Function at 0x1400241dc
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push rbx
push rbp
push rsi
push rdi
sub rsp, 0x2c8
mov rax, qword [0x1400390f8]
xor rax, rsp
mov qword [rsp + 0x2b0], rax
mov rdi, qword [rsp + 0x310]
xor esi, esi
mov qword [rsp + 0x48], r8
movzx r8d, si
mov qword [rsp + 0x50], rdx
or rdx, 0xffffffffffffffff
mov qword [rsp + 0x40], rdi
mov dword [rsp + 0x34], r9d
mov qword [rsp + 0x38], rcx
inc rdx
cmp word [rcx + rdx*2], si
jne 0x140024225
mov rcx, rdi
cmp word [rdi], si
je 0x14002450e
mov r9, rcx
movzx eax, word [rcx]
add rcx, 2
test ax, ax
jne 0x14002423d
mov rax, rcx
sub rax, r9
sar rax, 1
add ax, dx
add r8w, ax
cmp word [rcx], si
jne 0x14002423a
cmp si, r8w
je 0x14002450e
inc r8w
movzx ebx, r8w
mov dword [rsp + 0x30], ebx
lea ecx, [rbx + rbx]
call fcn.14000fe10
mov rbp, rax
test rax, rax
jne 0x14002428e
mov eax, 1
jmp 0x140024510
mov rsi, rdi
xor ecx, ecx
mov rax, rsi
mov rdi, rbp
cmp word [rax], cx
je 0x140024303
mov r8, qword [rsp + 0x38]
mov eax, ebx
mov rcx, rdi
sub rcx, rbp
sar rcx, 1
sub eax, ecx
mov rcx, rdi
movsxd rbx, eax
mov rdx, rbx
call fcn.140011620
mov r8, rsi
mov rdx, rbx
mov rcx, rdi
call fcn.140011540
or rdx, 0xffffffffffffffff
mov rax, rdx
xor ecx, ecx
inc rax
cmp word [rsi + rax*2], cx
jne 0x1400242d5
lea rsi, [rsi + rax*2]
mov rax, rdx
add rsi, 2
inc rax
cmp word [rdi + rax*2], cx
jne 0x1400242e9
mov ebx, dword [rsp + 0x30]
lea rdi, [rdi + rax*2]
add rdi, 2
cmp word [rsi], cx
jne 0x14002429e
mov r8d, dword [rsp + 0x34]
mov r9, rbp
mov rdx, qword [rsp + 0x48]
mov word [rdi], cx
mov rcx, qword [rsp + 0x50]
call fcn.140004d48
mov rcx, rbp
mov dword [rsp + 0x30], eax
call fcn.14000f250
mov rbp, qword [rsp + 0x38]
or rdi, 0xffffffffffffffff
xor ebx, ebx
inc rdi
cmp word [rbp + rdi*2], bx
jne 0x140024334
add edi, 2
lea ecx, [rdi + rdi]
call fcn.14000fe10
mov rsi, rax
test rax, rax
je 0x140024284
movsxd rbx, edi
mov r8, rbp
mov rdx, rbx
mov rcx, rax
call fcn.140011620
mov rcx, rsi
call fcn.140012130
lea r8, [0x140030050]
mov rdx, rbx
mov rcx, rsi
lea rbp, [rax + 2]
call fcn.140011540
lea rdx, [rsp + 0x60]
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_FindFirstFileW]
xor r8d, r8d
mov qword [rsp + 0x38], rax
mov word [rbp], r8w
cmp rax, 0xffffffffffffffff
je 0x1400244fe
test byte [rsp + 0x60], 0x10
je 0x1400244cb
movzx edx, word [rsp + 0x8c]
movzx ecx, word [0x1400303c0]
sub edx, ecx
jne 0x1400243d8
movzx edx, word [rsp + 0x8e]
movzx eax, word [0x1400303c2]
sub edx, eax
test edx, edx
je 0x1400244cb
movzx ecx, word [rsp + 0x8c]
movzx eax, word [0x1400303b8]
sub ecx, eax
jne 0x140024417
movzx ecx, word [rsp + 0x8e]
movzx eax, word [0x1400303ba]
sub ecx, eax
jne 0x140024417
movzx ecx, word [rsp + 0x90]
movzx eax, word [0x1400303bc]
sub ecx, eax
test ecx, ecx
je 0x1400244cb
or rcx, 0xffffffffffffffff
inc rcx
cmp word [rsi + rcx*2], r8w
jne 0x140024423
lea rdx, [rsp + 0x8c]
or rax, 0xffffffffffffffff
inc rax
cmp word [rdx + rax*2], r8w
jne 0x140024439
lea ebx, [rax + 2]
add ebx, ecx
cmp ebx, edi
jle 0x140024474
movsxd rdx, ebx
mov rcx, rsi
add rdx, rdx
call fcn.14000f2e0
test rax, rax
je 0x1400244ec
mov rcx, rax
mov rsi, rax
mov edi, ebx
call fcn.140012130
lea rbp, [rax + 2]
movsxd rbx, edi
lea r8, [rsp + 0x8c]
mov rdx, rbx
mov rcx, rsi
call fcn.140011540
lea r8, [0x1400304d0]
mov rdx, rbx
mov rcx, rsi
call fcn.140011540
mov rax, qword [rsp + 0x40]
mov rcx, rsi
mov r9d, dword [rsp + 0x34]
mov r8, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x50]
mov qword [rsp + 0x20], rax
call fcn.1400241dc
mov ebx, eax
mov dword [rsp + 0x30], eax
xor eax, eax
mov word [rbp], ax
jmp 0x1400244cf
mov ebx, dword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
lea rdx, [rsp + 0x60]
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_FindNextFileW]
xor r8d, r8d
test eax, eax
jne 0x1400243a9
jmp 0x1400244f1
mov ebx, 1
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_FindClose]
jmp 0x140024502
mov ebx, dword [rsp + 0x30]
mov rcx, rsi
call fcn.14000f250
mov eax, ebx
jmp 0x140024510
xor eax, eax
mov rcx, qword [rsp + 0x2b0]
xor rcx, rsp
call fcn.1400173b0
add rsp, 0x2c8
pop rdi
pop rsi
pop rbp
pop rbx
ret