Function at 0x140040b00
Capabilities:
Create directory
Enumerate files on windows
Enumerate files recursively

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x5a0
lea rdi, [rsp + 0x30]
mov ecx, 0x15c
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x5b0]
mov rax, qword [0x1402558e8]
xor rax, rsp
mov qword [rsp + 0x598], rax
mov rcx, qword [rsp + 0x5c0]
call fcn.140007e50
mov r9d, 0x72b
lea r8, [0x1401c3710]
lea rdx, [0x1401c3770]
mov rcx, rax
call fcn.14001a700
mov rcx, qword [rsp + 0x5b0]
call fcn.1400242e0
test rax, rax
jne 0x140040be0
mov dx, 0x5c
mov rcx, qword [rsp + 0x5b0]
call fcn.140010d00
test rax, rax
je 0x140040be0
mov rcx, qword [rsp + 0x5b8]
call fcn.1400242e0
test rax, rax
jne 0x140040be0
mov dx, 0x5c
mov rcx, qword [rsp + 0x5b8]
call fcn.140010d00
test rax, rax
je 0x140040be0
mov rcx, qword [rsp + 0x5c0]
call fcn.14001a950
test rax, rax
jne 0x140040be0
mov qword [rsp + 0x560], 1
jmp 0x140040bec
mov qword [rsp + 0x560], 0
mov r9d, 0x72e
lea r8, [0x1401c3790]
lea rdx, str.strSrcOSDir.IsEmpty_____FALSE__strSrcOSDir.EndOf__OS_PATH_CHAR___strDestOSDir.IsEmpty_____FALSE__strDestOSDir.EndOf__OS_PATH_CHAR___IsEmptyStr__szMatchFiles___FALSE
mov rcx, qword [rsp + 0x560]
call fcn.14001a700
cmp qword [rsp + 0x5d8], 0
je 0x140040c3d
mov edx, 1
mov rcx, qword [rsp + 0x5d8]
call fcn.140042090
test rax, rax
jne 0x140040c3d
mov qword [rsp + 0x568], 0
jmp 0x140040c49
mov qword [rsp + 0x568], 1
mov r9d, 0x72f
lea r8, [0x1401c3910]
lea rdx, [0x1401c3970]
mov rcx, qword [rsp + 0x568]
call fcn.14001a700
mov r8, qword [rsp + 0x5c0]
mov rdx, qword [rsp + 0x5b0]
lea rcx, [rsp + 0x4b0]
call fcn.1400588c0
mov qword [rsp + 0x570], rax
mov rax, qword [rsp + 0x570]
mov qword [rsp + 0x578], rax
mov rcx, qword [rsp + 0x578]
call fcn.140052570
lea rdx, [rsp + 0x40]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov qword [rsp + 0x298], rax
lea rcx, [rsp + 0x4b0]
call fcn.140006c20
mov qword [rsp + 0x2a0], 1
cmp qword [rsp + 0x298], 0xffffffffffffffff
je 0x140040f38
lea rcx, [rsp + 0x6c]
call fcn.140038790
test rax, rax
jne 0x140040f0f
mov eax, dword [rsp + 0x40]
and eax, 0x10
test eax, eax
jne 0x140040df5
lea r8, [rsp + 0x6c]
mov rdx, qword [rsp + 0x5b0]
lea rcx, [rsp + 0x2c0]
call fcn.1400588c0
nop
lea r8, [rsp + 0x6c]
mov rdx, qword [rsp + 0x5b8]
lea rcx, [rsp + 0x340]
call fcn.1400588c0
nop
lea rcx, [rsp + 0x340]
call fcn.140052570
mov qword [rsp + 0x580], rax
lea rcx, [rsp + 0x2c0]
call fcn.140052570
mov r8d, dword [rsp + 0x5c8]
mov rcx, qword [rsp + 0x580]
mov rdx, rcx
mov rcx, rax
call fcn.140038c20
test rax, rax
jne 0x140040dd5
cmp qword [rsp + 0x5d8], 0
je 0x140040dc9
lea rcx, [rsp + 0x2c0]
call fcn.140052570
mov rdx, rax
mov rcx, qword [rsp + 0x5d8]
call fcn.140019870
lea rcx, [rsp + 0x340]
call fcn.140052570
mov rdx, rax
mov rcx, qword [rsp + 0x5d8]
call fcn.140019870
mov qword [rsp + 0x2a0], 0
lea rcx, [rsp + 0x340]
call fcn.140006c20
nop
lea rcx, [rsp + 0x2c0]
call fcn.140006c20
jmp 0x140040f0f
cmp qword [rsp + 0x5d0], 0
je 0x140040f0f
lea r8, [rsp + 0x6c]
mov rdx, qword [rsp + 0x5b8]
lea rcx, [rsp + 0x3c0]
call fcn.1400588c0
nop
lea rcx, [rsp + 0x3c0]
call fcn.140052570
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov dx, 0x5c
lea rcx, [rsp + 0x3c0]
call fcn.140052cc0
lea r8, [rsp + 0x6c]
mov rdx, qword [rsp + 0x5b0]
lea rcx, [rsp + 0x508]
call fcn.1400588c0
mov qword [rsp + 0x588], rax
mov rax, qword [rsp + 0x588]
mov qword [rsp + 0x590], rax
lea r8, [0x1401c1104]
mov rdx, qword [rsp + 0x590]
lea rcx, [rsp + 0x440]
call fcn.1400588c0
nop
lea rcx, [rsp + 0x508]
call fcn.140006c20
mov rax, qword [rsp + 0x5d8]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x5d0]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x5c8]
mov r8, qword [rsp + 0x5c0]
lea rdx, [rsp + 0x3c0]
lea rcx, [rsp + 0x440]
call fcn.140040b00
test rax, rax
jne 0x140040ef4
mov qword [rsp + 0x2a0], 0
lea rcx, [rsp + 0x440]
call fcn.140006c20
nop
lea rcx, [rsp + 0x3c0]
call fcn.140006c20
lea rdx, [rsp + 0x40]
mov rcx, qword [rsp + 0x298]
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x140040cea
mov rcx, qword [rsp + 0x298]
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rax, qword [rsp + 0x2a0]
mov rdi, rax
mov rcx, rsp
lea rdx, [0x1401cc080]
call fcn.1400bfbe0
mov rax, rdi
mov rcx, qword [rsp + 0x598]
xor rcx, rsp
call fcn.1400bfed0
add rsp, 0x5a0
pop rdi
ret