Function at 0x1801e0640
Capabilities:
Delete file
Get common file path
Read file on windows
Write file on windows

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
mov eax, 0x24b8
call fcn.1801907a0
sub rsp, rax
mov qword [rsp + 0x80], 0xfffffffffffffffe
mov dword [rsp + 0x44], 0
lea rcx, [rsp + 0x60]
call fcn.180073cf0
nop
cmp qword [rsp + 0x24d0], 0
je 0x1801e069f
mov rdx, qword [rsp + 0x24d0]
lea rcx, [rsp + 0x60]
call fcn.1800aac90
jmp 0x1801e06fd
lea rdx, [rsp + 0x90]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
mov dword [rsp + 0x4c], eax
cmp dword [rsp + 0x4c], 0
je 0x1801e06fd
cmp dword [rsp + 0x4c], 0xf4
ja 0x1801e06fd
lea r9, [rsp + 0x2a0]
xor r8d, r8d
lea rdx, [0x180326948]
lea rcx, [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_GetTempFileNameW]
test eax, eax
je 0x1801e06fd
lea rdx, [rsp + 0x2a0]
lea rcx, [rsp + 0x60]
call fcn.1800aac90
cmp qword [rsp + 0x24c8], 0
je 0x1801e0913
cmp qword [rsp + 0x24c8], 0xffffffffffffffff
je 0x1801e0913
lea rcx, [rsp + 0x60]
call fcn.1800738f0
movzx eax, al
test eax, eax
jne 0x1801e0913
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x24c8]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp qword [0x1803cb4d0], 0
je 0x1801e0791
lea rcx, [rsp + 0x60]
call fcn.180074060
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
mov rcx, rax
call qword [0x1803cb4d0]
mov qword [rsp + 0x58], rax
jmp 0x1801e07d0
lea rcx, [rsp + 0x60]
call fcn.180074060
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov r8d, 1
mov edx, 0x40000000
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x50], rax
cmp qword [rsp + 0x50], 0
je 0x1801e0913
cmp qword [rsp + 0x50], 0xffffffffffffffff
je 0x1801e0913
mov byte [rsp + 0x40], 0
xor eax, eax
cmp eax, 1
je 0x1801e0874
mov dword [rsp + 0x48], 0
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x48]
mov r8d, 0x2000
lea rdx, [rsp + 0x4b0]
mov rcx, qword [rsp + 0x24c8]
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x1801e0836
jmp 0x1801e0874
cmp dword [rsp + 0x48], 0
jbe 0x1801e086b
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x48]
mov r8d, dword [rsp + 0x48]
lea rdx, [rsp + 0x4b0]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x1801e0869
jmp 0x1801e0874
jmp 0x1801e0872
mov byte [rsp + 0x40], 1
jmp 0x1801e0874
jmp 0x1801e07f7
cmp qword [rsp + 0x24d8], 0
je 0x1801e08b0
mov rax, qword [rsp + 0x24d8]
add rax, 0x10
mov rcx, qword [rsp + 0x24d8]
add rcx, 8
mov rdx, qword [rsp + 0x24d8]
mov r9, rax
mov r8, rcx
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_SetFileTime]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movzx eax, byte [rsp + 0x40]
test eax, eax
je 0x1801e08f5
lea rdx, [rsp + 0x60]
mov rcx, qword [rsp + 0x24c0]
call fcn.180073d90
mov eax, dword [rsp + 0x44]
or eax, 1
mov dword [rsp + 0x44], eax
lea rcx, [rsp + 0x60]
call fcn.180073fc0
mov rax, qword [rsp + 0x24c0]
jmp 0x1801e093d
cmp qword [rsp + 0x24d0], 0
jne 0x1801e0913
lea rcx, [rsp + 0x60]
call fcn.180074060
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rcx, qword [rsp + 0x24c0]
call fcn.180073cf0
mov eax, dword [rsp + 0x44]
or eax, 1
mov dword [rsp + 0x44], eax
lea rcx, [rsp + 0x60]
call fcn.180073fc0
mov rax, qword [rsp + 0x24c0]
add rsp, 0x24b8
ret