Function at 0x140009b50
Capabilities:
Copy file
Get common file path

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rdi
push rbp
push r13
push r14
lea rbp, [rax - 0x108]
sub rsp, 0x1f0
movaps xmmword [rax - 0x28], xmm6
xor r13d, r13d
lea rdx, [rbp - 0x30]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
lea rdx, [0x140008790]
lea rcx, [rsp + 0x70]
call fcn.14000b170
nop
lea rdx, [rsp + 0x70]
lea rcx, [rbp - 0x70]
call fcn.14000992c
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.140009994
mov r8, rax
cmp qword [rax + 0x18], 0xf
jbe 0x140009bbf
mov r8, qword [rax]
lea rcx, [rbp - 0x30]
dec rcx
inc rcx
cmp byte [rcx], r13b
jne 0x140009bc6
xor edx, edx
mov al, byte [r8 + rdx]
mov byte [rcx + rdx], al
inc rdx
test al, al
jne 0x140009bd0
mov r14d, 0x1000
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x140009c1d
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, r14
jb 0x140009c18
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a085
call fcn.14000bcdc
movdqa xmm6, xmmword [0x140008950]
movdqu xmmword [rsp + 0x60], xmm6
mov byte [rsp + 0x50], r13b
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x140009c67
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, r14
jb 0x140009c62
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a08b
call fcn.14000bcdc
movdqu xmmword [rbp - 0x60], xmm6
mov byte [rbp - 0x70], r13b
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x140009ca8
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, r14
jb 0x140009ca3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a091
call fcn.14000bcdc
lea rdx, [0x140008790]
lea rcx, [rsp + 0x70]
call fcn.14000b170
nop
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x50]
call fcn.14000992c
nop
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.140009994
cmp qword [rax + 0x18], 0xf
jbe 0x140009ce0
mov rax, qword [rax]
xor r8d, r8d
lea rdx, [rbp - 0x30]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CopyFileA]
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x140009d27
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, r14
jb 0x140009d22
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a097
call fcn.14000bcdc
movdqu xmmword [rbp - 0x60], xmm6
mov byte [rbp - 0x70], r13b
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x140009d69
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, r14
jb 0x140009d64
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a09d
call fcn.14000bcdc
movdqu xmmword [rsp + 0x60], xmm6
mov byte [rsp + 0x50], r13b
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x140009dac
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, r14
jb 0x140009da7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a0a3
call fcn.14000bcdc
lea rdx, [0x1400087a0]
lea rcx, [rsp + 0x70]
call fcn.14000b170
nop
lea rdx, [rsp + 0x70]
lea rcx, [rbp - 0x70]
call fcn.14000992c
nop
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.14000992c
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x140009e12
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, r14
jb 0x140009e0d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a0a9
call fcn.14000bcdc
movdqu xmmword [rbp - 0x60], xmm6
mov byte [rbp - 0x70], r13b
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x140009e53
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, r14
jb 0x140009e4e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a0af
call fcn.14000bcdc
lea rax, [rbp - 0x30]
or rdi, 0xffffffffffffffff
inc rdi
cmp byte [rax + rdi], r13b
jne 0x140009e5b
mov rcx, qword [rsp + 0x40]
mov rax, qword [rsp + 0x48]
sub rax, rcx
cmp rdi, rax
ja 0x140009ea8
lea rax, [rdi + rcx]
mov qword [rsp + 0x40], rax
lea rbx, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova rbx, qword [rsp + 0x30]
add rbx, rcx
mov r8, rdi
lea rdx, [rbp - 0x30]
mov rcx, rbx
call fcn.14001d4e0
mov byte [rbx + rdi], r13b
jmp 0x140009ebe
mov qword [rsp + 0x20], rdi
lea r9, [rbp - 0x30]
mov rdx, rdi
lea rcx, [rsp + 0x30]
call fcn.14000b48c
lea rdx, [0x1400087c8]
lea rcx, [rbp - 0x50]
call fcn.14000b170
nop
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x70]
call fcn.14000992c
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.14000992c
nop
lea r9, [rsp + 0x50]
cmp qword [rsp + 0x68], 0xf
cmova r9, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x40]
mov rax, qword [rsp + 0x48]
sub rax, rcx
cmp rdi, rax
ja 0x140009f45
lea rax, [rdi + rcx]
mov qword [rsp + 0x40], rax
lea rbx, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova rbx, qword [rsp + 0x30]
add rbx, rcx
mov r8, rdi
mov rdx, r9
mov rcx, rbx
call fcn.14001d4e0
mov byte [rbx + rdi], r13b
jmp 0x140009f58
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rsp + 0x30]
call fcn.14000b48c
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x140009f91
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, r14
jb 0x140009f8c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a0b5
call fcn.14000bcdc
movdqu xmmword [rsp + 0x60], xmm6
mov byte [rsp + 0x50], r13b
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x140009fd4
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, r14
jb 0x140009fcf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a0bb
call fcn.14000bcdc
movdqu xmmword [rbp - 0x80], xmm6
mov byte [rsp + 0x70], r13b
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x14000a015
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, r14
jb 0x14000a010
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a0c1
call fcn.14000bcdc
lea rcx, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova rcx, qword [rsp + 0x30]
call fcn.140011518
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x14000a061
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, r14
jb 0x14000a05c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a07f
call fcn.14000bcdc
lea r11, [rsp + 0x1f0]
mov rbx, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r14
pop r13
pop rbp
ret
call fcn.140011a6c
nop
call fcn.140011a6c
nop
call fcn.140011a6c
nop
call fcn.140011a6c
nop
call fcn.140011a6c
nop
call fcn.140011a6c
nop
call fcn.140011a6c
nop
call fcn.140011a6c
nop
call fcn.140011a6c
nop
call fcn.140011a6c
nop
call fcn.140011a6c
nop
call fcn.140011a6c
int3