Function at 0x1401060d8
Capabilities:
Enumerate files on windows
Enumerate files recursively
Get file attributes

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1c0]
sub rsp, 0x2c0
mov rax, qword [0x14017a608]
xor rax, rsp
mov qword [rbp + 0x1b0], rax
mov rdi, rdx
mov r13, rcx
mov rcx, qword [0x14017a048]
lea rax, [0x14017a048]
cmp rcx, rax
je 0x140106145
test dword [rcx + 0x1c], 0x200
je 0x140106145
cmp byte [rcx + 0x19], 4
jb 0x140106145
mov rcx, qword [rcx + 0x10]
lea r8, [0x140166708]
mov edx, 0x4f
call fcn.140006b98
xor r12d, r12d
test r13, r13
jne 0x140106165
lea r8, str.wszPath
mov edx, 0x630
lea rcx, str.base_stor_blbengine_blbengutils_blbfsutils.cpp
call fcn.14008ac24
test rdi, rdi
jne 0x140106182
lea r8, str.pullDirSize
mov edx, 0x631
lea rcx, str.base_stor_blbengine_blbengutils_blbfsutils.cpp
call fcn.14008ac24
xor edx, edx
mov qword [rsp + 0x58], r12
mov r8d, 0x250
mov qword [rsp + 0x50], r12
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x48], r12
mov rsi, r12
mov qword [rsp + 0x30], r12
mov qword [rdi], r12
call sub.msvcrt.dll_memset
or rbx, 0xffffffffffffffff
mov qword [rsp + 0x40], r12
inc rbx
cmp word [r13 + rbx*2], r12w
jne 0x1401061b7
test r13, r13
jne 0x1401061df
lea r8, str.wszPath
mov edx, 0x101
lea rcx, str.base_stor_blbutil_stringutils.cpp
call fcn.14008ac24
mov qword [rsp + 0x38], r12
mov r15, r12
or r14d, 0xffffffff
test ebx, ebx
je 0x1401061fb
add ebx, r14d
cmp word [r13 + rbx*2], 0x5c
je 0x1401061eb
mov ecx, r12d
mov eax, ebx
lea rdx, [rsp + 0x38]
cmp word [r13 + rax*2], 0x5c
setne cl
lea r8d, [rbx + rcx]
mov rcx, r13
call fcn.14008c1cc
mov ebx, eax
test eax, eax
js 0x14010622b
mov r15, qword [rsp + 0x38]
mov rcx, r12
jmp 0x140106230
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x140106241
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop dword [rax + rax]
test ebx, ebx
js 0x1401064ff
mov rcx, qword [0x14017a048]
lea rax, [0x14017a048]
cmp rcx, rax
je 0x140106283
test dword [rcx + 0x1c], 0x200
je 0x140106283
cmp byte [rcx + 0x19], 4
jb 0x140106283
mov rcx, qword [rcx + 0x10]
lea r8, [0x140166708]
mov edx, 0x50
mov r9, r15
call fcn.1400112c8
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
nop dword [rax + rax]
cmp eax, r14d
je 0x1401064ff
lea r8, [rsp + 0x50]
mov rcx, r15
lea rdx, [0x14015e21c]
call fcn.14008bdcc
mov r14, qword [rsp + 0x50]
mov ebx, eax
test eax, eax
js 0x1401064c4
lea r8, [rsp + 0x48]
mov rcx, r15
lea rdx, [0x140157a78]
call fcn.14008bdcc
mov ebx, eax
test eax, eax
js 0x1401064c4
lea rdx, [rsp + 0x60]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
nop dword [rax + rax]
mov r12, rax
cmp rax, 0xffffffffffffffff
jne 0x140106362
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov ebx, eax
mov rcx, qword [0x14017a048]
lea rax, [0x14017a048]
cmp rcx, rax
je 0x14010634c
test dword [rcx + 0x1c], 0x200
je 0x14010634c
cmp byte [rcx + 0x19], 2
jb 0x14010634c
mov rcx, qword [rcx + 0x10]
lea edx, [r12 + 0x52]
mov r9, r14
mov dword [rsp + 0x20], ebx
lea r8, [0x140166708]
call fcn.14003d060
mov rcx, qword [0x14017a048]
test ebx, ebx
jle 0x1401064cb
movzx ebx, bx
or ebx, 0x80070000
jmp 0x1401064cb
xor ecx, ecx
test rsi, rsi
je 0x140106381
mov rcx, rsi
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop dword [rax + rax]
xor ecx, ecx
mov esi, ecx
mov qword [rsp + 0x30], rcx
cmp word [rbp - 0x74], 0x2e
movzx eax, word [rbp - 0x72]
jne 0x1401063a8
test ax, ax
je 0x140106421
cmp word [rbp - 0x74], 0x2e
jne 0x1401063a8
cmp ax, 0x2e
jne 0x1401063a8
cmp word [rbp - 0x70], cx
je 0x140106421
lea rdx, [0x14015d190]
lea rcx, [rbp - 0x74]
call qword [sym.imp.msvcrt.dll__wcsicmp]
nop dword [rax + rax]
test eax, eax
je 0x140106421
mov rcx, qword [rsp + 0x48]
lea r8, [rsp + 0x30]
lea rdx, [rbp - 0x74]
call fcn.14008bdcc
mov rsi, qword [rsp + 0x30]
mov ebx, eax
test eax, eax
js 0x1401064a1
test byte [rsp + 0x60], 0x10
je 0x14010640a
lea rdx, [rsp + 0x58]
mov rcx, rsi
call fcn.1401060d8
mov ebx, eax
test eax, eax
js 0x1401064a1
mov rax, qword [rsp + 0x58]
jmp 0x14010641e
mov eax, dword [rbp - 0x80]
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x7c]
mov dword [rsp + 0x44], eax
mov rax, qword [rsp + 0x40]
add qword [rdi], rax
lea rdx, [rsp + 0x60]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
nop dword [rax + rax]
xor ecx, ecx
test eax, eax
jne 0x140106364
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov edi, eax
cmp eax, 0x12
je 0x1401064a1
mov rcx, qword [0x14017a048]
lea rax, [0x14017a048]
cmp rcx, rax
je 0x140106490
test dword [rcx + 0x1c], 0x200
je 0x140106490
cmp byte [rcx + 0x19], 2
jb 0x140106490
mov rcx, qword [rcx + 0x10]
lea r8, [0x140166708]
mov edx, 0x52
mov dword [rsp + 0x20], edi
mov r9, r14
call fcn.14003d060
test edi, edi
jg 0x140106498
mov ebx, edi
jmp 0x1401064a1
movzx ebx, di
or ebx, 0x80070000
test rsi, rsi
je 0x1401064b5
mov rcx, rsi
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop dword [rax + rax]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FindClose]
nop dword [rax + rax]
mov rcx, qword [0x14017a048]
test r14, r14
je 0x1401064e6
mov rcx, r14
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop dword [rax + rax]
mov rcx, qword [0x14017a048]
mov rax, qword [rsp + 0x48]
test rax, rax
je 0x140106506
mov rcx, rax
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop dword [rax + rax]
mov rcx, qword [0x14017a048]
test r15, r15
je 0x140106521
mov rcx, r15
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop dword [rax + rax]
mov rcx, qword [0x14017a048]
test ebx, ebx
jns 0x140106565
lea rdi, [0x14017a048]
cmp rcx, rdi
je 0x140106595
test dword [rcx + 0x1c], 0x200
je 0x14010656c
cmp byte [rcx + 0x19], 2
jb 0x14010656c
mov rcx, qword [rcx + 0x10]
lea r8, [0x140166708]
mov edx, 0x53
mov dword [rsp + 0x20], ebx
mov r9, r13
call fcn.14003d060
mov rcx, qword [0x14017a048]
jmp 0x14010656c
lea rdi, [0x14017a048]
cmp rcx, rdi
je 0x140106595
test dword [rcx + 0x1c], 0x200
je 0x140106595
cmp byte [rcx + 0x19], 4
jb 0x140106595
mov rcx, qword [rcx + 0x10]
lea r8, [0x140166708]
mov edx, 0x54
call fcn.140006b98
mov eax, ebx
mov rcx, qword [rbp + 0x1b0]
xor rcx, rsp
call fcn.140001d90
mov rbx, qword [rsp + 0x310]
add rsp, 0x2c0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret