Function at 0x180002d48
Capabilities:
Check if file exists
Create directory
Get file attributes
Move file
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r14
lea rbp, [rax - 0x5a8]
sub rsp, 0x690
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x580], rax
mov rbx, rcx
cmp edx, 1
je 0x180002db4
mov eax, 1
mov rcx, qword [rbp + 0x580]
xor rcx, rsp
call fcn.180009ed0
lea r11, [rsp + 0x690]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop r12
pop rbp
ret
lea rcx, [rsp + 0x38]
mov dword [rsp + 0x38], 0x8f9024c9
mov dword [rsp + 0x3c], 0x7c419db
mov dword [rsp + 0x40], 0xe55cf4dc
call fcn.1800018e4
lea rsi, [0x180029168]
mov edx, eax
mov rcx, rsi
call fcn.18000123c
mov r12d, 0x208
lea rcx, [rsp + 0x50]
mov r8d, r12d
xor edx, edx
call fcn.18000cf10
mov r8d, 0x104
lea rdx, [rsp + 0x50]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rcx, [rsp + 0x50]
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
xor edi, edi
test eax, eax
je 0x180002fd0
call fcn.18000167c
test eax, eax
jne 0x180002e64
lea rcx, [rsp + 0x38]
mov dword [rsp + 0x38], 0xcfaa3ec5
mov dword [rsp + 0x3c], 0x79128815
mov dword [rsp + 0x40], 0xeac754d8
call fcn.1800018e4
mov edx, eax
mov rcx, rsi
call fcn.18000123c
lea ecx, [rdi + 2]
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov r8, r12
lea rcx, [rbp + 0x160]
xor edx, edx
call fcn.18000cf10
mov rcx, rdi
lea r14, [0x180033740]
movzx eax, word [rsp + rcx + 0x50]
mov word [rcx + r14], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x180002e7f
lea rcx, [r14 - 2]
lea rcx, [rcx + 2]
cmp word [rcx], di
jne 0x180002e96
mov eax, dword [0x180029358]
movups xmm0, xmmword [0x180029340]
movsd xmm1, qword [0x180029350]
movups xmmword [rcx], xmm0
movsd qword [rcx + 0x10], xmm1
mov dword [rcx + 0x18], eax
movzx eax, word [0x18002935c]
mov word [rcx + 0x1c], ax
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x180002fd0
lea rcx, [rsp + 0x38]
mov dword [rsp + 0x38], 0x4e936448
mov dword [rsp + 0x3c], 0xb06dd312
mov dword [rsp + 0x40], 0x37964d7c
call fcn.1800018e4
mov edx, eax
mov rcx, rsi
call fcn.18000123c
mov rcx, rdi
movzx eax, word [rsp + rcx + 0x50]
mov word [rbp + rcx + 0x160], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x180002f0b
lea rcx, [rbp + 0x160]
sub rcx, 2
lea rcx, [rcx + 2]
cmp word [rcx], di
jne 0x180002f2c
movups xmm0, xmmword [str._x64.log]
mov eax, dword [0x180029370]
movups xmmword [rcx], xmm0
mov dword [rcx + 0x10], eax
lea rcx, [rbp + 0x160]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x18000302e
mov r8, r12
mov dword [rsp + 0x30], edi
xor edx, edx
mov qword [rsp + 0x28], rdi
lea rcx, [rbp + 0x370]
mov dword [rsp + 0x20], 0x18
call fcn.18000cf10
lea r8, [rsp + 0x50]
mov edx, 0x104
lea rcx, [rbp + 0x370]
call fcn.180011324
lea r8, str.idcx
mov edx, 0x104
lea rcx, [rbp + 0x370]
call fcn.18001138c
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x370]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov rdx, r14
lea rcx, [rbp + 0x160]
call qword [sym.imp.KERNEL32.dll_MoveFileW]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
lea rcx, [rsp + 0x38]
mov dword [rsp + 0x38], 0x2923a78b
mov dword [rsp + 0x3c], 0xda7dd1b7
mov dword [rsp + 0x40], 0xd5e3c4f7
call fcn.1800018e4
mov edx, eax
mov rcx, rsi
call fcn.18000123c
call fcn.180002bd8
test eax, eax
jne 0x180003018
lea ecx, [rax + 2]
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call fcn.180001290
call fcn.180001918
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea rcx, [rsp + 0x38]
mov dword [rsp + 0x38], 0xc5756f22
mov dword [rsp + 0x3c], 0x8e29d169
mov dword [rsp + 0x40], 0xdefbbf5
call fcn.1800018e4
mov edx, eax
mov rcx, rsi
call fcn.18000123c
xor ecx, ecx
call fcn.18000e7b4
int3