Function at 0x18001a050
Capabilities:
Check if file exists
Write file on windows

Disassembly:
push rsi
push rdi
mov eax, 0x2078
call fcn.18002ff00
sub rsp, rax
mov rax, qword [0x1800a3830]
xor rax, rsp
mov qword [rsp + 0x2060], rax
mov rdi, rdx
mov rsi, rcx
call fcn.180019f50
test eax, eax
je 0x18001a1c8
mov qword [rsp + 0x20a0], rbx
xor ecx, ecx
mov qword [rsp + 0x2070], rbp
call fcn.1800567e0
lea rcx, [rsp + 0x58]
mov qword [rsp + 0x58], rax
call fcn.180057050
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, dword [rbx]
lea rdx, str.__d__d__d__d__d__d___d_:_s
mov r9d, dword [rbx + 0x10]
mov r8d, dword [rbx + 0x14]
inc r9d
mov qword [rsp + 0x48], rdi
add r8d, 0x76c
mov dword [rsp + 0x40], eax
mov eax, dword [rbx + 0xc]
mov dword [rsp + 0x38], ecx
mov ecx, dword [rbx + 4]
mov dword [rsp + 0x30], ecx
mov ecx, dword [rbx + 8]
mov dword [rsp + 0x28], ecx
lea rcx, [rsp + 0x60]
mov dword [rsp + 0x20], eax
call fcn.180019ad0
mov rcx, rsi
xor edi, edi
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov ebp, 1
lea rdx, [0x180071cb0]
test eax, eax
mov rcx, rsi
cmovne edi, ebp
call fcn.1800529a4
mov rbx, rax
test rax, rax
je 0x18001a1b8
test edi, edi
jne 0x18001a14c
mov eax, 0xfeff
lea r8d, [rbp + 1]
mov r9, rbx
mov word [rsp + 0x54], ax
mov edx, ebp
lea rcx, [rsp + 0x54]
call fcn.180052bf0
lea rcx, [rsp + 0x60]
or rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x18001a155
add eax, eax
lea rcx, [rsp + 0x60]
movsxd r8, eax
mov r9, rbx
mov rdx, rbp
call fcn.180052bf0
mov eax, 0xd
lea rcx, [rsp + 0x50]
mov r9, rbx
mov word [rsp + 0x50], ax
mov rdx, rbp
lea r8d, [rax - 0xb]
call fcn.180052bf0
mov eax, 0xa
lea rcx, [rsp + 0x50]
mov r9, rbx
mov word [rsp + 0x50], ax
mov rdx, rbp
lea r8d, [rax - 8]
call fcn.180052bf0
mov rcx, rbx
call fcn.180052854
mov rbx, qword [rsp + 0x20a0]
mov rbp, qword [rsp + 0x2070]
mov rcx, qword [rsp + 0x2060]
xor rcx, rsp
call fcn.18002fa40
add rsp, 0x2078
pop rdi
pop rsi
ret

Function at 0x18001a4c0
Capabilities:
Check if file exists
Create directory

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
sub rsp, 0x20
or r8, 0xffffffffffffffff
mov rbx, rcx
mov rdi, r8
nop dword [rax]
inc rdi
cmp word [rcx + rdi*2], 0
jne 0x18001a4e0
lea eax, [rdi + 1]
movsxd rcx, eax
mov eax, 2
mul rcx
cmovo rax, r8
mov rcx, rax
call fcn.18002f998
mov rsi, rax
sub rax, rbx
nop word [rax + rax]
movzx ecx, word [rbx]
mov word [rax + rbx], cx
lea rbx, [rbx + 2]
test cx, cx
jne 0x18001a510
xor r14d, r14d
movsxd rdi, edi
mov ebx, r14d
lea ebp, [r14 + 1]
test rdi, rdi
js 0x18001a57f
mov qword [rsp + 0x40], r15
mov r15d, 0x5c
nop dword [rax]
cmp word [rsi + rbx*2], r15w
jne 0x18001a56d
mov rcx, rsi
mov word [rsi + rbx*2], r14w
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x18001a568
xor edx, edx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
je 0x18001a577
mov word [rsi + rbx*2], r15w
inc rbx
cmp rbx, rdi
jle 0x18001a540
jmp 0x18001a57a
mov ebp, r14d
mov r15, qword [rsp + 0x40]
mov rcx, rsi
call fcn.18002f990
mov rbx, qword [rsp + 0x48]
mov eax, ebp
mov rbp, qword [rsp + 0x50]
add rsp, 0x20
pop r14
pop rdi
pop rsi
ret