Function at 0x1400fde70
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
mov qword [rsp + 8], rcx
push rbp
lea rbp, [rsp - 0x5a0]
sub rsp, 0x6a0
mov r10, r9
lea r9, [rbp + 0x180]
mov rsi, rdx
sub r9, r8
nop dword [rax]
nop dword [rax + rax]
movzx eax, word [r8]
lea r8, [r8 + 2]
mov word [r9 + r8 - 2], ax
test ax, ax
jne 0x1400fdeb0
mov eax, dword [0x140167e60]
or r9, 0xffffffffffffffff
test r10, r10
je 0x1400fdf44
mov rcx, r9
inc rcx
cmp word [r10 + rcx*2], 0
jne 0x1400fded5
test rcx, rcx
je 0x1400fdf44
cmp word [r10], 0x5c
je 0x1400fdf0d
lea rcx, [rbp + 0x180]
sub rcx, 2
nop word [rax + rax]
cmp word [rcx + 2], 0
lea rcx, [rcx + 2]
jne 0x1400fdf00
mov dword [rcx], eax
lea rdx, [rbp + 0x180]
sub rdx, 2
nop dword [rax + rax]
cmp word [rdx + 2], 0
lea rdx, [rdx + 2]
jne 0x1400fdf20
xor r8d, r8d
nop
movzx ecx, word [r10 + r8*2]
lea r8, [r8 + 1]
mov word [rdx + r8*2 - 2], cx
test cx, cx
jne 0x1400fdf30
xor edi, edi
mov edx, edi
nop dword [rax + rax]
movzx ecx, word [rbp + rdx + 0x180]
lea rdx, [rdx + 2]
mov word [rbp + rdx + 0x38e], cx
test cx, cx
jne 0x1400fdf50
mov r8, qword [rbp + 0x5d0]
test r8, r8
je 0x1400fdfd3
inc r9
cmp word [r8 + r9*2], di
jne 0x1400fdf75
test r9, r9
je 0x1400fdfd3
cmp word [r8], 0x5c
je 0x1400fdfa2
lea rcx, [rbp + 0x180]
sub rcx, 2
cmp word [rcx + 2], di
lea rcx, [rcx + 2]
jne 0x1400fdf96
mov dword [rcx], eax
lea rcx, [rbp + 0x180]
sub rcx, 2
nop dword [rax]
cmp word [rcx + 2], di
lea rcx, [rcx + 2]
jne 0x1400fdfb0
xor edx, edx
nop dword [rax]
movzx eax, word [r8 + rdx*2]
lea rdx, [rdx + 1]
mov word [rcx + rdx*2 - 2], ax
test ax, ax
jne 0x1400fdfc0
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x180]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1400fe04f
nop
test byte [rsp + 0x30], 0x10
jne 0x1400fe021
mov rcx, qword [rbp + 0x5b0]
lea rax, [rsp + 0x30]
lea r9, [rsp + 0x5c]
lea r8, [rbp + 0x390]
mov rdx, rsi
mov qword [rsp + 0x20], rax
call fcn.1400fe5d0
mov edi, 1
lea rdx, [rsp + 0x30]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x1400fdff0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindClose]
test edi, edi
je 0x1400fe04f
lea rdx, [0x1401873a4]
mov rcx, rsi
call fcn.14012755c
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x180]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1400fe128
mov edi, dword [rbp + 0x5d8]
test byte [rsp + 0x30], 0x10
je 0x1400fe109
movzx ecx, word [rsp + 0x5c]
movzx eax, word [rsp + 0x5e]
cmp cx, word [0x14017e008]
jne 0x1400fe09b
cmp ax, word [0x14017e00a]
je 0x1400fe109
cmp cx, word [0x14019ea4c]
jne 0x1400fe0bb
cmp ax, word [0x14019ea4e]
jne 0x1400fe0bb
movzx eax, word [rsp + 0x60]
cmp ax, word [0x14019ea50]
je 0x1400fe109
lea r9, [rsp + 0x5c]
lea r8, [rbp + 0x390]
lea rdx, str._s_s_n
mov rcx, rsi
call fcn.14012755c
test edi, edi
je 0x1400fe109
mov rcx, qword [rbp + 0x5b0]
lea rax, str..
lea r9, [rsp + 0x5c]
lea r8, [rbp + 0x390]
mov rdx, rsi
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rax
call fcn.1400fde70
lea rdx, [rsp + 0x30]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x1400fe074
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindClose]
lea r11, [rsp + 0x6a0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret