Function at 0x140002a40
Capabilities:
Check if file exists
Copy file
Delete file
Get common file path
Read file via mapping
Write file on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x618]
sub rsp, 0x718
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x600], rax
mov rsi, r8
mov r15, rdx
mov edi, ecx
mov r8, r9
mov edx, 0x104
lea rcx, [rbp - 0x30]
mov rbx, r9
call fcn.1400178b8
lea rcx, [rbp - 0x30]
call qword [sym.imp.SHLWAPI.dll_PathRemoveExtensionW]
lea r8, str..prev
mov edx, 0x104
lea rcx, [rbp - 0x30]
call fcn.140017920
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
lea rcx, [rbp - 0x30]
mov r14d, eax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test r14d, r14d
jne 0x140002ac5
test eax, eax
je 0x140002b08
jmp 0x140002ac9
test eax, eax
je 0x140002aeb
lea rcx, [rbp - 0x30]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x140002ae6
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 2
jne 0x140002b89
test r14d, r14d
je 0x140002b08
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x140002b08
mov rcx, rbx
call fcn.140002910
test eax, eax
je 0x140002b89
test rsi, rsi
jne 0x140002b3f
test edi, edi
je 0x140002b43
mov r8d, 0x104
lea rdx, [rbp + 0x1e0]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xor r8d, r8d
lea rcx, [rbp + 0x1e0]
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_CopyFileW]
jmp 0x140002de9
test edi, edi
jne 0x140002b4d
mov eax, 1
jmp 0x140002de9
xorps xmm0, xmm0
lea rdx, [rsp + 0x60]
xor eax, eax
xor edi, edi
xor r9d, r9d
mov qword [rbp - 0x50], rax
xor r8d, r8d
mov dword [rsp + 0x20], edi
mov rcx, rsi
movups xmmword [rsp + 0x60], xmm0
movups xmmword [rsp + 0x70], xmm0
movups xmmword [rbp - 0x80], xmm0
movups xmmword [rbp - 0x70], xmm0
movups xmmword [rbp - 0x60], xmm0
call fcn.140007690
test eax, eax
je 0x140002b90
xor eax, eax
jmp 0x140002de9
mov r14, qword [rbp - 0x80]
mov rcx, r14
call fcn.1400186c4
mov r15, rax
test rax, rax
je 0x140002de7
mov r8d, r14d
mov rdx, rax
mov rcx, rsi
call fcn.140008ae0
cmp eax, r14d
jne 0x140002ddf
mov qword [rsp + 0x30], rdi
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
xor r8d, r8d
mov edx, 0x40000000
mov dword [rsp + 0x20], 2
mov rcx, rbx
mov qword [rsp + 0x750], r12
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r12, rax
test rax, rax
je 0x140002dd7
mov edx, 0x104
mov dword [rsp + 0x50], edi
lea rcx, [rbp + 0x3f0]
mov esi, edi
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
test eax, eax
je 0x140002dad
lea r8, [0x140033ac8]
mov edx, 0x104
lea rcx, [rbp + 0x3f0]
call fcn.140017920
lea rdx, [rbp + 0x3f0]
sub rdx, rbx
nop
movzx ecx, word [rbx]
movzx eax, word [rbx + rdx]
sub ecx, eax
jne 0x140002c53
add rbx, 2
test eax, eax
jne 0x140002c40
test ecx, ecx
jne 0x140002dad
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov r8d, 0x104
lea rdx, [rbp + 0x1e0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov qword [rsp + 0x30], rdi
lea rcx, [rbp + 0x1e0]
mov dword [rsp + 0x28], 0x80
xor r9d, r9d
mov edx, 0x80000000
mov dword [rsp + 0x20], 3
mov r8d, 1
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140002d6b
mov qword [rsp + 0x28], rdi
xor r9d, r9d
xor edx, edx
mov dword [rsp + 0x20], edi
mov r8d, 2
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov rsi, rax
test rax, rax
jne 0x140002ce9
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140002d6b
xor r9d, r9d
mov qword [rsp + 0x710], r13
xor r8d, r8d
mov qword [rsp + 0x20], rdi
mov edx, 4
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov r13, rax
test rax, rax
je 0x140002d51
add rax, 0x4e
je 0x140002d2b
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x70], xmm1
jmp 0x140002d48
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
movups xmmword [rsp + 0x70], xmm0
call fcn.1400182cc
mov dword [rax], 0x16
call fcn.140017d1c
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r13, qword [rsp + 0x710]
lea r9, [rsp + 0x50]
mov qword [rsp + 0x20], rdi
mov r8d, 0x4e
mov rdx, r15
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov esi, dword [rsp + 0x50]
lea r9, [rsp + 0x50]
mov r8d, 0x20
mov qword [rsp + 0x20], rdi
lea rdx, [rsp + 0x60]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
add esi, dword [rsp + 0x50]
sub r14d, esi
movsxd rdx, esi
add rdx, r15
mov qword [rsp + 0x20], rdi
mov r8d, r14d
lea r9, [rsp + 0x50]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, r12
mov edi, eax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r12, qword [rsp + 0x750]
mov rcx, r15
call fcn.1400182ec
mov eax, edi
mov rcx, qword [rbp + 0x600]
xor rcx, rsp
call fcn.140008df0
add rsp, 0x718
pop r15
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret