Function at 0x14003de40
Capabilities:
Enumerate files on windows
Enumerate files recursively
Read file on windows

Disassembly:
push rbx
push rsi
push r14
sub rsp, 0x190
mov rax, qword [0x140073010]
xor rax, rsp
mov qword [rsp + 0x170], rax
mov r14, rdx
mov rsi, rcx
test rdx, rdx
je 0x14003e1a0
mov rax, qword [rdx]
test rax, rax
je 0x14003de7b
cmp dword [rax + 0x18], 0
jne 0x14003dec1
mov ecx, 0x20
call fcn.1400462e4
mov qword [r14], rax
mov rbx, rax
test rax, rax
je 0x14003e1a0
mov ecx, 0x40
mov qword [rax + 8], 0
call fcn.1400462e4
mov qword [rbx], rax
test rax, rax
je 0x14003e1a0
mov qword [rbx + 0x10], 8
mov dword [rbx + 0x18], 0x100
mov qword [rsp + 0x188], r12
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [rsi + rbx], 0
jne 0x14003ded0
add rbx, 3
mov qword [rsp + 0x180], r15
mov rcx, rbx
mov edx, 1
call fcn.1400462ec
mov r12, rax
test rax, rax
je 0x14003e199
mov r8, rsi
mov rdx, rbx
mov rcx, rax
call fcn.1400466e0
lea r8, [0x14006d834]
mov rdx, rbx
mov rcx, r12
call fcn.140046b08
lea rdx, [rsp + 0x30]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov r15, rax
cmp rax, 0xffffffffffffffff
je 0x14003e199
lea rdx, [rsp + 0x30]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
je 0x14003e199
lea rdx, [rsp + 0x30]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
je 0x14003e163
mov qword [rsp + 0x1c0], rbp
mov qword [rsp + 0x1c8], rdi
nop word [rax + rax]
mov rax, 0xffffffffffffffff
nop word [rax + rax]
cmp byte [rsi + rax + 1], 0
lea rax, [rax + 1]
jne 0x14003df90
lea rdx, [rsp + 0x5c]
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rdx + rcx], 0
jne 0x14003dfa7
test byte [rsp + 0x30], 0x10
mov edx, 1
je 0x14003e016
lea rdi, [rax + 2]
add rdi, rcx
mov rcx, rdi
call fcn.1400462ec
mov rbx, rax
test rax, rax
je 0x14003e00e
mov r8, rsi
mov rdx, rdi
mov rcx, rax
call fcn.1400466e0
lea r8, [0x14006d030]
mov rdx, rdi
mov rcx, rbx
call fcn.140046b08
lea r8, [rsp + 0x5c]
mov rdx, rdi
mov rcx, rbx
call fcn.140046b08
mov rdx, r14
mov rcx, rbx
call fcn.14003de40
mov rcx, rbx
jmp 0x14003e138
lea rbx, [rax + 2]
add rbx, rcx
mov rcx, rbx
call fcn.1400462ec
mov rdi, rax
test rax, rax
je 0x14003e13d
mov r8, rsi
mov rdx, rbx
mov rcx, rax
call fcn.1400466e0
lea r8, [0x14006d030]
mov rdx, rbx
mov rcx, rdi
call fcn.140046b08
lea r8, [rsp + 0x5c]
mov rdx, rbx
mov rcx, rdi
call fcn.140046b08
lea r8, [0x14006d4b0]
mov rdx, rdi
lea rcx, [rsp + 0x20]
mov bpl, 1
call fcn.14004cd44
test eax, eax
jne 0x14003e113
mov rcx, qword [rsp + 0x20]
lea r8d, [rax + 2]
xor edx, edx
call fcn.14004ca98
mov rcx, qword [rsp + 0x20]
call fcn.14004c5f8
mov rcx, qword [rsp + 0x20]
mov ebx, eax
call fcn.14004caa0
cmp ebx, 0x14
jge 0x14003e0b7
mov rcx, qword [rsp + 0x20]
call fcn.14004c82c
jmp 0x14003e135
mov ecx, 0x14
call fcn.1400462e4
mov rbx, rax
test rax, rax
je 0x14003e113
mov r9, qword [rsp + 0x20]
mov edx, 1
mov rcx, rax
lea r8d, [rdx + 0x13]
call fcn.14004d02c
mov rcx, qword [0x14006d4c0]
sub rcx, qword [rbx]
jne 0x14003e104
mov rcx, qword [0x14006d4c8]
sub rcx, qword [rbx + 8]
jne 0x14003e104
mov ecx, dword [0x14006d4d0]
mov eax, dword [rbx + 0x10]
sub rcx, rax
test rcx, rcx
mov rcx, rbx
sete bpl
call fcn.1400462d0
mov rcx, qword [rsp + 0x20]
call fcn.14004c82c
test bpl, bpl
je 0x14003e135
mov rcx, rdi
call fcn.1400463c8
mov rcx, qword [r14]
mov rdx, rax
call section..text
mov rcx, rdi
call fcn.1400462d0
lea rdx, [rsp + 0x30]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x14003df80
mov rdi, qword [rsp + 0x1c8]
mov rbp, qword [rsp + 0x1c0]
mov rcx, r12
call fcn.1400462d0
xor eax, eax
mov r15, qword [rsp + 0x180]
mov r12, qword [rsp + 0x188]
mov rcx, qword [rsp + 0x170]
xor rcx, rsp
call fcn.140043fc0
add rsp, 0x190
pop r14
pop rsi
pop rbx
ret
mov eax, 1
jmp 0x14003e16d
mov eax, 0xffffffff
jmp 0x14003e17d