Function at 0x140011824
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
lea rbp, [rax - 0x238]
sub rsp, 0x320
mov qword [rsp + 0x30], 0xfffffffffffffffe
mov qword [rax + 0x20], rbx
mov rax, qword [0x140176810]
xor rax, rsp
mov qword [rbp + 0x210], rax
mov sil, r8b
mov byte [rsp + 0x20], r8b
mov rdi, rdx
mov qword [rsp + 0x28], rdx
mov rbx, rcx
cmp qword [rcx + 0x18], 8
jb 0x140011873
mov rcx, qword [rcx]
call qword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
je 0x140011aa1
mov rdx, rdi
mov rcx, rbx
call fcn.140011628
test sil, sil
je 0x140011aa1
mov qword [rsp + 0x70], 7
xor esi, esi
mov qword [rsp + 0x68], rsi
mov word [rsp + 0x58], si
lea rcx, [0x140137a60]
call fcn.1400ded00
mov r8, rax
lea rdx, [0x140137a60]
lea rcx, [rsp + 0x58]
call fcn.140010250
nop
lea r8, [rsp + 0x58]
mov rdx, rbx
lea rcx, [rbp - 0x68]
call fcn.140011e64
nop
cmp qword [rsp + 0x70], 8
jb 0x1400118ef
mov rcx, qword [rsp + 0x58]
call fcn.1400400f0
lea rcx, [rbp - 0x68]
cmp qword [rbp - 0x50], 8
cmovae rcx, qword [rbp - 0x68]
lea rdx, [rbp - 0x40]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rdi, rax
mov ecx, esi
cmp rax, 0xffffffffffffffff
setne cl
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x48], rsi
mov word [rsp + 0x38], si
test ecx, ecx
je 0x140011a5c
mov qword [rsp + 0x70], 7
mov qword [rsp + 0x68], rsi
mov word [rsp + 0x58], si
cmp word [rbp - 0x14], si
jne 0x14001194c
mov rax, rsi
jmp 0x140011955
lea rcx, [rbp - 0x14]
call fcn.1400ded00
mov r8, rax
lea rdx, [rbp - 0x14]
lea rcx, [rsp + 0x58]
call fcn.140010250
nop
lea r8, [rsp + 0x58]
mov rdx, rbx
lea rcx, [rsp + 0x78]
call fcn.140011e64
mov rsi, rax
lea rax, [rsp + 0x38]
cmp rax, rsi
je 0x1400119ba
cmp qword [rsp + 0x50], 8
jb 0x140011998
mov rcx, qword [rsp + 0x38]
call fcn.1400400f0
mov qword [rsp + 0x50], 7
xor eax, eax
mov qword [rsp + 0x48], rax
mov word [rsp + 0x38], ax
mov rdx, rsi
lea rcx, [rsp + 0x38]
call fcn.140010474
cmp qword [rbp - 0x70], 8
jb 0x1400119cb
mov rcx, qword [rsp + 0x78]
call fcn.1400400f0
mov qword [rbp - 0x70], 7
xor esi, esi
mov qword [rbp - 0x78], rsi
mov word [rsp + 0x78], si
cmp qword [rsp + 0x70], 8
jb 0x1400119f0
mov rcx, qword [rsp + 0x58]
call fcn.1400400f0
lea rcx, [rsp + 0x38]
cmp qword [rsp + 0x50], 8
cmovae rcx, qword [rsp + 0x38]
call qword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
je 0x140011a47
lea rdx, [0x140137a68]
lea rcx, [rbp - 0x14]
call fcn.1400df444
test eax, eax
je 0x140011a47
lea rdx, [0x140137a6c]
lea rcx, [rbp - 0x14]
call fcn.1400df444
test eax, eax
je 0x140011a47
mov r8b, byte [rsp + 0x20]
mov rdx, qword [rsp + 0x28]
lea rcx, [rsp + 0x38]
call fcn.140011824
lea rdx, [rbp - 0x40]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x14001192e
cmp rdi, 0xffffffffffffffff
je 0x140011a6c
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
cmp qword [rsp + 0x50], 8
jb 0x140011a7e
mov rcx, qword [rsp + 0x38]
call fcn.1400400f0
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x48], rsi
mov word [rsp + 0x38], si
cmp qword [rbp - 0x50], 8
jb 0x140011aa1
mov rcx, qword [rbp - 0x68]
call fcn.1400400f0
mov rcx, qword [rbp + 0x210]
xor rcx, rsp
call fcn.1400dc400
mov rbx, qword [rsp + 0x358]
add rsp, 0x320
pop rdi
pop rsi
pop rbp
ret