Function at 0x18007ed40
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x4a0
mov rax, qword [0x1801dc960]
xor rax, rsp
mov qword [rsp + 0x490], rax
mov rsi, rcx
lea rcx, [rsp + 0x381]
xor edx, edx
mov r8d, 0x103
mov byte [rsp + 0x380], 0
call fcn.1800f4fb0
lea rcx, [rsp + 0x271]
xor edx, edx
mov r8d, 0x103
mov byte [rsp + 0x270], 0
call fcn.1800f4fb0
lea rcx, [rsp + 0x270]
mov rdx, rsi
sub rcx, rsi
nop
movzx eax, byte [rdx]
inc rdx
mov byte [rcx + rdx - 1], al
test al, al
jne 0x18007edb0
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, rsi
repne scasb al, byte [rdi]
not rcx
cmp byte [rcx + rsi - 2], 0x5c
je 0x18007edec
lea rdi, [rsp + 0x270]
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
movzx eax, word [0x180151570]
mov word [rdi - 1], ax
xor ecx, ecx
nop
movzx eax, byte [rsp + rcx + 0x270]
inc rcx
mov byte [rsp + rcx + 0x37f], al
test al, al
jne 0x18007edf0
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x380]
repne scasb al, byte [rdi]
mov eax, dword [0x18015d30c]
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x380]
mov dword [rdi - 1], eax
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x18007efda
nop
test byte [rsp + 0x20], 0x10
je 0x18007eef9
lea rsi, [rsp + 0x4c]
lea rdi, [0x180151958]
mov ecx, 2
repe cmpsb byte [rsi], byte [rdi]
je 0x18007efbb
lea rsi, [rsp + 0x4c]
lea rdi, [0x18015d308]
mov ecx, 3
repe cmpsb byte [rsi], byte [rdi]
je 0x18007efbb
lea rcx, [rsp + 0x161]
xor edx, edx
mov r8d, 0x103
mov byte [rsp + 0x160], 0
call fcn.1800f4fb0
xor edx, edx
nop dword [rax]
movzx eax, byte [rsp + rdx + 0x270]
inc rdx
mov byte [rsp + rdx + 0x15f], al
test al, al
jne 0x18007eea0
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x160]
repne scasb al, byte [rdi]
xor ecx, ecx
lea rdx, [rsp + 0x4c]
nop dword [rax]
movzx eax, byte [rdx + rcx]
inc rcx
mov byte [rdi + rcx - 2], al
test al, al
jne 0x18007eed0
lea rcx, [rsp + 0x160]
call fcn.18007ed40
test eax, eax
je 0x18007f011
jmp 0x18007efbb
lea rcx, [rsp + 0x161]
xor edx, edx
mov r8d, 0x103
mov byte [rsp + 0x160], 0
call fcn.1800f4fb0
xor edx, edx
nop dword [rax + rax]
movzx eax, byte [rsp + rdx + 0x270]
inc rdx
mov byte [rsp + rdx + 0x15f], al
test al, al
jne 0x18007ef20
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x160]
repne scasb al, byte [rdi]
xor ecx, ecx
lea rdx, [rsp + 0x4c]
nop dword [rax]
movzx eax, byte [rdx + rcx]
inc rcx
mov byte [rdi + rcx - 2], al
test al, al
jne 0x18007ef50
or rcx, 0xffffffffffffffff
xor eax, eax
lea rdi, [rsp + 0x160]
repne scasb al, byte [rdi]
lea rdx, [rsp + 0x160]
not rcx
lea r8, [rcx - 1]
lea rcx, [0x1801b1370]
call fcn.180003700
mov rcx, qword [0x1802663f8]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x437
call qword [sym.imp.USER32.dll_SendMessageA]
mov rcx, qword [0x180266510]
or edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp dword [0x1802663dc], 0
je 0x18007efe1
lea rdx, [rsp + 0x20]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x18007ee40
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindClose]
mov eax, 1
jmp 0x18007f013
mov rcx, qword [0x180266508]
test rcx, rcx
je 0x18007f008
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x10]
call qword [sym.imp.USER32.dll_SendMessageA]
mov qword [0x180266508], 0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindClose]
xor eax, eax
mov rcx, qword [rsp + 0x490]
xor rcx, rsp
call fcn.1800f4f80
lea r11, [rsp + 0x4a0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rsp, r11
pop rdi
ret