Function at 0x14000be30
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x218]
sub rsp, 0x318
mov rax, qword [0x14004a058]
xor rax, rsp
mov qword [rbp + 0x200], rax
mov qword [rsp + 0x30], r9
mov rbx, r8
mov qword [rsp + 0x48], rbx
mov r12, rdx
mov r13, rcx
mov rax, qword [rbp + 0x280]
mov qword [rsp + 0x38], rax
lea r8, [0x140034ed0]
mov rdx, rbx
lea rcx, [rbp - 0x70]
call fcn.140001350
cmp qword [rax + 0x18], 8
jb 0x14000be99
mov rax, qword [rax]
lea rdx, [rbp - 0x50]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rdi, rax
mov qword [rsp + 0x40], rax
mov rdx, qword [rbp - 0x58]
cmp rdx, 8
jb 0x14000beee
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000bee9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c1e4
call fcn.1400124f4
xor r14d, r14d
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x58], 7
mov word [rbp - 0x70], r14w
cmp rdi, 0xffffffffffffffff
je 0x14000c1b5
mov edx, 0xa
movabs rcx, 0x7ffffffffffffffe
mov rsi, qword [rbx + 0x10]
mov rax, rcx
sub rax, rsi
cmp rax, 1
jb 0x14000c1de
mov r15, rbx
cmp qword [rbx + 0x18], 8
jb 0x14000bf3c
mov r15, qword [rbx]
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], r14
lea r14, [rsi + 1]
mov ebx, 7
lea rdi, [rsp + 0x50]
cmp r14, rbx
jbe 0x14000bf8d
mov rbx, r14
or rbx, 7
cmp rbx, rcx
jbe 0x14000bf6f
mov rbx, rcx
jmp 0x14000bf77
cmp rbx, 0xa
cmovb rbx, rdx
lea rdx, [rbx + 1]
lea rcx, [rsp + 0x50]
call fcn.140004c70
mov rdi, rax
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], rbx
lea rbx, [rsi + rsi]
mov r8, rbx
mov rdx, r15
mov rcx, rdi
call fcn.1400145d0
mov eax, 0x5c
mov word [rbx + rdi], ax
xor eax, eax
mov word [rdi + r14*2], ax
lea rax, [rbp - 0x24]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x14000bfc4
lea rdx, [rbp - 0x24]
lea rcx, [rsp + 0x50]
call fcn.140008b20
xor r14d, r14d
mov qword [rsp + 0x70], r14
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x78], r14
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14000c04f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c04a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c1ea
call fcn.1400124f4
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r14w
test byte [rbp - 0x50], 0x10
je 0x14000c0e0
movzx ecx, word [rbp - 0x24]
movzx eax, word [rbp - 0x22]
cmp cx, 0x2e
jne 0x14000c095
test ax, ax
je 0x14000c14f
cmp cx, cx
jne 0x14000c095
cmp ax, cx
jne 0x14000c095
cmp word [rbp - 0x20], 0
je 0x14000c14f
mov rax, qword [r12 + 8]
cmp rax, qword [r12 + 0x10]
je 0x14000c0b6
lea rdx, [rsp + 0x70]
mov rcx, rax
call fcn.140006f80
add qword [r12 + 8], 0x20
jmp 0x14000c0c6
lea r8, [rsp + 0x70]
mov rdx, rax
mov rcx, r12
call fcn.14000a830
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea r8, [rsp + 0x70]
mov rdx, r12
mov rcx, r13
call fcn.14000be30
jmp 0x14000c14f
mov rdi, qword [rsp + 0x30]
test rdi, rdi
je 0x14000c100
cmp word [rdi], 0
je 0x14000c100
mov rdx, rdi
lea rcx, [rbp - 0x24]
call fcn.1400193a0
test eax, eax
je 0x14000c14f
mov rdi, qword [rsp + 0x38]
test rdi, rdi
je 0x14000c120
cmp word [rdi], 0
je 0x14000c120
mov rdx, rdi
lea rcx, [rbp - 0x24]
call fcn.1400193a0
test eax, eax
je 0x14000c14f
mov rax, qword [r13 + 8]
cmp rax, qword [r13 + 0x10]
je 0x14000c13e
lea rdx, [rsp + 0x70]
mov rcx, rax
call fcn.140006f80
add qword [r13 + 8], 0x20
jmp 0x14000c14f
lea r8, [rsp + 0x70]
mov rdx, rax
mov rcx, r13
call fcn.14000a830
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x14000c18c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c187
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c1d8
call fcn.1400124f4
lea rdx, [rbp - 0x50]
mov rdi, qword [rsp + 0x40]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x14000c1ac
mov rbx, qword [rsp + 0x48]
jmp 0x14000bf0c
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rcx, qword [rbp + 0x200]
xor rcx, rsp
call fcn.140012b20
add rsp, 0x318
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.1400190b8
int3
call fcn.140004c50
int3
call fcn.1400190b8
nop
call fcn.1400190b8
nop