Function at 0x140013130
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
mov qword [rsp + 8], rcx
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x300
mov rdi, rcx
xor r14d, r14d
mov rcx, qword [rcx + 0x10]
movabs rax, 0x7ffffffffffffffe
sub rax, rcx
cmp rax, 2
jb 0x140013818
mov r9, rdi
cmp qword [rdi + 0x18], 8
jb 0x14001317d
mov r9, qword [rdi]
mov qword [rsp + 0x30], 2
lea rax, [0x1400486d0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x40]
call fcn.1400054d0
nop
mov rbx, qword [0x140056788]
mov rsi, qword [0x140056790]
cmp rbx, rsi
je 0x1400132c4
mov rdx, rbx
cmp qword [rbx + 0x18], 8
jb 0x1400131c6
mov rdx, qword [rbx]
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rcx, qword [rsp + 0x40]
call qword [sym.imp.SHLWAPI.dll_StrStrIW]
test rax, rax
je 0x1400132bb
cmp qword [rbx + 0x18], 8
jb 0x1400131f0
mov rbx, qword [rbx]
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rdx, qword [rsp + 0x40]
mov r8, rbx
lea rcx, str.____Scan__Skip_directory:__s__found__s_n
call fcn.140001b40
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x140013253
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001324e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013836
call fcn.1400195ec
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], 7
mov word [rsp + 0x40], r14w
mov rdx, qword [rdi + 0x18]
cmp rdx, 8
jb 0x1400132a6
mov rcx, qword [rdi]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x1400132a1
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140013824
mov rcx, r8
call fcn.1400195ec
mov qword [rdi + 0x10], r14
mov qword [rdi + 0x18], 7
mov word [rdi], r14w
jmp 0x1400137f5
add rbx, 0x20
jmp 0x1400131b0
xor edx, edx
mov r8d, 0x250
lea rcx, [rsp + 0xb0]
call fcn.14001bc40
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rcx, qword [rsp + 0x40]
mov dword [rsp + 0x28], 2
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea r8, [rsp + 0xb0]
lea edx, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov r13, rax
cmp rax, 0xffffffffffffffff
jne 0x1400133ea
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rdx, qword [rsp + 0x40]
mov r8d, eax
lea rcx, str.____Scan__Can_t_open_directory__s__error_0x_X_n
call fcn.140001b40
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x140013382
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001337d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013836
call fcn.1400195ec
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], 7
mov word [rsp + 0x40], r14w
mov rdx, qword [rdi + 0x18]
cmp rdx, 8
jb 0x1400133d5
mov rcx, qword [rdi]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x1400133d0
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140013824
mov rcx, r8
call fcn.1400195ec
mov qword [rdi + 0x10], r14
mov qword [rdi + 0x18], 7
mov word [rdi], r14w
jmp 0x1400137f5
lea rdx, [0x140048790]
movabs r15, 0x7ffffffffffffffe
nop dword [rax + rax]
movzx ecx, word [rsp + 0xdc]
movzx eax, word [rsp + 0xde]
cmp cx, 0x2e
jne 0x140013439
cmp ax, cx
jne 0x14001342a
cmp word [rsp + 0xe0], 0
je 0x140013730
cmp cx, 0x2e
jne 0x140013439
test ax, ax
je 0x140013730
mov rcx, qword [rdi + 0x10]
mov rax, r15
sub rax, rcx
cmp rax, 1
jb 0x14001381e
mov r9, rdi
cmp qword [rdi + 0x18], 8
jb 0x14001345a
mov r9, qword [rdi]
mov qword [rsp + 0x30], 1
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x60]
call fcn.1400054d0
nop
lea rax, [rsp + 0xdc]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x140013490
lea rdx, [rsp + 0xdc]
lea rcx, [rsp + 0x60]
call fcn.140003660
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x88], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x98], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x140013526
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013511
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001382a
call fcn.1400195ec
movups xmm0, xmmword [rsp + 0x88]
movups xmm1, xmmword [rsp + 0x98]
movups xmmword [rsp + 0x40], xmm0
movups xmmword [rsp + 0x50], xmm1
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x140013572
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001356d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013830
call fcn.1400195ec
test byte [rsp + 0xb0], 0x10
je 0x1400135cf
lea rdx, [0x140050ae8]
cmp qword [0x140050b00], 8
cmovae rdx, qword [0x140050ae8]
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rcx, qword [rsp + 0x40]
call qword [sym.imp.SHLWAPI.dll_StrStrIW]
test rax, rax
jne 0x140013730
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x60]
call fcn.140001e30
mov rcx, rax
call fcn.140013130
jmp 0x140013730
lea rcx, [rsp + 0xdc]
call qword [sym.imp.SHLWAPI.dll_PathFindExtensionW]
lea rdx, [0x140050b08]
cmp qword [0x140050b20], 8
cmovae rdx, qword [0x140050b08]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x140013730
lea ecx, [rax + 0x48]
call fcn.1400195f4
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
lea rsi, [rax + 0x20]
movups xmmword [rsi], xmm0
mov qword [rsi + 0x10], r14
mov qword [rsi + 0x18], 7
mov word [rsi], r14w
lea rax, [rsp + 0x40]
cmp r15, rax
je 0x140013697
mov rdx, qword [rsp + 0x50]
lea r9, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae r9, qword [rsp + 0x40]
mov rax, qword [r15 + 0x18]
cmp rdx, rax
ja 0x14001368f
mov r12, r15
cmp rax, 8
jb 0x140013672
mov r12, qword [r15]
mov qword [r15 + 0x10], rdx
lea rbx, [rdx + rdx]
mov r8, rbx
mov rdx, r9
mov rcx, r12
call fcn.14001b360
mov word [r12 + rbx], r14w
jmp 0x140013697
mov rcx, r15
call fcn.140004860
lea rax, [rsp + 0x40]
cmp rsi, rax
je 0x1400136f1
mov rdx, qword [rsp + 0x50]
lea r9, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae r9, qword [rsp + 0x40]
mov rax, qword [rsi + 0x18]
cmp rdx, rax
ja 0x1400136e9
mov r12, rsi
cmp rax, 8
jb 0x1400136cc
mov r12, qword [rsi]
mov qword [rsi + 0x10], rdx
lea rbx, [rdx + rdx]
mov r8, rbx
mov rdx, r9
mov rcx, r12
call fcn.14001b360
mov word [r12 + rbx], r14w
jmp 0x1400136f1
mov rcx, rsi
call fcn.140004860
cmp qword [rsi + 0x18], 8
jb 0x1400136fb
mov rsi, qword [rsi]
mov rcx, rsi
call qword [sym.imp.SHLWAPI.dll_PathFindExtensionW]
mov word [rax], r14w
mov eax, dword [rsp + 0xd0]
mov dword [r15 + 0x40], eax
mov eax, dword [rsp + 0xcc]
mov dword [r15 + 0x44], eax
mov rcx, r15
call fcn.1400129e0
movabs r15, 0x7ffffffffffffffe
lea rdx, [rsp + 0xb0]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
lea rdx, [0x140048790]
jne 0x140013400
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x14001379d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013797
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140013836
call fcn.1400195ec
nop
jmp 0x1400137aa
mov rdx, qword [rdi + 0x18]
cmp rdx, 8
jb 0x1400137e5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rdi]
cmp rdx, 0x1000
jb 0x1400137e0
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140013812
mov rcx, r8
call fcn.1400195ec
mov qword [rdi + 0x10], r14
mov qword [rdi + 0x18], 7
mov word [rdi], r14w
lea r11, [rsp + 0x300]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
call fcn.14002a224
nop
call fcn.1400014b0
nop
call fcn.1400014b0
nop
call fcn.14002a224
nop
call fcn.14002a224
nop
call fcn.14002a224
nop
call fcn.14002a224
int3