Function at 0x10007263
Capabilities:
Check if file exists
Enumerate files on windows
Enumerate files recursively
Get file attributes

Disassembly:
push rbp
mov rbp, rsp
push rdi
sub rsp, 0x5a8
mov qword [rbp + 0x10], rcx
mov qword [rbp + 0x18], rdx
mov qword [rbp + 0x20], r8
mov qword [rbp + 0x28], r9
mov dword [rbp - 0x114], 0
lea rax, [rbp - 0x130]
mov qword [rax], 0
mov qword [rax + 8], 0
mov qword [rax + 0x10], 0
lea rax, [rbp - 0x380]
mov r8, rax
mov eax, 0
mov edx, 0x4a
mov rdi, r8
mov rcx, rdx
rep stosq qword [rdi], rax
mov qword [rbp - 0x388], 0
lea rax, [rbp - 0x3a0]
mov qword [rax], 0
mov qword [rax + 8], 0
mov qword [rax + 0x10], 0
mov dword [rbp - 0x3a4], 0
lea rax, [rbp - 0x490]
mov qword [rax], 0
lea rax, [rbp - 0x490]
add rax, 8
mov qword [rax], 0
lea rax, [rbp - 0x490]
add rax, 0x10
mov qword [rax], 0
lea rax, [rbp - 0x490]
add rax, 0x18
mov qword [rax], 0x18
lea rax, [rbp - 0x490]
add rax, 0x20
mov qword [rax], 0
lea rax, [rbp - 0x490]
add rax, 0x28
mov ecx, 0xc0
mov r8d, 0
mov qword [rax], r8
mov edx, ecx
add rdx, rax
add rdx, 8
mov qword [rdx - 0x10], r8
lea rdx, [rax + 8]
and rdx, 0xfffffffffffffff8
sub rax, rdx
add ecx, eax
and ecx, 0xfffffff8
mov eax, ecx
shr eax, 3
mov ecx, eax
mov rdi, rdx
mov rax, r8
rep stosq qword [rdi], rax
mov dword [rbp - 0x494], 0
mov rax, qword [rbp + 0x10]
mov rax, qword [rax]
mov rcx, rax
call fcn.100c1a60
mov qword [rbp - 0x18], rax
mov rax, qword [rbp - 0x18]
mov qword [rbp - 0x20], rax
mov rax, qword [rbp - 0x20]
mov rcx, rax
call sub.KERNEL32.dll_GetFileAttributesW
mov dword [rbp - 0x24], eax
cmp dword [rbp - 0x24], 0xffffffff
sete al
movzx eax, al
neg eax
cdqe
mov qword [rbp - 0x30], rax
mov rax, qword [rbp - 0x20]
mov rcx, rax
call fcn.100c1d30
cmp qword [rbp - 0x30], 0
je 0x1000741e
lea rax, [rbp - 0x490]
mov rcx, rax
call fcn.100be090
lea rax, [rbp - 0x3a0]
mov rcx, rax
call fcn.100c0370
lea rax, [rbp - 0x130]
mov rcx, rax
call fcn.100c0370
jmp 0x10007d0d
nop
cmp dword [rbp + 0x30], 0
jne 0x1000744f
mov dword [0x100cd010], 0
mov dword [0x100cd014], 0
mov dword [0x100cd018], 0
mov dword [0x100cd01c], 0
jmp 0x10007450
nop
mov edx, 1
mov rcx, qword [rbp + 0x10]
call fcn.100c0d10
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov r9d, 2
lea r8, [0x100c7032]
mov rdx, 0xffffffffffffffff
mov rcx, rax
call fcn.100bf570
mov dword [rbp - 0x3c], eax
cmp dword [rbp - 0x3c], 0
je 0x10007509
lea rax, [rbp - 0x4b0]
mov qword [rax], 0
mov qword [rax + 8], 0
mov qword [rax + 0x10], 0
lea rax, [rbp - 0x4b0]
mov qword [rsp + 0x20], 2
lea r9, [0x100c7032]
mov r8, 0xffffffffffffffff
mov rdx, qword [rbp + 0x10]
mov rcx, rax
call fcn.100bf700
mov qword [rbp - 0x50], rax
mov rdx, qword [rbp - 0x50]
lea rax, [rbp - 0x130]
mov dword [rsp + 0x20], 0
mov r9, 0xffffffffffffffff
mov r8, rdx
mov rdx, 0xffffffffffffffff
mov rcx, rax
call fcn.100bf4b0
mov qword [rbp - 0x58], rax
jmp 0x10007537
nop
lea rax, [rbp - 0x130]
mov dword [rsp + 0x20], 0
mov r9, 0xffffffffffffffff
mov r8, qword [rbp + 0x10]
mov rdx, 0xffffffffffffffff
mov rcx, rax
call fcn.100bf4b0
mov qword [rbp - 0x48], rax
lea rax, [rbp - 0x110]
mov qword [rax], 0
mov qword [rax + 8], 0
mov qword [rax + 0x10], 0
lea rax, [rbp - 0xf0]
mov qword [rax], 0
mov qword [rax + 8], 0
mov qword [rax + 0x10], 0
mov rcx, qword [rbp + 0x18]
lea rdx, [rbp - 0x130]
lea rax, [rbp - 0xf0]
mov qword [rsp + 0x20], 0xffffffffffffffff
mov r9, rcx
mov r8, 0xffffffffffffffff
mov rcx, rax
call fcn.100bf700
mov qword [rbp - 0x60], rax
mov rdx, qword [rbp - 0x60]
lea rax, [rbp - 0x110]
mov dword [rsp + 0x20], 0
mov r9, 0xffffffffffffffff
mov r8, rdx
mov rdx, 0xffffffffffffffff
mov rcx, rax
call fcn.100bf4b0
mov qword [rbp - 0x68], rax
lea rax, [rbp - 0x110]
mov rax, qword [rax]
mov rcx, rax
call fcn.100c1a60
mov qword [rbp - 0x70], rax
mov rax, qword [rbp - 0x70]
mov qword [rbp - 0x78], rax
lea rdx, [rbp - 0x380]
mov rax, qword [rbp - 0x78]
mov rcx, rax
call sub.KERNEL32.dll_FindFirstFileW
mov qword [rbp - 0x80], rax
mov rax, qword [rbp - 0x80]
mov qword [rbp - 0x388], rax
mov rax, qword [rbp - 0x78]
mov rcx, rax
call fcn.100c1d30
lea rax, [rbp - 0x110]
mov rcx, rax
call fcn.100c0370
mov rax, qword [rbp - 0x388]
cmp rax, 0xffffffffffffffff
je 0x10007a15
nop
lea rax, [rbp - 0x380]
add rax, 0x2c
lea rcx, [rbp - 0x3a0]
mov r9d, 0
mov r8, rax
mov rdx, 0xffffffffffffffff
call fcn.100c1470
lea rax, [rbp - 0x380]
mov eax, dword [rax]
mov eax, eax
and eax, 0x10
test rax, rax
je 0x100078c1
lea rax, [rbp - 0x3a0]
mov r9d, 2
lea r8, [0x100c703e]
mov rdx, 0xffffffffffffffff
mov rcx, rax
call fcn.100bf570
mov dword [rbp - 0x94], eax
lea rax, [rbp - 0x3a0]
mov r9d, 3
lea r8, [0x100c7040]
mov rdx, 0xffffffffffffffff
mov rcx, rax
call fcn.100bf570
mov dword [rbp - 0x98], eax
cmp dword [rbp - 0x94], 0
setne al
movzx eax, al
neg eax
mov edx, eax
cmp dword [rbp - 0x98], 0
setne al
movzx eax, al
neg eax
and eax, edx
test eax, eax
je 0x100078bb
mov eax, dword [rbp - 0x494]
movsxd rdx, eax
lea rax, [rbp - 0x490]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 1
mov r9d, 0xffffffff
mov r8d, 0xffffffff
mov edx, 0x18
mov rcx, rax
call fcn.100be5c0
mov eax, dword [rbp - 0x494]
movsxd rdx, eax
mov rax, rdx
add rax, rax
add rax, rdx
shl rax, 3
mov rdx, rax
lea rax, [rbp - 0x490]
mov rax, qword [rax]
add rax, rdx
mov rcx, rax
lea rax, [rbp - 0x3a0]
mov dword [rsp + 0x20], 0
mov r9, 0xffffffffffffffff
mov r8, rax
mov rdx, 0xffffffffffffffff
call fcn.100bf4b0
mov qword [rbp - 0xa0], rax
mov eax, dword [rbp - 0x494]
add eax, 1
mov dword [rbp - 0x494], eax
mov edx, dword [0x100cd014]
mov eax, dword [0x100cd010]
cmp edx, eax
jne 0x100077ff
mov eax, dword [0x100cd014]
add eax, 0x3e8
mov dword [0x100cd014], eax
mov eax, dword [0x100cd014]
movsxd rdx, eax
mov rax, qword [rbp + 0x28]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 1
mov r9d, 0xffffffff
mov r8d, 0xffffffff
mov edx, 0x18
mov rcx, rax
call fcn.100be5c0
jmp 0x10007800
nop
lea rax, [rbp - 0x4d0]
mov qword [rax], 0
mov qword [rax + 8], 0
mov qword [rax + 0x10], 0
lea rcx, [rbp - 0x3a0]
lea rdx, [rbp - 0x130]
lea rax, [rbp - 0x4d0]
mov qword [rsp + 0x20], 0xffffffffffffffff
mov r9, rcx
mov r8, 0xffffffffffffffff
mov rcx, rax
call fcn.100bf700
mov qword [rbp - 0xa8], rax
mov eax, dword [0x100cd010]
movsxd rdx, eax
mov rax, rdx
add rax, rax
add rax, rdx
shl rax, 3
mov rdx, rax
mov rax, qword [rbp + 0x28]
mov rax, qword [rax]
add rax, rdx
mov rcx, rax
mov rax, qword [rbp - 0xa8]
mov dword [rsp + 0x20], 0
mov r9, 0xffffffffffffffff
mov r8, rax
mov rdx, 0xffffffffffffffff
call fcn.100bf4b0
mov qword [rbp - 0xb0], rax
mov eax, dword [0x100cd010]
add eax, 1
mov dword [0x100cd010], eax
jmp 0x100079d9
nop
jmp 0x100079d9
nop
mov edx, dword [0x100cd01c]
mov eax, dword [0x100cd018]
cmp edx, eax
jne 0x10007922
mov eax, dword [0x100cd01c]
add eax, 0x3e8
mov dword [0x100cd01c], eax
mov eax, dword [0x100cd01c]
movsxd rdx, eax
mov rax, qword [rbp + 0x20]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 1
mov r9d, 0xffffffff
mov r8d, 0xffffffff
mov edx, 0x18
mov rcx, rax
call fcn.100be5c0
jmp 0x10007923
nop
lea rax, [rbp - 0x4f0]
mov qword [rax], 0
mov qword [rax + 8], 0
mov qword [rax + 0x10], 0
lea rcx, [rbp - 0x3a0]
lea rdx, [rbp - 0x130]
lea rax, [rbp - 0x4f0]
mov qword [rsp + 0x20], 0xffffffffffffffff
mov r9, rcx
mov r8, 0xffffffffffffffff
mov rcx, rax
call fcn.100bf700
mov qword [rbp - 0x88], rax
mov eax, dword [0x100cd018]
movsxd rdx, eax
mov rax, rdx
add rax, rax
add rax, rdx
shl rax, 3
mov rdx, rax
mov rax, qword [rbp + 0x20]
mov rax, qword [rax]
add rax, rdx
mov rcx, rax
mov rax, qword [rbp - 0x88]
mov dword [rsp + 0x20], 0
mov r9, 0xffffffffffffffff
mov r8, rax
mov rdx, 0xffffffffffffffff
call fcn.100bf4b0
mov qword [rbp - 0x90], rax
mov eax, dword [0x100cd018]
add eax, 1
mov dword [0x100cd018], eax
mov rax, qword [rbp - 0x388]
lea rdx, [rbp - 0x380]
mov rcx, rax
call sub.KERNEL32.dll_FindNextFileW
mov dword [rbp - 0xb4], eax
cmp dword [rbp - 0xb4], 0
je 0x10007a03
jmp 0x10007641
nop
mov rax, qword [rbp - 0x388]
mov rcx, rax
call sub.KERNEL32.dll_FindClose
jmp 0x10007a16
nop
mov dword [rbp - 0x3a4], 0
mov eax, dword [rbp - 0x494]
sub eax, 1
mov dword [rbp - 0xb8], eax
jmp 0x10007bfc
nop
lea rax, [rbp - 0x570]
mov qword [rax], 0
mov qword [rax + 8], 0
mov qword [rax + 0x10], 0
mov rdx, qword [rbp + 0x18]
lea rax, [rbp - 0x570]
mov dword [rsp + 0x20], 0
mov r9, 0xffffffffffffffff
mov r8, rdx
mov rdx, 0xffffffffffffffff
mov rcx, rax
call fcn.100bf4b0
mov qword [rbp - 0xc0], rax
lea rax, [rbp - 0x550]
mov qword [rax], 0
mov qword [rax + 8], 0
mov qword [rax + 0x10], 0
lea rax, [rbp - 0x510]
mov qword [rax], 0
mov qword [rax + 8], 0
mov qword [rax + 0x10], 0
mov eax, dword [rbp - 0x3a4]
movsxd rdx, eax
mov rax, rdx
add rax, rax
add rax, rdx
shl rax, 3
mov rdx, rax
lea rax, [rbp - 0x490]
mov rax, qword [rax]
add rax, rdx
mov rcx, rax
lea rdx, [rbp - 0x130]
lea rax, [rbp - 0x510]
mov qword [rsp + 0x20], 0xffffffffffffffff
mov r9, rcx
mov r8, 0xffffffffffffffff
mov rcx, rax
call fcn.100bf700
mov qword [rbp - 0xc8], rax
lea rax, [rbp - 0x530]
mov qword [rax], 0
mov qword [rax + 8], 0
mov qword [rax + 0x10], 0
mov rdx, qword [rbp - 0xc8]
lea rax, [rbp - 0x530]
mov qword [rsp + 0x20], 2
lea r9, [0x100c7032]
mov r8, 0xffffffffffffffff
mov rcx, rax
call fcn.100bf700
mov qword [rbp - 0xd0], rax
mov rdx, qword [rbp - 0xd0]
lea rax, [rbp - 0x550]
mov dword [rsp + 0x20], 0
mov r9, 0xffffffffffffffff
mov r8, rdx
mov rdx, 0xffffffffffffffff
mov rcx, rax
call fcn.100bf4b0
mov qword [rbp - 0xd8], rax
mov r8, qword [rbp + 0x28]
mov rcx, qword [rbp + 0x20]
lea rdx, [rbp - 0x570]
lea rax, [rbp - 0x550]
mov dword [rsp + 0x20], 1
mov r9, r8
mov r8, rcx
mov rcx, rax
call fcn.10007263
lea rax, [rbp - 0x570]
mov rcx, rax
call fcn.100c0370
lea rax, [rbp - 0x550]
mov rcx, rax
call fcn.100c0370
mov eax, dword [rbp - 0x3a4]
add eax, 1
mov dword [rbp - 0x3a4], eax
mov eax, dword [rbp - 0x3a4]
cmp dword [rbp - 0xb8], eax
jge 0x10007a34
nop
cmp dword [rbp + 0x30], 0
sete al
movzx eax, al
neg eax
mov edx, eax
mov eax, dword [0x100cd018]
test eax, eax
setg al
movzx eax, al
neg eax
and eax, edx
test eax, eax
je 0x10007cdc
mov eax, dword [0x100cd018]
mov dword [rbp - 0x114], eax
mov eax, dword [0x100cd018]
test eax, eax
jle 0x10007c8f
mov eax, dword [0x100cd018]
cdqe
lea rdx, [rax - 1]
mov rax, qword [rbp + 0x20]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 1
mov r9d, 0xffffffff
mov r8d, 0xffffffff
mov edx, 0x18
mov rcx, rax
call fcn.100be5c0
jmp 0x10007c90
nop
mov eax, dword [0x100cd010]
test eax, eax
jle 0x10007cdf
mov eax, dword [0x100cd010]
cdqe
lea rdx, [rax - 1]
mov rax, qword [rbp + 0x28]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 1
mov r9d, 0xffffffff
mov r8d, 0xffffffff
mov edx, 0x18
mov rcx, rax
call fcn.100be5c0
jmp 0x10007ce0
nop
jmp 0x10007ce0
nop
lea rax, [rbp - 0x490]
mov rcx, rax
call fcn.100be090
lea rax, [rbp - 0x3a0]
mov rcx, rax
call fcn.100c0370
lea rax, [rbp - 0x130]
mov rcx, rax
call fcn.100c0370
mov eax, dword [rbp - 0x114]
add rsp, 0x5a8
pop rdi
pop rbp
ret