Function at 0x1400471ec
Capabilities:
Copy file
Enumerate files on windows

Disassembly:
mov rax, rsp
push rbp
push r14
push r15
lea rbp, [rax - 0x258]
sub rsp, 0x340
mov qword [rbp - 0x40], 0xfffffffffffffffe
mov qword [rax + 8], rsi
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], r12
mov r14, r8
mov r15, rdx
mov rsi, rcx
lea r8, [0x14005d688]
mov rdx, rcx
lea rcx, [rbp - 0x80]
call fcn.1400064b0
nop
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rcx, qword [rbp - 0x80]
lea rdx, [rbp - 0x10]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rdi, rax
or rcx, 0xffffffffffffffff
cmp rax, rcx
je 0x140047462
xor r12d, r12d
test byte [rbp - 0x10], 0x10
jne 0x14004743c
mov qword [rsp + 0x38], 7
mov qword [rsp + 0x30], r12
mov word [rsp + 0x20], r12w
cmp word [rbp + 0x1c], r12w
jne 0x140047288
mov r8, r12
jmp 0x140047299
lea rax, [rbp + 0x1c]
mov r8, rcx
inc r8
cmp word [rax + r8*2], r12w
jne 0x14004728f
lea rdx, [rbp + 0x1c]
lea rcx, [rsp + 0x20]
call fcn.140001b58
nop
mov r10, r12
mov rdx, r14
mov r11, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 8
jb 0x1400472be
mov rcx, qword [rdx]
jmp 0x1400472c1
mov rcx, rdx
lea r8, [rsp + 0x20]
cmp qword [rsp + 0x38], 8
cmovae r8, qword [rsp + 0x20]
mov r9, r11
cmp qword [rsp + 0x30], r11
cmovb r9, qword [rsp + 0x30]
test r9, r9
jmp 0x1400472f9
movzx eax, word [rcx]
cmp word [r8], ax
jne 0x1400472fd
add r8, 2
add rcx, 2
dec r9
jne 0x1400472e5
jmp 0x140047306
sbb eax, eax
and eax, 0xfffffffe
inc eax
jmp 0x140047309
mov eax, r12d
movsxd rcx, eax
mov eax, r12d
cmp qword [rsp + 0x30], r11
setne al
cmp qword [rsp + 0x30], r11
mov r8, 0xffffffffffffffff
cmovb eax, r8d
test rcx, rcx
cmovne eax, ecx
test eax, eax
je 0x140047347
inc r10
add rdx, 0x20
cmp r10, 4
jl 0x1400472ae
jmp 0x14004742a
lea r8, [0x14005ab74]
mov rdx, rsi
lea rcx, [rsp + 0x60]
call fcn.1400064b0
nop
lea r8, [rsp + 0x20]
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.14001461c
nop
cmp qword [rsp + 0x78], 8
jb 0x140047380
mov rcx, qword [rsp + 0x60]
call fcn.1400208dc
mov qword [rsp + 0x78], 7
mov qword [rsp + 0x70], r12
mov word [rsp + 0x60], r12w
lea r8, [0x14005ab84]
mov rdx, r15
lea rcx, [rbp - 0x38]
call fcn.1400064b0
nop
lea r8, [rsp + 0x20]
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.14001461c
nop
cmp qword [rbp - 0x20], 8
jb 0x1400473cb
mov rcx, qword [rbp - 0x38]
call fcn.1400208dc
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rdx, qword [rsp + 0x40]
lea rcx, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae rcx, qword [rbp - 0x60]
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CopyFileW]
cmp qword [rsp + 0x58], 8
jb 0x140047405
mov rcx, qword [rsp + 0x40]
call fcn.1400208dc
mov qword [rsp + 0x58], 7
mov qword [rsp + 0x50], r12
mov word [rsp + 0x40], r12w
cmp qword [rbp - 0x48], 8
jb 0x14004742a
mov rcx, qword [rbp - 0x60]
call fcn.1400208dc
nop
cmp qword [rsp + 0x38], 8
jb 0x14004743c
mov rcx, qword [rsp + 0x20]
call fcn.1400208dc
lea rdx, [rbp - 0x10]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
mov rcx, 0xffffffffffffffff
jne 0x14004725e
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
cmp qword [rbp - 0x68], 8
jb 0x140047472
mov rcx, qword [rbp - 0x80]
call fcn.1400208dc
lea r11, [rsp + 0x340]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov r12, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret