Function at 0x14001da60
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x7d0]
sub rsp, 0x8d0
mov rax, qword [0x1400db800]
xor rax, rsp
mov qword [rbp + 0x7c0], rax
mov r10, rdx
mov qword [rsp + 0x30], rcx
mov r12d, r9d
lea rax, [rbp + 0x190]
xor r9d, r9d
lea rcx, [rbp + 0x190]
mov rsi, r8
mov edi, r9d
mov edx, 0x104
sub r10, rax
lea ebx, [r9 + 1]
nop
lea rax, [rdx + 0x7ffffefa]
test rax, rax
je 0x14001dae2
movzx eax, word [r10 + rcx]
test ax, ax
je 0x14001dae2
mov word [rcx], ax
add rcx, 2
sub rdx, rbx
jne 0x14001dac0
test rdx, rdx
lea rax, [rcx - 2]
lea r14, [rbp + 0x190]
cmovne rax, rcx
mov word [rax], r9w
lea rax, [rbp + 0x190]
movzx ecx, word [rbp + 0x190]
test cx, cx
je 0x14001db31
nop dword [rax + rax]
cmp cx, 0x5c
je 0x14001db22
cmp cx, 0x2f
je 0x14001db22
add rax, 2
jmp 0x14001db29
add rax, 2
mov r14, rax
movzx ecx, word [rax]
test cx, cx
jne 0x14001db10
cmp word [r8], 0x5c
jne 0x14001db4a
nop dword [rax + rax]
add rsi, 2
cmp word [rsi], 0x5c
je 0x14001db40
lea rax, [rbp + 0x5b0]
mov r8, rsi
sub r8, rax
lea rcx, [rbp + 0x5b0]
mov edx, 0x104
lea rax, [rdx + 0x7ffffefa]
test rax, rax
je 0x14001db85
movzx eax, word [r8 + rcx]
test ax, ax
je 0x14001db85
mov word [rcx], ax
add rcx, 2
sub rdx, rbx
jne 0x14001db63
test rdx, rdx
lea rax, [rcx - 2]
mov edx, 0x104
cmovne rax, rcx
lea rcx, [rbp + 0x5b0]
mov word [rax], r9w
call fcn.140092dc0
lea rdx, [rsp + 0x40]
mov r13, rax
lea rcx, [rbp + 0x190]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r15, rax
cmp rax, 0xffffffffffffffff
je 0x14001de1c
test ebx, ebx
je 0x14001de13
cmp word [rsp + 0x6c], 0x2e
jne 0x14001dbf8
movzx eax, word [rsp + 0x6e]
cmp ax, 0x2e
jne 0x14001dbea
cmp word [rsp + 0x70], 0
jmp 0x14001dbed
test ax, ax
sete al
test al, al
jne 0x14001ddfb
lea rdx, [0x1400c5cf0]
lea rcx, [rsp + 0x6c]
call fcn.14009b63c
test eax, eax
je 0x14001ddfb
lea rdx, str._attributes_
lea rcx, [rsp + 0x6c]
call fcn.14009b63c
test eax, eax
je 0x14001ddfb
lea rdx, str._signature_
lea rcx, [rsp + 0x6c]
call fcn.14009b63c
test eax, eax
je 0x14001ddfb
test byte [rsp + 0x40], 0x10
je 0x14001dd3b
test r12b, 1
je 0x14001ddfb
lea r8, [rsp + 0x6c]
mov edx, 0x104
sub r8, r14
mov rcx, r14
nop dword [rax + rax]
lea rax, [rdx + 0x7ffffefa]
test rax, rax
je 0x14001dc93
movzx eax, word [r8 + rcx]
test ax, ax
je 0x14001dc93
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x14001dc70
test rdx, rdx
lea rax, [rcx - 2]
lea rdx, [rbp + 0x3a0]
cmovne rax, rcx
xor edi, edi
lea rcx, [rbp + 0x190]
mov word [rax], di
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rcx + rax*2], di
jne 0x14001dcc0
test rax, rax
je 0x14001dd0c
lea rcx, [rbp + rax*2 + 0x18e]
cmp word [rcx], 0x5c
jne 0x14001dce8
sub rcx, 2
sub rax, 1
jne 0x14001dcd6
jmp 0x14001dd0c
lea rbx, [rax + rax]
mov r8, rbx
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x3a0]
call fcn.1400b1500
lea rdx, [rbp + 0x3a0]
add rdx, rbx
mov rcx, qword [rsp + 0x30]
mov r9d, r12d
mov word [rdx], 0x5c
mov r8, rsi
mov eax, dword [0x1400c53f0]
mov word [rdx + 2], ax
mov word [rdx + 4], di
lea rdx, [rbp + 0x3a0]
call fcn.14001da60
jmp 0x14001ddf9
lea r8, [rsp + 0x6c]
mov edx, 0x104
sub r8, r14
mov rcx, r14
nop dword [rax + rax]
lea rax, [rdx + 0x7ffffefa]
test rax, rax
je 0x14001dd73
movzx eax, word [r8 + rcx]
test ax, ax
je 0x14001dd73
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x14001dd50
mov r10, qword [rsp + 0x30]
lea rax, [rcx - 2]
test rdx, rdx
mov r8, r13
lea rdx, [rbp + 0x190]
cmovne rax, rcx
xor r9d, r9d
mov ecx, 0x104
mov word [rax], r9w
movsxd rax, dword [r10 + 0x43c]
lea rdx, [rdx + rax*2]
lea rax, [rcx + 0x7ffffefa]
test rax, rax
je 0x14001ddca
movzx eax, word [rdx]
test ax, ax
je 0x14001ddca
mov word [r8], ax
add rdx, 2
add r8, 2
sub rcx, 1
jne 0x14001dda4
test rcx, rcx
mov dword [rsp + 0x20], r12d
lea rax, [r8 - 2]
mov rcx, r10
cmovne rax, r8
lea rdx, [rbp + 0x190]
lea r8, [rbp + 0x5b0]
mov word [rax], r9w
mov r9d, dword [rsp + 0x60]
call fcn.14001d8d0
mov edi, eax
lea rdx, [rsp + 0x40]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
mov ebx, eax
test edi, edi
je 0x14001dbc7
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindClose]
mov eax, edi
mov rcx, qword [rbp + 0x7c0]
xor rcx, rsp
call fcn.140094850
mov rbx, qword [rsp + 0x918]
add rsp, 0x8d0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret