Function at 0x1400045f0
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x4e8
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x480], rax
mov rbx, qword [rsp + 0x550]
mov r13, rcx
mov rdi, qword [rsp + 0x558]
lea rcx, [rsp + 0x528]
mov rax, qword [rcx]
mov rsi, r9
mov qword [rbp + 8], rax
mov r15, r8
mov qword [rcx], 0
lea r8, [rbp + 0x10]
movabs rcx, 0x6a7f49c7b32571d8
movabs rax, 0x1422b1b2065d8146
mov qword [rbp], rax
mov r14d, edx
mov rax, qword [rbp]
mov r9, r13
mov qword [rbp + 0x10], rax
mov edx, 0x104
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x18], rax
movabs rax, 0x1422b1b22c01f263
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp], rcx
lea rcx, [rbp + 0x370]
mov qword [rbp + 0x1e0], rax
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x10]
mov qword [rbp + 0x1e8], rax
xorps xmm0, xmmword [rbp + 0x1e0]
movdqa xmmword [rbp + 0x10], xmm0
call fcn.1400010c0
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0x370]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov r12, rax
cmp rax, 0xffffffffffffffff
jne 0x14000484c
movabs rax, 0x784bd0f40c5cdf38
lea rcx, [rbp + 0x60]
mov qword [rbp], rax
mov rdx, r13
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
movabs rax, 0x31969a8c70515bd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movabs rax, 0xba1941b19cd75de3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
movabs rax, 0x6d2c8b97b3395aa
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
movabs rax, 0x70eb7ef67992bd4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0x3ec3bcdb885053bf
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movabs rax, 0x1422b1b22c01f263
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x220], rax
movabs rax, 0x6a7f49c7b32571d8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x228], rax
movabs rax, 0xc97c2dd8faf7398d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x230], rax
movabs rax, 0x63a0a1dd5b5dfc8a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x238], rax
movabs rax, 0x222e8d9615f65fb7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x240], rax
movabs rax, 0x3ec3bcdb885059cc
mov qword [rbp], rax
mov rax, qword [rbp]
movdqa xmm2, xmmword [rbp + 0x80]
vmovdqu ymm0, ymmword [rbp + 0x220]
vpxor ymm1, ymm0, ymmword [rbp + 0x60]
mov qword [rbp + 0x248], rax
vxorps xmm2, xmm2, xmmword [rbp + 0x240]
vmovdqa ymmword [rbp + 0x60], ymm1
vmovdqa xmmword [rbp + 0x80], xmm2
vzeroupper
call fcn.140001060
jmp 0x140004b5c
movabs rax, 0x1422b1b22c01f24d
movabs r11, 0x1422b1b22c01dc4d
mov qword [rbp], rax
lea r8, [rbp + 0x20]
mov rax, qword [rbp]
movabs r9, 0x6a7f49c7b32571d8
mov qword [rbp + 0x20], rax
movabs r10, 0x1422b1b22c01f263
mov qword [rbp], r9
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
mov qword [rbp], r10
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
mov qword [rbp], r9
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x20]
mov qword [rbp + 0x1f8], rax
lea rax, [rbp + 0xcc]
xorps xmm0, xmmword [rbp + 0x1f0]
sub r8, rax
movdqa xmmword [rbp + 0x20], xmm0
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x1400048e3
inc rax
test ecx, ecx
jne 0x1400048d0
test edx, edx
je 0x140004b27
mov qword [rbp], r11
lea r8, [rbp + 0x30]
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
mov qword [rbp], r9
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], r10
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
mov qword [rbp], r9
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x30]
mov qword [rbp + 0x208], rax
lea rax, [rbp + 0xcc]
xorps xmm0, xmmword [rbp + 0x200]
sub r8, rax
movdqa xmmword [rbp + 0x30], xmm0
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140004953
inc rax
test ecx, ecx
jne 0x140004940
test edx, edx
je 0x140004b27
movabs rax, 0x1422b1c1095d8146
lea r8, [rbp + 0x40]
mov qword [rbp], rax
lea rcx, [rbp + 0x260]
mov rax, qword [rbp]
mov edx, 0x104
mov qword [rbp + 0x40], rax
mov qword [rbp], r9
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
mov qword [rbp], r10
mov rax, qword [rbp]
mov qword [rbp + 0x210], rax
mov qword [rbp], r9
mov r9, r13
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x40]
mov qword [rbp + 0x218], rax
lea rax, [rbp + 0xcc]
xorps xmm0, xmmword [rbp + 0x210]
movdqa xmmword [rbp + 0x40], xmm0
mov qword [rsp + 0x20], rax
call fcn.1400010c0
test byte [rbp + 0xa0], 0x10
je 0x140004a4c
mov r8, qword [rdi]
xor r9d, r9d
test r8, r8
je 0x140004a28
nop dword [rax]
nop dword [rax + rax]
lea rax, [rbp + 0xcc]
sub r8, rax
nop word [rax + rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140004a13
inc rax
test ecx, ecx
jne 0x140004a00
test edx, edx
je 0x140004b27
mov r8, qword [rdi + r9*8 + 8]
inc r9
test r8, r8
jne 0x1400049f0
mov qword [rsp + 0x28], rdi
lea rcx, [rbp + 0x260]
mov r9, rsi
mov qword [rsp + 0x20], rbx
mov r8, r15
mov edx, r14d
call fcn.1400045f0
jmp 0x140004b27
mov edx, 0x2e
lea rcx, [rbp + 0xcc]
call qword [sym.imp.VCRUNTIME140.dll_strrchr]
mov r10, rax
test rax, rax
je 0x140004ab8
mov r8, qword [rsi]
xor r9d, r9d
test r8, r8
je 0x140004ab8
nop dword [rax]
nop word [rax + rax]
mov rcx, r10
sub r8, r10
nop word [rax + rax]
movzx edx, byte [rcx]
movzx eax, byte [rcx + r8]
sub edx, eax
jne 0x140004aa3
inc rcx
test eax, eax
jne 0x140004a90
test edx, edx
je 0x140004b27
mov r8, qword [rsi + r9*8 + 8]
inc r9
test r8, r8
jne 0x140004a80
mov r8, qword [rbx]
xor r9d, r9d
test r8, r8
je 0x140004af4
lea rax, [rbp + 0xcc]
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140004ae3
inc rax
test ecx, ecx
jne 0x140004ad0
test edx, edx
je 0x140004b27
mov r8, qword [rbx + r9*8 + 8]
inc r9
test r8, r8
jne 0x140004ac3
lea rax, [rbp + 0xcc]
mov r8, r15
sub r8, rax
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140004b14
inc rax
test ecx, ecx
jne 0x140004b01
test edx, edx
je 0x140004b27
mov edx, r14d
lea rcx, [rbp + 0x260]
call fcn.140003910
lea rdx, [rbp + 0xa0]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
movabs r11, 0x1422b1b22c01dc4d
movabs rax, 0x1422b1b22c01f24d
jne 0x140004860
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rax, qword [rbp + 8]
lea rcx, [rsp + 0x528]
mov qword [rcx], rax
mov rcx, qword [rbp + 0x480]
xor rcx, rsp
call fcn.140006390
add rsp, 0x4e8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret