Function at 0x14001e1f0
Capabilities:
Create directory
Get common file path
Move file

Disassembly:
push rbp
push rbx
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x9a8]
sub rsp, 0xaa8
mov rax, qword [0x14016b140]
xor rax, rsp
mov qword [rbp + 0x980], rax
mov rdi, rcx
mov r15d, r9d
lea rcx, str.CopyFileWithErrorHandle_WCHAR_version_n
mov r12, r8
mov r14, rdx
call fcn.1400213c0
mov r9d, r15d
mov r8, r12
mov rdx, r14
mov rcx, rdi
call fcn.14001de20
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_GetLastError]
test ebx, ebx
jne 0x14001e259
cmp eax, 5
je 0x14001e260
cmp eax, 0x20
je 0x14001e260
mov eax, ebx
jmp 0x14001e5a0
xor edx, edx
lea rcx, [rsp + 0x40]
mov r8d, 0x208
call fcn.1400c0ac0
xor edx, edx
lea rcx, [rbp + 0x150]
mov r8d, 0x208
call fcn.1400c0ac0
lea rdx, [rsp + 0x40]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
test eax, eax
jne 0x14001e2aa
mov edx, 0x104
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
lea r9, [rbp + 0x150]
xor r8d, r8d
lea rdx, [0x140106110]
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetTempFileNameW]
test eax, eax
je 0x14001e259
mov qword [rsp + 0xa98], r13
xor r13d, r13d
mov ecx, r13d
nop dword [rax + rax]
movzx eax, word [rbp + rcx + 0x150]
mov word [rbp + rcx + 0x570], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x14001e2e0
xor edx, edx
mov qword [rsp + 0xaa0], rsi
mov r8d, 0x208
lea rcx, [rsp + 0x40]
call fcn.1400c0ac0
lea rdx, [rsp + 0x40]
mov rcx, rdi
call fcn.14001ea90
lea rdx, [rsp + 0x40]
lea rcx, str.Common_App_Data_Folder___s__n
call fcn.1400213c0
cmp word [rsp + 0x40], r13w
je 0x14001e471
lea rcx, [rsp + 0x40]
sub rcx, 2
nop word [rax + rax]
cmp word [rcx + 2], r13w
lea rcx, [rcx + 2]
jne 0x14001e350
movsd xmm0, qword [str._temp]
xor edx, edx
mov eax, dword [0x140106160]
movsd qword [rcx], xmm0
mov dword [rcx + 8], eax
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
xor edx, edx
lea rcx, [rbp + 0x360]
mov r8d, 0x208
call fcn.1400c0ac0
lea r9, [rbp + 0x360]
xor r8d, r8d
lea rdx, [0x140106110]
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetTempFileNameW]
test eax, eax
je 0x14001e45c
cmp word [rbp + 0x360], r13w
je 0x14001e45c
xor r9d, r9d
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
lea rcx, [rbp + 0x570]
mov edx, 0x80000000
mov dword [rsp + 0x20], 3
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp rsi, 0xffffffffffffffff
jne 0x14001e40c
cmp eax, 0xb7
je 0x14001e40c
cmp eax, 0x20
jne 0x14001e424
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rbp + 0x570]
mov rcx, rdi
call fcn.14001e940
mov rcx, r13
nop word [rax + rax]
movzx eax, word [rbp + rcx + 0x360]
mov word [rbp + rcx + 0x570], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x14001e430
lea rdx, [rbp + 0x570]
lea rcx, str.__Change_Temp_folder_file_to___s__n
call fcn.1400213c0
lea rdx, [rbp + 0x570]
lea rcx, str.__Temp_FileName___s__n
call fcn.1400213c0
jmp 0x14001e47d
lea rcx, str.Cannon_Get_App_Data_Folder_n
call fcn.1400213c0
mov r9d, r15d
lea r8, [rbp + 0x570]
mov rdx, r14
mov rcx, rdi
call fcn.14001de20
test eax, eax
je 0x14001e58e
cmp byte [rdi + 5], r13b
je 0x14001e576
mov esi, dword [rdi + 0xc]
lea rax, [rbp + 0x570]
mov rbx, 0xffffffffffffffff
mov r9, rbx
nop dword [rax + rax]
inc r9
cmp word [rax + r9*2], r13w
jne 0x14001e4c0
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0x150]
mov qword [rsp + 0x30], r13
lea r8, [rbp + 0x570]
mov dword [rsp + 0x28], r13d
xor edx, edx
mov ecx, esi
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea rcx, [rbp + 0x570]
nop dword [rax]
inc rbx
cmp word [rcx + rbx*2], r13w
jne 0x14001e500
mov qword [rsp + 0x38], r13
lea r8, [rbp + 0x570]
mov qword [rsp + 0x30], r13
mov r9, rbx
mov dword [rsp + 0x28], eax
xor edx, edx
lea rax, [rbp + 0x150]
mov ecx, esi
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
movsxd rdx, eax
xor r9d, r9d
mov r8, r12
mov rcx, rdi
mov byte [rbp + rdx + 0x150], r13b
lea rdx, [rbp + 0x360]
call fcn.14001e5c0
mov r9d, 5
lea r8, [rbp + 0x360]
lea rdx, [rbp + 0x150]
mov rcx, rdi
call fcn.14001ff10
jmp 0x14001e590
mov r8d, 5
lea rcx, [rbp + 0x570]
mov rdx, r12
call qword [sym.imp.KERNEL32.dll_MoveFileExW]
jmp 0x14001e590
mov eax, ebx
mov rsi, qword [rsp + 0xaa0]
mov r13, qword [rsp + 0xa98]
mov rcx, qword [rbp + 0x980]
xor rcx, rsp
call fcn.140027790
add rsp, 0xaa8
pop r15
pop r14
pop r12
pop rdi
pop rbx
pop rbp
ret