Function at 0x1800b4220
Capabilities:
Check if file exists
Copy file
Get common file path
Get file attributes

Disassembly:
push rbp
push rsi
push rdi
push r14
lea rbp, [rsp - 0x4b8]
sub rsp, 0x5b8
mov rax, qword [0x180128010]
xor rax, rsp
mov qword [rbp + 0x4a0], rax
mov r14, rdx
mov rsi, rcx
mov rdx, rcx
mov rdi, r8
lea rcx, [rbp - 0x80]
call fcn.1800c0900
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.1800b4110
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x1800b42a5
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b42a0
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b4a87
call fcn.1800ce78c
lea rcx, [rbp - 0x80]
mov qword [rsp + 0x5b0], r15
call fcn.18008ab70
mov rdx, rax
lea rcx, [rbp + 0x80]
call fcn.18008afc0
mov rdx, rsi
lea rcx, [rbp + 0x20]
call fcn.1800c0900
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.1800b4110
cmp qword [rbp + 0x98], 0x10
lea r8, [rbp + 0x80]
mov r9, qword [rbp + 0x90]
mov rcx, rax
cmovae r8, qword [rbp + 0x80]
call fcn.1800c5980
xor r15d, r15d
lea rdx, [0x18012b158]
lea rcx, [rbp - 0x20]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], r15
movups xmmword [rsp + 0x60], xmm0
mov qword [rax + 0x18], 0xf
movups xmmword [rsp + 0x70], xmm1
mov byte [rax], r15b
call fcn.1800c0900
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.18008aa40
mov r9, rax
lea r8, [rsp + 0x60]
lea rcx, [rsp + 0x20]
call fcn.1800c3ac0
cmp qword [r14 + 0x18], 0x10
mov rdx, r14
jb 0x1800b4362
mov rdx, qword [r14]
mov r8, qword [r14 + 0x10]
lea rcx, [rsp + 0x20]
call fcn.1800c0730
lea rdx, [0x18012b418]
lea rcx, [rbp]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], r15
movups xmmword [rbp - 0x40], xmm0
mov qword [rax + 0x18], 0xf
movups xmmword [rbp - 0x30], xmm1
mov byte [rax], r15b
call fcn.1800c0900
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.18008aa40
mov r9, rax
lea r8, [rbp - 0x40]
lea rcx, [rbp + 0x60]
call fcn.1800c3ac0
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x1800b43f5
mov rcx, qword [rbp - 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b43f0
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b4a8d
call fcn.1800ce78c
mov rdx, qword [rsp + 0x38]
cmp rdx, 0x10
jb 0x1800b4432
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b442d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b4a8d
call fcn.1800ce78c
mov rdx, qword [rsp + 0x78]
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], 0xf
mov byte [rsp + 0x20], r15b
cmp rdx, 0x10
jb 0x1800b4482
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b447d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b4a8d
call fcn.1800ce78c
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x1800b44bf
mov rcx, qword [rsp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b44ba
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b4a8d
call fcn.1800ce78c
mov rdx, qword [rbp - 0x48]
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], r15b
cmp rdx, 0x10
jb 0x1800b450d
mov rcx, qword [rbp - 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b4508
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b4a8d
call fcn.1800ce78c
mov rdx, qword [rbp - 0x68]
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], r15b
cmp rdx, 0x10
jb 0x1800b4558
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b4553
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b4a8d
call fcn.1800ce78c
lea rdx, [rbp + 0xa0]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x40], r15
mov r8, 0xffffffffffffffff
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], 0xf
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], r15b
jne 0x1800b4590
lea rdx, [rbp + 0xa0]
lea rcx, [rsp + 0x40]
call fcn.1800c1060
cmp qword [rbp + 0x98], 0x10
lea rdx, [rbp + 0x80]
mov r8, qword [rbp + 0x90]
lea rcx, [rsp + 0x40]
cmovae rdx, qword [rbp + 0x80]
call fcn.1800c0730
cmp qword [rbp + 0x78], 0x10
lea rdx, [rbp + 0x60]
mov r8, qword [rbp + 0x70]
lea rcx, [rsp + 0x20]
cmovae rdx, qword [rbp + 0x60]
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x30], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], r15b
call fcn.1800c0730
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x50], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], r15b
mov rdx, qword [rsp + 0x38]
cmp rdx, 0x10
jb 0x1800b4669
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b4664
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b4a93
call fcn.1800ce78c
mov rdx, qword [rsp + 0x58]
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], 0xf
mov byte [rsp + 0x20], r15b
cmp rdx, 0x10
jb 0x1800b46b9
mov rcx, qword [rsp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b46b4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b4a93
call fcn.1800ce78c
cmp qword [rsi + 0x18], 0x10
mov rcx, rsi
jb 0x1800b46c6
mov rcx, qword [rsi]
mov qword [rsp + 0x5f8], rbx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x1800b48b1
test al, 0x10
je 0x1800b48b1
lea rdx, [rbp + 0x40]
lea rcx, [rbp]
call fcn.1800c0900
mov rdx, rsi
lea rcx, [rbp - 0x20]
mov rbx, rax
call fcn.1800c0900
mov rcx, rax
mov rdx, rbx
call fcn.18008cfa0
cmp qword [rbp + 0x58], 0x10
lea rcx, [rbp + 0x40]
lea rdx, [0x180116130]
cmovae rcx, qword [rbp + 0x40]
call fcn.1800da3c8
test rax, rax
je 0x1800b48b1
mov rcx, rax
call fcn.1800da458
mov rcx, qword [rdi + 0x18]
mov rdx, rdi
cmp rcx, 0x10
jb 0x1800b4747
mov rdx, qword [rdi]
mov rax, qword [rdi + 0x10]
cmp rax, 1
jne 0x1800b4786
cmp byte [rdx], 0x30
jne 0x1800b4786
lea rdx, [rbp + 0x60]
lea rcx, [rbp]
call fcn.1800c0900
lea rdx, [rbp + 0x40]
mov rbx, rax
lea rcx, [rbp - 0x20]
call fcn.1800c0900
mov rcx, rax
mov rdx, rbx
call fcn.18008d280
mov rcx, qword [rdi + 0x18]
mov rax, qword [rdi + 0x10]
mov rdx, rdi
cmp rcx, 0x10
jb 0x1800b4792
mov rdx, qword [rdi]
cmp rax, 1
jne 0x1800b489e
cmp byte [rdx], 0x31
jne 0x1800b489e
lea rcx, [rbp - 0x80]
call fcn.18008c900
cmp qword [rbp + 0x78], 0x10
lea rdx, [rbp + 0x60]
mov r8, qword [rbp + 0x70]
mov rcx, rax
cmovae rdx, qword [rbp + 0x60]
call fcn.1800c0730
lea rdx, [rsp + 0x20]
mov r8d, 1
lea rcx, [rbp + 0x40]
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x30], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], r15b
cmp qword [rsp + 0x38], 0x10
cmovae rdx, qword [rsp + 0x20]
cmp qword [rbp + 0x58], 0x10
cmovae rcx, qword [rbp + 0x40]
call qword [sym.imp.KERNEL32.dll_CopyFileA]
mov rdx, qword [rsp + 0x38]
cmp rdx, 0x10
jb 0x1800b4850
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b484b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b4a7b
call fcn.1800ce78c
mov rdx, qword [rbp - 0x68]
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], 0xf
mov byte [rsp + 0x20], r15b
cmp rdx, 0x10
jb 0x1800b489e
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b4899
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b4a7b
call fcn.1800ce78c
cmp qword [rbp + 0x58], 0x10
lea rcx, [rbp + 0x40]
cmovae rcx, qword [rbp + 0x40]
call fcn.1800da634
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x1800b48ec
mov rcx, qword [rbp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b48e7
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b4a81
call fcn.1800ce78c
mov rdx, qword [rbp + 0x78]
mov qword [rbp + 0x50], r15
mov qword [rbp + 0x58], 0xf
mov byte [rbp + 0x40], r15b
cmp rdx, 0x10
jb 0x1800b4937
mov rcx, qword [rbp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b4932
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b4a81
call fcn.1800ce78c
mov rdx, qword [rbp + 0x98]
cmp rdx, 0x10
jb 0x1800b4978
mov rcx, qword [rbp + 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b4973
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b4a81
call fcn.1800ce78c
mov rdx, qword [rsi + 0x18]
cmp rdx, 0x10
jb 0x1800b49b2
mov rcx, qword [rsi]
inc rdx
cmp rdx, 0x1000
jb 0x1800b49ad
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800b4a81
mov rcx, r8
call fcn.1800ce78c
mov qword [rsi + 0x10], r15
mov qword [rsi + 0x18], 0xf
mov byte [rsi], r15b
mov rdx, qword [r14 + 0x18]
cmp rdx, 0x10
jb 0x1800b49fb
mov rcx, qword [r14]
inc rdx
cmp rdx, 0x1000
jb 0x1800b49f6
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800b4a81
mov rcx, r8
call fcn.1800ce78c
mov qword [r14 + 0x10], r15
mov qword [r14 + 0x18], 0xf
mov byte [r14], r15b
mov rdx, qword [rdi + 0x18]
cmp rdx, 0x10
jb 0x1800b4a40
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x1800b4a3b
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800b4a81
mov rcx, r8
call fcn.1800ce78c
mov rbx, qword [rsp + 0x5f8]
mov qword [rdi + 0x10], r15
mov byte [rdi], r15b
mov r15, qword [rsp + 0x5b0]
mov qword [rdi + 0x18], 0xf
mov rcx, qword [rbp + 0x4a0]
xor rcx, rsp
call fcn.1800ce4d0
add rsp, 0x5b8
pop r14
pop rdi
pop rsi
pop rbp
ret
call fcn.1800dd818
int3
call fcn.1800dd818
int3
call fcn.1800dd818
int3
call fcn.1800dd818
int3
call fcn.1800dd818
int3