Function at 0x140073be8
Capabilities:
Copy file
Create directory
Enumerate files on windows
Enumerate files recursively

Disassembly:
mov rax, rsp
mov dword [rax + 0x20], r9d
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rbx
push rsi
push rdi
lea rbp, [rax - 0x368]
sub rsp, 0x448
mov qword [rbp + 0xe0], 0xfffffffffffffffe
mov rsi, rcx
lea r8, [0x14009ad38]
mov rdx, rcx
lea rcx, [rbp - 0x50]
call fcn.14000b098
nop
lea rcx, [rbp - 0x50]
cmp qword [rbp - 0x38], 8
cmovae rcx, qword [rbp - 0x50]
lea rdx, [rbp + 0xf0]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rbx, rax
mov qword [rbp - 0x30], rax
xor eax, eax
mov rdi, qword [rbp + 0x390]
or rdx, 0xffffffffffffffff
cmp rbx, rdx
je 0x1400740fb
jmp 0x140073c6b
xor eax, eax
test byte [rbp + 0xf0], 0x10
je 0x140073fb9
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x48], 7
mov qword [rsp + 0x40], rax
mov word [rsp + 0x30], ax
cmp word [rbp + 0x11c], ax
jne 0x140073ca3
mov r8, rax
jmp 0x140073cb7
lea rcx, [rbp + 0x11c]
mov r8, rdx
inc r8
cmp word [rcx + r8*2], ax
jne 0x140073cad
lea rdx, [rbp + 0x11c]
lea rcx, [rsp + 0x30]
call fcn.14000a734
nop
lea rdx, [0x14009822c]
lea rcx, [rsp + 0x30]
call fcn.14001d144
test al, al
je 0x140073f8d
lea rdx, [0x14009ad44]
lea rcx, [rsp + 0x30]
call fcn.14001d144
xor r11d, r11d
test al, al
je 0x140073f8d
movsxd rcx, dword [rbp + 0x388]
test ecx, ecx
jle 0x140073f8d
mov rbx, qword [rbp + 0x380]
mov rsi, rcx
mov r9, qword [rsp + 0x40]
mov r10, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 8
jb 0x140073d2c
mov r8, qword [rbx]
jmp 0x140073d2f
mov r8, rbx
lea rcx, [rsp + 0x30]
cmp qword [rsp + 0x48], 8
cmovae rcx, qword [rsp + 0x30]
mov rdx, r10
cmp r9, r10
cmovb rdx, r9
test rdx, rdx
jmp 0x140073d63
movzx eax, word [r8]
cmp word [rcx], ax
jne 0x140073d67
add rcx, 2
add r8, 2
dec rdx
jne 0x140073d4f
jmp 0x140073d70
sbb eax, eax
and eax, 0xfffffffe
inc eax
jmp 0x140073d73
mov eax, r11d
movsxd rcx, eax
mov eax, r11d
cmp r9, r10
setne al
cmp r9, r10
mov rdx, 0xffffffffffffffff
cmovb eax, edx
test rcx, rcx
cmovne eax, ecx
test eax, eax
jne 0x140073f75
lea r8, [0x140098264]
mov rdx, qword [rbp + 0x370]
lea rcx, [rbp + 0x38]
call fcn.14000b098
nop
lea r8, [rsp + 0x30]
mov rdx, rax
lea rcx, [rbp - 0x28]
call fcn.140019cc8
nop
cmp qword [rbp + 0x50], 8
jb 0x140073dd4
mov rcx, qword [rbp + 0x38]
call fcn.1400431dc
mov qword [rbp + 0x50], 7
xor ecx, ecx
mov qword [rbp + 0x48], rcx
mov word [rbp + 0x38], cx
lea r8, [0x1400984a4]
mov rdx, qword [rbp + 0x378]
lea rcx, [rbp + 0x18]
call fcn.14000b098
nop
lea r8, [rsp + 0x30]
mov rdx, rax
lea rcx, [rbp - 8]
call fcn.140019cc8
nop
lea r8, [0x14009824c]
mov rdx, rax
lea rcx, [rbp + 0x98]
call fcn.14001d1cc
nop
mov r8, rdi
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.140019cc8
nop
cmp qword [rbp + 0xb0], 8
jb 0x140073e4e
mov rcx, qword [rbp + 0x98]
call fcn.1400431dc
mov qword [rbp + 0xb0], 7
xor eax, eax
mov qword [rbp + 0xa8], rax
mov word [rbp + 0x98], ax
cmp qword [rbp + 0x10], 8
jb 0x140073e7b
mov rcx, qword [rbp - 8]
call fcn.1400431dc
xor eax, eax
mov qword [rbp + 0x10], 7
mov qword [rbp + 8], rax
mov word [rbp - 8], ax
cmp qword [rbp + 0x30], 8
jb 0x140073e9d
mov rcx, qword [rbp + 0x18]
call fcn.1400431dc
xor eax, eax
mov qword [rbp + 0x30], 7
mov qword [rbp + 0x28], rax
mov word [rbp + 0x18], ax
lea rcx, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rcx, qword [rsp + 0x50]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea rax, [rbp + 0x78]
mov qword [rbp + 0xd8], rax
mov qword [rbp + 0x90], 7
xor ecx, ecx
mov qword [rbp + 0x88], rcx
mov word [rbp + 0x78], cx
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, rdi
lea rcx, [rbp + 0x78]
call fcn.140009c54
nop
lea rax, [rbp + 0x78]
mov qword [rsp + 0x20], rax
mov r9d, dword [rbp + 0x388]
mov r8, qword [rbp + 0x380]
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x28]
call fcn.140073be8
nop
cmp qword [rsp + 0x68], 8
jb 0x140073f35
mov rcx, qword [rsp + 0x50]
call fcn.1400431dc
mov qword [rsp + 0x68], 7
xor r11d, r11d
mov qword [rsp + 0x60], r11
mov word [rsp + 0x50], r11w
cmp qword [rbp - 0x10], 8
jb 0x140073f5f
mov rcx, qword [rbp - 0x28]
call fcn.1400431dc
xor r11d, r11d
mov qword [rbp - 0x10], 7
mov qword [rbp - 0x18], r11
mov word [rbp - 0x28], r11w
mov r9, qword [rsp + 0x40]
add rbx, 0x20
dec rsi
jne 0x140073d1c
mov rbx, qword [rbp - 0x30]
mov rsi, qword [rbp + 0x370]
cmp qword [rsp + 0x48], 8
jb 0x140073f9f
mov rcx, qword [rsp + 0x30]
call fcn.1400431dc
mov qword [rsp + 0x48], 7
xor eax, eax
mov qword [rsp + 0x40], rax
mov word [rsp + 0x30], ax
jmp 0x1400740d2
lea r8, [0x14009827c]
mov rdx, rsi
lea rcx, [rbp + 0xb8]
call fcn.14000b098
nop
lea r8, [rbp + 0x11c]
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.14001d1cc
nop
cmp qword [rbp + 0xd0], 8
jb 0x140073ffa
mov rcx, qword [rbp + 0xb8]
call fcn.1400431dc
mov qword [rbp + 0xd0], 7
xor eax, eax
mov qword [rbp + 0xc8], rax
mov word [rbp + 0xb8], ax
lea r8, [0x1400985cc]
mov rdx, qword [rbp + 0x378]
lea rcx, [rbp + 0x58]
call fcn.14000b098
nop
lea r8, [rbp + 0x11c]
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.14001d1cc
nop
cmp qword [rbp + 0x70], 8
jb 0x140074052
mov rcx, qword [rbp + 0x58]
call fcn.1400431dc
mov qword [rbp + 0x70], 7
xor eax, eax
mov qword [rbp + 0x68], rax
mov word [rbp + 0x58], ax
lea rdx, [rsp + 0x70]
cmp qword [rbp - 0x78], 8
cmovae rdx, qword [rsp + 0x70]
lea rcx, [rbp - 0x70]
cmp qword [rbp - 0x58], 8
cmovae rcx, qword [rbp - 0x70]
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CopyFileW]
nop
cmp qword [rbp - 0x78], 8
jb 0x14007409d
mov rcx, qword [rsp + 0x70]
call fcn.1400431dc
mov qword [rbp - 0x78], 7
xor eax, eax
mov qword [rbp - 0x80], rax
mov word [rsp + 0x70], ax
cmp qword [rbp - 0x58], 8
jb 0x1400740c2
mov rcx, qword [rbp - 0x70]
call fcn.1400431dc
xor eax, eax
mov qword [rbp - 0x58], 7
mov qword [rbp - 0x60], rax
mov word [rbp - 0x70], ax
lea rdx, [rbp + 0xf0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
mov rdx, 0xffffffffffffffff
jne 0x140073c69
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
cmp qword [rbp - 0x38], 8
jb 0x14007410b
mov rcx, qword [rbp - 0x50]
call fcn.1400431dc
mov esi, 7
mov qword [rbp - 0x38], rsi
xor ebx, ebx
mov qword [rbp - 0x40], rbx
mov word [rbp - 0x50], bx
cmp qword [rdi + 0x18], 8
jb 0x14007412d
mov rcx, qword [rdi]
call fcn.1400431dc
mov qword [rdi + 0x18], rsi
mov qword [rdi + 0x10], rbx
mov word [rdi], bx
add rsp, 0x448
pop rdi
pop rsi
pop rbx
pop rbp
ret