Function at 0x180012ff0
Capabilities:
Check if file exists
Copy file
Get common file path
Set file attributes

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x2b0
mov rax, qword [0x18007d010]
xor rax, rsp
mov qword [rsp + 0x2a0], rax
movsxd rbp, edx
mov r14, rcx
xor edx, edx
mov cl, 1
call fcn.180012e00
test al, al
je 0x1800133ac
lea rdx, [rsp + 0x90]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
xor r15d, r15d
test eax, eax
je 0x180013376
mov rcx, qword [0x180082ec8]
add rcx, 0x28
call qword [sym.imp.SHLWAPI.dll_PathFindExtensionW]
mov rsi, rax
cmp ebp, 2
je 0x1800130a1
mov rcx, qword [0x180082ec8]
add rcx, 0x28
call qword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
mov rdx, rax
lea rcx, [rsp + 0x90]
call qword [sym.imp.SHLWAPI.dll_PathAppendW]
test eax, eax
je 0x180013376
lea rcx, [rsp + 0x90]
call qword [sym.imp.SHLWAPI.dll_PathRemoveExtensionW]
mov r8, rbp
add r8, r8
lea r12, [0x180000000]
mov r8, qword [r12 + r8*8 + 0x6f0c0]
mov edx, 0x104
lea rcx, [rsp + 0x90]
call fcn.180043690
lea rax, [rsp + 0x90]
mov rbx, 0xffffffffffffffff
nop word [rax + rax]
inc rbx
cmp word [rax + rbx*2], r15w
jne 0x1800130e0
mov edi, 1
lea r9d, [rdi + 9]
lea r8d, [rdi + 0x1f]
lea rdx, [rsp + 0x50]
mov ecx, edi
call fcn.18004339c
lea rcx, [rsp + 0x50]
mov rax, 0xffffffffffffffff
nop
inc rax
cmp word [rcx + rax*2], r15w
jne 0x180013110
inc rax
add rax, rbx
cmp rax, 0x104
ja 0x180013376
nop dword [rax]
lea r8, [rsp + 0x50]
mov edx, 0x104
lea rcx, [rsp + 0x90]
call fcn.180043690
mov r8, rsi
mov edx, 0x104
lea rcx, [rsp + 0x90]
call fcn.180043690
lea rcx, [rsp + 0x90]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1800131d3
lea rax, [rbx + rbx]
cmp rax, 0x208
jae 0x1800133da
mov word [rsp + rax + 0x90], r15w
inc edi
mov r9d, 0xa
lea r8d, [r9 + 0x16]
lea rdx, [rsp + 0x50]
mov ecx, edi
call fcn.18004339c
lea rcx, [rsp + 0x50]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rcx + rax*2], r15w
jne 0x1800131b0
lea rcx, [rbx + 1]
add rcx, rax
cmp rcx, 0x104
jbe 0x180013130
jmp 0x180013376
lea rax, [rbx + 1]
cmp rax, 0x104
ja 0x180013376
test r14, r14
je 0x18001321c
mov r8d, 1
lea rdx, [rsp + 0x90]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x180013376
mov edx, 0x100
lea rcx, [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
jmp 0x180013267
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x100
mov dword [rsp + 0x20], 2
xor r9d, r9d
xor r8d, r8d
mov edx, 0x40000000
lea rcx, [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, r15d
cmp rax, 0xffffffffffffffff
setne bl
je 0x18001325f
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x180013376
xor r9d, r9d
mov r8, qword [0x180082ec8]
mov r8, qword [r8 + 0x18]
mov edx, 0x828
mov rcx, qword [0x180080590]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdi, rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x840
mov rcx, qword [0x180080590]
call qword [sym.imp.USER32.dll_SendMessageW]
movsxd rcx, eax
lea rbx, [rcx*8 + 0x805c0]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x859
mov rcx, qword [rbx + r12]
call qword [0x1800805a8]
mov rsi, rax
lea rax, [0x180082e70]
mov qword [rsp + 0x40], rax
inc dword [0x180082e70]
lea r9, [rsp + 0x90]
xor r8d, r8d
mov edx, 0x835
mov rcx, qword [0x180080590]
call qword [sym.imp.USER32.dll_SendMessageW]
test rax, rax
je 0x180013370
xor r9d, r9d
xor r8d, r8d
mov edx, 0x824
mov rcx, qword [0x180080590]
call qword [sym.imp.USER32.dll_SendMessageW]
movsxd r9, edi
mov r8, rax
mov edx, 0x829
mov rcx, qword [0x180080590]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9d, 0xa42c
xor r8d, r8d
mov edx, 0x818
mov rcx, qword [0x180080590]
call qword [sym.imp.USER32.dll_SendMessageW]
movsxd r8, esi
xor r9d, r9d
mov edx, 0x7f5
mov rcx, qword [rbx + r12]
call qword [0x1800805a8]
mov rax, qword [0x180082ec8]
mov dword [rax + 0x250], ebp
dec dword [0x180082e70]
mov al, 1
jmp 0x1800133ae
dec dword [0x180082e70]
xor r9d, r9d
lea r8, [0x18006d908]
lea rdx, str.Creating_temp_file_failed___operation_aborted.
mov rcx, qword [0x180080590]
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rdx, qword [0x180082ec8]
mov qword [0x180082ec8], r15
test rdx, rdx
je 0x1800133ac
call fcn.18001c870
xor al, al
mov rcx, qword [rsp + 0x2a0]
xor rcx, rsp
call fcn.1800383a0
lea r11, [rsp + 0x2b0]
mov rbx, qword [r11 + 0x40]
mov rbp, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret
call fcn.18003853c
int3