Function at 0x14022ee38
Capabilities:
Copy file
Create directory
Enumerate files on windows
Enumerate files recursively

Disassembly:
mov rax, rsp
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0x2d8]
sub rsp, 0x3b0
mov qword [rsp + 0x38], 0xfffffffffffffffe
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rsi
mov rax, qword [0x1405420e0]
xor rax, rsp
mov qword [rbp + 0x2a0], rax
mov r15, rdx
mov rdi, rcx
xor r12d, r12d
cmp qword [rcx + 0x10], r12
jne 0x14022ee8c
mov eax, 0x80070057
jmp 0x14022f45d
lea r8, [0x1403ce794]
mov rdx, rdi
lea rcx, [rbp - 0x78]
call fcn.140067914
nop
lea rcx, [rbp - 0x78]
cmp qword [rbp - 0x60], 8
cmovae rcx, qword [rbp - 0x78]
lea rdx, [rbp - 0x10]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
nop dword [rax + rax]
mov rbx, rax
mov qword [rsp + 0x40], rax
or rsi, 0xffffffffffffffff
cmp rax, rsi
jne 0x14022efa5
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov esi, eax
call fcn.1400550c0
mov rcx, qword [rax + 8]
cmp dword [rcx], 3
jbe 0x14022ef92
lea rax, str.Failed_copying_folder_content
mov qword [rbp + 0x260], rax
mov qword [rbp + 0x268], 0x3c
cmp qword [rdi + 0x18], 8
jb 0x14022ef16
mov rdi, qword [rdi]
lea r14, [0x1403cb630]
mov rax, r12
test rdi, rdi
je 0x14022ef36
mov r14, rdi
or rax, 0xffffffffffffffff
inc rax
cmp word [rdi + rax*2], r12w
jne 0x14022ef2c
mov qword [rbp + 0x270], r14
lea eax, [rax*2 + 2]
mov dword [rbp + 0x278], eax
mov dword [rbp + 0x27c], r12d
mov dword [rsp + 0x30], esi
lea rax, [rsp + 0x30]
mov qword [rbp + 0x280], rax
mov qword [rbp + 0x288], 4
lea rax, [rbp + 0x240]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 5
xor r9d, r9d
xor r8d, r8d
lea rdx, [0x1404849c4]
call fcn.140001208
movzx edi, si
or edi, 0x80070000
test esi, esi
cmovle edi, esi
jmp 0x14022f438
lea r14, [0x1403cb630]
lea r8, [0x1403ce9d8]
mov rdx, rdi
lea rcx, [rbp - 0x58]
call fcn.140067914
nop
lea rcx, [rbp + 0x1c]
mov r8, rsi
inc r8
cmp word [rcx + r8*2], r12w
jne 0x14022efc7
lea rdx, [rbp + 0x1c]
mov rcx, rax
call fcn.140068814
mov qword [rsp + 0x78], r12
mov qword [rbp - 0x80], r12
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x78], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
lea rcx, [rbp - 0x58]
call fcn.140055f70
lea r8, [0x1403ce9d8]
mov rdx, r15
lea rcx, [rbp - 0x38]
call fcn.140067914
nop
lea rcx, [rbp + 0x1c]
mov r8, rsi
inc r8
cmp word [rcx + r8*2], r12w
jne 0x14022f02b
lea rdx, [rbp + 0x1c]
mov rcx, rax
call fcn.140068814
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x60], r12
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x58], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
lea rcx, [rbp - 0x38]
call fcn.140055f70
test byte [rbp - 0x10], 0x10
je 0x14022f2b9
movzx ecx, word [rbp + 0x1c]
movzx eax, word [rbp + 0x1e]
cmp cx, word [0x1403d5500]
jne 0x14022f09d
cmp ax, word [0x1403d5502]
je 0x14022f405
cmp cx, word [0x1403f3f90]
jne 0x14022f0c0
cmp ax, word [0x1403f3f92]
jne 0x14022f0c0
movzx eax, word [rbp + 0x20]
cmp ax, word [0x1403f3f94]
je 0x14022f405
call fcn.1400550c0
mov r10, qword [rax + 8]
cmp dword [r10], 5
jbe 0x14022f1a2
lea rax, str.Copying_directory
mov qword [rbp + 0x260], rax
mov qword [rbp + 0x268], MsiGetActiveDatabase
lea rax, [rsp + 0x68]
cmp qword [rbp - 0x80], 8
cmovae rax, qword [rsp + 0x68]
mov rdx, r14
mov rcx, r12
test rax, rax
je 0x14022f117
mov rdx, rax
mov rcx, rsi
inc rcx
cmp word [rax + rcx*2], r12w
jne 0x14022f10d
mov qword [rbp + 0x270], rdx
lea eax, [rcx*2 + 2]
mov dword [rbp + 0x278], eax
mov dword [rbp + 0x27c], r12d
lea rcx, [rsp + 0x48]
cmp qword [rsp + 0x60], 8
cmovae rcx, qword [rsp + 0x48]
mov rdx, r14
mov rax, r12
test rcx, rcx
je 0x14022f15e
mov rdx, rcx
mov rax, rsi
inc rax
cmp word [rcx + rax*2], r12w
jne 0x14022f154
mov qword [rbp + 0x280], rdx
lea eax, [rax*2 + 2]
mov dword [rbp + 0x288], eax
mov dword [rbp + 0x28c], r12d
lea rax, [rbp + 0x240]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 5
xor r9d, r9d
xor r8d, r8d
lea rdx, [0x1404847b8]
mov rcx, r10
call fcn.140001208
lea rcx, [rsp + 0x48]
cmp qword [rsp + 0x60], 8
cmovae rcx, qword [rsp + 0x48]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
nop dword [rax + rax]
test eax, eax
jne 0x14022f2a5
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
cmp eax, 0xb7
je 0x14022f2a5
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov dword [rsp + 0x30], ecx
call fcn.1400550c0
mov r10, qword [rax + 8]
cmp dword [r10], 2
jbe 0x14022f2a5
lea rax, [rsp + 0x30]
mov qword [rbp + 0x260], rax
mov qword [rbp + 0x268], 4
lea rax, str.Failed_creating_directory
mov qword [rbp + 0x270], rax
mov qword [rbp + 0x278], 0x34
lea rcx, [rsp + 0x48]
cmp qword [rsp + 0x60], 8
cmovae rcx, qword [rsp + 0x48]
mov rdx, r14
mov rax, r12
test rcx, rcx
je 0x14022f261
mov rdx, rcx
mov rax, rsi
inc rax
cmp word [rcx + rax*2], r12w
jne 0x14022f257
mov qword [rbp + 0x280], rdx
lea eax, [rax*2 + 2]
mov dword [rbp + 0x288], eax
mov dword [rbp + 0x28c], r12d
lea rax, [rbp + 0x240]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 5
xor r9d, r9d
xor r8d, r8d
lea rdx, [0x140484a3f]
mov rcx, r10
call fcn.140001208
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x68]
call fcn.14022ee38
jmp 0x14022f405
lea rdx, [rsp + 0x48]
cmp qword [rsp + 0x60], 8
cmovae rdx, qword [rsp + 0x48]
lea rcx, [rsp + 0x68]
cmp qword [rbp - 0x80], 8
cmovae rcx, qword [rsp + 0x68]
mov r8d, 1
call qword [sym.imp.KERNEL32.dll_CopyFileW]
nop dword [rax + rax]
test eax, eax
jne 0x14022f405
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov esi, eax
call fcn.1400550c0
mov r10, qword [rax + 8]
cmp dword [r10], 3
jbe 0x14022f401
lea rax, str.Failed_copying_file
mov qword [rbp + 0x260], rax
mov qword [rbp + 0x268], MsiGetActiveDatabase
lea rcx, [rsp + 0x68]
cmp qword [rbp - 0x80], 8
cmovae rcx, qword [rsp + 0x68]
mov rdx, r14
mov rax, r12
test rcx, rcx
je 0x14022f35a
mov rdx, rcx
or rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], r12w
jne 0x14022f350
mov qword [rbp + 0x270], rdx
lea eax, [rax*2 + 2]
mov dword [rbp + 0x278], eax
mov dword [rbp + 0x27c], r12d
lea rcx, [rsp + 0x48]
cmp qword [rsp + 0x60], 8
cmovae rcx, qword [rsp + 0x48]
mov rdx, r14
mov rax, r12
test rcx, rcx
je 0x14022f3a2
mov rdx, rcx
or rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], r12w
jne 0x14022f398
mov qword [rbp + 0x280], rdx
lea eax, [rax*2 + 2]
mov dword [rbp + 0x288], eax
mov dword [rbp + 0x28c], r12d
mov dword [rsp + 0x34], esi
lea rax, [rsp + 0x34]
mov qword [rbp + 0x290], rax
mov qword [rbp + 0x298], 4
lea rax, [rbp + 0x240]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 6
xor r9d, r9d
xor r8d, r8d
lea rdx, [0x14048485c]
mov rcx, r10
call fcn.140001208
or rsi, 0xffffffffffffffff
lea rcx, [rsp + 0x48]
call fcn.140055f70
nop
lea rcx, [rsp + 0x68]
call fcn.140055f70
lea rdx, [rbp - 0x10]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
nop dword [rax + rax]
test eax, eax
jne 0x14022efac
mov edi, r12d
lea rcx, [rbx - 1]
cmp rcx, 0xfffffffffffffffd
ja 0x14022f452
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindClose]
nop dword [rax + rax]
nop
lea rcx, [rbp - 0x78]
call fcn.140055f70
mov eax, edi
mov rcx, qword [rbp + 0x2a0]
xor rcx, rsp
call fcn.140356560
lea r11, [rsp + 0x3b0]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret