rdx - 0x50], xmm1
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rdx - 0x40], xmm0
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rdx - 0x30], xmm1
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rdx - 0x20], xmm0
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rdx - 0x10], xmm1
sub rdi, 1
jne 0x1400a5b10
movups xmm0, xmmword [rax]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdx + 0x10], xmm1
mov eax, dword [rax + 0x20]
mov dword [rdx + 0x20], eax
add qword [rbx + 8], 0x224
jmp 0x1400a5b8e
lea r8, [rsp + 0x40]
mov rcx, rbx
call fcn.1400a46a0
mov eax, 1
mov rcx, qword [rbp + 0x430]
xor rcx, rsp
call fcn.1401d0310
lea r11, [rsp + 0x540]
mov rbx, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret