Function at 0x1800b8db0
Capabilities:
Check if file exists
Copy file
Get common file path
Get file attributes

Disassembly:
push rbp
push rbx
push rsi
push rdi
lea rbp, [rsp - 0x458]
sub rsp, 0x558
mov rax, qword [0x18012a010]
xor rax, rsp
mov qword [rbp + 0x440], rax
mov rsi, rcx
lea rcx, [rsp + 0x60]
call fcn.18008b1b0
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.18008b600
lea rdx, [0x18012c9b8]
lea rcx, [rsp + 0x60]
call fcn.1800c2a30
mov rdx, rax
lea rcx, [rsp + 0x20]
call fcn.18008b080
lea rcx, [rsp + 0x40]
mov rbx, rax
call fcn.18008dc70
mov r8, qword [rbx + 0x10]
mov rcx, rax
mov rdx, qword [rax + 0x18]
mov r9, qword [rax + 0x10]
mov rax, rdx
sub rax, r9
cmp r8, rax
jbe 0x1800b8e55
mov rax, qword [rbx + 0x18]
sub rax, r8
cmp rax, r9
jb 0x1800b8e55
cmp rdx, 0x10
jb 0x1800b8e48
mov rcx, qword [rcx]
mov r8, rcx
mov rcx, rbx
call fcn.1800c77e0
jmp 0x1800b8e67
cmp qword [rbx + 0x18], 0x10
jb 0x1800b8e5f
mov rbx, qword [rbx]
mov rdx, rbx
call fcn.1800c2860
movups xmm0, xmmword [rax]
xor edi, edi
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x10], xmm1
mov byte [rax], dil
mov qword [rax + 0x18], 0xf
mov qword [rax + 0x10], rdi
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x1800b8ec4
mov rcx, qword [rsp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b8ebf
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b96d9
call fcn.1800cff50
mov rdx, qword [rsp + 0x38]
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
cmp rdx, 0x10
jb 0x1800b8f14
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b8f0f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b96d9
call fcn.1800cff50
lea rdx, [0x18012d2d8]
lea rcx, [rbp - 0x80]
call fcn.1800c2a30
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.18008b080
cmp qword [rbp + 0x38], 0x10
lea r8, [rbp + 0x20]
mov r9, qword [rbp + 0x30]
mov rcx, rax
cmovae r8, qword [rbp + 0x20]
call fcn.1800c77e0
lea rdx, [0x18012d0b8]
lea rcx, [rbp - 0x60]
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x30], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800c2a30
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.18008b080
mov rcx, qword [rsp + 0x38]
mov rdx, rax
mov r9, qword [rsp + 0x30]
mov r8, qword [rax + 0x10]
mov rax, rcx
sub rax, r9
cmp r8, rax
jbe 0x1800b8fc9
mov rax, qword [rdx + 0x18]
sub rax, r8
cmp rax, r9
jb 0x1800b8fc9
cmp rcx, 0x10
lea r8, [rsp + 0x20]
mov rcx, rdx
cmovae r8, qword [rsp + 0x20]
call fcn.1800c77e0
jmp 0x1800b8fdd
cmp qword [rdx + 0x18], 0x10
jb 0x1800b8fd3
mov rdx, qword [rdx]
lea rcx, [rsp + 0x20]
call fcn.1800c2860
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov byte [rax], 0
mov qword [rax + 0x18], 0xf
mov qword [rax + 0x10], rdi
mov rdx, qword [rsp + 0x38]
movups xmmword [rbp + 0x10], xmm1
movups xmmword [rbp], xmm0
cmp rdx, 0x10
jb 0x1800b9038
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b9033
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b96df
call fcn.1800cff50
mov rdx, qword [rsp + 0x58]
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], 0xf
mov byte [rsp + 0x20], 0
cmp rdx, 0x10
jb 0x1800b9088
mov rcx, qword [rsp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b9083
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b96df
call fcn.1800cff50
mov rdx, qword [rsp + 0x78]
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
cmp rdx, 0x10
jb 0x1800b90d8
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b90d3
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b96df
call fcn.1800cff50
lea rdx, [rbp + 0x40]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
lea rax, [rbp + 0x40]
mov qword [rsp + 0x30], rdi
mov r8, 0xffffffffffffffff
mov qword [rsp + 0x38], 0xf
mov byte [rsp + 0x20], 0
inc r8
cmp byte [rax + r8], 0
jne 0x1800b9105
lea rdx, [rbp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.1800c30f0
cmp qword [rbp + 0x18], 0x10
lea rdx, [rbp]
mov r8, qword [rbp + 0x10]
lea rcx, [rsp + 0x20]
cmovae rdx, qword [rbp]
call fcn.1800c2860
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x30], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x38]
cmp rdx, 0x10
jb 0x1800b9194
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b918f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b96e5
call fcn.1800cff50
cmp qword [rbp - 8], 0x10
lea rcx, [rbp - 0x20]
mov qword [rsp + 0x588], r12
cmovae rcx, qword [rbp - 0x20]
mov qword [rsp + 0x590], r14
mov qword [rsp + 0x550], r15
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x1800b9549
test al, 0x10
je 0x1800b9549
lea rdx, [0x18012d7b8]
lea rcx, [rbp - 0x60]
call fcn.1800c2a30
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.18008b080
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.18008d0b0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x1800b9237
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b9232
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b96eb
call fcn.1800cff50
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp qword [rbp - 0x28], 0x10
lea r15, [rbp - 0x40]
mov r14, qword [rbp - 0x30]
movabs r12, 0x7fffffffffffffff
cmovae r15, qword [rbp - 0x40]
cmp r14, 0x10
jae 0x1800b9278
movups xmm0, xmmword [r15]
mov qword [rsp + 0x38], 0xf
movups xmmword [rsp + 0x20], xmm0
jmp 0x1800b92ea
mov rbx, r14
or rbx, 0xf
cmp rbx, r12
cmova rbx, r12
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1800b92c2
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1800b96f1
mov rcx, rax
call fcn.1800cff58
mov rcx, rax
test rax, rax
je 0x1800b96d3
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1800b92d1
test rcx, rcx
je 0x1800b92ce
call fcn.1800cff58
jmp 0x1800b92d1
mov rax, rdi
lea r8, [r14 + 1]
mov qword [rsp + 0x20], rax
mov rdx, r15
mov rcx, rax
call fcn.1800d35e0
mov qword [rsp + 0x38], rbx
cmp qword [rbp - 8], 0x10
lea r15, [rbp - 0x20]
mov qword [rsp + 0x30], r14
mov r14, qword [rbp - 0x10]
cmovae r15, qword [rbp - 0x20]
cmp r14, 0x10
jae 0x1800b931b
movups xmm0, xmmword [r15]
mov qword [rsp + 0x58], 0xf
movups xmmword [rsp + 0x40], xmm0
jmp 0x1800b938d
mov rbx, r14
or rbx, 0xf
cmp rbx, r12
cmova rbx, r12
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1800b9365
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1800b96f1
mov rcx, rax
call fcn.1800cff58
mov rcx, rax
test rax, rax
je 0x1800b96d3
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1800b9374
test rcx, rcx
je 0x1800b9371
call fcn.1800cff58
jmp 0x1800b9374
mov rax, rdi
lea r8, [r14 + 1]
mov qword [rsp + 0x40], rax
mov rdx, r15
mov rcx, rax
call fcn.1800d35e0
mov qword [rsp + 0x58], rbx
lea rdx, [rsp + 0x20]
mov qword [rsp + 0x50], r14
lea rcx, [rsp + 0x40]
call fcn.18008d620
cmp qword [rbp - 0x28], 0x10
lea rcx, [rbp - 0x40]
lea rdx, [0x180118c80]
cmovae rcx, qword [rbp - 0x40]
call fcn.1800dbe68
test rax, rax
je 0x1800b9549
mov rcx, rax
call fcn.1800dbef8
mov rcx, qword [rsi + 0x18]
mov rdx, rsi
cmp rcx, 0x10
jb 0x1800b93dc
mov rdx, qword [rsi]
mov rax, qword [rsi + 0x10]
cmp rax, 1
jne 0x1800b941b
cmp byte [rdx], 0x30
jne 0x1800b941b
lea rdx, [rbp]
lea rcx, [rbp - 0x60]
call fcn.1800c2a30
lea rdx, [rbp - 0x40]
mov rbx, rax
lea rcx, [rbp - 0x80]
call fcn.1800c2a30
mov rcx, rax
mov rdx, rbx
call fcn.18008d900
mov rcx, qword [rsi + 0x18]
mov rax, qword [rsi + 0x10]
mov rdx, rsi
cmp rcx, 0x10
jb 0x1800b9427
mov rdx, qword [rsi]
cmp rax, 1
jne 0x1800b9536
cmp byte [rdx], 0x31
jne 0x1800b9536
lea rcx, [rsp + 0x60]
call fcn.18008cfa0
cmp qword [rbp + 0x18], 0x10
lea rdx, [rbp]
mov r8, qword [rbp + 0x10]
mov rcx, rax
cmovae rdx, qword [rbp]
call fcn.1800c2860
lea rdx, [rsp + 0x20]
mov r8d, 1
lea rcx, [rbp - 0x40]
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x30], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
cmp qword [rsp + 0x38], 0x10
cmovae rdx, qword [rsp + 0x20]
cmp qword [rbp - 0x28], 0x10
cmovae rcx, qword [rbp - 0x40]
call qword [sym.imp.KERNEL32.dll_CopyFileA]
mov rdx, qword [rsp + 0x38]
cmp rdx, 0x10
jb 0x1800b94e6
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b94e1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b96cd
call fcn.1800cff50
mov rdx, qword [rsp + 0x78]
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], 0xf
mov byte [rsp + 0x20], 0
cmp rdx, 0x10
jb 0x1800b9536
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b9531
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b96cd
call fcn.1800cff50
cmp qword [rbp - 0x28], 0x10
lea rcx, [rbp - 0x40]
cmovae rcx, qword [rbp - 0x40]
call fcn.1800dc0d4
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x1800b9584
mov rcx, qword [rbp - 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b957f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b96d3
call fcn.1800cff50
mov rdx, qword [rbp + 0x18]
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], 0
cmp rdx, 0x10
jb 0x1800b95cf
mov rcx, qword [rbp]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b95ca
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b96d3
call fcn.1800cff50
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x1800b960a
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b9605
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b96d3
call fcn.1800cff50
mov rdx, qword [rbp + 0x38]
mov qword [rbp - 0x10], rdi
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], 0
cmp rdx, 0x10
jb 0x1800b9655
mov rcx, qword [rbp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b9650
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b96d3
call fcn.1800cff50
mov rdx, qword [rsi + 0x18]
cmp rdx, 0x10
jb 0x1800b968b
mov rcx, qword [rsi]
inc rdx
cmp rdx, 0x1000
jb 0x1800b9686
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800b96d3
mov rcx, r8
call fcn.1800cff50
mov r14, qword [rsp + 0x590]
mov r12, qword [rsp + 0x588]
mov r15, qword [rsp + 0x550]
mov qword [rsi + 0x10], rdi
mov qword [rsi + 0x18], 0xf
mov byte [rsi], 0
mov rcx, qword [rbp + 0x440]
xor rcx, rsp
call fcn.1800cfc90
add rsp, 0x558
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.1800df1b0
int3
call fcn.1800df1b0
int3
call fcn.1800df1b0
int3
call fcn.1800df1b0
int3
call fcn.1800df1b0
int3
call fcn.1800df1b0
int3
call fcn.180089250
int3