Function at 0x140002520
Capabilities:
Check if file exists
Copy file
Delete file
Get common file path
Read file via mapping
Write file on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x618]
sub rsp, 0x718
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x600], rax
mov rsi, r8
mov r15, rdx
mov edi, ecx
mov r8, r9
mov edx, 0x104
lea rcx, [rbp - 0x30]
mov rbx, r9
call fcn.1400152ac
lea rcx, [rbp - 0x30]
call qword [sym.imp.SHLWAPI.dll_PathRemoveExtensionW]
lea r8, str..prev
mov edx, 0x104
lea rcx, [rbp - 0x30]
call fcn.140015314
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
lea rcx, [rbp - 0x30]
mov r14d, eax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test r14d, r14d
jne 0x1400025a5
test eax, eax
je 0x1400025e8
jmp 0x1400025a9
test eax, eax
je 0x1400025cb
lea rcx, [rbp - 0x30]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x1400025c6
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 2
jne 0x140002669
test r14d, r14d
je 0x1400025e8
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x1400025e8
mov rcx, rbx
call fcn.1400023f0
test eax, eax
je 0x140002669
test rsi, rsi
jne 0x14000261f
test edi, edi
je 0x140002623
mov r8d, 0x104
lea rdx, [rbp + 0x1e0]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xor r8d, r8d
lea rcx, [rbp + 0x1e0]
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_CopyFileW]
jmp 0x1400028c9
test edi, edi
jne 0x14000262d
mov eax, 1
jmp 0x1400028c9
xorps xmm0, xmm0
lea rdx, [rsp + 0x60]
xor eax, eax
xor edi, edi
xor r9d, r9d
mov qword [rbp - 0x50], rax
xor r8d, r8d
mov dword [rsp + 0x20], edi
mov rcx, rsi
movups xmmword [rsp + 0x60], xmm0
movups xmmword [rsp + 0x70], xmm0
movups xmmword [rbp - 0x80], xmm0
movups xmmword [rbp - 0x70], xmm0
movups xmmword [rbp - 0x60], xmm0
call fcn.1400071b0
test eax, eax
je 0x140002670
xor eax, eax
jmp 0x1400028c9
mov r14, qword [rbp - 0x80]
mov rcx, r14
call fcn.140015cf4
mov r15, rax
test rax, rax
je 0x1400028c7
mov r8d, r14d
mov rdx, rax
mov rcx, rsi
call fcn.140008600
cmp eax, r14d
jne 0x1400028bf
mov qword [rsp + 0x30], rdi
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
xor r8d, r8d
mov edx, 0x40000000
mov dword [rsp + 0x20], 2
mov rcx, rbx
mov qword [rsp + 0x750], r12
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r12, rax
test rax, rax
je 0x1400028b7
mov edx, 0x104
mov dword [rsp + 0x50], edi
lea rcx, [rbp + 0x3f0]
mov esi, edi
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
test eax, eax
je 0x14000288d
lea r8, [0x1400319d0]
mov edx, 0x104
lea rcx, [rbp + 0x3f0]
call fcn.140015314
lea rdx, [rbp + 0x3f0]
sub rdx, rbx
nop
movzx ecx, word [rbx]
movzx eax, word [rbx + rdx]
sub ecx, eax
jne 0x140002733
add rbx, 2
test eax, eax
jne 0x140002720
test ecx, ecx
jne 0x14000288d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov r8d, 0x104
lea rdx, [rbp + 0x1e0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov qword [rsp + 0x30], rdi
lea rcx, [rbp + 0x1e0]
mov dword [rsp + 0x28], 0x80
xor r9d, r9d
mov edx, 0x80000000
mov dword [rsp + 0x20], 3
mov r8d, 1
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x14000284b
mov qword [rsp + 0x28], rdi
xor r9d, r9d
xor edx, edx
mov dword [rsp + 0x20], edi
mov r8d, 2
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov rsi, rax
test rax, rax
jne 0x1400027c9
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14000284b
xor r9d, r9d
mov qword [rsp + 0x710], r13
xor r8d, r8d
mov qword [rsp + 0x20], rdi
mov edx, 4
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov r13, rax
test rax, rax
je 0x140002831
add rax, 0x4e
je 0x14000280b
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x70], xmm1
jmp 0x140002828
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
movups xmmword [rsp + 0x70], xmm0
call fcn.140015cc0
mov dword [rax], 0x16
call fcn.140015710
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r13, qword [rsp + 0x710]
lea r9, [rsp + 0x50]
mov qword [rsp + 0x20], rdi
mov r8d, 0x4e
mov rdx, r15
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov esi, dword [rsp + 0x50]
lea r9, [rsp + 0x50]
mov r8d, 0x20
mov qword [rsp + 0x20], rdi
lea rdx, [rsp + 0x60]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
add esi, dword [rsp + 0x50]
sub r14d, esi
movsxd rdx, esi
add rdx, r15
mov qword [rsp + 0x20], rdi
mov r8d, r14d
lea r9, [rsp + 0x50]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, r12
mov edi, eax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r12, qword [rsp + 0x750]
mov rcx, r15
call fcn.140015ce0
mov eax, edi
mov rcx, qword [rbp + 0x600]
xor rcx, rsp
call fcn.140008910
add rsp, 0x718
pop r15
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret