Function at 0x1400a40a0
Capabilities:
Check if file exists
Copy file
Create directory
Get disk size
Get file attributes
Move file
Read file on windows
Write file on windows

Disassembly:
mov r11, rsp
push rbp
push rsi
push r14
lea rbp, [r11 - 0xc8]
sub rsp, 0x1b0
lea rsi, [rcx - 0x120]
mov r14, rcx
mov eax, dword [rsi + 0x70]
dec eax
cmp eax, 0x21
ja case.default.0x1400a40f4
mov qword [r11 - 0x20], rbx
lea rcx, [0x140000000]
mov qword [r11 - 0x28], rdi
mov qword [r11 - 0x30], r12
mov qword [r11 - 0x38], r13
cdqe
mov qword [r11 - 0x40], r15
mov edx, dword [rcx + rax*4 + 0xa4bf0]
add rdx, rcx
jmp rdx
mov rcx, rsi
call fcn.1400a1720
jmp 0x1400a4ba9
mov rcx, rsi
call fcn.1400a1b30
jmp 0x1400a4ba9
mov rcx, rsi
call fcn.1400a1f60
jmp 0x1400a4ba9
mov ebx, dword [rsi + 0x150]
mov r14, qword [rsi + 0x180]
cmp ebx, 0xffffffff
jne 0x1400a4145
mov rdi, 0xfffffffffffff00d
mov dword [rsi + 0x14c], 6
jmp 0x1400a4ba2
xor edi, edi
mov ecx, ebx
mov dword [rbp + 0xd0], edi
call fcn.1400f4fb8
mov r15, rax
cmp rax, 0xffffffffffffffff
jne 0x1400a417e
lea ecx, [rdi + 6]
mov dword [rsi + 0x14c], 6
call fcn.1400ae540
movsxd rcx, eax
mov qword [rsi + 0x88], rcx
jmp 0x1400a4ba9
lea rdx, [rsp + 0x60]
mov ecx, ebx
call fcn.1400a0d90
test eax, eax
je 0x1400a41a3
lea r8, [rsp + 0x60]
mov rdx, r15
mov rcx, rsi
call fcn.1400a2150
jmp 0x1400a4ba9
cmp r14, 0xffffffffffffffff
je 0x1400a41eb
xor eax, eax
lea r8, [rbp + 0xe0]
mov rdx, rdi
mov qword [rsp + 0x40], rax
mov rcx, r15
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rax
lea r13, [rsp + 0x40]
lea r9d, [rax + 1]
mov qword [rsp + 0x58], rax
call qword [sym.imp.KERNEL32.DLL_SetFilePointerEx]
test eax, eax
je 0x1400a41ee
mov dword [rbp + 0xd0], 1
jmp 0x1400a41ee
mov r13, rdi
mov ebx, edi
cmp r14, 0xffffffffffffffff
je 0x1400a4207
mov eax, ebx
add rax, r14
mov dword [rsp + 0x50], eax
shr rax, 0x20
mov dword [rsp + 0x54], eax
mov rdx, qword [rsi + 0x178]
lea r9, [rbp + 0xd8]
mov eax, edi
mov rcx, r15
add rax, rax
mov qword [rsp + 0x20], r13
mov r8d, dword [rdx + rax*8]
mov rdx, qword [rdx + rax*8 + 8]
call qword [sym.imp.KERNEL32.DLL_WriteFile]
add ebx, dword [rbp + 0xd8]
inc edi
mov r12d, eax
test eax, eax
je 0x1400a4248
cmp edi, dword [rsi + 0x170]
jb 0x1400a41f0
cmp dword [rbp + 0xd0], 0
je 0x1400a4267
mov rdx, qword [rbp + 0xe0]
xor r9d, r9d
xor r8d, r8d
mov rcx, r15
call qword [sym.imp.KERNEL32.DLL_SetFilePointerEx]
test r12d, r12d
jne 0x1400a4274
test ebx, ebx
je 0x1400a4b16
mov eax, ebx
mov qword [rsi + 0x88], rax
jmp 0x1400a4ba9
mov r8d, dword [rsi + 0x168]
test r8b, 4
je 0x1400a42a9
mov qword [rsi + 0x88], 0xfffffffffffff02a
mov dword [rsi + 0x14c], gethostname
jmp 0x1400a4ba9
mov rdx, qword [rsi + 0x160]
and r8d, 1
mov rcx, qword [rsi + 0x150]
call qword [sym.imp.KERNEL32.DLL_CopyFileW]
xor edi, edi
test eax, eax
jne 0x1400a4ba2
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov ecx, eax
mov dword [rsi + 0x14c], eax
call fcn.1400ae540
movsxd rcx, eax
mov qword [rsi + 0x88], rcx
cmp rcx, 0xfffffffffffff00e
jne 0x1400a4ba9
mov rcx, qword [rsi + 0x150]
lea r8d, [rdi + 7]
mov qword [rsp + 0x30], rdi
xor r9d, r9d
mov dword [rsp + 0x28], 0x2000000
mov edx, 0x80
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.DLL_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
jne 0x1400a4336
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov ebx, eax
jmp 0x1400a4355
xor r8d, r8d
lea rdx, [rbp]
mov rcx, r14
call fcn.1400a31b0
test eax, eax
je 0x1400a4353
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov ebx, eax
jmp 0x1400a4355
mov ebx, edi
mov rcx, r14
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
test ebx, ebx
jne 0x1400a4ba9
mov rcx, qword [rsi + 0x160]
lea r8d, [rbx + 7]
mov qword [rsp + 0x30], rdi
xor r9d, r9d
mov dword [rsp + 0x28], 0x2000000
mov edx, 0x80
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.DLL_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
jne 0x1400a43a7
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov ebx, eax
jmp 0x1400a43c6
xor r8d, r8d
lea rdx, [rbp - 0x80]
mov rcx, r14
call fcn.1400a31b0
test eax, eax
je 0x1400a43c4
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov ebx, eax
jmp 0x1400a43c6
mov ebx, edi
mov rcx, r14
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
test ebx, ebx
jne 0x1400a4ba9
mov rax, qword [rbp - 0x80]
cmp qword [rbp], rax
jne 0x1400a4ba9
mov rax, qword [rbp - 0x50]
cmp qword [rbp + 0x30], rax
jne 0x1400a4ba9
jmp 0x1400a4ba2
mov ebx, dword [rsi + 0x188]
mov r14d, 0x10000
mov eax, dword [rsi + 0x16c]
cmp rbx, r14
mov r13d, dword [rsi + 0x150]
mov r12, qword [rsi + 0x180]
cmovb r14d, ebx
xor edi, edi
mov dword [rbp + 0xd0], eax
test r14, r14
je 0x1400a4bdd
mov ecx, r14d
call qword [fcn.1400edbe8]
mov r15, rax
test rax, rax
je 0x1400a4bdd
cmp r12, 0xffffffffffffffff
je 0x1400a445f
xor r8d, r8d
mov rdx, r12
mov ecx, r13d
call fcn.1400f53e8
cmp rax, 0xffffffffffffffff
je 0x1400a44b0
test rbx, rbx
je 0x1400a44b7
mov r12d, dword [rbp + 0xd0]
nop dword [rax + rax]
mov r8d, r14d
cmp rbx, r14
mov rdx, r15
mov ecx, r13d
cmovb r8d, ebx
call fcn.1400f597c
test eax, eax
je 0x1400a44b7
cmp eax, 0xffffffff
je 0x1400a44b0
movsxd rcx, eax
mov r8d, eax
sub rbx, rcx
mov rdx, r15
mov ecx, r12d
call fcn.1400f66b8
cmp eax, 0xffffffff
je 0x1400a44b0
add edi, eax
test rbx, rbx
jne 0x1400a4470
jmp 0x1400a44b7
mov rdi, 0xffffffffffffffff
call fcn.1400f51e4
mov rcx, r15
mov ebx, dword [rax]
call qword [fcn.1400ed908]
call fcn.1400f51e4
mov dword [rax], ebx
movsxd rax, edi
mov qword [rsi + 0x88], rax
cmp rax, 0xffffffffffffffff
jmp 0x1400a4900
mov rcx, qword [rsi + 0x150]
mov rax, 0xffffffffffffffff
nop
inc rax
cmp word [rcx + rax*2], 0
jne 0x1400a44f0
xor edi, edi
mov r10, rcx
cmp rax, 1
jbe 0x1400a452a
cmp word [rcx + rax*2 - 4], 0x3a
je 0x1400a452a
movzx edx, word [rcx + rax*2 - 2]
cmp dx, 0x5c
je 0x1400a451e
cmp dx, 0x2f
jne 0x1400a452a
mov word [rcx + rax*2 - 2], di
mov r10, qword [rsi + 0x150]
xor r9d, r9d
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x2000000
mov edx, 0x80
mov rcx, r10
mov dword [rsp + 0x20], 3
lea r8d, [r9 + 7]
call qword [sym.imp.KERNEL32.DLL_CreateFileW]
mov r15, rax
cmp rax, 0xffffffffffffffff
jne 0x1400a456b
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov ebx, eax
add r14, 0xffffffffffffff80
jmp 0x1400a4590
lea r14, [rsi + 0xa0]
xor r8d, r8d
mov rdx, r14
mov rcx, r15
call fcn.1400a31b0
test eax, eax
je 0x1400a458e
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov ebx, eax
jmp 0x1400a4590
mov ebx, edi
mov rcx, r15
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
test ebx, ebx
je 0x1400a45b2
mov ecx, ebx
mov dword [rsi + 0x14c], ebx
call fcn.1400ae540
movsxd rdi, eax
jmp 0x1400a4ba2
mov qword [rsi + 0x90], r14
jmp 0x1400a4ba2
mov rcx, qword [rsi + 0x150]
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x1400a45d0
xor edi, edi
mov r10, rcx
cmp rax, 1
jbe 0x1400a460a
cmp word [rcx + rax*2 - 4], 0x3a
je 0x1400a460a
movzx edx, word [rcx + rax*2 - 2]
cmp dx, 0x5c
je 0x1400a45fe
cmp dx, 0x2f
jne 0x1400a460a
mov word [rcx + rax*2 - 2], di
mov r10, qword [rsi + 0x150]
xor r9d, r9d
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x2200000
mov edx, 0x80
mov rcx, r10
mov dword [rsp + 0x20], 3
lea r8d, [r9 + 7]
call qword [sym.imp.KERNEL32.DLL_CreateFileW]
mov r15, rax
cmp rax, 0xffffffffffffffff
jne 0x1400a464b
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov ebx, eax
add r14, 0xffffffffffffff80
jmp 0x1400a4673
lea r14, [rsi + 0xa0]
mov r8d, 1
mov rdx, r14
mov rcx, r15
call fcn.1400a31b0
test eax, eax
je 0x1400a4671
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov ebx, eax
jmp 0x1400a4673
mov ebx, edi
mov rcx, r15
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
test ebx, ebx
je 0x1400a45b2
cmp ebx, 0x5b8
je 0x1400a46b0
cmp ebx, 0x1126
je 0x1400a46b0
mov ecx, ebx
mov dword [rsi + 0x14c], ebx
call fcn.1400ae540
movsxd rcx, eax
mov qword [rsi + 0x88], rcx
jmp 0x1400a4ba9
xor edx, edx
mov rcx, rsi
call fcn.1400a34c0
jmp 0x1400a4ba9
mov ecx, dword [rsi + 0x150]
cmp ecx, 0xffffffff
jne 0x1400a46e0
mov dword [rsi + 0x14c], 6
mov rdi, 0xfffffffffffff00d
jmp 0x1400a4ba2
call fcn.1400f4fb8
cmp rax, 0xffffffffffffffff
jne 0x1400a4707
mov ecx, 6
mov dword [rsi + 0x14c], 6
call fcn.1400ae540
movsxd rdi, eax
jmp 0x1400a4ba2
lea rbx, [rsi + 0xa0]
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call fcn.1400a31b0
test eax, eax
je 0x1400a473b
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov ecx, eax
mov dword [rsi + 0x14c], eax
call fcn.1400ae540
movsxd rdi, eax
jmp 0x1400a4ba2
mov qword [rsi + 0x90], rbx
xor edi, edi
jmp 0x1400a4ba2
mov rcx, rsi
call fcn.1400a35f0
jmp 0x1400a4ba9
mov rcx, qword [rsi + 0x150]
xor edi, edi
mov qword [rsp + 0x30], rdi
xor r9d, r9d
mov dword [rsp + 0x28], 0x2000000
mov edx, 0x100
mov dword [rsp + 0x20], 3
lea r8d, [rdi + 7]
call qword [sym.imp.KERNEL32.DLL_CreateFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1400a4b16
movsd xmm2, qword [rsi + 0x160]
mov rcx, rax
movsd xmm1, qword [rsi + 0x158]
call fcn.1400a39d0
test eax, eax
jne 0x1400a4a90
mov rcx, rbx
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
jmp 0x1400a4ba2
mov ecx, dword [rsi + 0x150]
cmp ecx, 0xffffffff
je 0x1400a46ca
call fcn.1400f4fb8
cmp rax, 0xffffffffffffffff
je 0x1400a46eb
movsd xmm2, qword [rsi + 0x160]
mov rcx, rax
movsd xmm1, qword [rsi + 0x158]
call fcn.1400a39d0
test eax, eax
je case.0x1400a40f4.26
jmp 0x1400a4720
mov rcx, qword [rsi + 0x150]
call qword [sym.imp.KERNEL32.DLL_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x1400a4838
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov ecx, eax
mov dword [rsi + 0x14c], eax
call fcn.1400ae540
movsxd rdi, eax
mov qword [r14 - 0x98], rdi
jmp 0x1400a4ba9
test byte [rsi + 0x158], 2
je 0x1400a486a
and al, 0x11
cmp al, 1
jne 0x1400a486a
mov ecx, 0xfffff030
mov dword [rsi + 0x14c], 0xfffff030
call fcn.1400ae540
movsxd rdi, eax
mov qword [r14 - 0x98], rdi
jmp 0x1400a4ba9
xor edi, edi
mov qword [r14 - 0x98], rdi
jmp 0x1400a4ba9
mov edx, dword [rsi + 0x158]
mov rcx, qword [rsi + 0x150]
call fcn.1400f6eb0
movsxd rcx, eax
mov qword [rsi + 0x88], rcx
cmp rcx, 0xffffffffffffffff
jne 0x1400a4ba9
call fcn.1400f51c4
mov ecx, dword [rax]
mov dword [rsi + 0x14c], ecx
call fcn.1400ae540
movsxd rcx, eax
mov qword [rsi + 0x88], rcx
jmp 0x1400a4ba9
mov rcx, rsi
call fcn.1400a37d0
jmp 0x1400a4ba9
mov rcx, rsi
call fcn.1400a3570
jmp 0x1400a4ba9
mov rcx, rsi
call fcn.1400a2490
jmp 0x1400a4ba9
mov rcx, qword [rsi + 0x150]
call fcn.1400f5424
movsxd rcx, eax
mov qword [rsi + 0x88], rcx
cmp rcx, 0xffffffffffffffff
jne 0x1400a4ba9
call fcn.1400f51c4
mov ecx, dword [rax]
mov dword [rsi + 0x14c], ecx
call fcn.1400ae540
movsxd rcx, eax
mov qword [rsi + 0x88], rcx
jmp 0x1400a4ba9
mov rcx, qword [rsi + 0x150]
call fcn.1400f53f8
movsxd rcx, eax
mov qword [rsi + 0x88], rcx
cmp rcx, 0xffffffffffffffff
jne 0x1400a4ba9
call fcn.1400f51c4
mov ecx, dword [rax]
mov dword [rsi + 0x14c], ecx
cmp ecx, 0x7b
jne 0x1400a496c
mov eax, 0xfffff019
cdqe
mov qword [rsi + 0x88], rax
jmp 0x1400a4ba9
call fcn.1400ae540
cdqe
mov qword [rsi + 0x88], rax
jmp 0x1400a4ba9
mov rcx, rsi
call fcn.1400a2650
jmp 0x1400a4ba9
mov rdx, qword [rsi + 0x160]
mov r8d, 1
mov rcx, qword [rsi + 0x150]
call qword [sym.imp.KERNEL32.DLL_MoveFileExW]
test eax, eax
jne case.0x1400a40f4.26
jmp 0x1400a4720
mov rcx, rsi
call fcn.1400a29e0
jmp 0x1400a4ba9
mov rcx, rsi
call fcn.1400a2fc0
jmp 0x1400a4ba9
mov rcx, rsi
call fcn.1400a2e10
jmp 0x1400a4ba9
mov rcx, qword [rsi + 0x90]
mov rcx, qword [rcx + 0x30]
call qword [sym.imp.KERNEL32.DLL_FindClose]
mov rbx, qword [rsi + 0x90]
call fcn.1400f51e4
mov rcx, rbx
mov edi, dword [rax]
call qword [fcn.1400ed908]
call fcn.1400f51e4
mov dword [rax], edi
xor edi, edi
jmp 0x1400a4ba2
mov rdx, qword [rsi + 0x150]
xor r8d, r8d
mov rcx, qword [rsi + 0x160]
call qword [sym.imp.KERNEL32.DLL_CreateHardLinkW]
test eax, eax
jne case.0x1400a40f4.26
jmp 0x1400a4720
mov rcx, rsi
call fcn.1400a3df0
jmp 0x1400a4ba9
mov rcx, qword [rsi + 0x150]
xor edi, edi
mov qword [rsp + 0x30], rdi
xor r9d, r9d
mov dword [rsp + 0x28], 0x2200000
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.DLL_CreateFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1400a4b16
lea rdx, [rsi + 0x90]
xor r8d, r8d
mov rcx, rax
call fcn.1400a14e0
test eax, eax
je 0x1400a4abb
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov ecx, eax
mov dword [rsi + 0x14c], eax
call fcn.1400ae540
movsxd rcx, eax
mov qword [rsi + 0x88], rcx
mov rcx, rbx
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
jmp 0x1400a4ba9
or dword [rsi + 0x148], 8
mov rcx, rbx
mov qword [rsi + 0x88], rdi
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
jmp 0x1400a4ba9
mov rcx, rsi
call fcn.1400a3ec0
jmp 0x1400a4ba9
mov rcx, qword [rsi + 0x150]
lea rax, [rbp + 0xe8]
lea r9, [rbp + 0xd0]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0xe0]
lea rdx, [rbp + 0xd8]
call qword [sym.imp.KERNEL32.DLL_GetDiskFreeSpaceW]
test eax, eax
jne 0x1400a4b35
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov ecx, eax
mov dword [rsi + 0x14c], eax
call fcn.1400ae540
movsxd rcx, eax
mov qword [rsi + 0x88], rcx
jmp 0x1400a4ba9
mov ecx, 0x58
call qword [fcn.1400edbe8]
mov rcx, rax
test rax, rax
jne 0x1400a4b5f
mov qword [rsi + 0x88], 0xfffffffffffff027
mov dword [rsi + 0x14c], ntohs
jmp 0x1400a4ba9
xor edi, edi
mov qword [rax], rdi
mov eax, dword [rbp + 0xd8]
imul eax, dword [rbp + 0xe0]
mov qword [rcx + 8], rax
mov eax, dword [rbp + 0xe8]
mov qword [rcx + 0x10], rax
mov eax, dword [rbp + 0xd0]
mov qword [rcx + 0x18], rax
mov eax, dword [rbp + 0xd0]
mov qword [rcx + 0x20], rax
mov qword [rcx + 0x28], rdi
mov qword [rcx + 0x30], rdi
mov qword [rsi + 0x90], rcx
mov qword [rsi + 0x88], rdi
mov r13, qword [rsp + 0x190]
mov r12, qword [rsp + 0x198]
mov rdi, qword [rsp + 0x1a0]
mov rbx, qword [rsp + 0x1a8]
mov r15, qword [rsp + 0x188]
add rsp, 0x1b0
pop r14
pop rsi
pop rbp
ret
lea rdx, str.uv__malloc
mov ecx, ntohs
call fcn.1400ae490
int3