Function at 0x1400022d0
Capabilities:
Check if file exists
Copy file
Delete file
Get common file path
Read file via mapping
Write file on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x618]
sub rsp, 0x718
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x600], rax
mov rsi, r8
mov r15, rdx
mov edi, ecx
mov r8, r9
mov edx, 0x104
lea rcx, [rbp - 0x30]
mov rbx, r9
call fcn.1400160d0
lea rcx, [rbp - 0x30]
call qword [sym.imp.SHLWAPI.dll_PathRemoveExtensionW]
lea r8, str..prev
mov edx, 0x104
lea rcx, [rbp - 0x30]
call fcn.14001506c
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
lea rcx, [rbp - 0x30]
mov r14d, eax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test r14d, r14d
jne 0x140002355
test eax, eax
je 0x140002398
jmp 0x140002359
test eax, eax
je 0x14000237b
lea rcx, [rbp - 0x30]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x140002376
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 2
jne 0x140002419
test r14d, r14d
je 0x140002398
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x140002398
mov rcx, rbx
call fcn.1400021a0
test eax, eax
je 0x140002419
test rsi, rsi
jne 0x1400023cf
test edi, edi
je 0x1400023d3
mov r8d, 0x104
lea rdx, [rbp + 0x1e0]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xor r8d, r8d
lea rcx, [rbp + 0x1e0]
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_CopyFileW]
jmp 0x140002679
test edi, edi
jne 0x1400023dd
mov eax, 1
jmp 0x140002679
xorps xmm0, xmm0
lea rdx, [rsp + 0x60]
xor eax, eax
xor edi, edi
xor r9d, r9d
mov qword [rbp - 0x50], rax
xor r8d, r8d
mov dword [rsp + 0x20], edi
mov rcx, rsi
movups xmmword [rsp + 0x60], xmm0
movups xmmword [rsp + 0x70], xmm0
movups xmmword [rbp - 0x80], xmm0
movups xmmword [rbp - 0x70], xmm0
movups xmmword [rbp - 0x60], xmm0
call fcn.140006f60
test eax, eax
je 0x140002420
xor eax, eax
jmp 0x140002679
mov r14, qword [rbp - 0x80]
mov rcx, r14
call fcn.1400159ec
mov r15, rax
test rax, rax
je 0x140002677
mov r8d, r14d
mov rdx, rax
mov rcx, rsi
call fcn.1400083b0
cmp eax, r14d
jne 0x14000266f
mov qword [rsp + 0x30], rdi
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
xor r8d, r8d
mov edx, 0x40000000
mov dword [rsp + 0x20], 2
mov rcx, rbx
mov qword [rsp + 0x750], r12
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r12, rax
test rax, rax
je 0x140002667
mov edx, 0x104
mov dword [rsp + 0x50], edi
lea rcx, [rbp + 0x3f0]
mov esi, edi
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
test eax, eax
je 0x14000263d
lea r8, [0x140030960]
mov edx, 0x104
lea rcx, [rbp + 0x3f0]
call fcn.14001506c
lea rdx, [rbp + 0x3f0]
sub rdx, rbx
nop
movzx ecx, word [rbx]
movzx eax, word [rbx + rdx]
sub ecx, eax
jne 0x1400024e3
add rbx, 2
test eax, eax
jne 0x1400024d0
test ecx, ecx
jne 0x14000263d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov r8d, 0x104
lea rdx, [rbp + 0x1e0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov qword [rsp + 0x30], rdi
lea rcx, [rbp + 0x1e0]
mov dword [rsp + 0x28], 0x80
xor r9d, r9d
mov edx, 0x80000000
mov dword [rsp + 0x20], 3
mov r8d, 1
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1400025fb
mov qword [rsp + 0x28], rdi
xor r9d, r9d
xor edx, edx
mov dword [rsp + 0x20], edi
mov r8d, 2
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov rsi, rax
test rax, rax
jne 0x140002579
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400025fb
xor r9d, r9d
mov qword [rsp + 0x710], r13
xor r8d, r8d
mov qword [rsp + 0x20], rdi
mov edx, 4
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov r13, rax
test rax, rax
je 0x1400025e1
add rax, 0x4e
je 0x1400025bb
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x70], xmm1
jmp 0x1400025d8
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
movups xmmword [rsp + 0x70], xmm0
call fcn.1400159b8
mov dword [rax], 0x16
call fcn.140015468
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r13, qword [rsp + 0x710]
lea r9, [rsp + 0x50]
mov qword [rsp + 0x20], rdi
mov r8d, 0x4e
mov rdx, r15
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov esi, dword [rsp + 0x50]
lea r9, [rsp + 0x50]
mov r8d, 0x20
mov qword [rsp + 0x20], rdi
lea rdx, [rsp + 0x60]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
add esi, dword [rsp + 0x50]
sub r14d, esi
movsxd rdx, esi
add rdx, r15
mov qword [rsp + 0x20], rdi
mov r8d, r14d
lea r9, [rsp + 0x50]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, r12
mov edi, eax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r12, qword [rsp + 0x750]
mov rcx, r15
call fcn.1400159d8
mov eax, edi
mov rcx, qword [rbp + 0x600]
xor rcx, rsp
call fcn.1400086c0
add rsp, 0x718
pop r15
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret