Function at 0x7ff7c3ac56a0
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x360
mov rax, qword [0x7ff7c3bb6500]
xor rax, rsp
mov qword [rsp + 0x358], rax
mov rdi, rcx
xor r14d, r14d
mov ebx, r14d
mov dword [rsp + 0x50], ebx
movsd xmm0, qword [0x7ff7c3b99040]
movsd qword [rsp + 0x20], xmm0
movzx eax, word [0x7ff7c3b99048]
mov ecx, 0x5c
mov word [rsp + 0x20], cx
xor word [rsp + 0x22], 0x39
xor word [rsp + 0x24], 0x3a
xor word [rsp + 0x26], 0x3b
xor ax, 0x3c
mov word [rsp + 0x28], ax
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x68], xmm1
lea rax, [rsp + 0x20]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rax + r8*2], bx
jne 0x7ff7c3ac5730
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x58]
call fcn.7ff7c3acd150
nop
lea r8, [rsp + 0x58]
mov rdx, rdi
lea rcx, [rsp + 0xd8]
call fcn.7ff7c3acc7e0
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 7
jbe 0x7ff7c3ac57a2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7c3ac579d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff7c3ac5d58
call fcn.7ff7c3b40d50
movdqa xmm0, xmmword [0x7ff7c3b9a2a0]
movdqu xmmword [rsp + 0x68], xmm0
mov word [rsp + 0x58], r14w
lea rcx, [rsp + 0xd8]
cmp qword [rsp + 0xf0], 7
cmova rcx, qword [rsp + 0xd8]
lea rdx, [rsp + 0x100]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rsi, rax
cmp rax, 0xffffffffffffffff
jne 0x7ff7c3ac5859
mov rdx, qword [rsp + 0xf0]
cmp rdx, 7
jbe 0x7ff7c3ac582f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7c3ac582a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff7c3ac5d52
call fcn.7ff7c3b40d50
mov rcx, qword [rsp + 0x358]
xor rcx, rsp
call fcn.7ff7c3b40d30
lea r11, [rsp + 0x360]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop r14
ret
nop dword [rax]
test byte [rsp + 0x100], 0x10
je 0x7ff7c3ac5a7a
movzx ecx, word [rsp + 0x12c]
movzx eax, word [rsp + 0x12e]
cmp cx, 0x2e
jne 0x7ff7c3ac58a6
test ax, ax
je 0x7ff7c3ac5ce4
cmp cx, cx
jne 0x7ff7c3ac58a6
cmp ax, cx
jne 0x7ff7c3ac58a6
cmp word [rsp + 0x130], 0
je 0x7ff7c3ac5ce4
xorps xmm0, xmm0
movups xmmword [rsp + 0x98], xmm0
mov qword [rsp + 0xa8], r14
mov qword [rsp + 0xb0], r14
mov r8d, 1
lea rdx, [0x7ff7c3b98fe0]
lea rcx, [rsp + 0x98]
call fcn.7ff7c3acd150
nop
lea r8, [rsp + 0x98]
mov rdx, rdi
lea rcx, [rsp + 0x30]
call fcn.7ff7c3acc7e0
nop
lea rcx, [rsp + 0x12c]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rcx + r8*2], 0
jne 0x7ff7c3ac5901
lea rdx, [rsp + 0x12c]
mov rcx, rax
call fcn.7ff7c3aca400
xorps xmm0, xmm0
movups xmmword [rsp + 0xb8], xmm0
mov qword [rsp + 0xc8], r14
mov qword [rsp + 0xd0], r14
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xb8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0xc8], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
or ebx, 2
mov rdx, qword [rsp + 0x48]
cmp rdx, 7
jbe 0x7ff7c3ac59a3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7c3ac599e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff7c3ac5d5e
call fcn.7ff7c3b40d50
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], r14w
mov rdx, qword [rsp + 0xb0]
cmp rdx, 7
jbe 0x7ff7c3ac59ff
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7c3ac59fa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff7c3ac5d64
call fcn.7ff7c3b40d50
mov qword [rsp + 0xa8], r14
mov qword [rsp + 0xb0], 7
mov word [rsp + 0x98], r14w
lea rcx, [rsp + 0xb8]
call fcn.7ff7c3ac56a0
nop
mov rdx, qword [rsp + 0xd0]
cmp rdx, 7
jbe 0x7ff7c3ac5ce4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7c3ac5cdf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff7c3ac5d6a
jmp 0x7ff7c3ac5cdf
xorps xmm0, xmm0
movups xmmword [rsp + 0x98], xmm0
mov qword [rsp + 0xa8], r14
mov qword [rsp + 0xb0], r14
lea rax, [rsp + 0x12c]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x7ff7c3ac5aa4
lea rdx, [rsp + 0x12c]
lea rcx, [rsp + 0x98]
call fcn.7ff7c3acd150
nop
lea rcx, [rsp + 0x98]
call fcn.7ff7c3ac52a0
test al, al
je 0x7ff7c3ac5c9c
xorps xmm0, xmm0
movups xmmword [rsp + 0xb8], xmm0
mov qword [rsp + 0xc8], r14
mov qword [rsp + 0xd0], r14
mov r8d, 1
lea rdx, [0x7ff7c3b98fe0]
lea rcx, [rsp + 0xb8]
call fcn.7ff7c3acd150
nop
lea r8, [rsp + 0xb8]
mov rdx, rdi
lea rcx, [rsp + 0x78]
call fcn.7ff7c3acc7e0
nop
lea rdx, [rsp + 0x98]
cmp qword [rsp + 0xb0], 7
cmova rdx, qword [rsp + 0x98]
mov r8, qword [rsp + 0xa8]
mov rcx, rax
call fcn.7ff7c3aca400
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x40], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
or ebx, 1
mov rdx, qword [0x7ff7c3bc0a98]
cmp rdx, qword [0x7ff7c3bc0aa0]
je 0x7ff7c3ac5ba0
movups xmmword [rdx], xmm0
movups xmmword [rdx + 0x10], xmm1
mov edx, 7
mov word [rsp + 0x30], r14w
add qword [0x7ff7c3bc0a98], 0x20
jmp 0x7ff7c3ac5bb6
lea r8, [rsp + 0x30]
lea rcx, [0x7ff7c3bc0a90]
call fcn.7ff7c3ace110
mov rdx, qword [rsp + 0x48]
cmp rdx, 7
jbe 0x7ff7c3ac5bf4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7c3ac5bee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff7c3ac5d70
call fcn.7ff7c3b40d50
nop
mov rdx, qword [rsp + 0x90]
cmp rdx, 7
jbe 0x7ff7c3ac5c39
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7c3ac5c34
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff7c3ac5d76
call fcn.7ff7c3b40d50
mov qword [rsp + 0x88], r14
mov qword [rsp + 0x90], 7
mov word [rsp + 0x78], r14w
mov rdx, qword [rsp + 0xd0]
cmp rdx, 7
jbe 0x7ff7c3ac5c9c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7c3ac5c96
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff7c3ac5d7c
call fcn.7ff7c3b40d50
nop
mov rdx, qword [rsp + 0xb0]
cmp rdx, 7
jbe 0x7ff7c3ac5ce4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7c3ac5cdf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff7c3ac5d82
call fcn.7ff7c3b40d50
lea rdx, [rsp + 0x100]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x7ff7c3ac5860
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
mov rdx, qword [rsp + 0xf0]
cmp rdx, 7
jbe 0x7ff7c3ac582f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff7c3ac582a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x7ff7c3ac582a
call fcn.7ff7c3b51854
nop
call fcn.7ff7c3b51854
nop
call fcn.7ff7c3b51854
nop
call fcn.7ff7c3b51854
nop
call fcn.7ff7c3b51854
nop
call fcn.7ff7c3b51854
nop
call fcn.7ff7c3b51854
nop
call fcn.7ff7c3b51854
nop
call fcn.7ff7c3b51854
int3