Function at 0x14007b85d
Capabilities:
Enumerate files on windows
Enumerate files recursively
Get file attributes

Disassembly:
push rax
pushf
mov eax, 0x667820e
pushf
not eax
add eax, 0x68378e8a
xor eax, 0x18800d8b
rol eax, 0x8d
popf
pushf
not eax
add eax, 0x29ebb33e
xor eax, 0x29ada413
rol eax, 0x3d
popf
cmp eax, 9
jne 0x14007b89a
popf
pop rax
jmp 0x14007bf38
cmp eax, 1
jne 0x14007b8a9
popf
pop rax
jmp 0x14007bac1
cmp eax, 2
jne 0x14007b8b8
popf
pop rax
jmp 0x14007bb28
cmp eax, 3
jne 0x14007b8c7
popf
pop rax
jmp 0x14007bbe5
cmp eax, 0
jne 0x14007b8d6
popf
pop rax
jmp 0x14007b93f
cmp eax, 4
jne 0x14007b8e5
popf
pop rax
jmp 0x14007bc62
cmp eax, 8
jne 0x14007b8f4
popf
pop rax
jmp 0x14007bec7
cmp eax, 5
jne 0x14007b903
popf
pop rax
jmp 0x14007bd44
cmp eax, 0xb
jne 0x14007b912
popf
pop rax
jmp 0x14007c03e
cmp eax, 6
jne 0x14007b921
popf
pop rax
jmp 0x14007bdda
cmp eax, 7
jne 0x14007b930
popf
pop rax
jmp 0x14007be62
cmp eax, 0xa
jne 0x14007b93f
popf
pop rax
jmp 0x14007bfef
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x5a8]
sub rsp, 0x690
mov r15d, 0x9b840128
pushf
not r15d
add r15d, 0x326eb5ba
xor r15d, 0x3059b212
rol r15d, 0xe0
popf
pushf
not r15d
add r15d, 0x26048154
xor r15d, 0x37560487
rol r15d, 0xda
popf
pushf
not r15d
add r15d, 0x5a3b1e10
xor r15d, 0x79f1bad9
rol r15d, 0x6e
popf
pushf
not r15d
add r15d, 0xf3cbdfd
xor r15d, 0x6088d4e2
rol r15d, 0xfd
popf
mov r8, rcx
mov rsi, rcx
mov ebx, 0x7a5690b1
pushf
not ebx
add ebx, 0x1fd0a531
xor ebx, 0x74d42c31
rol ebx, 0xb2
popf
pushf
not ebx
add ebx, 0x7a29e280
xor ebx, 0x18ee9bc7
rol ebx, 0xa1
popf
mov r9d, r15d
lea rcx, [rbp + 0x380]
mov edx, r15d
mov edi, ebx
call fcn.140041f26
mov rcx, rsi
jmp 0x14007ba18
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
test al, 0x10
je 0x14007ba68
push rax
pushf
mov eax, 0x2ecaafc5
pushf
not eax
add eax, 0x225969f
xor eax, 0x1c2a8063
rol eax, 0x65
popf
pushf
not eax
add eax, 0x6fbd07e5
xor eax, 0x34435d42
rol eax, 8
popf
pushf
not eax
add eax, 0x458fd4a1
xor eax, 0x52020aeb
rol eax, 0x2b
popf
jmp 0x14007b88b
push rax
pushf
mov eax, 0x59e3f700
pushf
not eax
add eax, 0x78a6c64e
xor eax, 0x23d75d8a
rol eax, 0xd8
popf
pushf
not eax
add eax, 0x4f4105de
xor eax, 0x3a61d2de
rol eax, 0x59
popf
pushf
not eax
add eax, 0x7541dbb6
xor eax, 0x792dc8d6
rol eax, 0x56
popf
pushf
not eax
add eax, 0x4b0e4fda
xor eax, 0x618233a2
rol eax, 0x54
popf
jmp 0x14007b88b
mov r8d, r15d
lea rdx, [0x1966fa78a]
pushf
sub rdx, 0x566d1b72
popf
lea rcx, [rbp + 0x380]
call fcn.14007acec
push rax
pushf
mov eax, 0x9377320c
pushf
not eax
add eax, 0x7887f6dc
xor eax, 0x28631b9
rol eax, 0xdc
popf
pushf
not eax
add eax, 0x121effe9
xor eax, 0x25282372
rol eax, 0xa1
popf
pushf
not eax
add eax, 0xdef331b
xor eax, 0xd3cb51
rol eax, 0x20
popf
jmp 0x14007b88b
lea rdx, [rbp + 0x130]
lea rcx, [rbp + 0x380]
jmp 0x14007bb37
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x14007bb9f
push rax
pushf
mov eax, 0xa905de90
pushf
not eax
add eax, 0xe51ab3d
xor eax, 0x3646de7
rol eax, 0x6c
popf
pushf
not eax
add eax, 0x353f73f
xor eax, 0x666035b4
rol eax, 0xde
popf
pushf
not eax
add eax, 0x559dbf95
xor eax, 0x92f0a9f
rol eax, 0x5d
popf
pushf
not eax
add eax, 0x23a37bdb
xor eax, 0x7d851ec6
rol eax, 0x70
popf
jmp 0x14007b88b
push rax
pushf
mov eax, 0x8142ff5f
pushf
not eax
add eax, 0x6bc4bdd4
xor eax, 0x11f27f5a
rol eax, 0xd5
popf
pushf
not eax
add eax, 0x5ab865be
xor eax, 0x383df196
rol eax, 0x50
popf
pushf
not eax
add eax, 0x2ec75381
xor eax, 0x2764469b
rol eax, 0x6c
popf
jmp 0x14007b88b
test ebx, ebx
je 0x14007bc1c
push rax
pushf
mov eax, 0x64b8e5f
pushf
not eax
add eax, 0x531dc922
xor eax, 0x522eb2e5
rol eax, 0xf5
popf
pushf
not eax
add eax, 0xc29856d
xor eax, 0x74da5db
rol eax, 0x8f
popf
jmp 0x14007b88b
push rax
pushf
mov eax, 0x7269c637
pushf
not eax
add eax, 0x4dbf7612
xor eax, 0x31987888
rol eax, 0xa0
popf
pushf
not eax
add eax, 0x72138cd2
xor eax, 0x3f1e158b
rol eax, 0xe6
popf
pushf
not eax
add eax, 0x61368f63
xor eax, 0x4a5c5234
rol eax, 0xef
popf
jmp 0x14007b88b
mov r9, r15
lea rcx, [rsp + 0x20]
mov r8, rsi
mov rdx, r15
call fcn.140041f26
mov r8, r15
lea rdx, [rbp + 0x15c]
lea rcx, [rsp + 0x20]
call fcn.14007acec
test byte [rbp + 0x130], 0x10
je 0x14007bceb
push rax
pushf
mov eax, 0x54bd2dbf
pushf
not eax
add eax, 0x54969b0f
xor eax, 0x4a9a3e0e
rol eax, 0xcf
popf
pushf
not eax
add eax, 0x652381f4
xor eax, 0x5486f2e6
rol eax, 9
popf
pushf
not eax
add eax, 0x61ddb248
xor eax, 0x1fee2b8
rol eax, 0xdf
popf
pushf
not eax
add eax, 0x2aa2bd7c
xor eax, 0x3e3c6812
rol eax, 0x22
popf
jmp 0x14007b88b
push rax
pushf
mov eax, 0x1fb32e22
pushf
not eax
add eax, 0x44870eee
xor eax, 0x11d79524
rol eax, 0xbf
popf
pushf
not eax
add eax, 0x7656b064
xor eax, 0x5f91d68d
rol eax, 0xc3
popf
pushf
not eax
add eax, 0x7fc60f8f
xor eax, 0x3c29e279
rol eax, 0xb3
popf
pushf
not eax
add eax, 0x13886a84
xor eax, 0x7cad5cfb
rol eax, 0xa8
popf
jmp 0x14007b88b
cmp word [rbp + 0x15c], 0x2e
je 0x14007bda7
push rax
pushf
mov eax, 0x7a145428
pushf
not eax
add eax, 0x2642d92d
xor eax, 0x789f83f8
rol eax, 0x5c
popf
pushf
not eax
add eax, 0x7c320552
xor eax, 0x7403ee9d
rol eax, 0x32
popf
pushf
not eax
add eax, 0x44b9ab70
xor eax, 0x6ae9c34c
rol eax, 0x58
popf
pushf
not eax
add eax, 0x2e09287
xor eax, 0x6b303e89
rol eax, 0xc1
popf
jmp 0x14007b88b
push rax
pushf
mov eax, 0x8c8b946b
pushf
not eax
add eax, 0x4f88b585
xor eax, 0x14d7305
rol eax, 2
popf
pushf
not eax
add eax, 0x7e05e3fc
xor eax, 0x6f449b8c
rol eax, 0x61
popf
jmp 0x14007b88b
lea rcx, [rsp + 0x20]
call fcn.14007b85d
lea rcx, [rsp + 0x20]
mov ebx, eax
jmp 0x14007bdec
call qword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
neg ebx
sbb eax, eax
push rdi
push rax
not edi
xor edi, eax
pop rax
and edi, dword [rsp]
add rsp, 8
jmp 0x14007bec7
lea rcx, [rsp + 0x20]
jmp 0x14007be68
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
push rax
pushf
mov eax, 0xc507498b
pushf
not eax
add eax, 0x61735a6b
xor eax, 0x78380110
rol eax, 0xf5
popf
pushf
not eax
add eax, 0x25ab852b
xor eax, 0x6a60d32b
rol eax, 0x34
popf
pushf
not eax
add eax, 0x4ad896de
xor eax, 0x429a3654
rol eax, 0xdc
popf
pushf
not eax
add eax, 0x73d1cb63
xor eax, 0x70ce2668
rol eax, 0x69
popf
jmp 0x14007b88b
lea rdx, [rbp + 0x130]
mov rcx, r14
jmp 0x14007bed2
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
mov ebx, eax
jmp 0x14007bbe5
mov rcx, r14
jmp 0x14007bf3c
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rcx, rsi
jmp 0x14007bf46
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
test al, 0x10
je 0x14007bfa9
push rax
pushf
mov eax, 0x3cb2d400
pushf
not eax
add eax, 0x168c2610
xor eax, 0x57b6e6d2
rol eax, 7
popf
pushf
not eax
add eax, 0x42243443
xor eax, 0x38de334d
rol eax, 0xb8
popf
pushf
not eax
add eax, 0x49e1e4e2
xor eax, 0x4afdcbfe
rol eax, 0xfb
popf
pushf
not eax
add eax, 0x113dba59
xor eax, 0x66672620
rol eax, 0xcf
popf
jmp 0x14007b88b
push rax
pushf
mov eax, 0x7feb2f71
pushf
not eax
add eax, 0x47fce5ff
xor eax, 0x5ea89eb5
rol eax, 0x27
popf
pushf
not eax
add eax, 0x5f97899a
xor eax, 0x5dbeb725
rol eax, 0xaf
popf
pushf
not eax
add eax, 0x203b77e9
xor eax, 0x3300488a
rol eax, 0x51
popf
jmp 0x14007b88b
mov rcx, rsi
jmp 0x14007bff3
call qword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
neg eax
sbb ecx, ecx
push rdi
push rcx
not edi
xor edi, ecx
pop rcx
and edi, dword [rsp]
add rsp, 8
push rax
pushf
mov eax, 0xd682c796
pushf
not eax
add eax, 0x55614c2b
xor eax, 0x47894591
rol eax, 0x6b
popf
pushf
not eax
add eax, 0x6590afe
xor eax, 0x4850e138
rol eax, 0x20
popf
jmp 0x14007b88b
lea r11, [rsp + 0x690]
mov eax, edi
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret