Function at 0x1400076c0
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
lea rbp, [rsp - 0x5d0]
sub rsp, 0x6d0
mov rax, qword [0x14003c008]
xor rax, rsp
mov qword [rbp + 0x5c0], rax
mov rdi, rdx
mov qword [rsp + 0x38], rcx
mov r9, rcx
lea r8, [0x140036870]
xor esi, esi
lea rcx, [rbp + 0x3b0]
mov edx, 0x104
mov dword [rsp + 0x30], esi
call fcn.1400024cc
mov rax, qword [0x14003ea78]
or rdx, 0xffffffffffffffff
mov rbx, rdx
inc rbx
cmp word [rax + rbx*2], si
jne 0x14000771f
lea rcx, [rbp + 0x3b0]
mov rsi, rdx
xor eax, eax
inc rsi
cmp word [rcx + rsi*2], ax
jne 0x140007734
lea rcx, [rsi + rbx]
lea rcx, [rcx*2 + 2]
call fcn.140013358
xor r10d, r10d
mov r8, rax
test rax, rax
jne 0x14000775e
mov r8d, r10d
jmp 0x1400077ac
mov rcx, qword [0x14003ea78]
mov rdx, rax
sub rdx, rcx
movzx eax, word [rcx]
mov word [rdx + rcx], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x14000776b
lea r9, [r8 + rbx*2]
lea rcx, [r9 - 2]
lea rcx, [rcx + 2]
cmp word [rcx], r10w
jne 0x140007783
lea r11, [rbp + 0x3b0]
xor edx, edx
movzx eax, word [r11 + rdx*2]
mov word [rcx + rdx*2], ax
inc rdx
test ax, ax
jne 0x140007796
mov word [r9 + rsi*2], r10w
lea rdx, [rsp + 0x50]
mov rcx, r8
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov qword [rsp + 0x40], rax
mov rsi, rax
cmp rax, 0xffffffffffffffff
je 0x1400079f1
xor ebx, ebx
movzx ecx, word [rsp + 0x7c]
cmp cx, word [0x140034f78]
movzx eax, word [rsp + 0x7e]
jne 0x1400077ee
cmp ax, word [0x140034f7a]
je 0x140007938
cmp cx, word [0x140034eb8]
jne 0x140007811
cmp ax, word [0x140034eba]
jne 0x140007811
movzx eax, word [rbp - 0x80]
cmp ax, word [0x140034ebc]
je 0x140007938
mov r9, qword [rsp + 0x38]
lea rax, [rsp + 0x7c]
lea r8, str._s_s
mov qword [rsp + 0x20], rax
mov edx, 0x104
lea rcx, [rbp + 0x1a0]
call fcn.1400024cc
test byte [rsp + 0x50], 0x10
lea rcx, [rbp + 0x1a0]
je 0x1400078c3
lea r9, [rbp + 0x1a0]
mov edx, 0x104
lea r8, [0x140036888]
call fcn.1400024cc
mov rdx, rdi
lea rcx, [rbp + 0x1a0]
call fcn.1400076c0
xor ecx, ecx
mov ebx, eax
test eax, eax
je 0x140007936
mov eax, dword [0x14003f0a8]
test al, 1
jne 0x14000789f
or eax, 1
mov qword [0x14003f0c0], rcx
lea rcx, [0x14002aae0]
mov dword [0x14003f0a8], eax
call fcn.14000fc8c
mov r9d, ebx
lea r8, [rbp + 0x1a0]
lea rdx, str.add_dir_entries_error:__S__err:__d
lea rcx, [0x14003f0c0]
call fcn.14000b1bc
mov eax, ebx
jmp 0x1400079f5
call fcn.140002758
mov rsi, rax
test rax, rax
je 0x140007a69
mov ecx, 0x28
call fcn.14000f9c0
mov rbx, rax
xor ecx, ecx
mov rdx, rsi
mov qword [rax + 0x10], rcx
mov dword [rax + 8], 1
lea rax, [0x140036e30]
mov qword [rbx + 0x18], rcx
mov dword [rbx + 0x20], ecx
mov rcx, rbx
mov qword [rbx], rax
call fcn.14000340c
xor ecx, ecx
mov dword [rsp + 0x30], eax
test eax, eax
jne 0x140007a32
mov rax, qword [rdi + 8]
test rax, rax
je 0x140007927
mov qword [rax + 0x10], rbx
jmp 0x14000792a
mov qword [rdi], rbx
inc dword [rdi + 0x10]
mov rsi, qword [rsp + 0x40]
mov qword [rdi + 8], rbx
xor ebx, ebx
lea rdx, [rsp + 0x50]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x1400077ce
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rcx, qword [rsp + 0x38]
call fcn.140002758
mov rsi, rax
test rax, rax
je 0x140007a69
mov ecx, 0x28
call fcn.14000f9c0
mov rbx, rax
xor ecx, ecx
mov rdx, rsi
mov qword [rax + 0x10], rcx
mov dword [rax + 8], 1
lea rax, [0x140036ea8]
mov qword [rbx + 0x18], rcx
mov dword [rbx + 0x20], ecx
mov rcx, rbx
mov qword [rbx], rax
call fcn.14000379c
xor edx, edx
mov dword [rsp + 0x30], eax
test eax, eax
je 0x140007a17
mov ecx, dword [0x14003f0a8]
test cl, 1
jne 0x1400079d8
or ecx, 1
mov qword [0x14003f0c0], rdx
mov dword [0x14003f0a8], ecx
lea rcx, [0x14002aae0]
call fcn.14000fc8c
mov eax, dword [rsp + 0x30]
mov r9d, eax
lea rdx, str.add_dir_entries_Parse_error_on_close:__S__err:__d
mov r8, rsi
lea rcx, [0x14003f0c0]
call fcn.14000b1bc
mov eax, dword [rsp + 0x30]
mov rcx, qword [rbp + 0x5c0]
xor rcx, rsp
call fcn.14000f700
mov rbx, qword [rsp + 0x700]
add rsp, 0x6d0
pop rdi
pop rsi
pop rbp
ret
mov rax, qword [rdi + 8]
test rax, rax
je 0x140007a26
mov qword [rax + 0x10], rbx
jmp 0x140007a29
mov qword [rdi], rbx
inc dword [rdi + 0x10]
mov qword [rdi + 8], rbx
jmp 0x1400079f1
mov eax, dword [0x14003f0a8]
test al, 1
jne 0x140007a58
or eax, 1
mov qword [0x14003f0c0], rcx
lea rcx, [0x14002aae0]
mov dword [0x14003f0a8], eax
call fcn.14000fc8c
mov r9d, dword [rsp + 0x30]
lea rdx, str.add_dir_entries_Parse_error_on_recurse:__S__err:__d
jmp 0x1400079e2
mov eax, 5
jmp 0x1400079f5