Function at 0x140010490
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x6d8
movaps xmmword [rsp + 0x6c0], xmm6
mov qword [rsp + 0x40], rdx
mov rdi, rcx
mov rax, qword [0x14004c030]
xor rax, rsp
mov qword [rsp + 0x6b8], rax
lea r8, [0x140044132]
lea rsi, [rsp + 0x260]
mov edx, 0x104
mov rcx, rsi
mov r9, rdi
call fcn.140006000
lea rax, [0x14004e410]
lea r15, [0x14004ea40]
cmp byte [0x14004e408], 0
cmovne r15, rax
mov rcx, r15
call fcn.140023f00
mov r14, rax
mov rcx, rsi
call fcn.140023f00
mov rbx, rax
add rax, r14
lea rcx, [r14 + rbx]
add rcx, 2
lea rax, [rax*2 + 4]
test rcx, rcx
mov rcx, 0xffffffffffffffff
cmovns rcx, rax
call int.140015300
mov r12, rax
mov rcx, rax
mov rdx, r15
call fcn.140023ee4
lea r15, [r12 + r14*2]
lea rdx, [0x140044118]
mov rcx, r15
call fcn.140023e80
lea rcx, [r12 + r14*2]
add rcx, 2
mov rdx, rsi
call fcn.140023e80
mov word [r15 + rbx*2 + 2], 0
lea rdx, [rsp + 0x468]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp rax, 0xffffffffffffffff
je 0x14001086c
mov r14, rax
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x30], r12
lea r15, [rsp + 0x494]
lea rbx, [0x14004411e]
lea rdi, [rsp + 0x468]
mov rsi, qword [sym.imp.KERNEL32.dll_FindNextFileW]
lea r13, [0x14004411c]
lea r12, [0x140040178]
xorps xmm6, xmm6
mov qword [rsp + 0x38], rax
mov rcx, r15
mov rdx, rbx
call fcn.140023eac
test eax, eax
je 0x140010738
mov rcx, r15
mov rdx, r13
call fcn.140023eac
test eax, eax
je 0x140010738
mov qword [rsp + 0x20], r15
mov edx, 0x104
lea rbp, [rsp + 0x50]
mov rcx, rbp
lea r8, [0x140043836]
mov r9, qword [rsp + 0x48]
call fcn.140006000
test byte [rsp + 0x468], 0x10
jne 0x14001070c
mov r15, r13
mov r14, rsi
mov rsi, rdi
mov rdi, rbx
mov rcx, rbp
call fcn.140023f00
mov r13, rax
lea rcx, [rax*2 + 6]
call fcn.140023040
test rax, rax
je 0x140010873
mov rbx, rax
mov rcx, rax
mov rdx, r12
call fcn.140023ee4
lea rcx, [rbx + 2]
mov rdx, rbp
call fcn.140023e80
lea rcx, [rbx + r13*2]
add rcx, 2
mov rdx, r12
call fcn.140023e80
mov word [rbx + r13*2 + 4], 0
mov ecx, 0x30
int3
mov edx, 0x104
mov rcx, rbp
lea r8, [0x14004410e]
mov r9, rbp
call fcn.140006000
mov rcx, rbp
mov rdx, qword [rsp + 0x40]
call fcn.140010490
test eax, eax
jne 0x140010885
mov rcx, r14
mov rdx, rdi
call rsi
test eax, eax
jne 0x1400105ce
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rdi, qword [rsp + 0x48]
mov rcx, rdi
call fcn.140023f00
mov rbx, rax
lea rcx, [rax*2 + 6]
call fcn.140023040
test rax, rax
je 0x14001087e
mov rsi, rax
lea r14, [0x140040178]
mov rcx, rax
mov rdx, r14
call fcn.140023ee4
lea rcx, [rsi + 2]
mov rdx, rdi
call fcn.140023e80
lea rcx, [rsi + rbx*2]
add rcx, 2
mov rdx, r14
call fcn.140023e80
mov word [rsi + rbx*2 + 4], 0
mov ecx, 0x30
int3
xor edi, edi
jmp 0x14001093a
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_FindClose]
mov edi, 5
jmp 0x1400108cb
mov r8d, dword [0x14004fe88]
mov ecx, dword [0x14004cde8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp r8d, dword [rcx + 4]
jg 0x1400109b5
lea rdx, str.add_dir_entries_error:__S__err:__d
lea r8, [rsp + 0x50]
mov edi, eax
mov r9d, eax
int3
mov r12, qword [rsp + 0x30]
jmp 0x14001093a
mov rcx, r12
call fcn.140015310
mov rcx, qword [rsp + 0x6b8]
xor rcx, rsp
call fcn.140027fe0
mov eax, edi
movaps xmm6, xmmword [rsp + 0x6c0]
add rsp, 0x6d8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rcx, [0x14004fe88]
mov esi, eax
int3