Function at 0x1400219e0
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x108]
sub rsp, 0x208
mov r15, rcx
lea r8, [0x14026cae8]
mov rdx, rcx
lea rcx, [rsp + 0x70]
call fcn.14001fa60
nop
lea rcx, [rsp + 0x70]
cmp qword [rbp - 0x78], 0x10
cmovae rcx, qword [rsp + 0x70]
lea rdx, [rbp - 0x40]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov rdi, rax
mov qword [rbp + 0x160], rax
cmp rax, 0xffffffffffffffff
jne 0x140021af8
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x140021a87
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140021a82
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140022084
call fcn.140133e68
xor esi, esi
mov byte [rsp + 0x70], sil
mov qword [rbp - 0x78], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x80], rsi
mov rdx, qword [r15 + 0x18]
cmp rdx, 0x10
jb 0x140021ad4
inc rdx
cmp rdx, 0x1000
mov rcx, qword [r15]
jb 0x140021acf
mov r8, qword [rcx - 8]
sub rcx, r8
add rdx, 0x27
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400220ae
mov rcx, r8
call fcn.140133e68
mov qword [r15 + 0x10], rsi
mov qword [r15 + 0x18], reloc.WS2_32.dll_ntohs
mov byte [r15], 0
add rsp, 0x208
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
xor esi, esi
movzx ebx, byte [rbp + 0x160]
movabs r14, 0x7fffffffffffffff
lea rax, [rbp - 0x14]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x140021b16
lea rdx, [rbp - 0x14]
test byte [rbp - 0x40], 0x10
je 0x140021e00
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x30], 0
lea rcx, [rsp + 0x30]
call fcn.1400157e0
nop
lea rax, [rsp + 0x30]
mov r13, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
cmovae rax, r13
mov rcx, qword [rsp + 0x40]
cmp rcx, 1
jne 0x140021b89
cmp byte [rax], 0x2e
jne 0x140021b7c
mov eax, esi
jmp 0x140021b81
sbb eax, eax
or eax, 1
test eax, eax
je 0x140021dbb
lea rax, [rsp + 0x30]
cmp rdx, 0x10
cmovae rax, r13
cmp rcx, 2
jne 0x140021bb8
cmp byte [rax], 0x2e
jne 0x140021bab
cmp byte [rax + 1], 0x2e
jne 0x140021bab
mov eax, esi
jmp 0x140021bb0
sbb eax, eax
or eax, 1
test eax, eax
jne 0x140021bb8
mov al, 1
jmp 0x140021bba
xor al, al
test al, al
jne 0x140021dbb
mov r12, qword [r15 + 0x10]
mov rax, r14
sub rax, r12
cmp rax, 1
jb 0x140022096
mov qword [rbp + 0x168], r15
cmp qword [r15 + 0x18], 0x10
jb 0x140021bee
mov rax, qword [r15]
mov qword [rbp + 0x168], rax
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rsi
lea rax, [r12 + 1]
mov edi, reloc.WS2_32.dll_ntohs
lea r14, [rsp + 0x50]
cmp rax, rdi
jbe 0x140021ca1
mov rdi, rax
or rdi, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rdi, rcx
jbe 0x140021c3a
mov rdi, rcx
movabs rax, 0x8000000000000027
jmp 0x140021c61
cmp rdi, 0x16
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmovb rdi, rcx
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x140021c85
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14002208a
mov rcx, rax
call fcn.140133e2c
test rax, rax
je 0x140022090
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
lea rax, [r12 + 1]
jmp 0x140021c9c
test rcx, rcx
je 0x140021c99
call fcn.140133e2c
mov r14, rax
lea rax, [r12 + 1]
jmp 0x140021c9c
mov r14, rsi
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rdi
mov r8, r12
mov rdx, qword [rbp + 0x168]
mov rcx, r14
call fcn.1401378a0
mov word [r14 + r12], reloc.SHELL32.dll_PathGetShortPath
lea r9, [rsp + 0x30]
cmp qword [rsp + 0x48], 0x10
cmovae r9, r13
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x68]
mov rax, rdx
sub rax, rcx
mov r14, qword [rsp + 0x40]
cmp r14, rax
ja 0x140021d22
lea rax, [r14 + rcx]
mov qword [rsp + 0x60], rax
lea rdi, [rsp + 0x50]
cmp rdx, 0x10
cmovae rdi, qword [rsp + 0x50]
add rdi, rcx
mov r8, r14
mov rdx, r9
mov rcx, rdi
call fcn.1401378a0
mov byte [r14 + rdi], 0
lea rax, [rsp + 0x50]
jmp 0x140021d3c
mov qword [rsp + 0x20], r14
xor r8d, r8d
mov rdx, r14
lea rcx, [rsp + 0x50]
call fcn.140016050
mov r13, qword [rsp + 0x30]
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x60], rsi
mov qword [rbp - 0x58], rsi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp + 0x158]
lea rcx, [rbp - 0x70]
call fcn.1400219e0
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x140021db4
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140021daf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140022090
call fcn.140133e68
mov rdi, qword [rbp + 0x160]
mov rax, qword [rsp + 0x48]
cmp rax, 0x10
jb 0x140022010
lea rdx, [rax + 1]
mov rax, r13
cmp rdx, 0x1000
jb 0x140021df3
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400220a8
mov rcx, r13
call fcn.140133e68
jmp 0x140022010
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x50], 0
lea rcx, [rsp + 0x50]
call fcn.1400157e0
nop
mov r13, qword [r15 + 0x10]
mov rax, r14
sub rax, r13
cmp rax, 1
jb 0x14002207e
mov qword [rbp + 0x168], r15
cmp qword [r15 + 0x18], 0x10
jb 0x140021e4f
mov rax, qword [r15]
mov qword [rbp + 0x168], rax
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rsi
lea r12, [r13 + 1]
mov edi, reloc.WS2_32.dll_ntohs
lea r14, [rsp + 0x30]
cmp r12, rdi
jbe 0x140021ef7
mov rdi, r12
or rdi, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rdi, rcx
jbe 0x140021e9a
mov rdi, rcx
movabs rax, 0x8000000000000027
jmp 0x140021ec1
cmp rdi, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x140021ee0
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14002209c
mov rcx, rax
call fcn.140133e2c
test rax, rax
je 0x1400220a2
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x140021ef2
test rcx, rcx
je 0x140021eef
call fcn.140133e2c
mov r14, rax
jmp 0x140021ef2
mov r14, rsi
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], rdi
mov r8, r13
mov rdx, qword [rbp + 0x168]
mov rcx, r14
call fcn.1401378a0
mov byte [r14 + r13], reloc.SHELL32.dll_PathGetShortPath
mov byte [r14 + r12], 0
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x30]
movzx edx, bl
lea rcx, [rbp - 0x70]
call fcn.14001fbb0
nop
mov r14, qword [rbp + 0x158]
mov rdi, qword [r14]
movabs rax, 0x555555555555555
cmp qword [r14 + 8], rax
je 0x140022071
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], rsi
mov ecx, Ordinal_50
call fcn.140133e2c
movups xmm0, xmmword [rbp - 0x70]
movups xmmword [rax + 0x10], xmm0
movups xmm1, xmmword [rbp - 0x60]
movups xmmword [rax + 0x20], xmm1
inc qword [r14 + 8]
mov rcx, qword [rdi + 8]
mov qword [rax], rdi
mov qword [rax + 8], rcx
mov qword [rbp - 0x48], rsi
mov qword [rdi + 8], rax
mov qword [rcx], rax
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x140021fcc
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140021fc6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400220a2
call fcn.140133e68
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x140022009
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140022004
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400220a8
call fcn.140133e68
mov rdi, qword [rbp + 0x160]
lea rdx, [rbp - 0x40]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x140021b01
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x140022067
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140022062
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140022084
call fcn.140133e68
mov byte [rsp + 0x70], 0
jmp 0x140021a8e
lea rcx, str.list_too_long
call fcn.140101700
nop
call fcn.1400157c0
nop
call fcn.1401462a8
nop
call fcn.14000f3e0
int3
call fcn.1401462a8
int3
call fcn.1400157c0
nop
call fcn.14000f3e0
int3
call fcn.1401462a8
nop
call fcn.1401462a8
nop
call fcn.1401462a8
int3