Function at 0x1800b9e40
Capabilities:
Check if file exists
Copy file
Get common file path
Get file attributes

Disassembly:
push rbp
push rbx
push rsi
push rdi
lea rbp, [rsp - 0x458]
sub rsp, 0x558
mov rax, qword [0x18012a010]
xor rax, rsp
mov qword [rbp + 0x440], rax
mov rsi, rcx
lea rcx, [rsp + 0x60]
call fcn.18008b150
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.18008b5a0
lea rdx, [0x18012cf78]
lea rcx, [rsp + 0x60]
call fcn.1800c2820
mov rdx, rax
lea rcx, [rsp + 0x20]
call fcn.18008b020
lea rcx, [rsp + 0x40]
mov rbx, rax
call fcn.18008dc10
mov r8, qword [rbx + 0x10]
mov rcx, rax
mov rdx, qword [rax + 0x18]
mov r9, qword [rax + 0x10]
mov rax, rdx
sub rax, r9
cmp r8, rax
jbe 0x1800b9ee5
mov rax, qword [rbx + 0x18]
sub rax, r8
cmp rax, r9
jb 0x1800b9ee5
cmp rdx, 0x10
jb 0x1800b9ed8
mov rcx, qword [rcx]
mov r8, rcx
mov rcx, rbx
call fcn.1800c75d0
jmp 0x1800b9ef7
cmp qword [rbx + 0x18], 0x10
jb 0x1800b9eef
mov rbx, qword [rbx]
mov rdx, rbx
call fcn.1800c2650
movups xmm0, xmmword [rax]
xor edi, edi
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x10], xmm1
mov byte [rax], dil
mov qword [rax + 0x18], 0xf
mov qword [rax + 0x10], rdi
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x1800b9f54
mov rcx, qword [rsp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b9f4f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ba769
call fcn.1800cfd40
mov rdx, qword [rsp + 0x38]
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
cmp rdx, 0x10
jb 0x1800b9fa4
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b9f9f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ba769
call fcn.1800cfd40
lea rdx, [0x18012d478]
lea rcx, [rbp - 0x80]
call fcn.1800c2820
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.18008b020
cmp qword [rbp + 0x38], 0x10
lea r8, [rbp + 0x20]
mov r9, qword [rbp + 0x30]
mov rcx, rax
cmovae r8, qword [rbp + 0x20]
call fcn.1800c75d0
lea rdx, [0x18012d098]
lea rcx, [rbp - 0x60]
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x30], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1800c2820
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.18008b020
mov rcx, qword [rsp + 0x38]
mov rdx, rax
mov r9, qword [rsp + 0x30]
mov r8, qword [rax + 0x10]
mov rax, rcx
sub rax, r9
cmp r8, rax
jbe 0x1800ba059
mov rax, qword [rdx + 0x18]
sub rax, r8
cmp rax, r9
jb 0x1800ba059
cmp rcx, 0x10
lea r8, [rsp + 0x20]
mov rcx, rdx
cmovae r8, qword [rsp + 0x20]
call fcn.1800c75d0
jmp 0x1800ba06d
cmp qword [rdx + 0x18], 0x10
jb 0x1800ba063
mov rdx, qword [rdx]
lea rcx, [rsp + 0x20]
call fcn.1800c2650
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov byte [rax], 0
mov qword [rax + 0x18], 0xf
mov qword [rax + 0x10], rdi
mov rdx, qword [rsp + 0x38]
movups xmmword [rbp + 0x10], xmm1
movups xmmword [rbp], xmm0
cmp rdx, 0x10
jb 0x1800ba0c8
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ba0c3
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ba76f
call fcn.1800cfd40
mov rdx, qword [rsp + 0x58]
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], 0xf
mov byte [rsp + 0x20], 0
cmp rdx, 0x10
jb 0x1800ba118
mov rcx, qword [rsp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ba113
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ba76f
call fcn.1800cfd40
mov rdx, qword [rsp + 0x78]
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
cmp rdx, 0x10
jb 0x1800ba168
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ba163
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ba76f
call fcn.1800cfd40
lea rdx, [rbp + 0x40]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
lea rax, [rbp + 0x40]
mov qword [rsp + 0x30], rdi
mov r8, 0xffffffffffffffff
mov qword [rsp + 0x38], 0xf
mov byte [rsp + 0x20], 0
inc r8
cmp byte [rax + r8], 0
jne 0x1800ba195
lea rdx, [rbp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.1800c2ee0
cmp qword [rbp + 0x18], 0x10
lea rdx, [rbp]
mov r8, qword [rbp + 0x10]
lea rcx, [rsp + 0x20]
cmovae rdx, qword [rbp]
call fcn.1800c2650
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x30], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x38]
cmp rdx, 0x10
jb 0x1800ba224
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ba21f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ba775
call fcn.1800cfd40
cmp qword [rbp - 8], 0x10
lea rcx, [rbp - 0x20]
mov qword [rsp + 0x588], r12
cmovae rcx, qword [rbp - 0x20]
mov qword [rsp + 0x590], r14
mov qword [rsp + 0x550], r15
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x1800ba5d9
test al, 0x10
je 0x1800ba5d9
lea rdx, [0x18012d2f8]
lea rcx, [rbp - 0x60]
call fcn.1800c2820
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.18008b020
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.18008d050
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x1800ba2c7
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ba2c2
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ba77b
call fcn.1800cfd40
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp qword [rbp - 0x28], 0x10
lea r15, [rbp - 0x40]
mov r14, qword [rbp - 0x30]
movabs r12, 0x7fffffffffffffff
cmovae r15, qword [rbp - 0x40]
cmp r14, 0x10
jae 0x1800ba308
movups xmm0, xmmword [r15]
mov qword [rsp + 0x38], 0xf
movups xmmword [rsp + 0x20], xmm0
jmp 0x1800ba37a
mov rbx, r14
or rbx, 0xf
cmp rbx, r12
cmova rbx, r12
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1800ba352
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1800ba781
mov rcx, rax
call fcn.1800cfd48
mov rcx, rax
test rax, rax
je 0x1800ba763
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1800ba361
test rcx, rcx
je 0x1800ba35e
call fcn.1800cfd48
jmp 0x1800ba361
mov rax, rdi
lea r8, [r14 + 1]
mov qword [rsp + 0x20], rax
mov rdx, r15
mov rcx, rax
call fcn.1800d33d0
mov qword [rsp + 0x38], rbx
cmp qword [rbp - 8], 0x10
lea r15, [rbp - 0x20]
mov qword [rsp + 0x30], r14
mov r14, qword [rbp - 0x10]
cmovae r15, qword [rbp - 0x20]
cmp r14, 0x10
jae 0x1800ba3ab
movups xmm0, xmmword [r15]
mov qword [rsp + 0x58], 0xf
movups xmmword [rsp + 0x40], xmm0
jmp 0x1800ba41d
mov rbx, r14
or rbx, 0xf
cmp rbx, r12
cmova rbx, r12
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1800ba3f5
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1800ba781
mov rcx, rax
call fcn.1800cfd48
mov rcx, rax
test rax, rax
je 0x1800ba763
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1800ba404
test rcx, rcx
je 0x1800ba401
call fcn.1800cfd48
jmp 0x1800ba404
mov rax, rdi
lea r8, [r14 + 1]
mov qword [rsp + 0x40], rax
mov rdx, r15
mov rcx, rax
call fcn.1800d33d0
mov qword [rsp + 0x58], rbx
lea rdx, [rsp + 0x20]
mov qword [rsp + 0x50], r14
lea rcx, [rsp + 0x40]
call fcn.18008d5c0
cmp qword [rbp - 0x28], 0x10
lea rcx, [rbp - 0x40]
lea rdx, [0x180118c30]
cmovae rcx, qword [rbp - 0x40]
call fcn.1800dbc58
test rax, rax
je 0x1800ba5d9
mov rcx, rax
call fcn.1800dbce8
mov rcx, qword [rsi + 0x18]
mov rdx, rsi
cmp rcx, 0x10
jb 0x1800ba46c
mov rdx, qword [rsi]
mov rax, qword [rsi + 0x10]
cmp rax, 1
jne 0x1800ba4ab
cmp byte [rdx], 0x30
jne 0x1800ba4ab
lea rdx, [rbp]
lea rcx, [rbp - 0x60]
call fcn.1800c2820
lea rdx, [rbp - 0x40]
mov rbx, rax
lea rcx, [rbp - 0x80]
call fcn.1800c2820
mov rcx, rax
mov rdx, rbx
call fcn.18008d8a0
mov rcx, qword [rsi + 0x18]
mov rax, qword [rsi + 0x10]
mov rdx, rsi
cmp rcx, 0x10
jb 0x1800ba4b7
mov rdx, qword [rsi]
cmp rax, 1
jne 0x1800ba5c6
cmp byte [rdx], 0x31
jne 0x1800ba5c6
lea rcx, [rsp + 0x60]
call fcn.18008cf40
cmp qword [rbp + 0x18], 0x10
lea rdx, [rbp]
mov r8, qword [rbp + 0x10]
mov rcx, rax
cmovae rdx, qword [rbp]
call fcn.1800c2650
lea rdx, [rsp + 0x20]
mov r8d, 1
lea rcx, [rbp - 0x40]
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x30], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
cmp qword [rsp + 0x38], 0x10
cmovae rdx, qword [rsp + 0x20]
cmp qword [rbp - 0x28], 0x10
cmovae rcx, qword [rbp - 0x40]
call qword [sym.imp.KERNEL32.dll_CopyFileA]
mov rdx, qword [rsp + 0x38]
cmp rdx, 0x10
jb 0x1800ba576
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ba571
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ba75d
call fcn.1800cfd40
mov rdx, qword [rsp + 0x78]
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], 0xf
mov byte [rsp + 0x20], 0
cmp rdx, 0x10
jb 0x1800ba5c6
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ba5c1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ba75d
call fcn.1800cfd40
cmp qword [rbp - 0x28], 0x10
lea rcx, [rbp - 0x40]
cmovae rcx, qword [rbp - 0x40]
call fcn.1800dbec4
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x1800ba614
mov rcx, qword [rbp - 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ba60f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ba763
call fcn.1800cfd40
mov rdx, qword [rbp + 0x18]
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], 0
cmp rdx, 0x10
jb 0x1800ba65f
mov rcx, qword [rbp]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ba65a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ba763
call fcn.1800cfd40
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x1800ba69a
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ba695
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ba763
call fcn.1800cfd40
mov rdx, qword [rbp + 0x38]
mov qword [rbp - 0x10], rdi
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], 0
cmp rdx, 0x10
jb 0x1800ba6e5
mov rcx, qword [rbp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800ba6e0
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800ba763
call fcn.1800cfd40
mov rdx, qword [rsi + 0x18]
cmp rdx, 0x10
jb 0x1800ba71b
mov rcx, qword [rsi]
inc rdx
cmp rdx, 0x1000
jb 0x1800ba716
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800ba763
mov rcx, r8
call fcn.1800cfd40
mov r14, qword [rsp + 0x590]
mov r12, qword [rsp + 0x588]
mov r15, qword [rsp + 0x550]
mov qword [rsi + 0x10], rdi
mov qword [rsi + 0x18], 0xf
mov byte [rsi], 0
mov rcx, qword [rbp + 0x440]
xor rcx, rsp
call fcn.1800cfa80
add rsp, 0x558
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.1800defa0
int3
call fcn.1800defa0
int3
call fcn.1800defa0
int3
call fcn.1800defa0
int3
call fcn.1800defa0
int3
call fcn.1800defa0
int3
call fcn.1800891f0
int3