Function at 0x140003820
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x260]
sub rsp, 0x360
mov rax, qword [0x140041040]
xor rax, rsp
mov qword [rbp + 0x250], rax
mov r12, rcx
mov qword [rbp - 0x20], rcx
xor r14d, r14d
xor edx, edx
mov r8d, 0xe0
lea rcx, [rbp + 0x30]
call fcn.14002d2e0
call fcn.140009990
mov ebx, eax
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], r14
mov qword [rbp + 0x48], r14
mov qword [rbp + 0x50], r14
mov qword [rbp + 0x58], r14
mov qword [rbp + 0x60], r14
mov qword [rbp + 0x68], r14
mov ecx, 0x10
call fcn.140008b18
mov qword [rax + 8], r14
mov qword [rbp + 0x48], rax
lea rcx, [rbp + 0x48]
mov qword [rax], rcx
xorps xmm0, xmm0
movups xmmword [rbp + 0x88], xmm0
movups xmmword [rbp + 0x98], xmm0
movups xmmword [rbp + 0xa8], xmm0
mov qword [rbp + 0x78], r14
mov qword [rbp + 0x80], r14
mov dword [rbp + 0xb8], 0xffffffff
mov dword [rbp + 0x70], 2
mov dword [rbp + 0xbc], r14d
lea rcx, [rbp + 0xc0]
call fcn.14000ac68
nop
mov byte [rbp + 0x108], r14b
test rbx, rbx
je 0x140003945
lea rax, [rbp + 0x30]
mov qword [rsp + 0x40], rax
mov rdx, qword [rbp + 0x38]
lea r8, [rsp + 0x40]
cmp rdx, qword [rbp + 0x40]
je 0x140003932
call fcn.140008a00
mov rdx, qword [rbp + 0x38]
add rdx, 0x10
mov qword [rbp + 0x38], rdx
jmp 0x14000393f
lea rcx, [rbp + 0x30]
call fcn.140008720
mov rdx, qword [rbp + 0x38]
sub rbx, 1
jne 0x140003914
mov rdx, r12
lea rcx, [rbp + 8]
call fcn.140005b40
nop
mov r8d, 2
lea rdx, [0x14003a74c]
lea rcx, [rbp + 8]
call fcn.140006430
lea rcx, [rbp + 8]
cmp qword [rbp + 0x20], 0xf
cmova rcx, qword [rbp + 8]
lea rdx, [rbp + 0x110]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov r13, rax
cmp rax, 0xffffffffffffffff
jne 0x140003a67
mov rdx, qword [rbp + 0x20]
cmp rdx, 0xf
jbe 0x1400039cb
inc rdx
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400039c6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000411f
call fcn.140008b10
movdqa xmm0, xmmword [0x14003a890]
movdqu xmmword [rbp + 0x18], xmm0
mov byte [rbp + 8], 0
lea rcx, [rbp + 0x30]
call fcn.140007ff0
nop
mov rdx, qword [r12 + 0x18]
cmp rdx, 0xf
jbe 0x140003a22
inc rdx
mov rcx, qword [r12]
cmp rdx, 0x1000
jb 0x140003a1d
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140004113
mov rcx, r8
call fcn.140008b10
mov qword [r12 + 0x10], r14
mov qword [r12 + 0x18], 0xf
mov byte [r12], 0
xor al, al
mov rcx, qword [rbp + 0x250]
xor rcx, rsp
call fcn.140008af0
lea r11, [rsp + 0x360]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
movabs r15, 0x7fffffffffffffff
mov r8d, 0x16
movabs rdx, 0x8000000000000000
movzx ecx, byte [rbp + 0x13c]
movzx eax, byte [rbp + 0x13d]
cmp cl, 0x2e
jne 0x140003ab1
test al, al
je 0x140003c8d
cmp cl, cl
jne 0x140003ab1
cmp al, cl
jne 0x140003ab1
cmp byte [rbp + 0x13e], 0
je 0x140003c8d
mov rsi, qword [r12 + 0x10]
mov rax, r15
sub rax, rsi
cmp rax, 1
jb 0x140004119
mov r15, r12
cmp qword [r12 + 0x18], 0xf
jbe 0x140003ad5
mov r15, qword [r12]
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], r14
lea r14, [rsi + 1]
mov ebx, 0xf
lea rdi, [rsp + 0x50]
cmp r14, rbx
jbe 0x140003b70
mov rbx, r14
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
jbe 0x140003b19
mov rbx, rax
lea rax, [rdx + 0x27]
jmp 0x140003b44
cmp rbx, 0x16
cmovb rbx, r8
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140003b2e
xor edi, edi
jmp 0x140003b6b
cmp rcx, 0x1000
jb 0x140003b63
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000412b
mov rcx, rax
call fcn.140008b18
test rax, rax
je 0x140004125
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140003b6b
call fcn.140008b18
mov rdi, rax
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], rbx
mov r8, rsi
mov rdx, r15
mov rcx, rdi
call fcn.14002d6a0
mov byte [rdi + rsi], 0x5c
mov byte [rdi + r14], 0
lea rax, [rbp + 0x13c]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140003ba0
lea rdx, [rbp + 0x13c]
lea rcx, [rsp + 0x50]
call fcn.140006430
xorps xmm0, xmm0
movups xmmword [rbp - 0x18], xmm0
xor r14d, r14d
mov qword [rbp - 8], r14
mov qword [rbp], r14
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x18], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 8], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], r14b
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x140003c28
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003c23
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004131
call fcn.140008b10
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
test byte [rbp + 0x110], 4
je 0x140003d4f
mov rdx, qword [rbp]
cmp rdx, 0xf
jbe 0x140003c83
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003c7e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004167
call fcn.140008b10
movabs r15, 0x7fffffffffffffff
lea rdx, [rbp + 0x110]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x140003a71
mov rdx, qword [rbp + 0x20]
cmp rdx, 0xf
jbe 0x140003ce0
inc rdx
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003cdb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000411f
call fcn.140008b10
movdqa xmm0, xmmword [0x14003a890]
movdqu xmmword [rbp + 0x18], xmm0
mov byte [rbp + 8], 0
lea rcx, [rbp + 0x30]
call fcn.140007ff0
nop
mov rdx, qword [r12 + 0x18]
cmp rdx, 0xf
jbe 0x140003d37
inc rdx
mov rcx, qword [r12]
cmp rdx, 0x1000
jb 0x140003d32
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140004113
mov rcx, r8
call fcn.140008b10
mov qword [r12 + 0x10], r14
mov qword [r12 + 0x18], 0xf
mov byte [r12], 0
jmp 0x140003a37
lea rax, [rbp - 0x18]
cmp qword [rbp], 0xf
cmova rax, qword [rbp - 0x18]
mov qword [rsp + 0x70], rax
mov rax, qword [rbp - 8]
mov qword [rsp + 0x78], rax
call fcn.140009ab8
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x40], xmm0
lea r8, [rsp + 0x40]
mov edx, eax
lea rcx, [rsp + 0x20]
call fcn.140002b00
nop
lea rdx, [rsp + 0x20]
lea rcx, [rbp - 0x70]
call fcn.140003530
mov ebx, dword [rax]
mov rdx, qword [rsp + 0x38]
cmp rdx, 7
jbe 0x140003ddf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003dda
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004137
call fcn.140008b10
cmp ebx, 2
jne 0x140003f77
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov rdi, qword [rbp - 8]
lea rsi, [rbp - 0x18]
cmp qword [rbp], 0xf
cmova rsi, qword [rbp - 0x18]
movabs r15, 0x7fffffffffffffff
cmp rdi, r15
ja 0x140004149
cmp rdi, 0xf
ja 0x140003e36
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], 0xf
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x20], xmm0
jmp 0x140003ecb
mov rbx, rdi
or rbx, 0xf
cmp rbx, r15
jbe 0x140003e55
mov rbx, r15
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x140003e86
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140003e70
mov rax, r14
jmp 0x140003ead
cmp rcx, 0x1000
jb 0x140003ea8
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140004143
mov rcx, rax
call fcn.140008b18
mov rcx, rax
test rax, rax
je 0x14000413d
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140003ead
call fcn.140008b18
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], rbx
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call fcn.14002d6a0
lea rcx, [rsp + 0x20]
call fcn.140003630
test al, al
je 0x140003f1d
mov rdx, qword [rbp]
cmp rdx, 0xf
jbe 0x140003c8d
inc rdx
mov rcx, qword [rbp - 0x18]
cmp rdx, 0x1000
mov rax, rcx
jb 0x140003f13
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004167
call fcn.140008b10
jmp 0x140003c8d
lea rdx, [rbp - 0x18]
lea rcx, [rsp + 0x20]
call fcn.140005b40
nop
lea rax, vtable.std::_Func_impl_no_alloc_class__bool___cdecl_cryptor::WalkDir_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___::_13::_lambda_1___void___.0
mov qword [rbp - 0x60], rax
movups xmm1, xmmword [rsp + 0x20]
movups xmmword [rbp - 0x58], xmm1
movups xmm0, xmmword [rsp + 0x30]
movups xmmword [rbp - 0x48], xmm0
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x38], 0xf
mov byte [rsp + 0x20], 0
lea rax, [rbp - 0x60]
mov qword [rbp - 0x28], rax
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x30]
call fcn.140008170
nop
jmp 0x140003ed9
lea rax, [rbp - 0x18]
cmp qword [rbp], 0xf
cmova rax, qword [rbp - 0x18]
mov qword [rbp - 0x80], rax
mov rax, qword [rbp - 8]
mov qword [rbp - 0x78], rax
call fcn.140009ab8
movaps xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rsp + 0x40], xmm0
lea r8, [rsp + 0x40]
mov edx, eax
lea rcx, [rsp + 0x20]
call fcn.140002b00
nop
lea rdx, [rsp + 0x20]
lea rcx, [rbp - 0x68]
call fcn.140003530
mov ebx, dword [rax]
mov rdx, qword [rsp + 0x38]
cmp rdx, 7
jbe 0x140004004
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003fff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000414f
call fcn.140008b10
movabs r15, 0x7fffffffffffffff
cmp ebx, 3
jne 0x140003ed9
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x38], r14
mov rdi, qword [rbp - 8]
lea rsi, [rbp - 0x18]
cmp qword [rbp], 0xf
cmova rsi, qword [rbp - 0x18]
cmp rdi, r15
ja 0x140004161
cmp rdi, 0xf
ja 0x14000406f
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], 0xf
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x20], xmm0
lea rcx, [rsp + 0x20]
call fcn.140003820
jmp 0x140003ed9
mov rbx, rdi
or rbx, 0xf
cmp rbx, r15
jbe 0x14000408e
mov rbx, r15
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x1400040bf
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x1400040a9
mov rax, r14
jmp 0x1400040e6
cmp rcx, 0x1000
jb 0x1400040e1
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000415b
mov rcx, rax
call fcn.140008b18
mov rcx, rax
test rax, rax
je 0x140004155
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400040e6
call fcn.140008b18
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], rbx
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call fcn.14002d6a0
lea rcx, [rsp + 0x20]
call fcn.140003820
jmp 0x140003ed9
call fcn.140012660
nop
call fcn.140001c20
nop
call fcn.140012660
nop
call fcn.140012660
int3
call fcn.140001b80
nop
call fcn.140012660
int3
call fcn.140012660
int3
call fcn.140012660
int3
call fcn.140001b80
int3
call fcn.140001c20
int3
call fcn.140012660
int3
call fcn.140012660
int3
call fcn.140001b80
int3
call fcn.140001c20
nop
call fcn.140012660
int3