Function at 0x14001ee10
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r14
sub rsp, 0x288
mov r12, r9
mov rbp, r8
mov r14, rdx
mov rsi, rcx
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x14001ee40
cdqe
mov ecx, 0x5c
mov word [rdx + rax*2], cx
lea rdi, [rdx + rax*2]
mov rax, rdi
lea rdx, [rsp + 0x30]
mov ecx, 0x2a
add rdi, 2
xor ebx, ebx
mov word [rax + 4], bx
mov word [rdi], cx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov qword [rsp + 0x2c8], rax
cmp rax, 0xffffffffffffffff
jne 0x14001ee9c
xor eax, eax
add rsp, 0x288
pop r14
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov qword [rsp + 0x2d0], r13
mov r13, qword [rsp + 0x2e0]
mov qword [rsp + 0x280], r15
mov r15d, ebx
mov rbx, rax
nop word [rax + rax]
test byte [rsp + 0x30], 0x10
je 0x14001ef1e
cmp word [rsp + 0x5c], 0x2e
je 0x14001f1c4
lea rax, [rsp + 0x5c]
mov rdx, rdi
sub rdx, rax
lea rcx, [rsp + 0x5c]
nop dword [rax]
nop word [rax + rax]
movzx eax, word [rcx]
mov word [rdx + rcx], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x14001eef0
mov r9, r12
mov qword [rsp + 0x20], r13
mov r8, rbp
mov rdx, r14
mov rcx, rsi
call fcn.14001ee10
add r15d, eax
jmp 0x14001f1c4
lea rcx, [rsp + 0x5c]
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x14001ef30
cmp eax, 4
jle 0x14001f1c4
cdqe
lea rcx, [rsp + 0x54]
lea rdx, str..dll
lea rcx, [rcx + rax*2]
call fcn.1400f579c
test eax, eax
jne 0x14001f1c4
lea rax, [rsp + 0x5c]
mov rdx, rdi
sub rdx, rax
lea rcx, [rsp + 0x5c]
nop dword [rax]
nop word [rax + rax]
movzx eax, word [rcx]
mov word [rdx + rcx], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x14001ef80
xor ebx, ebx
cmp dword [rbp + 0x428], ebx
jle 0x14001f006
nop word [rax + rax]
cmp ebx, 0x40
jge 0x14001efb5
movsxd rax, ebx
lea rax, [rax*8 + 0x220]
add rax, rbp
jmp 0x14001efc4
mov rcx, qword [rbp + 0x420]
lea edx, [rbx - 0x40]
call fcn.14001c450
mov r8, qword [rax]
cmp rdi, r8
je 0x14001f1bc
test r8, r8
je 0x14001effc
mov rax, rdi
sub r8, rdi
nop dword [rax + rax]
movzx edx, word [rax]
movzx ecx, word [rax + r8]
sub edx, ecx
jne 0x14001eff4
add rax, 2
test ecx, ecx
jne 0x14001efe0
test edx, edx
je 0x14001f1bc
inc ebx
cmp ebx, dword [rbp + 0x428]
jl 0x14001efa0
test r12, r12
je 0x14001f014
mov rdx, rdi
mov rcx, r13
call r12
mov ecx, 0xf8
call fcn.1400b6058
test rax, rax
je 0x14001f1bc
mov rdx, r14
mov rcx, rax
call fcn.14001bdc0
mov rsi, rax
test rax, rax
je 0x14001f1b4
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x14001f125
test dword [rcx + 0x38], 0x100
jne 0x14001f125
cmp dword [rcx + 0x30], 0
jle 0x14001f125
cmp dword [rcx + 0x34], 0
jle 0x14001f125
mov ecx, 0x298
call fcn.1400b6058
mov rcx, qword [rsp + 0x2c0]
mov rbx, rax
add rcx, 0x10
mov edx, dword [rcx + 0x108]
lea r8d, [rdx + 1]
mov dword [rcx + 0x108], r8d
call fcn.14001c3c0
lea rcx, [rsi + 0x18]
mov rdx, rbx
mov qword [rax], rbx
cmp dword [rsi + 0x78], 0
movzx r10d, byte [rsi + 0x80]
movzx r11d, byte [rsi + 0x70]
setl r8b
inc r8b
cmp dword [rsi + 0x68], 0
setl r9b
inc r9b
sub rdx, rcx
nop dword [rax + rax]
movzx eax, word [rcx]
mov word [rdx + rcx], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x14001f0d0
mov rdx, rbx
mov rcx, r14
sub rdx, r14
nop dword [rax]
movzx eax, word [rcx]
mov word [rdx + rcx + 0x8c], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x14001f0f0
mov byte [rbx + 0x294], r9b
inc r15d
mov byte [rbx + 0x295], r11b
mov byte [rbx + 0x296], r8b
mov byte [rbx + 0x297], r10b
jmp 0x14001f19f
cmp word [rdi], 0
je 0x14001f19f
mov r8, 0xffffffffffffffff
mov rax, r8
inc rax
cmp word [rdi + rax*2], 0
jne 0x14001f135
movsxd rcx, eax
mov eax, 2
inc rcx
mul rcx
cmovo rax, r8
mov rcx, rax
call fcn.1400b609c
mov rbx, rax
test rax, rax
je 0x14001f19f
mov r8, rax
mov rdx, rdi
sub r8, rdi
nop word [rax + rax]
movzx ecx, word [rdx]
mov word [r8 + rdx], cx
lea rdx, [rdx + 2]
test cx, cx
jne 0x14001f170
mov edx, dword [rbp + 0x428]
lea rcx, [rbp + 0x220]
lea eax, [rdx + 1]
mov dword [rcx + 0x208], eax
call fcn.14001c450
mov qword [rax], rbx
mov rcx, rsi
call fcn.14001c280
mov edx, 0xf8
mov rcx, rsi
call fcn.1400b6094
mov rsi, qword [rsp + 0x2c0]
mov rbx, qword [rsp + 0x2c8]
lea rdx, [rsp + 0x30]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x14001eec0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindClose]
mov r13, qword [rsp + 0x2d0]
mov eax, r15d
mov r15, qword [rsp + 0x280]
add rsp, 0x288
pop r14
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret