Function at 0x14001f014
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push rbx
push rbp
push rsi
push rdi
sub rsp, 0x2c8
mov rax, qword [0x14002f008]
xor rax, rsp
mov qword [rsp + 0x2b0], rax
mov rdi, qword [rsp + 0x310]
xor esi, esi
mov qword [rsp + 0x48], r8
movzx r8d, si
mov qword [rsp + 0x50], rdx
or rdx, 0xffffffffffffffff
mov qword [rsp + 0x40], rdi
mov dword [rsp + 0x34], r9d
mov qword [rsp + 0x38], rcx
inc rdx
cmp word [rcx + rdx*2], si
jne 0x14001f05d
mov rcx, rdi
cmp word [rdi], si
je 0x14001f343
mov r9, rcx
movzx eax, word [rcx]
add rcx, 2
test ax, ax
jne 0x14001f075
mov rax, rcx
sub rax, r9
sar rax, 1
add ax, dx
add r8w, ax
cmp word [rcx], si
jne 0x14001f072
cmp si, r8w
je 0x14001f343
inc r8w
movzx ebx, r8w
mov dword [rsp + 0x30], ebx
lea ecx, [rbx + rbx]
call fcn.14000b530
mov rbp, rax
test rax, rax
jne 0x14001f0c6
mov eax, 1
jmp 0x14001f345
mov rsi, rdi
xor ecx, ecx
mov rdi, rax
mov rax, rsi
cmp word [rax], cx
je 0x14001f13b
mov r8, qword [rsp + 0x38]
mov eax, ebx
mov rcx, rdi
sub rcx, rbp
sar rcx, 1
sub eax, ecx
mov rcx, rdi
movsxd rbx, eax
mov rdx, rbx
call fcn.14000dc10
mov r8, rsi
mov rdx, rbx
mov rcx, rdi
call fcn.14000db30
or rdx, 0xffffffffffffffff
mov rax, rdx
xor ecx, ecx
inc rax
cmp word [rsi + rax*2], cx
jne 0x14001f10d
lea rsi, [rsi + rax*2]
mov rax, rdx
add rsi, 2
inc rax
cmp word [rdi + rax*2], cx
jne 0x14001f121
mov ebx, dword [rsp + 0x30]
lea rdi, [rdi + rax*2]
add rdi, 2
cmp word [rsi], cx
jne 0x14001f0d6
mov r8d, dword [rsp + 0x34]
mov r9, rbp
mov rdx, qword [rsp + 0x48]
mov word [rdi], cx
mov rcx, qword [rsp + 0x50]
call fcn.14000252c
mov rcx, rbp
mov dword [rsp + 0x30], eax
call fcn.14000b4a0
mov rbp, qword [rsp + 0x38]
or rdi, 0xffffffffffffffff
xor ebx, ebx
inc rdi
cmp word [rbp + rdi*2], bx
jne 0x14001f16c
add edi, 2
lea ecx, [rdi + rdi]
call fcn.14000b530
mov rsi, rax
test rax, rax
je 0x14001f0bc
movsxd rbx, edi
mov r8, rbp
mov rdx, rbx
mov rcx, rax
call fcn.14000dc10
mov rcx, rsi
call fcn.14000e900
lea r8, [0x140028410]
mov rdx, rbx
mov rcx, rsi
lea rbp, [rax + 2]
call fcn.14000db30
lea rdx, [rsp + 0x60]
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_file_l1_2_1.dll_FindFirstFileW]
xor r8d, r8d
mov qword [rsp + 0x38], rax
mov word [rbp], r8w
cmp rax, 0xffffffffffffffff
je 0x14001f333
test byte [rsp + 0x60], 0x10
je 0x14001f300
movzx edx, word [rsp + 0x8c]
movzx ecx, word [0x140028848]
sub edx, ecx
jne 0x14001f210
movzx edx, word [rsp + 0x8e]
movzx eax, word [0x14002884a]
sub edx, eax
test edx, edx
je 0x14001f300
movzx ecx, word [rsp + 0x8c]
movzx eax, word [0x140028840]
sub ecx, eax
jne 0x14001f24f
movzx ecx, word [rsp + 0x8e]
movzx eax, word [0x140028842]
sub ecx, eax
jne 0x14001f24f
movzx ecx, word [rsp + 0x90]
movzx eax, word [0x140028844]
sub ecx, eax
test ecx, ecx
je 0x14001f300
or rcx, 0xffffffffffffffff
inc rcx
cmp word [rsi + rcx*2], r8w
jne 0x14001f25b
lea rdx, [rsp + 0x8c]
or rax, 0xffffffffffffffff
inc rax
cmp word [rdx + rax*2], r8w
jne 0x14001f271
lea ebx, [rax + 2]
add ebx, ecx
cmp ebx, edi
jle 0x14001f2a9
lea edx, [rbx + rbx]
mov rcx, rsi
call fcn.14000d360
test rax, rax
je 0x14001f321
mov rcx, rax
mov rsi, rax
mov edi, ebx
call fcn.14000e900
lea rbp, [rax + 2]
movsxd rbx, edi
lea r8, [rsp + 0x8c]
mov rdx, rbx
mov rcx, rsi
call fcn.14000db30
lea r8, [0x1400288e0]
mov rdx, rbx
mov rcx, rsi
call fcn.14000db30
mov rax, qword [rsp + 0x40]
mov rcx, rsi
mov r9d, dword [rsp + 0x34]
mov r8, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x50]
mov qword [rsp + 0x20], rax
call fcn.14001f014
mov ebx, eax
mov dword [rsp + 0x30], eax
xor eax, eax
mov word [rbp], ax
jmp 0x14001f304
mov ebx, dword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
lea rdx, [rsp + 0x60]
call qword [sym.imp.api_ms_win_core_file_l1_2_1.dll_FindNextFileW]
xor r8d, r8d
test eax, eax
jne 0x14001f1e1
jmp 0x14001f326
mov ebx, 1
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.api_ms_win_core_file_l1_2_1.dll_FindClose]
jmp 0x14001f337
mov ebx, dword [rsp + 0x30]
mov rcx, rsi
call fcn.14000b4a0
mov eax, ebx
jmp 0x14001f345
xor eax, eax
mov rcx, qword [rsp + 0x2b0]
xor rcx, rsp
call fcn.1400151c0
add rsp, 0x2c8
pop rdi
pop rsi
pop rbp
pop rbx
ret