Function at 0x1400cebc0
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
mov qword [rsp + 8], rcx
push rbp
lea rbp, [rsp - 0x5a0]
sub rsp, 0x6a0
mov r10, r9
lea r9, [rbp + 0x180]
mov rsi, rdx
sub r9, r8
nop dword [rax]
nop dword [rax + rax]
movzx eax, word [r8]
lea r8, [r8 + 2]
mov word [r9 + r8 - 2], ax
test ax, ax
jne 0x1400cec00
mov eax, dword [0x140122f58]
or r9, 0xffffffffffffffff
test r10, r10
je 0x1400cec94
mov rcx, r9
inc rcx
cmp word [r10 + rcx*2], 0
jne 0x1400cec25
test rcx, rcx
je 0x1400cec94
cmp word [r10], 0x5c
je 0x1400cec5d
lea rcx, [rbp + 0x180]
sub rcx, 2
nop word [rax + rax]
cmp word [rcx + 2], 0
lea rcx, [rcx + 2]
jne 0x1400cec50
mov dword [rcx], eax
lea rdx, [rbp + 0x180]
sub rdx, 2
nop dword [rax + rax]
cmp word [rdx + 2], 0
lea rdx, [rdx + 2]
jne 0x1400cec70
xor r8d, r8d
nop
movzx ecx, word [r10 + r8*2]
lea r8, [r8 + 1]
mov word [rdx + r8*2 - 2], cx
test cx, cx
jne 0x1400cec80
xor edi, edi
mov edx, edi
nop dword [rax + rax]
movzx ecx, word [rbp + rdx + 0x180]
lea rdx, [rdx + 2]
mov word [rbp + rdx + 0x38e], cx
test cx, cx
jne 0x1400ceca0
mov r8, qword [rbp + 0x5d0]
test r8, r8
je 0x1400ced23
inc r9
cmp word [r8 + r9*2], di
jne 0x1400cecc5
test r9, r9
je 0x1400ced23
cmp word [r8], 0x5c
je 0x1400cecf2
lea rcx, [rbp + 0x180]
sub rcx, 2
cmp word [rcx + 2], di
lea rcx, [rcx + 2]
jne 0x1400cece6
mov dword [rcx], eax
lea rcx, [rbp + 0x180]
sub rcx, 2
nop dword [rax]
cmp word [rcx + 2], di
lea rcx, [rcx + 2]
jne 0x1400ced00
xor edx, edx
nop dword [rax]
movzx eax, word [r8 + rdx*2]
lea rdx, [rdx + 1]
mov word [rcx + rdx*2 - 2], ax
test ax, ax
jne 0x1400ced10
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x180]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1400ced9f
nop
test byte [rsp + 0x30], 0x10
jne 0x1400ced71
mov rcx, qword [rbp + 0x5b0]
lea rax, [rsp + 0x30]
lea r9, [rsp + 0x5c]
lea r8, [rbp + 0x390]
mov rdx, rsi
mov qword [rsp + 0x20], rax
call fcn.1400cf320
mov edi, 1
lea rdx, [rsp + 0x30]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x1400ced40
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindClose]
test edi, edi
je 0x1400ced9f
lea rdx, [0x140130314]
mov rcx, rsi
call fcn.1400ebda4
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x180]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1400cee78
mov edi, dword [rbp + 0x5d8]
test byte [rsp + 0x30], 0x10
je 0x1400cee59
movzx ecx, word [rsp + 0x5c]
movzx eax, word [rsp + 0x5e]
cmp cx, word [0x1401302d8]
jne 0x1400cedeb
cmp ax, word [0x1401302da]
je 0x1400cee59
cmp cx, word [0x14013c79c]
jne 0x1400cee0b
cmp ax, word [0x14013c79e]
jne 0x1400cee0b
movzx eax, word [rsp + 0x60]
cmp ax, word [0x14013c7a0]
je 0x1400cee59
lea r9, [rsp + 0x5c]
lea r8, [rbp + 0x390]
lea rdx, str._s_s_n
mov rcx, rsi
call fcn.1400ebda4
test edi, edi
je 0x1400cee59
mov rcx, qword [rbp + 0x5b0]
lea rax, str..
lea r9, [rsp + 0x5c]
lea r8, [rbp + 0x390]
mov rdx, rsi
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rax
call fcn.1400cebc0
lea rdx, [rsp + 0x30]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x1400cedc4
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindClose]
lea r11, [rsp + 0x6a0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret