Function at 0x140164a30
Capabilities:
Check if file exists
Copy file
Create directory
Get disk size
Get file attributes
Move file
Read file on windows
Write file on windows

Disassembly:
mov r11, rsp
push rbp
push rsi
push r14
lea rbp, [r11 - 0xc8]
sub rsp, 0x1b0
lea rsi, [rcx - 0x120]
mov r14, rcx
mov eax, dword [rsi + 0x70]
dec eax
cmp eax, 0x21
ja case.default.0x140164a84
mov qword [r11 - 0x20], rbx
lea rcx, [0x140000000]
mov qword [r11 - 0x28], rdi
mov qword [r11 - 0x30], r12
mov qword [r11 - 0x38], r13
cdqe
mov qword [r11 - 0x40], r15
mov edx, dword [rcx + rax*4 + 0x165580]
add rdx, rcx
jmp rdx
mov rcx, rsi
call fcn.1401620b0
jmp 0x140165539
mov rcx, rsi
call fcn.1401624c0
jmp 0x140165539
mov rcx, rsi
call fcn.1401628f0
jmp 0x140165539
mov ebx, dword [rsi + 0x150]
mov r14, qword [rsi + 0x180]
cmp ebx, 0xffffffff
jne 0x140164ad5
mov rdi, 0xfffffffffffff00d
mov dword [rsi + 0x14c], 6
jmp 0x140165532
xor edi, edi
mov ecx, ebx
mov dword [rbp + 0xd0], edi
call fcn.140333874
mov r15, rax
cmp rax, 0xffffffffffffffff
jne 0x140164b0e
lea ecx, [rdi + 6]
mov dword [rsi + 0x14c], 6
call fcn.14016e340
movsxd rcx, eax
mov qword [rsi + 0x88], rcx
jmp 0x140165539
lea rdx, [rsp + 0x60]
mov ecx, ebx
call fcn.140161720
test eax, eax
je 0x140164b33
lea r8, [rsp + 0x60]
mov rdx, r15
mov rcx, rsi
call fcn.140162ae0
jmp 0x140165539
cmp r14, 0xffffffffffffffff
je 0x140164b7b
xor eax, eax
lea r8, [rbp + 0xe0]
mov rdx, rdi
mov qword [rsp + 0x40], rax
mov rcx, r15
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rax
lea r13, [rsp + 0x40]
lea r9d, [rax + 1]
mov qword [rsp + 0x58], rax
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test eax, eax
je 0x140164b7e
mov dword [rbp + 0xd0], 1
jmp 0x140164b7e
mov r13, rdi
mov ebx, edi
cmp r14, 0xffffffffffffffff
je 0x140164b97
mov eax, ebx
add rax, r14
mov dword [rsp + 0x50], eax
shr rax, 0x20
mov dword [rsp + 0x54], eax
mov rdx, qword [rsi + 0x178]
lea r9, [rbp + 0xd8]
mov eax, edi
mov rcx, r15
add rax, rax
mov qword [rsp + 0x20], r13
mov r8d, dword [rdx + rax*8]
mov rdx, qword [rdx + rax*8 + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
add ebx, dword [rbp + 0xd8]
inc edi
mov r12d, eax
test eax, eax
je 0x140164bd8
cmp edi, dword [rsi + 0x170]
jb 0x140164b80
cmp dword [rbp + 0xd0], 0
je 0x140164bf7
mov rdx, qword [rbp + 0xe0]
xor r9d, r9d
xor r8d, r8d
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test r12d, r12d
jne 0x140164c04
test ebx, ebx
je 0x1401654a6
mov eax, ebx
mov qword [rsi + 0x88], rax
jmp 0x140165539
mov r8d, dword [rsi + 0x168]
test r8b, 4
je 0x140164c39
mov qword [rsi + 0x88], 0xfffffffffffff02a
mov dword [rsi + 0x14c], gethostname
jmp 0x140165539
mov rdx, qword [rsi + 0x160]
and r8d, 1
mov rcx, qword [rsi + 0x150]
call qword [sym.imp.KERNEL32.dll_CopyFileW]
xor edi, edi
test eax, eax
jne 0x140165532
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
mov dword [rsi + 0x14c], eax
call fcn.14016e340
movsxd rcx, eax
mov qword [rsi + 0x88], rcx
cmp rcx, 0xfffffffffffff00e
jne 0x140165539
mov rcx, qword [rsi + 0x150]
lea r8d, [rdi + 7]
mov qword [rsp + 0x30], rdi
xor r9d, r9d
mov dword [rsp + 0x28], 0x2000000
mov edx, 0x80
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
jne 0x140164cc6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
jmp 0x140164ce5
xor r8d, r8d
lea rdx, [rbp]
mov rcx, r14
call fcn.140163b40
test eax, eax
je 0x140164ce3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
jmp 0x140164ce5
mov ebx, edi
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
jne 0x140165539
mov rcx, qword [rsi + 0x160]
lea r8d, [rbx + 7]
mov qword [rsp + 0x30], rdi
xor r9d, r9d
mov dword [rsp + 0x28], 0x2000000
mov edx, 0x80
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
jne 0x140164d37
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
jmp 0x140164d56
xor r8d, r8d
lea rdx, [rbp - 0x80]
mov rcx, r14
call fcn.140163b40
test eax, eax
je 0x140164d54
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
jmp 0x140164d56
mov ebx, edi
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
jne 0x140165539
mov rax, qword [rbp - 0x80]
cmp qword [rbp], rax
jne 0x140165539
mov rax, qword [rbp - 0x50]
cmp qword [rbp + 0x30], rax
jne 0x140165539
jmp 0x140165532
mov ebx, dword [rsi + 0x188]
mov r14d, 0x10000
mov eax, dword [rsi + 0x16c]
cmp rbx, r14
mov r13d, dword [rsi + 0x150]
mov r12, qword [rsi + 0x180]
cmovb r14d, ebx
xor edi, edi
mov dword [rbp + 0xd0], eax
test r14, r14
je 0x14016556d
mov ecx, r14d
call qword [str.p3_]
mov r15, rax
test rax, rax
je 0x14016556d
cmp r12, 0xffffffffffffffff
je 0x140164def
xor r8d, r8d
mov rdx, r12
mov ecx, r13d
call fcn.1403429b8
cmp rax, 0xffffffffffffffff
je 0x140164e40
test rbx, rbx
je 0x140164e47
mov r12d, dword [rbp + 0xd0]
nop dword [rax + rax]
mov r8d, r14d
cmp rbx, r14
mov rdx, r15
mov ecx, r13d
cmovb r8d, ebx
call fcn.140342f4c
test eax, eax
je 0x140164e47
cmp eax, 0xffffffff
je 0x140164e40
movsxd rcx, eax
mov r8d, eax
sub rbx, rcx
mov rdx, r15
mov ecx, r12d
call fcn.140343c88
cmp eax, 0xffffffff
je 0x140164e40
add edi, eax
test rbx, rbx
jne 0x140164e00
jmp 0x140164e47
mov rdi, 0xffffffffffffffff
call fcn.1403379a0
mov rcx, r15
mov ebx, dword [rax]
call qword [fcn.1403379d4]
call fcn.1403379a0
mov dword [rax], ebx
movsxd rax, edi
mov qword [rsi + 0x88], rax
cmp rax, 0xffffffffffffffff
jmp 0x140165290
mov rcx, qword [rsi + 0x150]
mov rax, 0xffffffffffffffff
nop
inc rax
cmp word [rcx + rax*2], 0
jne 0x140164e80
xor edi, edi
mov r10, rcx
cmp rax, 1
jbe 0x140164eba
cmp word [rcx + rax*2 - 4], 0x3a
je 0x140164eba
movzx edx, word [rcx + rax*2 - 2]
cmp dx, 0x5c
je 0x140164eae
cmp dx, 0x2f
jne 0x140164eba
mov word [rcx + rax*2 - 2], di
mov r10, qword [rsi + 0x150]
xor r9d, r9d
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x2000000
mov edx, 0x80
mov rcx, r10
mov dword [rsp + 0x20], 3
lea r8d, [r9 + 7]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r15, rax
cmp rax, 0xffffffffffffffff
jne 0x140164efb
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
add r14, 0xffffffffffffff80
jmp 0x140164f20
lea r14, [rsi + 0xa0]
xor r8d, r8d
mov rdx, r14
mov rcx, r15
call fcn.140163b40
test eax, eax
je 0x140164f1e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
jmp 0x140164f20
mov ebx, edi
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x140164f42
mov ecx, ebx
mov dword [rsi + 0x14c], ebx
call fcn.14016e340
movsxd rdi, eax
jmp 0x140165532
mov qword [rsi + 0x90], r14
jmp 0x140165532
mov rcx, qword [rsi + 0x150]
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x140164f60
xor edi, edi
mov r10, rcx
cmp rax, 1
jbe 0x140164f9a
cmp word [rcx + rax*2 - 4], 0x3a
je 0x140164f9a
movzx edx, word [rcx + rax*2 - 2]
cmp dx, 0x5c
je 0x140164f8e
cmp dx, 0x2f
jne 0x140164f9a
mov word [rcx + rax*2 - 2], di
mov r10, qword [rsi + 0x150]
xor r9d, r9d
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x2200000
mov edx, 0x80
mov rcx, r10
mov dword [rsp + 0x20], 3
lea r8d, [r9 + 7]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r15, rax
cmp rax, 0xffffffffffffffff
jne 0x140164fdb
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
add r14, 0xffffffffffffff80
jmp 0x140165003
lea r14, [rsi + 0xa0]
mov r8d, 1
mov rdx, r14
mov rcx, r15
call fcn.140163b40
test eax, eax
je 0x140165001
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
jmp 0x140165003
mov ebx, edi
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x140164f42
cmp ebx, 0x5b8
je 0x140165040
cmp ebx, 0x1126
je 0x140165040
mov ecx, ebx
mov dword [rsi + 0x14c], ebx
call fcn.14016e340
movsxd rcx, eax
mov qword [rsi + 0x88], rcx
jmp 0x140165539
xor edx, edx
mov rcx, rsi
call fcn.140163e50
jmp 0x140165539
mov ecx, dword [rsi + 0x150]
cmp ecx, 0xffffffff
jne 0x140165070
mov dword [rsi + 0x14c], 6
mov rdi, 0xfffffffffffff00d
jmp 0x140165532
call fcn.140333874
cmp rax, 0xffffffffffffffff
jne 0x140165097
mov ecx, 6
mov dword [rsi + 0x14c], 6
call fcn.14016e340
movsxd rdi, eax
jmp 0x140165532
lea rbx, [rsi + 0xa0]
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call fcn.140163b40
test eax, eax
je 0x1401650cb
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
mov dword [rsi + 0x14c], eax
call fcn.14016e340
movsxd rdi, eax
jmp 0x140165532
mov qword [rsi + 0x90], rbx
xor edi, edi
jmp 0x140165532
mov rcx, rsi
call fcn.140163f80
jmp 0x140165539
mov rcx, qword [rsi + 0x150]
xor edi, edi
mov qword [rsp + 0x30], rdi
xor r9d, r9d
mov dword [rsp + 0x28], 0x2000000
mov edx, 0x100
mov dword [rsp + 0x20], 3
lea r8d, [rdi + 7]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1401654a6
movsd xmm2, qword [rsi + 0x160]
mov rcx, rax
movsd xmm1, qword [rsi + 0x158]
call fcn.140164360
test eax, eax
jne 0x140165420
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140165532
mov ecx, dword [rsi + 0x150]
cmp ecx, 0xffffffff
je 0x14016505a
call fcn.140333874
cmp rax, 0xffffffffffffffff
je 0x14016507b
movsd xmm2, qword [rsi + 0x160]
mov rcx, rax
movsd xmm1, qword [rsi + 0x158]
call fcn.140164360
test eax, eax
je case.0x140164a84.26
jmp 0x1401650b0
mov rcx, qword [rsi + 0x150]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x1401651c8
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
mov dword [rsi + 0x14c], eax
call fcn.14016e340
movsxd rdi, eax
mov qword [r14 - 0x98], rdi
jmp 0x140165539
test byte [rsi + 0x158], 2
je 0x1401651fa
and al, 0x11
cmp al, 1
jne 0x1401651fa
mov ecx, 0xfffff030
mov dword [rsi + 0x14c], 0xfffff030
call fcn.14016e340
movsxd rdi, eax
mov qword [r14 - 0x98], rdi
jmp 0x140165539
xor edi, edi
mov qword [r14 - 0x98], rdi
jmp 0x140165539
mov edx, dword [rsi + 0x158]
mov rcx, qword [rsi + 0x150]
call fcn.140344480
movsxd rcx, eax
mov qword [rsi + 0x88], rcx
cmp rcx, 0xffffffffffffffff
jne 0x140165539
call fcn.140337980
mov ecx, dword [rax]
mov dword [rsi + 0x14c], ecx
call fcn.14016e340
movsxd rcx, eax
mov qword [rsi + 0x88], rcx
jmp 0x140165539
mov rcx, rsi
call fcn.140164160
jmp 0x140165539
mov rcx, rsi
call fcn.140163f00
jmp 0x140165539
mov rcx, rsi
call fcn.140162e20
jmp 0x140165539
mov rcx, qword [rsi + 0x150]
call fcn.1403429f4
movsxd rcx, eax
mov qword [rsi + 0x88], rcx
cmp rcx, 0xffffffffffffffff
jne 0x140165539
call fcn.140337980
mov ecx, dword [rax]
mov dword [rsi + 0x14c], ecx
call fcn.14016e340
movsxd rcx, eax
mov qword [rsi + 0x88], rcx
jmp 0x140165539
mov rcx, qword [rsi + 0x150]
call fcn.1403429c8
movsxd rcx, eax
mov qword [rsi + 0x88], rcx
cmp rcx, 0xffffffffffffffff
jne 0x140165539
call fcn.140337980
mov ecx, dword [rax]
mov dword [rsi + 0x14c], ecx
cmp ecx, 0x7b
jne 0x1401652fc
mov eax, 0xfffff019
cdqe
mov qword [rsi + 0x88], rax
jmp 0x140165539
call fcn.14016e340
cdqe
mov qword [rsi + 0x88], rax
jmp 0x140165539
mov rcx, rsi
call fcn.140162fe0
jmp 0x140165539
mov rdx, qword [rsi + 0x160]
mov r8d, 1
mov rcx, qword [rsi + 0x150]
call qword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
jne case.0x140164a84.26
jmp 0x1401650b0
mov rcx, rsi
call fcn.140163370
jmp 0x140165539
mov rcx, rsi
call fcn.140163950
jmp 0x140165539
mov rcx, rsi
call fcn.1401637a0
jmp 0x140165539
mov rcx, qword [rsi + 0x90]
mov rcx, qword [rcx + 0x30]
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rbx, qword [rsi + 0x90]
call fcn.1403379a0
mov rcx, rbx
mov edi, dword [rax]
call qword [fcn.1403379d4]
call fcn.1403379a0
mov dword [rax], edi
xor edi, edi
jmp 0x140165532
mov rdx, qword [rsi + 0x150]
xor r8d, r8d
mov rcx, qword [rsi + 0x160]
call qword [sym.imp.KERNEL32.dll_CreateHardLinkW]
test eax, eax
jne case.0x140164a84.26
jmp 0x1401650b0
mov rcx, rsi
call fcn.140164780
jmp 0x140165539
mov rcx, qword [rsi + 0x150]
xor edi, edi
mov qword [rsp + 0x30], rdi
xor r9d, r9d
mov dword [rsp + 0x28], 0x2200000
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1401654a6
lea rdx, [rsi + 0x90]
xor r8d, r8d
mov rcx, rax
call fcn.140161e70
test eax, eax
je 0x14016544b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
mov dword [rsi + 0x14c], eax
call fcn.14016e340
movsxd rcx, eax
mov qword [rsi + 0x88], rcx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140165539
or dword [rsi + 0x148], 8
mov rcx, rbx
mov qword [rsi + 0x88], rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140165539
mov rcx, rsi
call fcn.140164850
jmp 0x140165539
mov rcx, qword [rsi + 0x150]
lea rax, [rbp + 0xe8]
lea r9, [rbp + 0xd0]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0xe0]
lea rdx, [rbp + 0xd8]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
test eax, eax
jne 0x1401654c5
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
mov dword [rsi + 0x14c], eax
call fcn.14016e340
movsxd rcx, eax
mov qword [rsi + 0x88], rcx
jmp 0x140165539
mov ecx, 0x58
call qword [str.p3_]
mov rcx, rax
test rax, rax
jne 0x1401654ef
mov qword [rsi + 0x88], 0xfffffffffffff027
mov dword [rsi + 0x14c], shutdown
jmp 0x140165539
xor edi, edi
mov qword [rax], rdi
mov eax, dword [rbp + 0xd8]
imul eax, dword [rbp + 0xe0]
mov qword [rcx + 8], rax
mov eax, dword [rbp + 0xe8]
mov qword [rcx + 0x10], rax
mov eax, dword [rbp + 0xd0]
mov qword [rcx + 0x18], rax
mov eax, dword [rbp + 0xd0]
mov qword [rcx + 0x20], rax
mov qword [rcx + 0x28], rdi
mov qword [rcx + 0x30], rdi
mov qword [rsi + 0x90], rcx
mov qword [rsi + 0x88], rdi
mov r13, qword [rsp + 0x190]
mov r12, qword [rsp + 0x198]
mov rdi, qword [rsp + 0x1a0]
mov rbx, qword [rsp + 0x1a8]
mov r15, qword [rsp + 0x188]
add rsp, 0x1b0
pop r14
pop rsi
pop rbp
ret
lea rdx, str.uv__malloc
mov ecx, recv
call fcn.14016e290
int3