Function at 0x14008ccc0
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x228]
sub rsp, 0x328
mov qword [rsp + 0x30], 0xfffffffffffffffe
mov rax, qword [0x1402a6808]
xor rax, rsp
mov qword [rbp + 0x210], rax
mov rdi, r9
mov r12, r8
mov rbx, rdx
mov r13, rcx
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x58], xmm0
movdqa xmm1, xmmword [0x1401e3030]
movdqu xmmword [rbp - 0x58], xmm1
xor eax, eax
mov word [rbp - 0x68], ax
mov r8, 0xffffffffffffffff
inc r8
cmp word [rdx + r8*2], ax
jne 0x14008cd24
lea rcx, [rbp - 0x68]
call fcn.140006d60
nop
mov r8d, 3
lea rdx, [0x1401e42d0]
lea rcx, [rbp - 0x68]
call fcn.140006a90
lea rcx, [rbp - 0x68]
cmp qword [rbp - 0x50], 8
cmovae rcx, qword [rbp - 0x68]
lea rdx, [rbp - 0x40]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r15, rax
movzx r14d, byte [rbp + 0x298]
movzx esi, byte [rbp + 0x290]
cmp rax, 0xffffffffffffffff
je 0x14008d094
mov ecx, dword [rbp - 0x40]
test cl, 0x10
je 0x14008ced9
test r14b, r14b
jne 0x14008cd9c
test cl, 2
jne 0x14008d094
test sil, sil
je 0x14008d094
lea rdx, [0x1401e3cd0]
lea rcx, [rbp - 0x14]
call fcn.140027970
test eax, eax
je 0x14008d094
lea rdx, [0x1401e42d8]
lea rcx, [rbp - 0x14]
call fcn.140027970
test eax, eax
je 0x14008d094
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x48], xmm0
movdqa xmm1, xmmword [0x1401e3030]
movdqu xmmword [rsp + 0x48], xmm1
xor eax, eax
mov word [rsp + 0x38], ax
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rbx + r8*2], ax
jne 0x14008ce00
mov rdx, rbx
lea rcx, [rsp + 0x38]
call fcn.140006d60
nop
lea rax, [rbp - 0x14]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x14008ce23
lea rdx, [rbp - 0x14]
lea rcx, [rsp + 0x38]
call fcn.140006a90
mov r8d, 1
lea rdx, [0x1401e42c8]
lea rcx, [rsp + 0x38]
call fcn.140006a90
lea rdx, [rsp + 0x38]
cmp qword [rsp + 0x50], 8
cmovae rdx, qword [rsp + 0x38]
mov byte [rsp + 0x28], r14b
mov byte [rsp + 0x20], sil
mov r9, rdi
mov r8, r12
mov rcx, r13
call fcn.14008ccc0
nop
mov rdx, qword [rsp + 0x50]
cmp rdx, 8
jb 0x14008cebf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008ceba
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008d421
call fcn.14017f5e4
movdqa xmm0, xmmword [0x1401e3030]
movdqu xmmword [rsp + 0x48], xmm0
xor eax, eax
mov word [rsp + 0x38], ax
jmp 0x14008d094
mov rdx, r12
lea rcx, [rbp - 0x14]
call fcn.14002a510
test al, al
je 0x14008d094
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x68], xmm0
movdqa xmm1, xmmword [0x1401e3030]
movdqu xmmword [rsp + 0x68], xmm1
xor eax, eax
mov word [rsp + 0x58], ax
mov r8, 0xffffffffffffffff
inc r8
cmp word [rbx + r8*2], ax
jne 0x14008cf12
mov rdx, rbx
lea rcx, [rsp + 0x58]
call fcn.140006d60
nop
lea rax, [rbp - 0x14]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x14008cf35
lea rdx, [rbp - 0x14]
lea rcx, [rsp + 0x58]
call fcn.140006a90
lea rdx, [rsp + 0x58]
cmp qword [rsp + 0x70], 8
cmovae rdx, qword [rsp + 0x58]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x48], xmm0
movdqa xmm1, xmmword [0x1401e3030]
movdqu xmmword [rsp + 0x48], xmm1
xor eax, eax
mov word [rsp + 0x38], ax
mov r8, 0xffffffffffffffff
inc r8
cmp word [rdx + r8*2], ax
jne 0x14008cf84
lea rcx, [rsp + 0x38]
call fcn.140006d60
nop
mov rdx, qword [rdi + 8]
cmp qword [rdi + 0x10], rdx
je 0x14008cfd8
xor eax, eax
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], rax
movups xmm0, xmmword [rsp + 0x38]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rsp + 0x48]
movups xmmword [rdx + 0x10], xmm1
movdqa xmm0, xmmword [0x1401e3030]
movdqu xmmword [rsp + 0x48], xmm0
mov word [rsp + 0x38], ax
add qword [rdi + 8], 0x20
jmp 0x14008cfe6
lea r8, [rsp + 0x38]
mov rcx, rdi
call fcn.140001d60
nop
mov rdx, qword [rsp + 0x50]
cmp rdx, 8
jb 0x14008d028
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008d023
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008d427
call fcn.14017f5e4
movdqa xmm0, xmmword [0x1401e3030]
movdqu xmmword [rsp + 0x48], xmm0
xor eax, eax
mov word [rsp + 0x38], ax
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x14008d081
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008d07a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008d42d
call fcn.14017f5e4
xor eax, eax
movdqa xmm0, xmmword [0x1401e3030]
movdqu xmmword [rsp + 0x68], xmm0
mov word [rsp + 0x58], ax
lea rdx, [rbp - 0x40]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x14008d39f
mov eax, dword [rbp - 0x40]
test al, 0x10
je 0x14008d1e4
test r14b, r14b
jne 0x14008d0bd
test al, 2
jne 0x14008d094
test sil, sil
je 0x14008d094
lea rdx, [0x1401e3cd0]
lea rcx, [rbp - 0x14]
call fcn.140027970
test eax, eax
je 0x14008d094
lea rdx, [0x1401e42d8]
lea rcx, [rbp - 0x14]
call fcn.140027970
test eax, eax
je 0x14008d094
xor eax, eax
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], ax
mov r8, 0xffffffffffffffff
inc r8
cmp word [rbx + r8*2], ax
jne 0x14008d110
mov rdx, rbx
lea rcx, [rsp + 0x58]
call fcn.140006d60
nop
lea rax, [rbp - 0x14]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x14008d133
lea rdx, [rbp - 0x14]
lea rcx, [rsp + 0x58]
call fcn.140006a90
mov r8d, 1
lea rdx, [0x1401e42c8]
lea rcx, [rsp + 0x58]
call fcn.140006a90
lea rdx, [rsp + 0x58]
cmp qword [rsp + 0x70], 8
cmovae rdx, qword [rsp + 0x58]
mov byte [rsp + 0x28], r14b
mov byte [rsp + 0x20], sil
mov r9, rdi
mov r8, r12
mov rcx, r13
call fcn.14008ccc0
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x14008d1cf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008d1ca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008d433
call fcn.14017f5e4
xor eax, eax
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], 7
jmp 0x14008d08f
mov rdx, r12
lea rcx, [rbp - 0x14]
call fcn.14002a510
test al, al
je 0x14008d094
xor eax, eax
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], 7
mov word [rsp + 0x38], ax
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rbx + r8*2], ax
jne 0x14008d220
mov rdx, rbx
lea rcx, [rsp + 0x38]
call fcn.140006d60
nop
lea rax, [rbp - 0x14]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x14008d243
lea rdx, [rbp - 0x14]
lea rcx, [rsp + 0x38]
call fcn.140006a90
lea rdx, [rsp + 0x38]
cmp qword [rsp + 0x50], 8
cmovae rdx, qword [rsp + 0x38]
xor eax, eax
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x70], 7
mov word [rsp + 0x78], ax
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rdx + r8*2], ax
jne 0x14008d290
lea rcx, [rsp + 0x78]
call fcn.140006d60
nop
mov rdx, qword [rdi + 8]
cmp qword [rdi + 0x10], rdx
je 0x14008d2e1
xor eax, eax
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], rax
movups xmm0, xmmword [rsp + 0x78]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rbp - 0x78]
movups xmmword [rdx + 0x10], xmm1
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x70], 7
mov word [rsp + 0x78], ax
add qword [rdi + 8], 0x20
jmp 0x14008d2ef
lea r8, [rsp + 0x78]
mov rcx, rdi
call fcn.140001d60
nop
mov rdx, qword [rbp - 0x70]
cmp rdx, 8
jb 0x14008d330
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008d32b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008d439
call fcn.14017f5e4
xor eax, eax
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x70], 7
mov word [rsp + 0x78], ax
mov rdx, qword [rsp + 0x50]
cmp rdx, 8
jb 0x14008d387
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008d380
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008d43f
call fcn.14017f5e4
xor eax, eax
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], 7
mov word [rsp + 0x38], ax
jmp 0x14008d094
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
mov rdx, qword [rbp - 0x50]
cmp rdx, 8
jb 0x14008d3e5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008d3e0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008d41b
call fcn.14017f5e4
movdqa xmm0, xmmword [0x1401e3030]
movdqu xmmword [rbp - 0x58], xmm0
xor eax, eax
mov word [rbp - 0x68], ax
mov rcx, qword [rbp + 0x210]
xor rcx, rsp
call fcn.14017f700
add rsp, 0x328
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.1401a10ac
nop
call fcn.1401a10ac
nop
call fcn.1401a10ac
nop
call fcn.1401a10ac
int3
call fcn.1401a10ac
nop
call fcn.1401a10ac
nop
call fcn.1401a10ac
int3