Function at 0x140074f3c
Capabilities:
Copy file
Enumerate files on windows

Disassembly:
mov rax, rsp
push rbp
push r14
push r15
lea rbp, [rax - 0x258]
sub rsp, 0x340
mov qword [rbp - 0x20], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
mov r14, r8
mov r15, rdx
mov rsi, rcx
lea r8, [0x14009abd8]
mov rdx, rcx
lea rcx, [rsp + 0x60]
call fcn.14000b098
nop
lea rcx, [rsp + 0x60]
cmp qword [rsp + 0x78], 8
cmovae rcx, qword [rsp + 0x60]
lea rdx, [rbp - 0x10]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rdi, rax
xor r12d, r12d
lea ebx, [r12 + 7]
or rcx, 0xffffffffffffffff
cmp rax, rcx
je 0x1400751e7
test byte [rbp - 0x10], 0x10
jne 0x1400751c1
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], r12
mov word [rsp + 0x20], r12w
cmp word [rbp + 0x1c], r12w
jne 0x140074feb
mov r8, r12
jmp 0x140074ffc
lea rax, [rbp + 0x1c]
mov r8, rcx
inc r8
cmp word [rax + r8*2], r12w
jne 0x140074ff2
lea rdx, [rbp + 0x1c]
lea rcx, [rsp + 0x20]
call fcn.14000a734
nop
mov r10, r12
mov rdx, r14
mov rbx, qword [rsp + 0x30]
mov r11, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 8
jb 0x140075026
mov rcx, qword [rdx]
jmp 0x140075029
mov rcx, rdx
lea r8, [rsp + 0x20]
cmp qword [rsp + 0x38], 8
cmovae r8, qword [rsp + 0x20]
mov r9, r11
cmp rbx, r11
cmovb r9, rbx
test r9, r9
jmp 0x14007505d
movzx eax, word [rcx]
cmp word [r8], ax
jne 0x140075061
add r8, 2
add rcx, 2
dec r9
jne 0x140075049
jmp 0x14007506a
sbb eax, eax
and eax, 0xfffffffe
inc eax
jmp 0x14007506d
mov eax, r12d
movsxd rcx, eax
mov eax, r12d
cmp rbx, r11
setne al
cmp rbx, r11
mov r8, 0xffffffffffffffff
cmovb eax, r8d
test rcx, rcx
cmovne eax, ecx
test eax, eax
je 0x1400750ab
inc r10
add rdx, 0x20
cmp r10, 4
jl 0x140075016
lea ebx, [r8 + 8]
jmp 0x14007519f
lea r8, [0x14009817c]
mov rdx, rsi
lea rcx, [rbp - 0x60]
call fcn.14000b098
nop
lea r8, [rsp + 0x20]
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.140019cc8
nop
cmp qword [rbp - 0x48], 8
jb 0x1400750e2
mov rcx, qword [rbp - 0x60]
call fcn.1400431dc
mov ebx, 7
mov qword [rbp - 0x48], rbx
mov qword [rbp - 0x50], r12
mov word [rbp - 0x60], r12w
lea r8, [0x14009818c]
mov rdx, r15
lea rcx, [rbp - 0x40]
call fcn.14000b098
nop
lea r8, [rsp + 0x20]
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.140019cc8
nop
cmp qword [rbp - 0x28], 8
jb 0x14007512a
mov rcx, qword [rbp - 0x40]
call fcn.1400431dc
mov qword [rbp - 0x28], rbx
mov qword [rbp - 0x30], r12
mov word [rbp - 0x40], r12w
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rdx, qword [rbp - 0x80]
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rcx, qword [rsp + 0x40]
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CopyFileW]
nop
cmp qword [rbp - 0x68], 8
jb 0x140075170
mov rcx, qword [rbp - 0x80]
call fcn.1400431dc
mov qword [rbp - 0x68], rbx
mov qword [rbp - 0x70], r12
mov word [rbp - 0x80], r12w
cmp qword [rsp + 0x58], 8
jb 0x14007518f
mov rcx, qword [rsp + 0x40]
call fcn.1400431dc
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x50], r12
mov word [rsp + 0x40], r12w
cmp qword [rsp + 0x38], 8
jb 0x1400751b1
mov rcx, qword [rsp + 0x20]
call fcn.1400431dc
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], r12
mov word [rsp + 0x20], r12w
lea rdx, [rbp - 0x10]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
mov rcx, 0xffffffffffffffff
jne 0x140074fbb
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
cmp qword [rsp + 0x78], 8
jb 0x1400751f9
mov rcx, qword [rsp + 0x60]
call fcn.1400431dc
mov qword [rsp + 0x78], rbx
mov qword [rsp + 0x70], r12
mov word [rsp + 0x60], r12w
lea r11, [rsp + 0x340]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret