Function at 0x14001148d
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
jmp 0x1400152a0
mov qword [rsp + 8], rcx
push rbp
push rdi
sub rsp, 0x6b8
lea rbp, [rsp + 0x40]
lea rdi, [rsp + 0x40]
mov ecx, 0x10e
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x6d8]
mov rax, qword [0x140024018]
xor rax, rbp
mov qword [rbp + 0x668], rax
lea rcx, [0x14002a037]
call fcn.14001167c
lea r8, str..
mov rdx, qword [rbp + 0x690]
lea rcx, [rbp + 0x558]
call fcn.1400115f0
mov qword [rbp + 0x648], rax
mov rcx, qword [rbp + 0x648]
call fcn.140011226
lea rdx, [rbp + 0x10]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov qword [rbp + 0x278], rax
lea rcx, [rbp + 0x558]
call fcn.1400115c8
cmp qword [rbp + 0x278], 0xffffffffffffffff
je 0x1400155b6
mov eax, dword [rbp + 0x10]
and eax, 0x10
test eax, eax
jne 0x1400154ea
mov eax, 2
imul rax, rax, 0
movzx eax, word [rbp + rax + 0x3c]
cmp eax, 0x2e
je 0x1400154ea
lea rdx, str..exe
lea rcx, [rbp + 0x3c]
call fcn.140011717
test rax, rax
je 0x1400154ea
lea r8, [0x140020674]
mov rdx, qword [rbp + 0x690]
lea rcx, [rbp + 0x598]
call fcn.1400115f0
mov qword [rbp + 0x648], rax
mov rax, qword [rbp + 0x648]
mov qword [rbp + 0x650], rax
lea r8, [rbp + 0x3c]
mov rdx, qword [rbp + 0x650]
lea rcx, [rbp + 0x298]
call fcn.1400113ca
nop
lea rcx, [rbp + 0x598]
call fcn.1400115c8
lea rcx, [rbp + 0x298]
call fcn.140011226
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 7
mov edx, 0x40000000
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rbp + 0x2d8], rax
cmp qword [rbp + 0x2d8], 0xffffffffffffffff
je 0x140015434
mov rcx, qword [rbp + 0x2d8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400154d9
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x20
jne 0x140015473
lea rdx, str.Another_process_has_mapped_this_executable:
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011343
lea rdx, [rbp + 0x298]
mov rcx, rax
call fcn.1400113a2
lea rdx, [0x140011320]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
jmp 0x1400154d9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp + 0x2f4], eax
cmp dword [rbp + 0x2f4], 5
je 0x1400154d9
lea rdx, str.Error_occurred:
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
call fcn.140011343
lea rdx, [rbp + 0x298]
mov rcx, rax
call fcn.1400113a2
lea rdx, str._Error_Code:
mov rcx, rax
call fcn.140011343
mov edx, dword [rbp + 0x2f4]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___unsigned_long_int____ptr64]
lea rdx, [0x140011320]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
nop
lea rcx, [rbp + 0x298]
call fcn.1400115c8
jmp 0x140015590
mov eax, dword [rbp + 0x10]
and eax, 0x10
test eax, eax
je 0x140015590
mov eax, 2
imul rax, rax, 0
movzx eax, word [rbp + rax + 0x3c]
cmp eax, 0x2e
je 0x140015590
lea r8, [0x140020674]
mov rdx, qword [rbp + 0x690]
lea rcx, [rbp + 0x5d8]
call fcn.1400115f0
mov qword [rbp + 0x648], rax
mov rax, qword [rbp + 0x648]
mov qword [rbp + 0x650], rax
lea r8, [rbp + 0x3c]
mov rdx, qword [rbp + 0x650]
lea rcx, [rbp + 0x618]
call fcn.1400113ca
mov qword [rbp + 0x658], rax
mov rax, qword [rbp + 0x658]
mov qword [rbp + 0x660], rax
mov rcx, qword [rbp + 0x660]
call fcn.14001148d
nop
lea rcx, [rbp + 0x618]
call fcn.1400115c8
nop
lea rcx, [rbp + 0x5d8]
call fcn.1400115c8
lea rdx, [rbp + 0x10]
mov rcx, qword [rbp + 0x278]
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x140015344
mov rcx, qword [rbp + 0x278]
call qword [sym.imp.KERNEL32.dll_FindClose]
lea rcx, [rbp - 0x40]
lea rdx, [0x140020110]
call fcn.14001158c
mov rcx, qword [rbp + 0x668]
xor rcx, rbp
call fcn.140011316
lea rsp, [rbp + 0x678]
pop rdi
pop rbp
ret