Function at 0x1800a2b00
Capabilities:
Create directory
Delete directory
Get common file path
Move file

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x300
mov r14, rcx
xorps xmm0, xmm0
movaps xmmword [rsp + 0xc0], xmm0
mov qword [rsp + 0xd0], 0
movaps xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
movaps xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
movaps xmmword [rsp + 0xa0], xmm0
mov qword [rsp + 0xb0], 0
mov qword [rsp + 0xb8], 0xf
mov byte [rsp + 0xa0], 0
movaps xmmword [rsp + 0x80], xmm0
mov qword [rsp + 0x90], 0
mov qword [rsp + 0x98], 0xf
mov byte [rsp + 0x80], 0
lea rbx, [rsp + 0x1f0]
mov ecx, 0x104
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
mov rcx, rbx
call fcn.1800bb560
mov rsi, rax
lea r15, [rsp + 0x40]
mov qword [rsp + 0x38], r15
mov rax, qword [rsp + 0x38]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x28], rax
mov eax, 0x93c3f964
mov r12d, 0x6a6a9154
mov ebp, 0x13e800cf
nop dword [rax]
cmp eax, 0x13e800ce
jle 0x1800a2c20
cmp eax, 0x13e800cf
je 0x1800a2c40
cmp eax, 0x761d6313
jne 0x1800a2c00
jmp 0x1800a2ce4
cmp eax, 0x8e2a208c
je 0x1800a2c55
cmp eax, 0x93c3f964
jne 0x1800a2c00
mov rax, qword [rsp + 0x28]
cmp rax, rsi
mov eax, 0x8e2a208c
cmovb eax, ebp
jmp 0x1800a2c00
mov rcx, r15
mov rdx, rsi
mov r9, rbx
call fcn.18003ace0
mov eax, 0x761d6313
jmp 0x1800a2c00
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x30], rax
mov rcx, qword [rsp + 0x30]
mov qword [rsp + 0xe0], rcx
mov ecx, 0x3f352d1
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp ecx, 0x6a6a9154
je 0x1800a2cb0
cmp ecx, 0xd71aa07
je 0x1800a2cbf
cmp ecx, 0x3f352d1
jne 0x1800a2c80
cmp qword [rax + 0x18], 0xf
mov ecx, 0xd71aa07
cmova ecx, r12d
mov rdi, qword [rsp + 0xe0]
jmp 0x1800a2c80
mov rcx, qword [rsp + 0x30]
mov rdi, qword [rcx]
mov ecx, 0xd71aa07
jmp 0x1800a2c80
mov rax, qword [rsp + 0x38]
mov qword [rax + 0x10], rsi
mov rcx, rdi
mov rdx, rbx
mov r8, rsi
call fcn.1800cf7d0
mov byte [rdi + rsi], 0
mov eax, 0x761d6313
jmp 0x1800a2c00
call qword [sym.imp.KERNEL32.dll_GetTickCount]
lea rsi, [rsp + 0xe0]
mov ecx, eax
mov rdx, rsi
mov r8d, 0xa
call fcn.1800a2870
mov rcx, r15
mov rdx, rsi
call fcn.1800a6a70
mov qword [rsp + 0x28], r15
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0x30], rax
cmp qword [rsp + 0x58], 0xf
mov ecx, 0x89a1d4dd
mov eax, 0x83f52cff
cmova eax, ecx
mov edx, 0x723e1c9a
nop word cs:[rax + rax]
nop
cmp edx, 0x83f52cff
je 0x1800a2d70
cmp edx, 0x89a1d4dd
je 0x1800a2d61
cmp edx, 0x723e1c9a
jne 0x1800a2d40
mov rcx, qword [rsp + 0x30]
mov edx, eax
jmp 0x1800a2d40
mov rcx, qword [rsp + 0x28]
mov rcx, qword [rcx]
mov edx, 0x83f52cff
jmp 0x1800a2d40
lea rdx, [rsp + 0xc0]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea rdi, [rsp + 0x60]
lea rdx, [rsp + 0x40]
mov rcx, rdi
call fcn.1800a3030
lea rdx, str....._
mov rcx, rdi
call fcn.1800a6a70
mov qword [rsp + 0x28], rdi
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0x30], rax
cmp qword [rsp + 0x78], 0xf
mov ecx, 0x89a1d4dd
mov eax, 0x83f52cff
cmova eax, ecx
mov edx, 0x723e1c9a
nop word cs:[rax + rax]
cmp edx, 0x83f52cff
je 0x1800a2e00
cmp edx, 0x89a1d4dd
je 0x1800a2df1
cmp edx, 0x723e1c9a
jne 0x1800a2dd0
mov rcx, qword [rsp + 0x30]
mov edx, eax
jmp 0x1800a2dd0
mov rcx, qword [rsp + 0x28]
mov rcx, qword [rcx]
mov edx, 0x83f52cff
jmp 0x1800a2dd0
lea rdx, [rsp + 0xc0]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea rsi, [rsp + 0xa0]
lea rdx, [rsp + 0x40]
mov rcx, rsi
call fcn.1800a3030
lea rdx, str.....TemporaryFile
mov rcx, rsi
call fcn.1800a6a70
mov qword [rsp + 0x28], rsi
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0x30], rax
cmp qword [rsp + 0xb8], 0xf
mov ecx, 0x89a1d4dd
mov eax, 0x83f52cff
cmova eax, ecx
mov ecx, 0x723e1c9a
nop dword [rax]
cmp ecx, 0x83f52cff
je 0x1800a2e90
cmp ecx, 0x89a1d4dd
je 0x1800a2e81
cmp ecx, 0x723e1c9a
jne 0x1800a2e60
mov rdx, qword [rsp + 0x30]
mov ecx, eax
jmp 0x1800a2e60
mov rcx, qword [rsp + 0x28]
mov rdx, qword [rcx]
mov ecx, 0x83f52cff
jmp 0x1800a2e60
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_MoveFileA]
lea rbx, [rsp + 0x80]
lea rsi, [rsp + 0x40]
mov rcx, rbx
mov rdx, rsi
call fcn.1800a3030
lea rdx, str.TemporaryFile
mov rcx, rbx
call fcn.1800a6a70
mov qword [rsp + 0x28], rbx
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0x30], rax
cmp qword [rsp + 0x98], 0xf
mov ecx, 0x89a1d4dd
mov eax, 0x83f52cff
cmova eax, ecx
mov ecx, 0x723e1c9a
nop word [rax + rax]
cmp ecx, 0x83f52cff
je 0x1800a2f20
cmp ecx, 0x89a1d4dd
je 0x1800a2f11
cmp ecx, 0x723e1c9a
jne 0x1800a2ef0
mov rdx, qword [rsp + 0x30]
mov ecx, eax
jmp 0x1800a2ef0
mov rcx, qword [rsp + 0x28]
mov rdx, qword [rcx]
mov ecx, 0x83f52cff
jmp 0x1800a2ef0
mov qword [rsp + 0x28], rdi
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0x30], rax
cmp qword [rsp + 0x78], 0xf
mov eax, 0x89a1d4dd
mov ebp, 0x83f52cff
cmova ebp, eax
mov eax, 0x723e1c9a
nop word [rax + rax]
cmp eax, 0x83f52cff
je 0x1800a2f7d
cmp eax, 0x89a1d4dd
je 0x1800a2f6e
cmp eax, 0x723e1c9a
jne 0x1800a2f50
mov rcx, qword [rsp + 0x30]
mov eax, ebp
jmp 0x1800a2f50
mov rax, qword [rsp + 0x28]
mov rcx, qword [rax]
mov eax, 0x83f52cff
jmp 0x1800a2f50
call qword [sym.imp.KERNEL32.dll_MoveFileA]
mov qword [rsp + 0x28], rsi
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0x30], rax
cmp qword [rsp + 0x58], 0xf
mov ecx, 0x89a1d4dd
mov eax, 0x83f52cff
cmova eax, ecx
mov edx, 0x723e1c9a
nop word [rax + rax]
cmp edx, 0x83f52cff
je 0x1800a2fe0
cmp edx, 0x89a1d4dd
je 0x1800a2fd1
cmp edx, 0x723e1c9a
jne 0x1800a2fb0
mov rcx, qword [rsp + 0x30]
mov edx, eax
jmp 0x1800a2fb0
mov rcx, qword [rsp + 0x28]
mov rcx, qword [rcx]
mov edx, 0x83f52cff
jmp 0x1800a2fb0
call qword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
lea rcx, [rsp + 0x80]
call section..text
lea rcx, [rsp + 0xa0]
call section..text
lea rcx, [rsp + 0x60]
call section..text
lea rcx, [rsp + 0x40]
call section..text
nop
add rsp, 0x300
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret