Function at 0x1400040f0
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1a0]
sub rsp, 0x2a0
mov rax, qword [0x14008e080]
xor rax, rsp
mov qword [rbp + 0x190], rax
mov rsi, r8
mov qword [rsp + 0x48], r8
mov rdi, rdx
mov r13, rcx
mov qword [rbp - 0x40], rcx
mov qword [rbp - 0x40], rdx
mov qword [rbp - 0x38], r8
xor r14d, r14d
lea rcx, [rbp + 0x28]
call fcn.14000c180
nop
lea rcx, [rbp + 0x30]
cmp qword [rbp + 0x48], 0xf
cmova rcx, qword [rbp + 0x30]
lea rdx, [rbp + 0x50]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov r12, rax
mov qword [rbp], r14
xorps xmm0, xmm0
movups xmmword [rbp + 8], xmm0
mov qword [rbp + 0x18], r14
mov qword [rbp + 0x20], r14
mov ecx, 0x10
call fcn.140011010
mov qword [rax + 8], r14
mov qword [rbp], rax
lea rcx, [rbp]
mov qword [rax], rcx
mov qword [rbp + 0x18], r14
mov qword [rbp + 0x20], 0xf
mov byte [rbp + 8], r14b
cmp r12, 0xffffffffffffffff
je 0x14000452e
lea rdx, [0x140087500]
movabs rbx, 0x7fffffffffffffff
test byte [rbp + 0x50], 0x10
je 0x1400043f4
movzx ecx, byte [rbp + 0x7c]
movzx eax, byte [rbp + 0x7d]
cmp cl, 0x2e
jne 0x1400041ea
test al, al
je 0x14000450f
cmp cl, cl
jne 0x1400041ea
cmp al, cl
jne 0x1400041ea
cmp byte [rbp + 0x7e], 0
je 0x14000450f
mov rcx, qword [rdi + 0x18]
mov rax, rbx
sub rax, rcx
cmp rax, 1
jb 0x1400045f9
lea r9, [rdi + 8]
cmp qword [rdi + 0x20], 0xf
jbe 0x14000420c
mov r9, qword [r9]
mov qword [rsp + 0x30], 1
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rcx
lea rcx, [rbp - 0x28]
call fcn.14000df40
lea rcx, [rbp]
call fcn.14000a780
lea rdx, [rbp - 0x28]
lea rcx, [rbp]
call fcn.14000aae0
lea rcx, [rbp - 0x28]
call fcn.14000a780
mov rcx, qword [rbp - 0x28]
mov qword [rbp - 0x28], r14
mov edx, 0x10
call fcn.14000d1d0
lea rcx, [rbp + 0x7c]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x140004264
mov rcx, rbx
mov rdx, qword [rbp + 0x18]
sub rcx, rdx
cmp rcx, rax
jb 0x14000460b
lea r9, [rbp + 8]
cmp qword [rbp + 0x20], 0xf
cmova r9, qword [rbp + 8]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x7c]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
lea rcx, [rbp - 0x28]
call fcn.14000df40
lea rcx, [rbp]
call fcn.14000a780
lea rdx, [rbp - 0x28]
lea rcx, [rbp]
call fcn.14000aae0
lea rcx, [rbp - 0x28]
call fcn.14000a780
mov rcx, qword [rbp - 0x28]
mov qword [rbp - 0x28], r14
mov edx, 0x10
call fcn.14000d1d0
lea rax, [rbp - 0x68]
mov qword [rbp - 0x78], rax
mov rdx, rsi
lea rcx, [rbp - 0x68]
call fcn.140008d10
mov r15, rax
mov qword [rbp - 0x28], r14
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], r14
mov qword [rbp - 8], r14
lea r14, [rbp + 8]
cmp qword [rbp + 0x20], 0xf
cmova r14, qword [rbp + 8]
mov rsi, qword [rbp + 0x18]
cmp rsi, rbx
ja 0x140004605
lea rax, [rbp - 0x30]
mov qword [rsp + 0x58], rax
mov ecx, 0x10
call fcn.140011010
mov qword [rsp + 0x50], rax
lea rcx, [rbp - 0x28]
mov qword [rax], rcx
mov qword [rax + 8], 0
mov qword [rbp - 0x28], rax
cmp rsi, 0xf
ja 0x140004367
mov qword [rbp - 0x10], rsi
mov qword [rbp - 8], 0xf
movups xmm0, xmmword [r14]
movups xmmword [rbp - 0x20], xmm0
jmp 0x1400043b3
mov rbx, rsi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
jbe 0x140004382
mov rbx, rax
jmp 0x14000438f
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
call fcn.14000e810
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x10], rsi
mov qword [rbp - 8], rbx
lea r8, [rsi + 1]
mov rdx, r14
mov rcx, rax
call fcn.14006ad70
xor r14d, r14d
mov qword [rsp + 0x50], r14
mov r8, r15
lea rdx, [rbp - 0x28]
lea rcx, [rsp + 0x60]
call fcn.1400040f0
lea rcx, [rsp + 0x60]
call fcn.14000a780
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0x60], r14
mov edx, 0x10
call fcn.14000d1d0
mov rsi, qword [rsp + 0x48]
jmp 0x14000450f
mov rcx, qword [rdi + 0x18]
mov rax, rbx
sub rax, rcx
cmp rax, 1
jb 0x1400045ff
lea r9, [rdi + 8]
cmp qword [rdi + 0x20], 0xf
jbe 0x140004416
mov r9, qword [r9]
mov qword [rsp + 0x30], 1
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x60]
call fcn.14000df40
nop
lea rax, [rbp + 0x7c]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140004440
lea rdx, [rbp + 0x7c]
lea rcx, [rsp + 0x60]
call fcn.14000aa50
mov rbx, rax
mov qword [rbp - 0x28], r14
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], r14
mov qword [rbp - 8], r14
mov ecx, 0x10
call fcn.140011010
mov qword [rax + 8], r14
mov qword [rbp - 0x28], rax
lea rcx, [rbp - 0x28]
mov qword [rax], rcx
mov rdx, rbx
lea rcx, [rbp - 0x28]
call fcn.14000aae0
nop
lea rcx, [rsp + 0x60]
call fcn.14000a780
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0x60], r14
mov edx, 0x10
call fcn.14000d1d0
mov rax, qword [0x140091388]
cmp rax, qword [0x140091390]
je 0x1400044e7
lea rdx, [rbp - 0x28]
mov rcx, rax
call fcn.140008d10
mov rdx, qword [0x140091388]
mov r8, rdx
call fcn.14000a6e0
add qword [0x140091388], 0x28
jmp 0x1400044f4
lea r8, [rbp - 0x28]
mov rdx, rax
call fcn.14000e3f0
nop
lea rcx, [rbp - 0x28]
call fcn.14000a780
mov rcx, qword [rbp - 0x28]
mov qword [rbp - 0x28], r14
mov edx, 0x10
call fcn.14000d1d0
lea rdx, [rbp + 0x50]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x1400041a8
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
mov qword [r13], r14
xorps xmm0, xmm0
movups xmmword [r13 + 8], xmm0
mov qword [r13 + 0x18], r14
mov qword [r13 + 0x20], r14
mov ecx, 0x10
call fcn.140011010
mov qword [rax + 8], r14
mov qword [r13], rax
mov qword [rax], r13
mov rdx, rdi
mov rcx, r13
call fcn.14000aae0
nop
lea rcx, [rbp]
call fcn.14000a780
mov rcx, qword [rbp]
mov qword [rbp], r14
mov edx, 0x10
call fcn.14000d1d0
nop
lea rcx, [rbp + 0x28]
call fcn.14000a780
mov rcx, qword [rbp + 0x28]
mov qword [rbp + 0x28], r14
mov edx, 0x10
call fcn.14000d1d0
nop
mov rcx, rdi
call fcn.14000a780
mov rcx, qword [rdi]
mov qword [rdi], r14
mov edx, 0x10
call fcn.14000d1d0
nop
mov rcx, rsi
call fcn.14000a780
mov rcx, qword [rsi]
mov qword [rsi], r14
mov edx, 0x10
call fcn.14000d1d0
mov rax, r13
mov rcx, qword [rbp + 0x190]
xor rcx, rsp
call fcn.140010fd0
mov rbx, qword [rsp + 0x2f8]
add rsp, 0x2a0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140001de0
nop
call fcn.140001de0
nop
call fcn.140001de0
nop
call fcn.140001de0
int3