Function at 0x140012470
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
mov eax, 0x16f0
call fcn.1400ea040
sub rsp, rax
mov rax, qword [0x14012df80]
xor rax, rsp
mov qword [rsp + 0x16e0], rax
mov rdi, rdx
lea r8, [rsp + 0x490]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rcx
xor esi, esi
mov ebx, 1
sub rdi, r8
mov edx, 0x410
lea rcx, [rsp + 0x490]
nop
nop
lea rax, [rdx + 0x7ffffbee]
test rax, rax
je 0x1400124f3
movzx eax, word [rdi + rcx]
test ax, ax
je 0x1400124f3
mov word [rcx], ax
add rcx, 2
sub rdx, rbx
jne 0x1400124d0
jmp 0x1400124f8
test rdx, rdx
jne 0x140012501
sub rcx, 2
mov esi, 0x8007007a
test esi, esi
mov word [rcx], 0
jne 0x140012634
lea rdi, [rsp + 0x490]
lea rax, [rsp + 0xec0]
mov edx, 0x410
sub rdi, rax
lea rcx, [rsp + 0xec0]
nop
lea rax, [rdx + 0x7ffffbee]
test rax, rax
je 0x140012553
movzx eax, word [rdi + rcx]
test ax, ax
je 0x140012553
mov word [rcx], ax
add rcx, 2
sub rdx, rbx
jne 0x140012530
jmp 0x140012558
test rdx, rdx
jne 0x140012561
sub rcx, 2
mov esi, 0x8007007a
test esi, esi
mov word [rcx], 0
jne 0x140012634
lea rdx, [0x1400fb380]
lea rcx, [rsp + 0xec0]
call fcn.14002ae40
lea rdi, [rsp + 0xec0]
lea rax, [rsp + 0x490]
sub rdi, rax
mov edx, 0x410
lea rcx, [rsp + 0x490]
lea rax, [rdx + 0x7ffffbee]
test rax, rax
je 0x1400125c5
movzx eax, word [rdi + rcx]
test ax, ax
je 0x1400125c5
mov word [rcx], ax
add rcx, 2
sub rdx, rbx
jne 0x1400125a2
jmp 0x1400125ca
test rdx, rdx
jne 0x1400125d3
sub rcx, 2
mov esi, 0x8007007a
xor eax, eax
test esi, esi
mov word [rcx], 0
sete al
test eax, eax
je 0x140012634
lea rdi, [rsp + 0x490]
lea rax, [rsp + 0xcb0]
mov edx, 0x104
sub rdi, rax
lea rcx, [rsp + 0xcb0]
lea rax, [rdx + 0x7ffffefa]
test rax, rax
je 0x140012626
movzx eax, word [rcx + rdi]
test ax, ax
je 0x140012626
mov word [rcx], ax
add rcx, 2
sub rdx, rbx
jne 0x140012603
jmp 0x14001262b
test rdx, rdx
jne 0x14001262f
sub rcx, 2
mov word [rcx], 0
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0xcb0]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp rax, 0xffffffffffffffff
mov rbp, rax
je 0x140012857
test byte [rsp + 0x30], 0x10
je 0x140012832
lea rsi, [rsp + 0x5c]
lea rdi, [0x1400fc3b0]
mov ecx, 2
repe cmpsw word [rsi], word [rdi]
je 0x140012834
lea rsi, [rsp + 0x5c]
lea rdi, [0x1400fc3b4]
mov ecx, 3
repe cmpsw word [rsi], word [rdi]
je 0x140012834
mov rdi, qword [rsp + 0x28]
lea rax, [rsp + 0x490]
xor esi, esi
mov edx, 0x410
lea rcx, [rsp + 0x490]
sub rdi, rax
lea rax, [rdx + 0x7ffffbee]
test rax, rax
je 0x1400126d6
movzx eax, word [rcx + rdi]
test ax, ax
je 0x1400126d6
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x1400126b2
jmp 0x1400126db
test rdx, rdx
jne 0x1400126e4
sub rcx, 2
mov esi, 0x8007007a
test esi, esi
mov word [rcx], 0
jne 0x140012816
lea rdi, [rsp + 0x490]
lea rax, [rsp + 0xec0]
mov edx, 0x410
sub rdi, rax
lea rcx, [rsp + 0xec0]
lea rax, [rdx + 0x7ffffbee]
test rax, rax
je 0x140012735
movzx eax, word [rcx + rdi]
test ax, ax
je 0x140012735
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x140012711
jmp 0x14001273a
test rdx, rdx
jne 0x140012743
sub rcx, 2
mov esi, 0x8007007a
test esi, esi
mov word [rcx], 0
jne 0x140012816
lea rdx, [rsp + 0x5c]
lea rcx, [rsp + 0xec0]
call fcn.14002ae40
lea rdi, [rsp + 0xec0]
lea rax, [rsp + 0x490]
sub rdi, rax
mov edx, 0x410
lea rcx, [rsp + 0x490]
lea rax, [rdx + 0x7ffffbee]
test rax, rax
je 0x1400127a6
movzx eax, word [rcx + rdi]
test ax, ax
je 0x1400127a6
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x140012782
jmp 0x1400127ab
test rdx, rdx
jne 0x1400127b4
sub rcx, 2
mov esi, 0x8007007a
xor eax, eax
test esi, esi
mov word [rcx], 0
sete al
test eax, eax
je 0x140012816
lea rdi, [rsp + 0x490]
lea rax, [rsp + 0x280]
mov edx, 0x104
sub rdi, rax
lea rcx, [rsp + 0x280]
lea rax, [rdx + 0x7ffffefa]
test rax, rax
je 0x140012808
movzx eax, word [rcx + rdi]
test ax, ax
je 0x140012808
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x1400127e4
jmp 0x14001280d
test rdx, rdx
jne 0x140012811
sub rcx, 2
mov word [rcx], 0
mov rcx, qword [rsp + 0x20]
lea rdx, [rsp + 0x280]
mov r8d, 1
call fcn.140012470
mov ebx, eax
jmp 0x140012834
xor ebx, ebx
lea rdx, [rsp + 0x30]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x14001284e
test ebx, ebx
jne 0x140012654
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_FindClose]
mov eax, ebx
mov rcx, qword [rsp + 0x16e0]
xor rcx, rsp
call fcn.1400cd6e0
lea r11, [rsp + 0x16f0]
mov rbx, qword [r11 + 0x18]
mov rbp, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop rdi
ret