Function at 0x1400de790
Capabilities:
Copy file
Create directory
Enumerate files on windows
Set file attributes

Disassembly:
xor r9d, r9d
jmp 0x1400de798
mov rax, rsp
mov dword [rax + 0x20], r9d
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
push rbp
push rbx
push rsi
push rdi
lea rbp, [rax - 0x9d8]
sub rsp, 0xab8
mov rbx, rcx
xor ecx, ecx
mov rax, rdx
mov edi, ecx
mov esi, ecx
test rbx, rbx
je 0x1400dea85
cmp word [rbx], cx
je 0x1400dea85
test rax, rax
je 0x1400dea85
cmp word [rdx], cx
je 0x1400dea85
lea rcx, [rsp + 0x20]
mov r8d, 0x104
call fcn.14009f33c
xor eax, eax
lea rcx, [rsp + 0x20]
mov word [rbp + 0x128], ax
call sub.msvcrt.dll_wcslen
movsxd rcx, eax
cmp word [rsp + rcx*2 + 0x1e], 0x5c
jne 0x1400de81e
xor eax, eax
mov word [rsp + rcx*2 + 0x1e], ax
lea rcx, [rbp + 0x380]
mov r8d, 0x104
mov rdx, rbx
call fcn.14009f33c
lea rcx, [rbp + 0x380]
xor ebx, ebx
mov word [rbp + 0x588], bx
call sub.msvcrt.dll_wcslen
test eax, eax
je 0x1400de86c
cdqe
cmp word [rbp + rax*2 + 0x37e], 0x5c
je 0x1400de86c
lea rdx, [0x1401fbfc8]
lea rcx, [rbp + 0x380]
call sub.msvcrt.dll_wcscat
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0x7a0]
call sub.msvcrt.dll_wcscpy
mov rbx, qword [rbp + 0x9f0]
xor eax, eax
lea rdx, [0x1401fc008]
test rbx, rbx
je 0x1400de899
cmp word [rbx], ax
jne 0x1400de89c
mov rbx, rdx
lea rcx, [rbp + 0x380]
call sub.msvcrt.dll_wcscat
lea rdx, [rbp + 0x130]
lea rcx, [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov ecx, 1
cmp rax, 0xffffffffffffffff
je 0x1400de8d8
test byte [rbp + 0x130], 0x10
cmovne esi, ecx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FindClose]
lea rdx, [rbp + 0x130]
lea rcx, [rbp + 0x380]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov qword [rbp + 0x9e0], rax
cmp rax, 0xffffffffffffffff
je 0x1400dea85
test esi, esi
jne 0x1400de92f
lea rcx, [rsp + 0x20]
call sub.msvcrt.dll_wcslen
mov rsi, qword [rbp + 0x9e8]
cmp word [rsp + rax*2 + 0x1e], 0x3a
je 0x1400de936
xor edx, edx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
je 0x1400dea78
jmp 0x1400de936
mov rsi, qword [rbp + 0x9e8]
mov edi, 1
lea rdx, [rbp + 0x7a0]
lea rcx, [rbp + 0x590]
call sub.msvcrt.dll_wcscpy
lea rdx, [rbp + 0x15c]
lea rcx, [rbp + 0x590]
call sub.msvcrt.dll_wcscat
lea rcx, [rsp + 0x20]
mov r8d, 0x104
mov rdx, rsi
call fcn.14009f33c
xor eax, eax
lea rcx, [rsp + 0x20]
mov word [rbp + 0x128], ax
call sub.msvcrt.dll_wcslen
test eax, eax
je 0x1400de9a6
cdqe
cmp word [rsp + rax*2 + 0x1e], 0x5c
je 0x1400de9a6
lea rdx, [0x1401fbfc8]
lea rcx, [rsp + 0x20]
call sub.msvcrt.dll_wcscat
lea rdx, [rbp + 0x15c]
lea rcx, [rsp + 0x20]
call sub.msvcrt.dll_wcscat
test byte [rbp + 0x130], 0x10
je 0x1400dea18
test byte [rbp + 0x9f8], 1
je 0x1400dea5c
lea rdx, [0x1401fc02c]
lea rcx, [rbp + 0x15c]
call sub.msvcrt.dll_wcscmp
test eax, eax
je 0x1400dea5c
lea rdx, [0x1401fc034]
lea rcx, [rbp + 0x15c]
call sub.msvcrt.dll_wcscmp
test eax, eax
je 0x1400dea5c
mov r9d, dword [rbp + 0x9f8]
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x590]
mov r8, rbx
call 0x1400de798
jmp 0x1400dea5a
lea rcx, [rbp + 0x15c]
mov rdx, rbx
call qword [sym.imp.SHLWAPI.dll_PathMatchSpecW]
test eax, eax
je 0x1400dea5c
test byte [rbp + 0x9f8], 2
je 0x1400dea45
lea rcx, [rsp + 0x20]
mov edx, pe_nt_image_headers64
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x590]
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CopyFileW]
and edi, eax
mov rcx, qword [rbp + 0x9e0]
lea rdx, [rbp + 0x130]
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x1400de93b
mov rcx, qword [rbp + 0x9e0]
call qword [sym.imp.KERNEL32.dll_FindClose]
movsxd rax, edi
add rsp, 0xab8
pop rdi
pop rsi
pop rbx
pop rbp
ret