Function at 0x1400ef710
Capabilities:
Check if file exists
Copy file
Create directory
Get disk size
Get file attributes
Move file
Read file on windows
Write file on windows

Disassembly:
mov r11, rsp
push rbp
push rsi
push r14
lea rbp, [r11 - 0xc8]
sub rsp, 0x1b0
lea rsi, [rcx - 0x120]
mov r14, rcx
mov eax, dword [rsi + 0x70]
dec eax
cmp eax, 0x21
ja case.default.0x1400ef764
mov qword [r11 - 0x20], rbx
lea rcx, [0x140000000]
mov qword [r11 - 0x28], rdi
mov qword [r11 - 0x30], r12
mov qword [r11 - 0x38], r13
cdqe
mov qword [r11 - 0x40], r15
mov edx, dword [rcx + rax*4 + 0xf0260]
add rdx, rcx
jmp rdx
mov rcx, rsi
call fcn.1400ecd80
jmp 0x1400f0219
mov rcx, rsi
call fcn.1400ed190
jmp 0x1400f0219
mov rcx, rsi
call fcn.1400ed5c0
jmp 0x1400f0219
mov ebx, dword [rsi + 0x150]
mov r14, qword [rsi + 0x180]
cmp ebx, 0xffffffff
jne 0x1400ef7b5
mov rdi, 0xfffffffffffff00d
mov dword [rsi + 0x14c], 6
jmp 0x1400f0212
xor edi, edi
mov ecx, ebx
mov dword [rbp + 0xd0], edi
call fcn.14014ace8
mov r15, rax
cmp rax, 0xffffffffffffffff
jne 0x1400ef7ee
lea ecx, [rdi + 6]
mov dword [rsi + 0x14c], 6
call fcn.1400f8400
movsxd rcx, eax
mov qword [rsi + 0x88], rcx
jmp 0x1400f0219
lea rdx, [rsp + 0x60]
mov ecx, ebx
call fcn.1400ec3f0
test eax, eax
je 0x1400ef813
lea r8, [rsp + 0x60]
mov rdx, r15
mov rcx, rsi
call fcn.1400ed7b0
jmp 0x1400f0219
cmp r14, 0xffffffffffffffff
je 0x1400ef85b
xor eax, eax
lea r8, [rbp + 0xe0]
mov rdx, rdi
mov qword [rsp + 0x40], rax
mov rcx, r15
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rax
lea r13, [rsp + 0x40]
lea r9d, [rax + 1]
mov qword [rsp + 0x58], rax
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test eax, eax
je 0x1400ef85e
mov dword [rbp + 0xd0], 1
jmp 0x1400ef85e
mov r13, rdi
mov ebx, edi
cmp r14, 0xffffffffffffffff
je 0x1400ef877
mov eax, ebx
add rax, r14
mov dword [rsp + 0x50], eax
shr rax, 0x20
mov dword [rsp + 0x54], eax
mov rdx, qword [rsi + 0x178]
lea r9, [rbp + 0xd8]
mov eax, edi
mov rcx, r15
add rax, rax
mov qword [rsp + 0x20], r13
mov r8d, dword [rdx + rax*8]
mov rdx, qword [rdx + rax*8 + 8]
call qword [sym.imp.KERNEL32.dll_WriteFile]
add ebx, dword [rbp + 0xd8]
inc edi
mov r12d, eax
test eax, eax
je 0x1400ef8b8
cmp edi, dword [rsi + 0x170]
jb 0x1400ef860
cmp dword [rbp + 0xd0], 0
je 0x1400ef8d7
mov rdx, qword [rbp + 0xe0]
xor r9d, r9d
xor r8d, r8d
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test r12d, r12d
jne 0x1400ef8e4
test ebx, ebx
je 0x1400f0186
mov eax, ebx
mov qword [rsi + 0x88], rax
jmp 0x1400f0219
mov r8d, dword [rsi + 0x168]
test r8b, 4
je 0x1400ef919
mov qword [rsi + 0x88], 0xfffffffffffff02a
mov dword [rsi + 0x14c], gethostname
jmp 0x1400f0219
mov rdx, qword [rsi + 0x160]
and r8d, 1
mov rcx, qword [rsi + 0x150]
call qword [sym.imp.KERNEL32.dll_CopyFileW]
xor edi, edi
test eax, eax
jne 0x1400f0212
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
mov dword [rsi + 0x14c], eax
call fcn.1400f8400
movsxd rcx, eax
mov qword [rsi + 0x88], rcx
cmp rcx, 0xfffffffffffff00e
jne 0x1400f0219
mov rcx, qword [rsi + 0x150]
lea r8d, [rdi + 7]
mov qword [rsp + 0x30], rdi
xor r9d, r9d
mov dword [rsp + 0x28], 0x2000000
mov edx, 0x80
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
jne 0x1400ef9a6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
jmp 0x1400ef9c5
xor r8d, r8d
lea rdx, [rbp]
mov rcx, r14
call fcn.1400ee810
test eax, eax
je 0x1400ef9c3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
jmp 0x1400ef9c5
mov ebx, edi
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
jne 0x1400f0219
mov rcx, qword [rsi + 0x160]
lea r8d, [rbx + 7]
mov qword [rsp + 0x30], rdi
xor r9d, r9d
mov dword [rsp + 0x28], 0x2000000
mov edx, 0x80
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
jne 0x1400efa17
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
jmp 0x1400efa36
xor r8d, r8d
lea rdx, [rbp - 0x80]
mov rcx, r14
call fcn.1400ee810
test eax, eax
je 0x1400efa34
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
jmp 0x1400efa36
mov ebx, edi
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
jne 0x1400f0219
mov rax, qword [rbp - 0x80]
cmp qword [rbp], rax
jne 0x1400f0219
mov rax, qword [rbp - 0x50]
cmp qword [rbp + 0x30], rax
jne 0x1400f0219
jmp 0x1400f0212
mov ebx, dword [rsi + 0x188]
mov r14d, 0x10000
mov eax, dword [rsi + 0x16c]
cmp rbx, r14
mov r13d, dword [rsi + 0x150]
mov r12, qword [rsi + 0x180]
cmovb r14d, ebx
xor edi, edi
mov dword [rbp + 0xd0], eax
test r14, r14
je 0x1400f024d
mov ecx, r14d
call qword [fcn.14014f7c8]
mov r15, rax
test rax, rax
je 0x1400f024d
cmp r12, 0xffffffffffffffff
je 0x1400efacf
xor r8d, r8d
mov rdx, r12
mov ecx, r13d
call fcn.140152e20
cmp rax, 0xffffffffffffffff
je 0x1400efb20
test rbx, rbx
je 0x1400efb27
mov r12d, dword [rbp + 0xd0]
nop dword [rax + rax]
mov r8d, r14d
cmp rbx, r14
mov rdx, r15
mov ecx, r13d
cmovb r8d, ebx
call fcn.140153458
test eax, eax
je 0x1400efb27
cmp eax, 0xffffffff
je 0x1400efb20
movsxd rcx, eax
mov r8d, eax
sub rbx, rcx
mov rdx, r15
mov ecx, r12d
call fcn.140154458
cmp eax, 0xffffffff
je 0x1400efb20
add edi, eax
test rbx, rbx
jne 0x1400efae0
jmp 0x1400efb27
mov rdi, 0xffffffffffffffff
call fcn.14014f0c0
mov rcx, r15
mov ebx, dword [rax]
call qword [fcn.14014f0f4]
call fcn.14014f0c0
mov dword [rax], ebx
movsxd rax, edi
mov qword [rsi + 0x88], rax
cmp rax, 0xffffffffffffffff
jmp 0x1400eff70
mov rcx, qword [rsi + 0x150]
mov rax, 0xffffffffffffffff
nop
inc rax
cmp word [rcx + rax*2], 0
jne 0x1400efb60
xor edi, edi
mov r10, rcx
cmp rax, 1
jbe 0x1400efb9a
cmp word [rcx + rax*2 - 4], 0x3a
je 0x1400efb9a
movzx edx, word [rcx + rax*2 - 2]
cmp dx, 0x5c
je 0x1400efb8e
cmp dx, 0x2f
jne 0x1400efb9a
mov word [rcx + rax*2 - 2], di
mov r10, qword [rsi + 0x150]
xor r9d, r9d
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x2000000
mov edx, 0x80
mov rcx, r10
mov dword [rsp + 0x20], 3
lea r8d, [r9 + 7]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r15, rax
cmp rax, 0xffffffffffffffff
jne 0x1400efbdb
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
add r14, 0xffffffffffffff80
jmp 0x1400efc00
lea r14, [rsi + 0xa0]
xor r8d, r8d
mov rdx, r14
mov rcx, r15
call fcn.1400ee810
test eax, eax
je 0x1400efbfe
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
jmp 0x1400efc00
mov ebx, edi
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x1400efc22
mov ecx, ebx
mov dword [rsi + 0x14c], ebx
call fcn.1400f8400
movsxd rdi, eax
jmp 0x1400f0212
mov qword [rsi + 0x90], r14
jmp 0x1400f0212
mov rcx, qword [rsi + 0x150]
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x1400efc40
xor edi, edi
mov r10, rcx
cmp rax, 1
jbe 0x1400efc7a
cmp word [rcx + rax*2 - 4], 0x3a
je 0x1400efc7a
movzx edx, word [rcx + rax*2 - 2]
cmp dx, 0x5c
je 0x1400efc6e
cmp dx, 0x2f
jne 0x1400efc7a
mov word [rcx + rax*2 - 2], di
mov r10, qword [rsi + 0x150]
xor r9d, r9d
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x2200000
mov edx, 0x80
mov rcx, r10
mov dword [rsp + 0x20], 3
lea r8d, [r9 + 7]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r15, rax
cmp rax, 0xffffffffffffffff
jne 0x1400efcbb
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
add r14, 0xffffffffffffff80
jmp 0x1400efce3
lea r14, [rsi + 0xa0]
mov r8d, 1
mov rdx, r14
mov rcx, r15
call fcn.1400ee810
test eax, eax
je 0x1400efce1
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
jmp 0x1400efce3
mov ebx, edi
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x1400efc22
cmp ebx, 0x5b8
je 0x1400efd20
cmp ebx, 0x1126
je 0x1400efd20
mov ecx, ebx
mov dword [rsi + 0x14c], ebx
call fcn.1400f8400
movsxd rcx, eax
mov qword [rsi + 0x88], rcx
jmp 0x1400f0219
xor edx, edx
mov rcx, rsi
call fcn.1400eeb20
jmp 0x1400f0219
mov ecx, dword [rsi + 0x150]
cmp ecx, 0xffffffff
jne 0x1400efd50
mov dword [rsi + 0x14c], 6
mov rdi, 0xfffffffffffff00d
jmp 0x1400f0212
call fcn.14014ace8
cmp rax, 0xffffffffffffffff
jne 0x1400efd77
mov ecx, 6
mov dword [rsi + 0x14c], 6
call fcn.1400f8400
movsxd rdi, eax
jmp 0x1400f0212
lea rbx, [rsi + 0xa0]
xor r8d, r8d
mov rdx, rbx
mov rcx, rax
call fcn.1400ee810
test eax, eax
je 0x1400efdab
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
mov dword [rsi + 0x14c], eax
call fcn.1400f8400
movsxd rdi, eax
jmp 0x1400f0212
mov qword [rsi + 0x90], rbx
xor edi, edi
jmp 0x1400f0212
mov rcx, rsi
call fcn.1400eec50
jmp 0x1400f0219
mov rcx, qword [rsi + 0x150]
xor edi, edi
mov qword [rsp + 0x30], rdi
xor r9d, r9d
mov dword [rsp + 0x28], 0x2000000
mov edx, 0x100
mov dword [rsp + 0x20], 3
lea r8d, [rdi + 7]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1400f0186
movsd xmm2, qword [rsi + 0x160]
mov rcx, rax
movsd xmm1, qword [rsi + 0x158]
call fcn.1400ef030
test eax, eax
jne 0x1400f0100
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400f0212
mov ecx, dword [rsi + 0x150]
cmp ecx, 0xffffffff
je 0x1400efd3a
call fcn.14014ace8
cmp rax, 0xffffffffffffffff
je 0x1400efd5b
movsd xmm2, qword [rsi + 0x160]
mov rcx, rax
movsd xmm1, qword [rsi + 0x158]
call fcn.1400ef030
test eax, eax
je case.0x1400ef764.26
jmp 0x1400efd90
mov rcx, qword [rsi + 0x150]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x1400efea8
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
mov dword [rsi + 0x14c], eax
call fcn.1400f8400
movsxd rdi, eax
mov qword [r14 - 0x98], rdi
jmp 0x1400f0219
test byte [rsi + 0x158], 2
je 0x1400efeda
and al, 0x11
cmp al, 1
jne 0x1400efeda
mov ecx, 0xfffff030
mov dword [rsi + 0x14c], 0xfffff030
call fcn.1400f8400
movsxd rdi, eax
mov qword [r14 - 0x98], rdi
jmp 0x1400f0219
xor edi, edi
mov qword [r14 - 0x98], rdi
jmp 0x1400f0219
mov edx, dword [rsi + 0x158]
mov rcx, qword [rsi + 0x150]
call fcn.140154c7c
movsxd rcx, eax
mov qword [rsi + 0x88], rcx
cmp rcx, 0xffffffffffffffff
jne 0x1400f0219
call fcn.14014f0a0
mov ecx, dword [rax]
mov dword [rsi + 0x14c], ecx
call fcn.1400f8400
movsxd rcx, eax
mov qword [rsi + 0x88], rcx
jmp 0x1400f0219
mov rcx, rsi
call fcn.1400eee30
jmp 0x1400f0219
mov rcx, rsi
call fcn.1400eebd0
jmp 0x1400f0219
mov rcx, rsi
call fcn.1400edaf0
jmp 0x1400f0219
mov rcx, qword [rsi + 0x150]
call fcn.140152e5c
movsxd rcx, eax
mov qword [rsi + 0x88], rcx
cmp rcx, 0xffffffffffffffff
jne 0x1400f0219
call fcn.14014f0a0
mov ecx, dword [rax]
mov dword [rsi + 0x14c], ecx
call fcn.1400f8400
movsxd rcx, eax
mov qword [rsi + 0x88], rcx
jmp 0x1400f0219
mov rcx, qword [rsi + 0x150]
call fcn.140152e30
movsxd rcx, eax
mov qword [rsi + 0x88], rcx
cmp rcx, 0xffffffffffffffff
jne 0x1400f0219
call fcn.14014f0a0
mov ecx, dword [rax]
mov dword [rsi + 0x14c], ecx
cmp ecx, 0x7b
jne 0x1400effdc
mov eax, 0xfffff019
cdqe
mov qword [rsi + 0x88], rax
jmp 0x1400f0219
call fcn.1400f8400
cdqe
mov qword [rsi + 0x88], rax
jmp 0x1400f0219
mov rcx, rsi
call fcn.1400edcb0
jmp 0x1400f0219
mov rdx, qword [rsi + 0x160]
mov r8d, 1
mov rcx, qword [rsi + 0x150]
call qword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
jne case.0x1400ef764.26
jmp 0x1400efd90
mov rcx, rsi
call fcn.1400ee040
jmp 0x1400f0219
mov rcx, rsi
call fcn.1400ee620
jmp 0x1400f0219
mov rcx, rsi
call fcn.1400ee470
jmp 0x1400f0219
mov rcx, qword [rsi + 0x90]
mov rcx, qword [rcx + 0x30]
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rbx, qword [rsi + 0x90]
call fcn.14014f0c0
mov rcx, rbx
mov edi, dword [rax]
call qword [fcn.14014f0f4]
call fcn.14014f0c0
mov dword [rax], edi
xor edi, edi
jmp 0x1400f0212
mov rdx, qword [rsi + 0x150]
xor r8d, r8d
mov rcx, qword [rsi + 0x160]
call qword [sym.imp.KERNEL32.dll_CreateHardLinkW]
test eax, eax
jne case.0x1400ef764.26
jmp 0x1400efd90
mov rcx, rsi
call fcn.1400ef450
jmp 0x1400f0219
mov rcx, qword [rsi + 0x150]
xor edi, edi
mov qword [rsp + 0x30], rdi
xor r9d, r9d
mov dword [rsp + 0x28], 0x2200000
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1400f0186
lea rdx, [rsi + 0x90]
xor r8d, r8d
mov rcx, rax
call fcn.1400ecb40
test eax, eax
je 0x1400f012b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
mov dword [rsi + 0x14c], eax
call fcn.1400f8400
movsxd rcx, eax
mov qword [rsi + 0x88], rcx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400f0219
or dword [rsi + 0x148], 8
mov rcx, rbx
mov qword [rsi + 0x88], rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400f0219
mov rcx, rsi
call fcn.1400ef520
jmp 0x1400f0219
mov rcx, qword [rsi + 0x150]
lea rax, [rbp + 0xe8]
lea r9, [rbp + 0xd0]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0xe0]
lea rdx, [rbp + 0xd8]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
test eax, eax
jne 0x1400f01a5
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
mov dword [rsi + 0x14c], eax
call fcn.1400f8400
movsxd rcx, eax
mov qword [rsi + 0x88], rcx
jmp 0x1400f0219
mov ecx, 0x58
call qword [fcn.14014f7c8]
mov rcx, rax
test rax, rax
jne 0x1400f01cf
mov qword [rsi + 0x88], 0xfffffffffffff027
mov dword [rsi + 0x14c], ntohs
jmp 0x1400f0219
xor edi, edi
mov qword [rax], rdi
mov eax, dword [rbp + 0xd8]
imul eax, dword [rbp + 0xe0]
mov qword [rcx + 8], rax
mov eax, dword [rbp + 0xe8]
mov qword [rcx + 0x10], rax
mov eax, dword [rbp + 0xd0]
mov qword [rcx + 0x18], rax
mov eax, dword [rbp + 0xd0]
mov qword [rcx + 0x20], rax
mov qword [rcx + 0x28], rdi
mov qword [rcx + 0x30], rdi
mov qword [rsi + 0x90], rcx
mov qword [rsi + 0x88], rdi
mov r13, qword [rsp + 0x190]
mov r12, qword [rsp + 0x198]
mov rdi, qword [rsp + 0x1a0]
mov rbx, qword [rsp + 0x1a8]
mov r15, qword [rsp + 0x188]
add rsp, 0x1b0
pop r14
pop rsi
pop rbp
ret
lea rdx, str.uv__malloc
mov ecx, ntohs
call fcn.1400f8350
int3