Function at 0x1400531d0
Capabilities:
Copy file
Get common file path

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x6f0
mov qword [rsp + 0x698], 0xfffffffffffffffe
mov rax, qword [0x140079ca0]
xor rax, rsp
mov qword [rsp + 0x6e0], rax
xor eax, eax
mov word [rsp + 0x30], ax
lea rdi, [rsp + 0x32]
xor eax, eax
mov ecx, 0x206
rep stosb byte [rdi], al
xor eax, eax
mov word [rsp + 0x450], ax
lea rdi, [rsp + 0x452]
xor eax, eax
mov ecx, 0x206
rep stosb byte [rdi], al
xor eax, eax
mov word [rsp + 0x240], ax
lea rdi, [rsp + 0x242]
xor eax, eax
mov ecx, 0x206
rep stosb byte [rdi], al
lea rcx, [rsp + 0x20]
call fcn.140003710
nop
lea rcx, [rsp + 0x660]
call fcn.140003710
nop
mov r9, qword [rsp + 0x710]
mov r8d, 0x104
lea rdx, [rsp + 0x30]
mov rcx, qword [rsp + 0x700]
call fcn.140052ef0
mov r9, qword [rsp + 0x708]
mov r8d, 0x104
lea rdx, [rsp + 0x450]
mov rcx, qword [rsp + 0x700]
call fcn.140052ef0
xor r9d, r9d
mov r8d, 0x24
lea rdx, [rsp + 0x240]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
cmp eax, 1
je 0x1400532f9
mov dword [rsp + 0x668], 0
lea rcx, [rsp + 0x660]
call fcn.140003760
nop
lea rcx, [rsp + 0x20]
call fcn.140003760
mov eax, dword [rsp + 0x668]
jmp 0x14005357c
lea rdx, str.INF_
lea rcx, [rsp + 0x240]
call fcn.140004d20
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x240]
call fcn.140004d20
xor r8d, r8d
lea rdx, [rsp + 0x240]
lea rcx, [rsp + 0x450]
call qword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x14005336b
mov dword [rsp + 0x66c], 0
lea rcx, [rsp + 0x660]
call fcn.140003760
nop
lea rcx, [rsp + 0x20]
call fcn.140003760
mov eax, dword [rsp + 0x66c]
jmp 0x14005357c
lea rdx, [rsp + 0x450]
lea rcx, [rsp + 0x20]
call fcn.1400043e0
lea rcx, [rsp + 0x20]
call fcn.140003d10
mov r8d, eax
sub r8d, 3
lea rdx, [rsp + 0x670]
lea rcx, [rsp + 0x20]
call fcn.140004780
mov qword [rsp + 0x6a0], rax
mov rax, qword [rsp + 0x6a0]
mov qword [rsp + 0x6a8], rax
lea r8, [0x1400652b8]
mov rdx, qword [rsp + 0x6a8]
lea rcx, [rsp + 0x678]
call fcn.140004830
mov qword [rsp + 0x6b0], rax
mov rax, qword [rsp + 0x6b0]
mov qword [rsp + 0x6b8], rax
mov rdx, qword [rsp + 0x6b8]
lea rcx, [rsp + 0x660]
call fcn.1400059b0
nop
lea rcx, [rsp + 0x678]
call fcn.140003760
nop
lea rcx, [rsp + 0x670]
call fcn.140003760
lea rcx, [rsp + 0x660]
call fcn.140003700
mov rdx, rax
lea rcx, [rsp + 0x450]
call fcn.140004cf0
lea rdx, [rsp + 0x240]
lea rcx, [rsp + 0x20]
call fcn.1400043e0
lea rcx, [rsp + 0x20]
call fcn.140003d10
mov r8d, eax
sub r8d, 3
lea rdx, [rsp + 0x680]
lea rcx, [rsp + 0x20]
call fcn.140004780
mov qword [rsp + 0x6c0], rax
mov rax, qword [rsp + 0x6c0]
mov qword [rsp + 0x6c8], rax
lea r8, [0x1400652c0]
mov rdx, qword [rsp + 0x6c8]
lea rcx, [rsp + 0x688]
call fcn.140004830
mov qword [rsp + 0x6d0], rax
mov rax, qword [rsp + 0x6d0]
mov qword [rsp + 0x6d8], rax
mov rdx, qword [rsp + 0x6d8]
lea rcx, [rsp + 0x660]
call fcn.1400059b0
nop
lea rcx, [rsp + 0x688]
call fcn.140003760
nop
lea rcx, [rsp + 0x680]
call fcn.140003760
lea rcx, [rsp + 0x660]
call fcn.140003700
mov rdx, rax
lea rcx, [rsp + 0x240]
call fcn.140004cf0
xor r8d, r8d
lea rdx, [rsp + 0x240]
lea rcx, [rsp + 0x450]
call qword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x140053552
mov dword [rsp + 0x690], 0
lea rcx, [rsp + 0x660]
call fcn.140003760
nop
lea rcx, [rsp + 0x20]
call fcn.140003760
mov eax, dword [rsp + 0x690]
jmp 0x14005357c
mov dword [rsp + 0x694], 1
lea rcx, [rsp + 0x660]
call fcn.140003760
nop
lea rcx, [rsp + 0x20]
call fcn.140003760
mov eax, dword [rsp + 0x694]
mov rcx, qword [rsp + 0x6e0]
xor rcx, rsp
call fcn.14002f9d0
add rsp, 0x6f0
pop rdi
ret