Function at 0x14000f710
Capabilities:
Check if file exists
Copy file
Get file attributes
Query environment variable

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
lea rbp, [rsp - 0x2370]
mov eax, 0x2470
call fcn.140018cb0
sub rsp, rax
mov rax, qword [0x14003f2f0]
xor rax, rsp
mov qword [rbp + 0x2360], rax
mov rbx, rcx
lea rcx, [rsp + 0x44]
xor esi, esi
xor edx, edx
mov r8d, 0x1fc
mov dword [rsp + 0x40], esi
call fcn.1400166f0
lea rax, [0x140042700]
mov dword [rsp + 0x30], esi
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x40]
lea r8, [0x14002ce18]
lea rdx, str.FileName
mov rcx, rbx
mov dword [rsp + 0x20], pe_nt_image_headers64
call fcn.14000db60
lea rdx, [rbp + 0xf50]
lea rcx, str._ProgramFiles_Internet_ExplorerSIGNUPinstall.ins
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
lea rdx, [rbp + 0xb40]
lea rcx, str._ProgramFiles_x86__Internet_ExplorerSIGNUPinstall.ins
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x14000f7e9
lea rdx, [rsp + 0x40]
lea rcx, str._nError_reading_IE_Accelerator_Settings_file__s
call fcn.14000adf0
jmp 0x14000feec
mov qword [rsp + 0x2488], rdi
mov edi, 1
nop word [rax + rax]
lea rcx, [rbp + 0x1164]
xor edx, edx
mov r8d, 0x1fc
mov dword [rbp + 0x1160], esi
call fcn.1400166f0
lea rcx, [rbp + 0x1564]
xor edx, edx
mov r8d, 0x1fc
mov dword [rbp + 0x1560], esi
call fcn.1400166f0
lea rcx, [rbp + 0x1d64]
xor edx, edx
mov r8d, 0x1fc
mov dword [rbp + 0x1d60], esi
call fcn.1400166f0
lea rcx, [rbp + 0x1f64]
xor edx, edx
mov r8d, 0x1fc
mov dword [rbp + 0x1f60], esi
call fcn.1400166f0
lea rcx, [rbp + 0x1764]
xor edx, edx
mov r8d, 0x1fc
mov dword [rbp + 0x1760], esi
call fcn.1400166f0
lea rcx, [rbp + 0x1964]
xor edx, edx
mov r8d, 0x1fc
mov dword [rbp + 0x1960], esi
call fcn.1400166f0
lea rcx, [rbp + 0x1364]
xor edx, edx
mov r8d, 0x1fc
mov dword [rbp + 0x1360], esi
call fcn.1400166f0
lea rcx, [rbp + 0x944]
xor edx, edx
mov r8d, 0x1fc
mov dword [rbp + 0x940], esi
call fcn.1400166f0
lea rcx, [rbp + 0x544]
xor edx, edx
mov r8d, 0x1fc
mov dword [rbp + 0x540], esi
call fcn.1400166f0
lea rcx, [rbp + 0x344]
xor edx, edx
mov r8d, 0x1fc
mov dword [rbp + 0x340], esi
call fcn.1400166f0
lea rcx, [rbp + 0x744]
xor edx, edx
mov r8d, 0x1fc
mov dword [rbp + 0x740], esi
call fcn.1400166f0
lea rcx, [rbp + 0x144]
xor edx, edx
mov r8d, 0x1fc
mov dword [rbp + 0x140], esi
call fcn.1400166f0
lea rcx, [rbp + 0xd54]
xor edx, edx
mov r8d, 0x1fc
mov dword [rbp + 0xd50], esi
call fcn.1400166f0
lea rcx, [rbp + 0x2164]
xor edx, edx
mov r8d, 0x1fc
mov dword [rbp + 0x2160], esi
call fcn.1400166f0
lea rdx, str.DisplayName_d
lea rcx, [rbp + 0x1160]
mov r8d, edi
call fcn.140018028
lea rdx, str.FileName_d
lea rcx, [rbp + 0x1560]
mov r8d, edi
call fcn.140018028
mov r8d, edi
lea rdx, str.Category_d
lea rcx, [rbp + 0x1760]
call fcn.140018028
lea rdx, str.Description_d
lea rcx, [rbp + 0x1960]
mov r8d, edi
call fcn.140018028
lea rdx, str.HomepageURL_d
lea rcx, [rbp + 0x1360]
mov r8d, edi
call fcn.140018028
lea rdx, str.Default_d
lea rcx, [rbp + 0x940]
mov r8d, edi
call fcn.140018028
lea rax, [rsp + 0x40]
mov dword [rsp + 0x30], esi
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x540]
lea r8, [0x14002ce18]
lea rdx, [rbp + 0x1160]
lea rcx, str.Accelerators
mov dword [rsp + 0x20], pe_nt_image_headers64
call fcn.14000db60
lea rax, [rsp + 0x40]
mov dword [rsp + 0x30], esi
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x340]
lea r8, [0x14002ce18]
lea rdx, [rbp + 0x1560]
lea rcx, str.Accelerators
mov dword [rsp + 0x20], pe_nt_image_headers64
call fcn.14000db60
lea rax, [rsp + 0x40]
mov dword [rsp + 0x30], esi
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x740]
lea r8, [0x14002ce18]
lea rdx, [rbp + 0x1760]
lea rcx, str.Accelerators
mov dword [rsp + 0x20], pe_nt_image_headers64
call fcn.14000db60
lea rax, [rsp + 0x40]
mov dword [rsp + 0x30], esi
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x140]
lea r8, [0x14002ce18]
lea rdx, [rbp + 0x1960]
lea rcx, str.Accelerators
mov dword [rsp + 0x20], pe_nt_image_headers64
call fcn.14000db60
lea rax, [rsp + 0x40]
mov dword [rsp + 0x30], esi
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0xd50]
lea r8, [0x14002ce18]
lea rdx, [rbp + 0x1360]
lea rcx, str.Accelerators
mov dword [rsp + 0x20], pe_nt_image_headers64
call fcn.14000db60
lea rax, [rsp + 0x40]
mov dword [rsp + 0x30], esi
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x2160]
lea r8, [0x14002ce18]
lea rdx, [rbp + 0x940]
lea rcx, str.Accelerators
mov dword [rsp + 0x20], pe_nt_image_headers64
call fcn.14000db60
lea rcx, [rbp + 0x140]
or rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], si
jne 0x14000fb45
test rax, rax
jne 0x14000fb79
mov rax, rsi
nop word [rax + rax]
movzx ecx, word [rbp + rax + 0x540]
lea rax, [rax + 2]
mov word [rbp + rax + 0x13e], cx
test cx, cx
jne 0x14000fb60
lea rcx, [rbp + 0x540]
or rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], si
jne 0x14000fb84
test rax, rax
je 0x14000fed9
lea rcx, [rbp + 0x340]
or rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], si
jne 0x14000fba1
test rax, rax
je 0x14000fed9
lea rcx, [rbp + 0x740]
or rax, 0xffffffffffffffff
nop
inc rax
cmp word [rcx + rax*2], si
jne 0x14000fbc0
test rax, rax
je 0x14000fed9
lea rcx, [rbp + 0x140]
or rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [rcx + rax*2], si
jne 0x14000fbe0
test rax, rax
je 0x14000fed9
lea rcx, [rbp + 0xd50]
or rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [rcx + rax*2], si
jne 0x14000fc00
test rax, rax
je 0x14000fed9
lea rax, [rsp + 0x40]
lea r9, [rbp + 0x740]
lea r8, [rbp + 0x340]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x940]
lea rdx, [rbp + 0x540]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0xd50]
lea rcx, str._nMerging_IE_Accelerator_Name__s__n_tXml_File__s__n_tCategory__s__n_tDescription__s__n_tHome_Page__s__n_tAs_Default__s__n_tfrom_IE_Settings_File__s
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x140]
mov qword [rsp + 0x20], rax
call fcn.14000adf0
lea rcx, [rbp + 0x1b64]
xor edx, edx
mov r8d, 0x1fc
mov dword [rbp + 0x1b60], esi
call fcn.1400166f0
lea rcx, [rbp + 0x340]
mov edx, 0x5c
call fcn.140016d28
lea rdx, str.__ProgramFiles__Internet_ExplorerSIGNUP_s
lea rcx, [rbp + 0x1b60]
mov r8, rax
mov rbx, rax
call fcn.140018028
lea rdx, [rbp + 0x1d60]
lea rcx, [rbp + 0x1b60]
mov r8d, pe_nt_image_headers64
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
lea rdx, [rbp + 0x1d60]
lea rcx, [rbp + 0x340]
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CopyFileW]
lea r9, [rbp + 0xf50]
lea r8, [rbp + 0x540]
lea rdx, [rbp + 0x1160]
lea rcx, str.Accelerators
mov dword [rsp + 0x20], esi
call fcn.1400135d0
lea r9, [rbp + 0xf50]
lea r8, [rbp + 0x1d60]
lea rdx, [rbp + 0x1560]
lea rcx, str.Accelerators
mov dword [rsp + 0x20], esi
call fcn.1400135d0
lea r9, [rbp + 0xf50]
lea r8, [rbp + 0x740]
lea rdx, [rbp + 0x1760]
lea rcx, str.Accelerators
mov dword [rsp + 0x20], esi
call fcn.1400135d0
lea r9, [rbp + 0xf50]
lea r8, [rbp + 0x140]
lea rdx, [rbp + 0x1960]
lea rcx, str.Accelerators
mov dword [rsp + 0x20], esi
call fcn.1400135d0
lea r9, [rbp + 0xf50]
lea r8, [rbp + 0xd50]
lea rdx, [rbp + 0x1360]
lea rcx, str.Accelerators
mov dword [rsp + 0x20], esi
call fcn.1400135d0
lea r9, [rbp + 0xf50]
lea r8, [rbp + 0x2160]
lea rdx, [rbp + 0x940]
lea rcx, str.Accelerators
mov dword [rsp + 0x20], esi
call fcn.1400135d0
lea rdx, str.__ProgramFiles_x86___Internet_ExplorerSIGNUP_s
lea rcx, [rbp + 0x1b60]
mov r8, rbx
call fcn.140018028
lea rdx, [rbp + 0x1f60]
lea rcx, [rbp + 0x1b60]
mov r8d, pe_nt_image_headers64
call qword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
xor r8d, r8d
lea rdx, [rbp + 0x1f60]
lea rcx, [rbp + 0x340]
call qword [sym.imp.KERNEL32.dll_CopyFileW]
lea r9, [rbp + 0xb40]
lea r8, [rbp + 0x540]
lea rdx, [rbp + 0x1160]
lea rcx, str.Accelerators
mov dword [rsp + 0x20], esi
call fcn.1400135d0
lea r9, [rbp + 0xb40]
lea r8, [rbp + 0x1f60]
lea rdx, [rbp + 0x1560]
lea rcx, str.Accelerators
mov dword [rsp + 0x20], esi
call fcn.1400135d0
lea r9, [rbp + 0xb40]
lea r8, [rbp + 0x740]
lea rdx, [rbp + 0x1760]
lea rcx, str.Accelerators
mov dword [rsp + 0x20], esi
call fcn.1400135d0
lea r9, [rbp + 0xb40]
lea r8, [rbp + 0x140]
lea rdx, [rbp + 0x1960]
lea rcx, str.Accelerators
mov dword [rsp + 0x20], esi
call fcn.1400135d0
lea r9, [rbp + 0xb40]
lea r8, [rbp + 0xd50]
lea rdx, [rbp + 0x1360]
lea rcx, str.Accelerators
mov dword [rsp + 0x20], esi
call fcn.1400135d0
lea r9, [rbp + 0xb40]
lea r8, [rbp + 0x2160]
lea rdx, [rbp + 0x940]
lea rcx, str.Accelerators
mov dword [rsp + 0x20], esi
call fcn.1400135d0
inc edi
cmp edi, 0x64
jle 0x14000f800
mov rdi, qword [rsp + 0x2488]
mov rcx, qword [rbp + 0x2360]
xor rcx, rsp
call fcn.1400161c0
lea r11, [rsp + 0x2470]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret