Function at 0x140003e00
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x330
mov rax, qword [0x140044080]
xor rax, rsp
mov qword [rsp + 0x320], rax
mov rdi, rcx
mov qword [rsp + 0xa0], rcx
xor r15d, r15d
mov rcx, qword [rcx + 0x10]
movabs r13, 0x7ffffffffffffffe
mov rax, r13
sub rax, rcx
cmp rax, 2
jb 0x140004426
mov r9, rdi
cmp qword [rdi + 0x18], 7
jbe 0x140003e65
mov r9, qword [rdi]
mov qword [rsp + 0x30], 2
lea rax, [0x14003d2c8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0xa8]
call fcn.1400080b0
nop
xor edx, edx
mov r8d, 0x250
lea rcx, [rsp + 0xd0]
call fcn.140030520
lea rcx, [rsp + 0xa8]
cmp qword [rsp + 0xc0], 7
cmova rcx, qword [rsp + 0xa8]
mov dword [rsp + 0x28], 2
mov qword [rsp + 0x20], r15
xor r9d, r9d
lea r8, [rsp + 0xd0]
lea edx, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov r12, rax
cmp rax, 0xffffffffffffffff
jne 0x140003fd4
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, [rsp + 0xa8]
cmp qword [rsp + 0xc0], 7
cmova rdx, qword [rsp + 0xa8]
mov r8d, eax
lea rcx, str.____Scan__Can_t_open_directory__s__error_0x_X_n
call fcn.140001090
nop
mov rdx, qword [rsp + 0xc0]
cmp rdx, 7
jbe 0x140003f63
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003f5e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004459
call fcn.14000aac4
mov qword [rsp + 0xb8], r15
mov qword [rsp + 0xc0], 7
mov word [rsp + 0xa8], r15w
mov rdx, qword [rdi + 0x18]
cmp rdx, 7
jbe 0x140003fbf
mov rcx, qword [rdi]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x140003fba
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140004432
mov rcx, r8
call fcn.14000aac4
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], 7
mov word [rdi], r15w
jmp 0x1400043f3
lea rdx, [0x14003d334]
nop dword [rax + rax]
movzx ecx, word [rsp + 0xfc]
movzx eax, word [rsp + 0xfe]
cmp cx, 0x2e
jne 0x140004019
cmp ax, cx
jne 0x14000400a
cmp word [rsp + 0x100], 0
je 0x140004328
cmp cx, 0x2e
jne 0x140004019
test ax, ax
je 0x140004328
mov rcx, qword [rdi + 0x10]
mov rax, r13
sub rax, rcx
cmp rax, 1
jb 0x14000442c
mov r9, rdi
cmp qword [rdi + 0x18], 7
jbe 0x14000403a
mov r9, qword [rdi]
mov qword [rsp + 0x30], 1
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x80]
call fcn.1400080b0
nop
lea rax, [rsp + 0xfc]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x140004070
lea rdx, [rsp + 0xfc]
lea rcx, [rsp + 0x80]
call fcn.140008430
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x48], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
mov rdx, qword [rsp + 0xc0]
cmp rdx, 7
jbe 0x140004103
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400040f4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004438
call fcn.14000aac4
movups xmm0, xmmword [rsp + 0x68]
movups xmm1, xmmword [rsp + 0x48]
movups xmmword [rsp + 0xa8], xmm0
movups xmmword [rsp + 0xb8], xmm1
mov rdx, qword [rsp + 0x98]
cmp rdx, 7
jbe 0x14000415b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004156
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000443e
call fcn.14000aac4
mov r8d, dword [rsp + 0xd0]
test r8d, 0x704
jne 0x1400042d3
test r8b, 0x10
je 0x140004297
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x60], r15
mov rsi, qword [rsp + 0xb8]
lea r14, [rsp + 0xa8]
cmp qword [rsp + 0xc0], 7
cmova r14, qword [rsp + 0xa8]
cmp rsi, r13
ja 0x140004444
cmp rsi, 7
ja 0x1400041d9
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x60], 7
movups xmm0, xmmword [r14]
movups xmmword [rsp + 0x48], xmm0
jmp 0x140004288
mov rbx, rsi
or rbx, 7
cmp rbx, r13
jbe 0x1400041f8
mov rbx, r13
movabs rax, 0x7fffffffffffffff
lea rcx, [rax + rax]
jmp 0x140004228
cmp rbx, 0xa
mov eax, 0xa
cmovb rbx, rax
lea rcx, [rbx + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x140004449
add rcx, rcx
cmp rcx, 0x1000
jb 0x140004257
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000444e
mov rcx, rax
call fcn.14000a840
mov rcx, rax
test rax, rax
je 0x140004453
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140004266
test rcx, rcx
je 0x140004263
call fcn.14000a840
jmp 0x140004266
mov rax, r15
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x60], rbx
lea r8, [rsi*2 + 2]
mov rdx, r14
mov rcx, rax
call fcn.14002fe80
lea rcx, [rsp + 0x48]
call fcn.140003e00
jmp 0x140004328
mov edx, dword [rsp + 0xf0]
mov dword [rsp + 0x40], edx
mov eax, dword [rsp + 0xec]
mov dword [rsp + 0x44], eax
mov ecx, eax
shl rcx, 0x20
or rcx, rdx
cmp rcx, 0x3e8
jl 0x140004328
mov rdx, qword [rsp + 0x40]
lea rcx, [rsp + 0xa8]
call fcn.1400036a0
jmp 0x140004328
lea rdx, [rsp + 0xa8]
cmp qword [rsp + 0xc0], 7
cmova rdx, qword [rsp + 0xa8]
mov r10d, r8d
and r10d, 0x200
mov ecx, r8d
and ecx, 0x400
mov eax, r8d
and eax, 0x100
mov r9d, r8d
and r9d, 4
mov dword [rsp + 0x30], r10d
mov dword [rsp + 0x28], ecx
mov dword [rsp + 0x20], eax
lea rcx, str.____Skip_attributes:__s__0x_X___i___i___i___i__n
call fcn.140001090
lea rdx, [rsp + 0xd0]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
lea rdx, [0x14003d334]
jne 0x140003fe0
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
mov rdx, qword [rsp + 0xc0]
cmp rdx, 7
jbe 0x14000439b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004395
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004459
call fcn.14000aac4
nop
jmp 0x1400043a8
mov rdx, qword [rdi + 0x18]
cmp rdx, 7
jbe 0x1400043e3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rdi]
cmp rdx, 0x1000
jb 0x1400043de
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140004420
mov rcx, r8
call fcn.14000aac4
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], 7
mov word [rdi], r15w
mov rcx, qword [rsp + 0x320]
xor rcx, rsp
call fcn.14000a820
lea r11, [rsp + 0x330]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
call fcn.140017a64
nop
call fcn.140001370
nop
call fcn.140001370
nop
call fcn.140017a64
nop
call fcn.140017a64
nop
call fcn.140017a64
int3
call fcn.140001370
call fcn.1400012d0
call fcn.1400012d0
call fcn.140017a64
nop
call fcn.140017a64
int3