Function at 0x1800b9700
Capabilities:
Check if file exists
Copy file
Get common file path
Get file attributes

Disassembly:
push rbp
push rbx
push rsi
push rdi
lea rbp, [rsp - 0x458]
sub rsp, 0x558
mov rax, qword [0x18012a010]
xor rax, rsp
mov qword [rbp + 0x440], rax
mov rsi, rcx
lea rcx, [rsp + 0x60]
call fcn.18008b1b0
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.18008b600
lea rdx, [0x18012d618]
lea rcx, [rsp + 0x60]
call fcn.1800c2a30
mov rdx, rax
lea rcx, [rsp + 0x20]
call fcn.18008b080
lea rcx, [rsp + 0x40]
mov rbx, rax
call fcn.18008dc70
mov r8, qword [rbx + 0x10]
mov rcx, rax
mov rdx, qword [rax + 0x18]
mov r9, qword [rax + 0x10]
mov rax, rdx
sub rax, r9
cmp r8, rax
jbe 0x1800b97a5
mov rax, qword [rbx + 0x18]
sub rax, r8
cmp rax, r9
jb 0x1800b97a5
cmp rdx, 0x10
jb 0x1800b9798
mov rcx, qword [rcx]
mov r8, rcx
mov rcx, rbx
call fcn.1800c77e0
jmp 0x1800b97b7
cmp qword [rbx + 0x18], 0x10
jb 0x1800b97af
mov rbx, qword [rbx]
mov rdx, rbx
call fcn.1800c2860
movups xmm0, xmmword [rax]
xor edi, edi
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x10], xmm1
mov byte [rax], dil
mov qword [rax + 0x18], 0xf
mov qword [rax + 0x10], rdi
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x1800b9814
mov rcx, qword [rsp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b980f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ba029
call fcn.1800cff50
mov rdx, qword [rsp + 0x38]
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
cmp rdx, 0x10
jb 0x1800b9864
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b985f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ba029
call fcn.1800cff50
lea rdx, [0x18012cf78]
lea rcx, [rbp - 0x80]
call fcn.1800c2a30
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.18008b080
cmp qword [rbp + 0x38], 0x10
lea r8, [rbp + 0x20]
mov r9, qword [rbp + 0x30]
mov rcx, rax
cmovae r8, qword [rbp + 0x20]
call fcn.1800c77e0
lea rdx, [0x18012d0b8]
lea rcx, [rbp - 0x60]
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x30], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800c2a30
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.18008b080
mov rcx, qword [rsp + 0x38]
mov rdx, rax
mov r9, qword [rsp + 0x30]
mov r8, qword [rax + 0x10]
mov rax, rcx
sub rax, r9
cmp r8, rax
jbe 0x1800b9919
mov rax, qword [rdx + 0x18]
sub rax, r8
cmp rax, r9
jb 0x1800b9919
cmp rcx, 0x10
lea r8, [rsp + 0x20]
mov rcx, rdx
cmovae r8, qword [rsp + 0x20]
call fcn.1800c77e0
jmp 0x1800b992d
cmp qword [rdx + 0x18], 0x10
jb 0x1800b9923
mov rdx, qword [rdx]
lea rcx, [rsp + 0x20]
call fcn.1800c2860
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov byte [rax], 0
mov qword [rax + 0x18], 0xf
mov qword [rax + 0x10], rdi
mov rdx, qword [rsp + 0x38]
movups xmmword [rbp + 0x10], xmm1
movups xmmword [rbp], xmm0
cmp rdx, 0x10
jb 0x1800b9988
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b9983
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ba02f
call fcn.1800cff50
mov rdx, qword [rsp + 0x58]
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], 0xf
mov byte [rsp + 0x20], 0
cmp rdx, 0x10
jb 0x1800b99d8
mov rcx, qword [rsp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b99d3
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ba02f
call fcn.1800cff50
mov rdx, qword [rsp + 0x78]
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
cmp rdx, 0x10
jb 0x1800b9a28
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b9a23
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ba02f
call fcn.1800cff50
lea rdx, [rbp + 0x40]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
lea rax, [rbp + 0x40]
mov qword [rsp + 0x30], rdi
mov r8, 0xffffffffffffffff
mov qword [rsp + 0x38], 0xf
mov byte [rsp + 0x20], 0
inc r8
cmp byte [rax + r8], 0
jne 0x1800b9a55
lea rdx, [rbp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.1800c30f0
cmp qword [rbp + 0x18], 0x10
lea rdx, [rbp]
mov r8, qword [rbp + 0x10]
lea rcx, [rsp + 0x20]
cmovae rdx, qword [rbp]
call fcn.1800c2860
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x30], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x38]
cmp rdx, 0x10
jb 0x1800b9ae4
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b9adf
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ba035
call fcn.1800cff50
cmp qword [rbp - 8], 0x10
lea rcx, [rbp - 0x20]
mov qword [rsp + 0x588], r12
cmovae rcx, qword [rbp - 0x20]
mov qword [rsp + 0x590], r14
mov qword [rsp + 0x550], r15
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x1800b9e99
test al, 0x10
je 0x1800b9e99
lea rdx, [0x18012d0d8]
lea rcx, [rbp - 0x60]
call fcn.1800c2a30
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.18008b080
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.18008d0b0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x1800b9b87
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b9b82
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ba03b
call fcn.1800cff50
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp qword [rbp - 0x28], 0x10
lea r15, [rbp - 0x40]
mov r14, qword [rbp - 0x30]
movabs r12, 0x7fffffffffffffff
cmovae r15, qword [rbp - 0x40]
cmp r14, 0x10
jae 0x1800b9bc8
movups xmm0, xmmword [r15]
mov qword [rsp + 0x38], 0xf
movups xmmword [rsp + 0x20], xmm0
jmp 0x1800b9c3a
mov rbx, r14
or rbx, 0xf
cmp rbx, r12
cmova rbx, r12
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1800b9c12
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1800ba041
mov rcx, rax
call fcn.1800cff58
mov rcx, rax
test rax, rax
je 0x1800ba023
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1800b9c21
test rcx, rcx
je 0x1800b9c1e
call fcn.1800cff58
jmp 0x1800b9c21
mov rax, rdi
lea r8, [r14 + 1]
mov qword [rsp + 0x20], rax
mov rdx, r15
mov rcx, rax
call fcn.1800d35e0
mov qword [rsp + 0x38], rbx
cmp qword [rbp - 8], 0x10
lea r15, [rbp - 0x20]
mov qword [rsp + 0x30], r14
mov r14, qword [rbp - 0x10]
cmovae r15, qword [rbp - 0x20]
cmp r14, 0x10
jae 0x1800b9c6b
movups xmm0, xmmword [r15]
mov qword [rsp + 0x58], 0xf
movups xmmword [rsp + 0x40], xmm0
jmp 0x1800b9cdd
mov rbx, r14
or rbx, 0xf
cmp rbx, r12
cmova rbx, r12
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1800b9cb5
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1800ba041
mov rcx, rax
call fcn.1800cff58
mov rcx, rax
test rax, rax
je 0x1800ba023
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1800b9cc4
test rcx, rcx
je 0x1800b9cc1
call fcn.1800cff58
jmp 0x1800b9cc4
mov rax, rdi
lea r8, [r14 + 1]
mov qword [rsp + 0x40], rax
mov rdx, r15
mov rcx, rax
call fcn.1800d35e0
mov qword [rsp + 0x58], rbx
lea rdx, [rsp + 0x20]
mov qword [rsp + 0x50], r14
lea rcx, [rsp + 0x40]
call fcn.18008d620
cmp qword [rbp - 0x28], 0x10
lea rcx, [rbp - 0x40]
lea rdx, [0x180118cb0]
cmovae rcx, qword [rbp - 0x40]
call fcn.1800dbe68
test rax, rax
je 0x1800b9e99
mov rcx, rax
call fcn.1800dbef8
mov rcx, qword [rsi + 0x18]
mov rdx, rsi
cmp rcx, 0x10
jb 0x1800b9d2c
mov rdx, qword [rsi]
mov rax, qword [rsi + 0x10]
cmp rax, 1
jne 0x1800b9d6b
cmp byte [rdx], 0x30
jne 0x1800b9d6b
lea rdx, [rbp]
lea rcx, [rbp - 0x60]
call fcn.1800c2a30
lea rdx, [rbp - 0x40]
mov rbx, rax
lea rcx, [rbp - 0x80]
call fcn.1800c2a30
mov rcx, rax
mov rdx, rbx
call fcn.18008d900
mov rcx, qword [rsi + 0x18]
mov rax, qword [rsi + 0x10]
mov rdx, rsi
cmp rcx, 0x10
jb 0x1800b9d77
mov rdx, qword [rsi]
cmp rax, 1
jne 0x1800b9e86
cmp byte [rdx], 0x31
jne 0x1800b9e86
lea rcx, [rsp + 0x60]
call fcn.18008cfa0
cmp qword [rbp + 0x18], 0x10
lea rdx, [rbp]
mov r8, qword [rbp + 0x10]
mov rcx, rax
cmovae rdx, qword [rbp]
call fcn.1800c2860
lea rdx, [rsp + 0x20]
mov r8d, 1
lea rcx, [rbp - 0x40]
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x30], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
cmp qword [rsp + 0x38], 0x10
cmovae rdx, qword [rsp + 0x20]
cmp qword [rbp - 0x28], 0x10
cmovae rcx, qword [rbp - 0x40]
call qword [sym.imp.KERNEL32.dll_CopyFileA]
mov rdx, qword [rsp + 0x38]
cmp rdx, 0x10
jb 0x1800b9e36
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b9e31
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ba01d
call fcn.1800cff50
mov rdx, qword [rsp + 0x78]
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], 0xf
mov byte [rsp + 0x20], 0
cmp rdx, 0x10
jb 0x1800b9e86
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b9e81
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ba01d
call fcn.1800cff50
cmp qword [rbp - 0x28], 0x10
lea rcx, [rbp - 0x40]
cmovae rcx, qword [rbp - 0x40]
call fcn.1800dc0d4
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x1800b9ed4
mov rcx, qword [rbp - 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b9ecf
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ba023
call fcn.1800cff50
mov rdx, qword [rbp + 0x18]
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], 0
cmp rdx, 0x10
jb 0x1800b9f1f
mov rcx, qword [rbp]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b9f1a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ba023
call fcn.1800cff50
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x1800b9f5a
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b9f55
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ba023
call fcn.1800cff50
mov rdx, qword [rbp + 0x38]
mov qword [rbp - 0x10], rdi
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], 0
cmp rdx, 0x10
jb 0x1800b9fa5
mov rcx, qword [rbp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b9fa0
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ba023
call fcn.1800cff50
mov rdx, qword [rsi + 0x18]
cmp rdx, 0x10
jb 0x1800b9fdb
mov rcx, qword [rsi]
inc rdx
cmp rdx, 0x1000
jb 0x1800b9fd6
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800ba023
mov rcx, r8
call fcn.1800cff50
mov r14, qword [rsp + 0x590]
mov r12, qword [rsp + 0x588]
mov r15, qword [rsp + 0x550]
mov qword [rsi + 0x10], rdi
mov qword [rsi + 0x18], 0xf
mov byte [rsi], 0
mov rcx, qword [rbp + 0x440]
xor rcx, rsp
call fcn.1800cfc90
add rsp, 0x558
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.1800df1b0
int3
call fcn.1800df1b0
int3
call fcn.1800df1b0
int3
call fcn.1800df1b0
int3
call fcn.1800df1b0
int3
call fcn.1800df1b0
int3
call fcn.180089250
int3