Function at 0x14000d0b0
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1d0]
sub rsp, 0x2d0
mov rax, qword [0x140262920]
xor rax, rsp
mov qword [rbp + 0x1c0], rax
mov qword [rsp + 0x50], r9
movzx r13d, dl
mov byte [rsp + 0x30], dl
mov r15, rcx
mov qword [rsp + 0x38], rcx
xor r14d, r14d
mov dword [rsp + 0x34], r14d
mov rsi, qword [rcx]
lea rbx, [rsi - 0x18]
mov rcx, qword [rbx]
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
cmp dword [rbx + 0x10], r14d
jl 0x14000d121
cmp rax, qword [rbx]
jne 0x14000d121
lock inc dword [rbx + 0x10]
jmp 0x14000d158
lea rdi, [rbx + 8]
mov rax, qword [rax]
mov r8d, 2
mov edx, dword [rdi]
call qword [rax]
mov rbx, rax
test rax, rax
je 0x14000d578
mov eax, dword [rdi]
mov dword [rbx + 8], eax
mov r9d, dword [rdi]
inc r9d
movsxd rdx, r9d
lea rcx, [rbx + 0x18]
mov r8, rsi
call fcn.140005720
lea rsi, [rbx + 0x18]
mov qword [rsp + 0x60], rsi
mov r8d, 1
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x60]
call fcn.140004710
nop
mov rcx, qword [rax]
movzx ebx, word [rcx]
sub ebx, 0x5c
jne 0x14000d18c
movzx ebx, word [rcx + 2]
movzx eax, r14w
sub ebx, eax
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov r14, 0xffffffffffffffff
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000d1b2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test ebx, ebx
jne 0x14000d208
mov rbx, qword [rsp + 0x60]
mov esi, dword [rbx - 0x10]
lea edi, [rsi + 1]
test edi, edi
js 0x14000d56d
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edi
or eax, ecx
jge 0x14000d1eb
mov edx, edi
lea rcx, [rsp + 0x60]
call fcn.1400058d0
mov rbx, qword [rsp + 0x60]
mov ecx, 0x2a
mov word [rbx + rsi*2], cx
cmp edi, dword [rbx - 0xc]
jg 0x14000d56d
mov dword [rbx - 0x10], edi
movsxd rax, edi
jmp 0x14000d2b7
lea rdi, [0x14022f664]
mov rax, r14
inc rax
cmp word [rdi + rax*2], 0
jne 0x14000d212
mov r15, rdi
sub r15, rsi
sar r15, 1
mov rbx, qword [rsp + 0x60]
mov r13d, dword [rbx - 0x10]
test eax, eax
js 0x14000d56d
movsxd rdx, eax
mov rcx, rdi
call fcn.1401a4084
mov r12, rax
mov ecx, 0x7fffffff
sub ecx, eax
cmp ecx, r13d
jl 0x14000d56d
lea esi, [rax + r13]
test esi, esi
js 0x14000d56d
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, esi
or eax, ecx
jge 0x14000d282
mov edx, esi
lea rcx, [rsp + 0x60]
call fcn.1400058d0
mov rbx, qword [rsp + 0x60]
cmp r15, r13
ja 0x14000d28b
lea rdi, [rbx + r15*2]
movsxd rdx, r12d
lea rcx, [rbx + r13*2]
mov r9d, r12d
mov r8, rdi
call fcn.140005720
cmp esi, dword [rbx - 0xc]
jg 0x14000d56d
mov dword [rbx - 0x10], esi
movsxd rax, esi
mov r15, qword [rsp + 0x38]
movzx r13d, byte [rsp + 0x30]
xor edi, edi
mov word [rbx + rax*2], di
lea rdx, [rsp + 0x70]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r12, rax
cmp rax, r14
je 0x14000d51f
nop word [rax + rax]
test byte [rsp + 0x70], 0x10
je 0x14000d476
test r13b, r13b
je 0x14000d4f8
movzx ecx, word [rbp - 0x64]
movzx eax, word [rbp - 0x62]
cmp cx, 0x2e
jne 0x14000d320
test ax, ax
je 0x14000d4f8
cmp cx, cx
jne 0x14000d320
cmp ax, cx
jne 0x14000d320
cmp word [rbp - 0x60], 0
je 0x14000d4f8
mov qword [rsp + 0x38], rdi
mov rax, qword [r15]
mov rcx, qword [rax - 0x18]
test rcx, rcx
je 0x14000d33f
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
test rax, rax
jne 0x14000d359
call fcn.14001aef0
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rax, rax
je 0x14000d589
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x38], rax
mov esi, dword [rsp + 0x34]
or esi, 1
mov dword [rsp + 0x34], esi
mov rdx, qword [r15]
mov dword [rsp + 0x20], 1
lea r9, [0x14022ee08]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x38]
call fcn.14000bf50
nop
mov qword [rsp + 0x40], rdi
mov rbx, qword [rsp + 0x38]
mov rcx, qword [rbx - 0x18]
test rcx, rcx
je 0x14000d3b5
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rcx, rax
test rax, rax
jne 0x14000d3cf
call fcn.14001aef0
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rax, rax
je 0x14000d57e
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x40], rax
or esi, 2
mov dword [rsp + 0x34], esi
lea rcx, [rbp - 0x64]
mov rax, r14
nop dword [rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x14000d3f0
mov dword [rsp + 0x20], eax
lea r9, [rbp - 0x64]
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rsp + 0x40]
call fcn.14000bf50
mov r9, qword [rsp + 0x50]
lea r8, [0x1400034c0]
movzx edx, r13b
lea rcx, [rsp + 0x40]
call fcn.14000d0b0
and esi, 0xfffffffd
mov dword [rsp + 0x34], esi
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000d453
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
and dword [rsp + 0x34], 0xfffffffe
mov eax, r14d
lock xadd dword [rbx - 8], eax
sub eax, 1
jg 0x14000d4f8
mov rcx, qword [rbx - 0x18]
lea rdx, [rbx - 0x18]
jmp 0x14000d4f2
call fcn.14001aef0
test rax, rax
je 0x14000d562
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x18]
add rax, 0x18
mov qword [rsp + 0x48], rax
lea rax, [rbp - 0x64]
lea rcx, [rsp + 0x48]
cmp rax, 0x10000
jae 0x14000d4b5
lea rax, [rbp - 0x64]
movzx edx, ax
call fcn.140005240
jmp 0x14000d4bf
lea rdx, [rbp - 0x64]
call fcn.140005550
nop
mov rcx, qword [rsp + 0x50]
add rcx, 0x408
lea r8, [rsp + 0x48]
mov rdx, r15
call fcn.140008930
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14000d4f8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, [rsp + 0x70]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x14000d511
xor edi, edi
jmp 0x14000d2e0
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rbx, qword [rsp + 0x60]
lea rdx, [rbx - 0x18]
lock xadd dword [rdx + 0x10], r14d
sub r14d, 1
jg 0x14000d538
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rbp + 0x1c0]
xor rcx, rsp
call fcn.140199ac0
mov rbx, qword [rsp + 0x320]
add rsp, 0x2d0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov ecx, 0x80004005
call fcn.140005930
int3
mov ecx, 0x80070057
call fcn.140005930
nop
call fcn.140005870
nop
mov ecx, 0x80004005
call fcn.140005930
nop
mov ecx, 0x80004005
call fcn.140005930
int3