Function at 0x1400ae1c0
Capabilities:
Check if file exists
Copy file
Create directory
Get disk size
Get file attributes
Move file
Read file on windows
Write file on windows

Disassembly:
mov r11, rsp
push rbp
push rsi
push r14
lea rbp, [r11 - 0xc8]
sub rsp, 0x1b0
lea rsi, [rcx - 0x120]
mov r14, rcx
mov eax, dword [rsi + 0x70]
dec eax
cmp eax, 0x21
ja case.default.0x1400ae214
mov qword [r11 - 0x20], rbx
lea rcx, [0x140000000]
mov qword [r11 - 0x28], rdi
mov qword [r11 - 0x30], r12
mov qword [r11 - 0x38], r13
cdqe
mov qword [r11 - 0x40], r15
mov edx, dword [rcx + rax*4 + 0xaed10]
add rdx, rcx
jmp rdx
mov rcx, rsi
call fcn.1400ab840
jmp 0x1400aecc9
mov rcx, rsi
call fcn.1400abc50
jmp 0x1400aecc9
mov rcx, rsi
call fcn.1400ac080
jmp 0x1400aecc9
mov ebx, dword [rsi + 0x150]
mov r14, qword [rsi + 0x180]
cmp ebx, 0xffffffff
jne 0x1400ae265
mov rdi, 0xfffffffffffff00d
mov dword [rsi + 0x14c], 6
jmp 0x1400aecc2
xor edi, edi
mov ecx, ebx
mov dword [rbp + 0xd0], edi
call fcn.1402303a0
mov r15, rax
cmp rax, 0xffffffffffffffff
jne 0x1400ae29e
lea ecx, [rdi + 6]
mov dword [rsi + 0x14c], 6
call fcn.1400b8610
movsxd rcx, eax
mov qword [rsi + 0x88], rcx
jmp 0x1400aecc9
lea rdx, [rsp + 0x60]
mov ecx, ebx
call fcn.1400aaeb0
test eax, eax
je 0x1400ae2c3
lea r8, [rsp + 0x60]
mov rdx, r15
mov rcx, rsi
call fcn.1400ac270
jmp 0x1400aecc9
cmp r14, 0xffffffffffffffff
je 0x1400ae30b
xor eax, eax
lea r8, [rbp + 0xe0]
mov rdx, rdi
mov qword [rsp + 0x40], rax
mov rcx, r15
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rax
lea r13, [rsp + 0x40]
lea r9d, [rax + 1]
mov qword [rsp + 0x58], rax
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test eax, eax
je 0x1400ae30e
mov dword [rbp + 0xd0], 1
jmp 0x1400ae30e
mov r13, rdi
mov ebx, edi
cmp r14, 0xffffffffffffffff
je 0x1400ae327
mov eax, ebx
add rax, r14
mov dword [rsp + 0x50], eax
shr rax, 0x20
mov dword [rsp + 0x54], eax
mov rdx, qword [rsi + 0x178]
lea r9, [rbp + 0xd8]
mov eax, edi
mov rcx, r15
add rax, rax
mov qword [rsp + 0x20], r13
mov r8d, dword [rdx + rax*8]
mov rdx, qword [rdx + rax*8 + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
add ebx, dword [rbp + 0xd8]
inc edi
mov r12d, eax
test eax, eax
je 0x1400ae368
cmp edi, dword [rsi + 0x170]
jb 0x1400ae310
cmp dword [rbp + 0xd0], 0
je 0x1400ae387
mov rdx, qword [rbp + 0xe0]
xor r9d, r9d
xor r8d, r8d
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test r12d, r12d
jne 0x1400ae394
test ebx, ebx
je 0x1400aec36
mov eax, ebx
mov qword [rsi + 0x88], rax
jmp 0x1400aecc9
mov r8d, dword [rsi + 0x168]
test r8b, 4
je 0x1400ae3c9
mov qword [rsi + 0x88], 0xfffffffffffff02a
mov dword [rsi + 0x14c], gethostname
jmp 0x1400aecc9
mov rdx, qword [rsi + 0x160]
and r8d, 1
mov rcx, qword [rsi + 0x150]
call qword [sym.imp.KERNEL32.dll_CopyFileW]
xor edi, edi
test eax, eax
jne 0x1400aecc2
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
mov dword [rsi + 0x14c], eax
call fcn.1400b8610
movsxd rcx, eax
mov qword [rsi + 0x88], rcx
cmp rcx, 0xfffffffffffff00e
jne 0x1400aecc9
mov rcx, qword [rsi + 0x150]
lea r8d, [rdi + 7]
mov qword [rsp + 0x30], rdi
xor r9d, r9d
mov dword [rsp + 0x28], 0x2000000
mov edx, 0x80
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
jne 0x1400ae456
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
jmp 0x1400ae475
xor r8d, r8d
lea rdx, [rbp]
mov rcx, r14
call fcn.1400ad2d0
test eax, eax
je 0x1400ae473
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
jmp 0x1400ae475
mov ebx, edi
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
jne 0x1400aecc9
mov rcx, qword [rsi + 0x160]
lea r8d, [rbx + 7]
mov qword [rsp + 0x30], rdi
xor r9d, r9d
mov dword [rsp + 0x28], 0x2000000
mov edx, 0x80
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
jne 0x1400ae4c7
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
jmp 0x1400ae4e6
xor r8d, r8d
lea rdx, [rbp - 0x80]
mov rcx, r14
call fcn.1400ad2d0
test eax, eax
je 0x1400ae4e4
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
jmp 0x1400ae4e6
mov ebx, edi
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
jne 0x1400aecc9
mov rax, qword [rbp - 0x80]
cmp qword [rbp], rax
jne 0x1400aecc9
mov rax, qword [rbp - 0x50]
cmp qword [rbp + 0x30], rax
jne 0x1400aecc9
jmp 0x1400aecc2
mov ebx, dword [rsi + 0x188]
mov r14d, 0x10000
mov eax, dword [rsi + 0x16c]
cmp rbx, r14
mov r13d, dword [rsi + 0x150]
mov r12, qword [rsi + 0x180]
cmovb r14d, ebx
xor edi, edi
mov dword [rbp + 0xd0], eax
test r14, r14
je 0x1400aecfd
mov ecx, r14d
call qword [fcn.140220234]
mov r15, rax
test rax, rax
je 0x1400aecfd
cmp r12, 0xffffffffffffffff
je 0x1400ae57f
xor r8d, r8d
mov rdx, r12
mov ecx, r13d
call fcn.1402306a8
cmp rax, 0xffffffffffffffff
je 0x1400ae5d0
test rbx, rbx
je 0x1400ae5d7
mov r12d, dword [rbp + 0xd0]
nop dword [rax + rax]
mov r8d, r14d
cmp rbx, r14
mov rdx, r15
mov ecx, r13d
cmovb r8d, ebx
call fcn.140230ce0
test eax, eax
je 0x1400ae5d7
cmp eax, 0xffffffff
je 0x1400ae5d0
movsxd rcx, eax
mov r8d, eax
sub rbx, rcx
mov rdx, r15
mov ecx, r12d
call fcn.140231ce0
cmp eax, 0xffffffff
je 0x1400ae5d0
add edi, eax
test rbx, rbx
jne 0x1400ae590
jmp 0x1400ae5d7
mov rdi, 0xffffffffffffffff
call fcn.140227d1c
mov rcx, r15
mov ebx, dword [rax]
call qword [fcn.14021ff40]
call fcn.140227d1c
mov dword [rax], ebx
movsxd rax, edi
mov qword [rsi + 0x88], rax
cmp rax, 0xffffffffffffffff
jmp 0x1400aea20
mov rcx, qword [rsi + 0x150]
mov rax, 0xffffffffffffffff
nop
inc rax
cmp word [rcx + rax*2], 0
jne 0x1400ae610
xor edi, edi
mov r10, rcx
cmp rax, 1
jbe 0x1400ae64a
cmp word [rcx + rax*2 - 4], 0x3a
je 0x1400ae64a
movzx edx, word [rcx + rax*2 - 2]
cmp dx, 0x5c
je 0x1400ae63e
cmp dx, 0x2f
jne 0x1400ae64a
mov word [rcx + rax*2 - 2], di
mov r10, qword [rsi + 0x150]
xor r9d, r9d
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x2000000
mov edx, 0x80
mov rcx, r10
mov dword [rsp + 0x20], 3
lea r8d, [r9 + 7]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r15, rax
cmp rax, 0xffffffffffffffff
jne 0x1400ae68b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
add r14, 0xffffffffffffff80
jmp 0x1400ae6b0
lea r14, [rsi + 0xa0]
xor r8d, r8d
mov rdx, r14
mov rcx, r15
call fcn.1400ad2d0
test eax, eax
je 0x1400ae6ae
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
jmp 0x1400ae6b0
mov ebx, edi
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x1400ae6d2
mov ecx, ebx
mov dword [rsi + 0x14c], ebx
call fcn.1400b8610
movsxd rdi, eax
jmp 0x1400aecc2
mov qword [rsi + 0x90], r14
jmp 0x1400aecc2
mov rcx, qword [rsi + 0x150]
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x1400ae6f0
xor edi, edi
mov r10, rcx
cmp rax, 1
jbe 0x1400ae72a
cmp word [rcx + rax*2 - 4], 0x3a
je 0x1400ae72a
movzx edx, word [rcx + rax*2 - 2]
cmp dx, 0x5c
je 0x1400ae71e
cmp dx, 0x2f
jne 0x1400ae72a
mov word [rcx + rax*2 - 2], di
mov r10, qword [rsi + 0x150]
xor r9d, r9d
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x2200000
mov edx, 0x80
mov rcx, r10
mov dword [rsp + 0x20], 3
lea r8d, [r9 + 7]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r15, rax
cmp rax, 0xffffffffffffffff
jne 0x1400ae76b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
add r14, 0xffffffffffffff80
jmp 0x1400ae793
lea r14, [rsi + 0xa0]
mov r8d, 1
mov rdx, r14
mov rcx, r15
call fcn.1400ad2d0
test eax, eax
je 0x1400ae791
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
jmp 0x1400ae793
mov ebx, edi
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x1400ae6d2
cmp ebx, 0x5b8
je 0x1400ae7d0
cmp ebx, 0x1126
je 0x1400ae7d0
mov ecx, ebx
mov dword [rsi + 0x14c], ebx
call fcn.1400b8610
movsxd rcx, eax
mov qword [rsi + 0x88], rcx
jmp 0x1400aecc9
xor edx, edx
mov rcx, rsi
call fcn.1400ad5e0
jmp 0x1400aecc9
mov ecx, dword [rsi + 0x150]
cmp ecx, 0xffffffff
jne 0x1400ae800
mov dword [rsi + 0x14c], 6
mov rdi, 0xfffffffffffff00d
jmp 0x1400aecc2
call fcn.1402303a0
cmp rax, 0xffffffffffffffff
jne 0x1400ae827
mov ecx, 6
mov dword [rsi + 0x14c], 6
call fcn.1400b8610
movsxd rdi, eax
jmp 0x1400aecc2
lea rbx, [rsi + 0xa0]
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call fcn.1400ad2d0
test eax, eax
je 0x1400ae85b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
mov dword [rsi + 0x14c], eax
call fcn.1400b8610
movsxd rdi, eax
jmp 0x1400aecc2
mov qword [rsi + 0x90], rbx
xor edi, edi
jmp 0x1400aecc2
mov rcx, rsi
call fcn.1400ad710
jmp 0x1400aecc9
mov rcx, qword [rsi + 0x150]
xor edi, edi
mov qword [rsp + 0x30], rdi
xor r9d, r9d
mov dword [rsp + 0x28], 0x2000000
mov edx, 0x100
mov dword [rsp + 0x20], 3
lea r8d, [rdi + 7]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1400aec36
movsd xmm2, qword [rsi + 0x160]
mov rcx, rax
movsd xmm1, qword [rsi + 0x158]
call fcn.1400adaf0
test eax, eax
jne 0x1400aebb0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400aecc2
mov ecx, dword [rsi + 0x150]
cmp ecx, 0xffffffff
je 0x1400ae7ea
call fcn.1402303a0
cmp rax, 0xffffffffffffffff
je 0x1400ae80b
movsd xmm2, qword [rsi + 0x160]
mov rcx, rax
movsd xmm1, qword [rsi + 0x158]
call fcn.1400adaf0
test eax, eax
je case.0x1400ae214.26
jmp 0x1400ae840
mov rcx, qword [rsi + 0x150]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x1400ae958
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
mov dword [rsi + 0x14c], eax
call fcn.1400b8610
movsxd rdi, eax
mov qword [r14 - 0x98], rdi
jmp 0x1400aecc9
test byte [rsi + 0x158], 2
je 0x1400ae98a
and al, 0x11
cmp al, 1
jne 0x1400ae98a
mov ecx, 0xfffff030
mov dword [rsi + 0x14c], 0xfffff030
call fcn.1400b8610
movsxd rdi, eax
mov qword [r14 - 0x98], rdi
jmp 0x1400aecc9
xor edi, edi
mov qword [r14 - 0x98], rdi
jmp 0x1400aecc9
mov edx, dword [rsi + 0x158]
mov rcx, qword [rsi + 0x150]
call fcn.140232504
movsxd rcx, eax
mov qword [rsi + 0x88], rcx
cmp rcx, 0xffffffffffffffff
jne 0x1400aecc9
call fcn.140227cfc
mov ecx, dword [rax]
mov dword [rsi + 0x14c], ecx
call fcn.1400b8610
movsxd rcx, eax
mov qword [rsi + 0x88], rcx
jmp 0x1400aecc9
mov rcx, rsi
call fcn.1400ad8f0
jmp 0x1400aecc9
mov rcx, rsi
call fcn.1400ad690
jmp 0x1400aecc9
mov rcx, rsi
call fcn.1400ac5b0
jmp 0x1400aecc9
mov rcx, qword [rsi + 0x150]
call fcn.1402306e4
movsxd rcx, eax
mov qword [rsi + 0x88], rcx
cmp rcx, 0xffffffffffffffff
jne 0x1400aecc9
call fcn.140227cfc
mov ecx, dword [rax]
mov dword [rsi + 0x14c], ecx
call fcn.1400b8610
movsxd rcx, eax
mov qword [rsi + 0x88], rcx
jmp 0x1400aecc9
mov rcx, qword [rsi + 0x150]
call fcn.1402306b8
movsxd rcx, eax
mov qword [rsi + 0x88], rcx
cmp rcx, 0xffffffffffffffff
jne 0x1400aecc9
call fcn.140227cfc
mov ecx, dword [rax]
mov dword [rsi + 0x14c], ecx
cmp ecx, 0x7b
jne 0x1400aea8c
mov eax, 0xfffff019
cdqe
mov qword [rsi + 0x88], rax
jmp 0x1400aecc9
call fcn.1400b8610
cdqe
mov qword [rsi + 0x88], rax
jmp 0x1400aecc9
mov rcx, rsi
call fcn.1400ac770
jmp 0x1400aecc9
mov rdx, qword [rsi + 0x160]
mov r8d, 1
mov rcx, qword [rsi + 0x150]
call qword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
jne case.0x1400ae214.26
jmp 0x1400ae840
mov rcx, rsi
call fcn.1400acb00
jmp 0x1400aecc9
mov rcx, rsi
call fcn.1400ad0e0
jmp 0x1400aecc9
mov rcx, rsi
call fcn.1400acf30
jmp 0x1400aecc9
mov rcx, qword [rsi + 0x90]
mov rcx, qword [rcx + 0x30]
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rbx, qword [rsi + 0x90]
call fcn.140227d1c
mov rcx, rbx
mov edi, dword [rax]
call qword [fcn.14021ff40]
call fcn.140227d1c
mov dword [rax], edi
xor edi, edi
jmp 0x1400aecc2
mov rdx, qword [rsi + 0x150]
xor r8d, r8d
mov rcx, qword [rsi + 0x160]
call qword [sym.imp.KERNEL32.dll_CreateHardLinkW]
test eax, eax
jne case.0x1400ae214.26
jmp 0x1400ae840
mov rcx, rsi
call fcn.1400adf10
jmp 0x1400aecc9
mov rcx, qword [rsi + 0x150]
xor edi, edi
mov qword [rsp + 0x30], rdi
xor r9d, r9d
mov dword [rsp + 0x28], 0x2200000
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1400aec36
lea rdx, [rsi + 0x90]
xor r8d, r8d
mov rcx, rax
call fcn.1400ab600
test eax, eax
je 0x1400aebdb
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
mov dword [rsi + 0x14c], eax
call fcn.1400b8610
movsxd rcx, eax
mov qword [rsi + 0x88], rcx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400aecc9
or dword [rsi + 0x148], 8
mov rcx, rbx
mov qword [rsi + 0x88], rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400aecc9
mov rcx, rsi
call fcn.1400adfe0
jmp 0x1400aecc9
mov rcx, qword [rsi + 0x150]
lea rax, [rbp + 0xe8]
lea r9, [rbp + 0xd0]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0xe0]
lea rdx, [rbp + 0xd8]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
test eax, eax
jne 0x1400aec55
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
mov dword [rsi + 0x14c], eax
call fcn.1400b8610
movsxd rcx, eax
mov qword [rsi + 0x88], rcx
jmp 0x1400aecc9
mov ecx, 0x58
call qword [fcn.140220234]
mov rcx, rax
test rax, rax
jne 0x1400aec7f
mov qword [rsi + 0x88], 0xfffffffffffff027
mov dword [rsi + 0x14c], select
jmp 0x1400aecc9
xor edi, edi
mov qword [rax], rdi
mov eax, dword [rbp + 0xd8]
imul eax, dword [rbp + 0xe0]
mov qword [rcx + 8], rax
mov eax, dword [rbp + 0xe8]
mov qword [rcx + 0x10], rax
mov eax, dword [rbp + 0xd0]
mov qword [rcx + 0x18], rax
mov eax, dword [rbp + 0xd0]
mov qword [rcx + 0x20], rax
mov qword [rcx + 0x28], rdi
mov qword [rcx + 0x30], rdi
mov qword [rsi + 0x90], rcx
mov qword [rsi + 0x88], rdi
mov r13, qword [rsp + 0x190]
mov r12, qword [rsp + 0x198]
mov rdi, qword [rsp + 0x1a0]
mov rbx, qword [rsp + 0x1a8]
mov r15, qword [rsp + 0x188]
add rsp, 0x1b0
pop r14
pop rsi
pop rbp
ret
lea rdx, str.uv__malloc
mov ecx, select
call fcn.1400b8560
int3