Function at 0x180002008
Capabilities:
Copy file
Create directory
Delete file
Get common file path

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rbp
mov qword [r11 + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
lea rax, [r11 - 0x38]
lea rcx, [0x1800334b0]
mov qword [r11 - 0x30], rax
lea rax, [r11 - 0x38]
mov qword [r11 - 0x38], rax
call qword [sym.imp.KERNEL32.dll_lstrlenA]
mov edi, 0x12
lea r8, [rsp + 0x30]
lea rdx, [0x180033868]
lea rcx, [0x1800337a0]
xor ebx, ebx
xor r9d, r9d
mov dword [rsp + 0x28], edi
mov ebp, eax
mov dword [rsp + 0x20], ebx
call fcn.18001500c
lea r8, [rsp + 0x30]
lea rdx, [0x180033890]
lea rcx, [0x1800337a0]
xor r9d, r9d
mov dword [rsp + 0x28], edi
mov esi, eax
mov dword [rsp + 0x20], ebx
call fcn.18001500c
mov rcx, qword [0x1800307d8]
lea r8, [rbp + rbp + 0x36]
xor edx, edx
add esi, eax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
cmp rax, rbx
mov rdi, rax
je 0x18000210b
lea r8d, [rbp + 1]
lea rdx, [0x1800334b0]
mov rcx, rax
call qword [sym.imp.ntdll.dll_mbstowcs]
lea rdx, [0x1800337f8]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_lstrcatW]
lea r8, [rsp + 0x30]
lea rdx, [0x1800338c8]
xor r9d, r9d
mov rcx, rdi
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], ebx
call fcn.18001500c
mov rcx, qword [0x1800307d8]
mov r8, rdi
xor edx, edx
add esi, eax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x1800307d8]
xor edx, edx
mov r8d, 0x20c
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
cmp rax, rbx
mov rdi, rax
je 0x18000218a
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
lea edx, [r9 + 0x21]
mov qword [rsp + 0x20], rax
call qword [sym.imp.SHELL32.dll_SHGetFolderPathW]
cmp eax, ebx
jne 0x180002178
lea rdx, [0x18002a714]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_lstrcatW]
lea r8, [rsp + 0x30]
lea rdx, [0x1800338e0]
xor r9d, r9d
mov rcx, rdi
mov dword [rsp + 0x28], 0x11
mov dword [rsp + 0x20], ebx
call fcn.18001500c
add esi, eax
mov rcx, qword [0x1800307d8]
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp esi, ebx
je 0x180002354
mov rcx, qword [0x180030850]
mov r13, qword [rsp + 0x30]
call fcn.180014c44
cmp rax, rbx
mov rdi, rax
je 0x1800021b6
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov r12, r13
mov r13, qword [r13]
mov rsi, rbx
mov rax, qword [r12 + 8]
mov rcx, qword [r12]
mov qword [rax], rcx
mov qword [rcx + 8], rax
mov eax, dword [r12 + 0x18]
sub eax, 0x10
je 0x1800021f6
sub eax, 1
je 0x1800021ed
cmp eax, 1
jne 0x1800021fd
lea rsi, [0x1800338f8]
jmp 0x1800021fd
lea rsi, [0x180033928]
jmp 0x1800021fd
lea rsi, [0x180033950]
cmp rdi, rbx
je 0x180002310
mov eax, dword [r12 + 0x24]
mov ebp, ebx
lea r14, [r12 + rax*2 + 0x28]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_lstrlenW]
cmp rsi, rbx
mov dword [rsp + 0x80], eax
je 0x180002232
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov ebp, eax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov rcx, qword [0x1800307d8]
xor edx, edx
add eax, dword [rsp + 0x80]
lea r8d, [rax + rbp + 3]
add r8, r8
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
cmp rax, rbx
mov rbp, rax
je 0x180002310
mov rdx, rdi
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
cmp rsi, rbx
je 0x180002282
mov rdx, rsi
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrcatW]
xor edx, edx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea rdx, [0x18002a714]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrcatW]
jmp 0x1800022cc
mov word [rsi], bx
call qword [sym.imp.KERNEL32.dll_lstrcatW]
xor edx, edx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea rdx, [0x18002a714]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrcatW]
lea r14, [rsi + 2]
mov word [rsi], 0x5c
mov dx, 0x5c
mov rcx, r14
call qword [sym.imp.SHLWAPI.dll_StrChrW]
mov rdx, r14
mov rcx, rbp
cmp rax, rbx
mov rsi, rax
jne 0x18000229f
call qword [sym.imp.KERNEL32.dll_lstrcatW]
lea rcx, [r12 + 0x28]
xor r8d, r8d
mov rdx, rbp
call qword [sym.imp.KERNEL32.dll_CopyFileW]
mov rcx, qword [0x1800307d8]
mov r8, rbp
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rcx, [r12 + 0x28]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rcx, qword [0x1800307d8]
mov r8, r12
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea r11, [rsp + 0x30]
cmp r13, r11
jne 0x1800021b6
cmp rdi, rbx
je 0x180002359
mov rcx, qword [0x1800307d8]
mov r8, rdi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x180002359
mov ebx, 2
lea r11, [rsp + 0x40]
mov eax, ebx
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret