Function at 0x140106030
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x250]
sub rsp, 0x350
mov qword [rbp - 0x80], 0xfffffffffffffffe
mov qword [rsp + 0x3a8], rbx
mov rax, qword [0x1402a6808]
xor rax, rsp
mov qword [rbp + 0x240], rax
mov r14, r8
mov qword [rsp + 0x60], r8
mov rdi, rdx
mov rsi, rcx
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x20], xmm0
movdqa xmm1, xmmword [0x1401e3030]
movdqu xmmword [rbp - 0x20], xmm1
xor r13d, r13d
mov word [rbp - 0x30], r13w
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rdx + r8*2], r13w
jne 0x1401060a0
lea rcx, [rbp - 0x30]
call fcn.140006d60
nop
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_lstrlenW]
movsxd rcx, eax
cmp word [rdi + rcx*2 - 2], 0x5c
je 0x1401060de
mov r8d, 1
lea rdx, [0x1401e42c8]
lea rcx, [rbp - 0x30]
call fcn.140006a90
mov r8d, 3
lea rdx, [0x1401e42d0]
lea rcx, [rbp - 0x30]
call fcn.140006a90
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r13
lea rcx, [rbp - 0x30]
cmp qword [rbp - 0x18], 8
cmovae rcx, qword [rbp - 0x30]
lea rdx, [rbp - 0x10]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rbx, rax
mov qword [rsp + 0x78], rax
cmp rbx, 0xffffffffffffffff
je 0x14010637b
mov ecx, dword [rbp - 0x10]
test cl, 0x10
je 0x14010628d
test cl, 2
jne 0x140106366
lea rdx, [0x1401e3cd0]
lea rcx, [rbp + 0x1c]
call fcn.140027970
test eax, eax
je 0x140106366
lea rdx, [0x1401e42d8]
lea rcx, [rbp + 0x1c]
call fcn.140027970
test eax, eax
je 0x140106366
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x38], r13
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x38], 7
mov word [rbp - 0x50], r13w
mov r8, 0xffffffffffffffff
inc r8
cmp word [rdi + r8*2], 0
jne 0x140106191
mov rdx, rdi
lea rcx, [rbp - 0x50]
call fcn.140006d60
nop
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_lstrlenW]
movsxd rcx, eax
cmp word [rdi + rcx*2 - 2], 0x5c
je 0x1401061d3
mov r8d, 1
lea rdx, [0x1401e42c8]
lea rcx, [rbp - 0x50]
call fcn.140006a90
lea rax, [rbp + 0x1c]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rax + r8*2], 0
jne 0x1401061e0
lea rdx, [rbp + 0x1c]
lea rcx, [rbp - 0x50]
call fcn.140006a90
mov r8d, 1
lea rdx, [0x1401e42c8]
lea rcx, [rbp - 0x50]
call fcn.140006a90
lea r8, [rbp + 0x1c]
mov rdx, r14
mov rcx, rsi
call fcn.1401029e0
lea rdx, [rbp - 0x50]
cmp qword [rbp - 0x38], 8
cmovae rdx, qword [rbp - 0x50]
mov r8, rax
mov rcx, rsi
call fcn.140106030
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 8
jb 0x140106277
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140106272
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401066bc
call fcn.14017f5e4
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x38], 7
mov word [rbp - 0x50], r13w
jmp 0x140106366
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x58], r13
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x58], 7
mov word [rbp - 0x70], r13w
lea rax, [rbp + 0x1c]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x1401062b1
lea rdx, [rbp + 0x1c]
lea rcx, [rbp - 0x70]
call fcn.140006d60
nop
mov rdx, qword [rsp + 0x38]
cmp qword [rsp + 0x40], rdx
je 0x140106306
mov qword [rdx + 0x10], r13
mov qword [rdx + 0x18], r13
movups xmm0, xmmword [rbp - 0x70]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rbp - 0x60]
movups xmmword [rdx + 0x10], xmm1
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x58], 7
mov word [rbp - 0x70], r13w
add qword [rsp + 0x38], 0x20
jmp 0x140106315
lea r8, [rbp - 0x70]
lea rcx, [rsp + 0x30]
call fcn.140001d60
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 8
jb 0x140106355
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140106350
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401066c2
call fcn.14017f5e4
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x58], 7
mov word [rbp - 0x70], r13w
lea rdx, [rbp - 0x10]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x140106122
mov r12, r13
mov qword [rsp + 0x50], r13
mov rax, qword [rsp + 0x38]
sub rax, qword [rsp + 0x30]
sar rax, 5
mov qword [rsp + 0x70], rax
test rax, rax
je 0x1401065c3
lea rbx, [rsi + 0x190]
mov qword [rsp + 0x58], rbx
lea rax, [rsi + 0x88]
mov qword [rsp + 0x68], rax
mov r15, r13
mov qword [rsp + 0x48], r13
nop
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x58], r13
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x58], 7
mov word [rbp - 0x70], r13w
mov r8, 0xffffffffffffffff
inc r8
cmp word [rdi + r8*2], 0
jne 0x1401063e0
mov rdx, rdi
lea rcx, [rbp - 0x70]
call fcn.140006d60
nop
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_lstrlenW]
movsxd rcx, eax
cmp word [rdi + rcx*2 - 2], 0x5c
je 0x140106422
mov r8d, 1
lea rdx, [0x1401e42c8]
lea rcx, [rbp - 0x70]
call fcn.140006a90
mov r8, qword [rsp + 0x30]
add r8, r15
mov rdx, r8
cmp qword [r8 + 0x18], 8
jb 0x140106437
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
lea rcx, [rbp - 0x70]
call fcn.140006a90
mov ecx, 0x20
call fcn.14017f5a8
mov rsi, rax
mov qword [rbp - 0x78], rax
mov r13, qword [rbp - 0x58]
mov r14, qword [rbp - 0x70]
test rax, rax
je 0x1401064fe
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0
lea r15, [rbp - 0x70]
cmp r13, 8
cmovae r15, r14
mov r12, qword [rbp - 0x60]
cmp r12, 8
jae 0x1401064ab
movups xmm0, xmmword [r15]
movups xmmword [rax], xmm0
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov r15, qword [rsp + 0x48]
mov r12, qword [rsp + 0x50]
jmp 0x140106500
mov rbx, r12
or rbx, 7
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
cmova rbx, rax
lea rdx, [rbx + 1]
mov rcx, rsi
call fcn.140006990
mov qword [rsi], rax
lea r8, [r12*2 + 2]
mov rdx, r15
mov rcx, rax
call fcn.14019dbf0
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], rbx
mov rbx, qword [rsp + 0x58]
mov r15, qword [rsp + 0x48]
mov r12, qword [rsp + 0x50]
jmp 0x140106500
xor esi, esi
mov qword [rsp + 0x48], rsi
mov rdx, qword [rbx + 8]
cmp qword [rbx + 0x10], rdx
je 0x140106519
mov qword [rdx], rsi
add qword [rbx + 8], 8
jmp 0x140106526
lea r8, [rsp + 0x48]
mov rcx, rbx
call fcn.14001c1a0
mov rdx, qword [rsp + 0x30]
add rdx, r15
cmp qword [rdx + 0x18], 8
jb 0x140106538
mov rdx, qword [rdx]
mov qword [rsp + 0x20], rsi
mov r9d, 5
mov r8, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x68]
call fcn.140125590
nop
cmp r13, 8
jb 0x14010658e
lea rdx, [r13*2 + 2]
mov rax, r14
cmp rdx, 0x1000
jb 0x140106586
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401066ce
mov rcx, r14
call fcn.14017f5e4
xor r13d, r13d
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x58], 7
mov word [rbp - 0x70], r13w
inc r12
mov qword [rsp + 0x50], r12
add r15, 0x20
mov qword [rsp + 0x48], r15
cmp r12, qword [rsp + 0x70]
jb 0x1401063c0
mov rbx, qword [rsp + 0x78]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
mov rbx, qword [rsp + 0x30]
test rbx, rbx
je 0x14010663e
mov rdi, qword [rsp + 0x38]
cmp rbx, rdi
je 0x1401065f7
mov rcx, rbx
call fcn.1400068c0
add rbx, 0x20
cmp rbx, rdi
jne 0x1401065e1
mov rbx, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x40]
sub rdx, rbx
and rdx, 0xffffffffffffffe0
mov rax, rbx
cmp rdx, 0x1000
jb 0x140106628
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401066c8
mov rcx, rbx
call fcn.14017f5e4
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r13
mov rdx, qword [rbp - 0x18]
cmp rdx, 8
jb 0x14010667a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140106675
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401066b6
call fcn.14017f5e4
movdqa xmm0, xmmword [0x1401e3030]
movdqu xmmword [rbp - 0x20], xmm0
mov word [rbp - 0x30], r13w
mov rcx, qword [rbp + 0x240]
xor rcx, rsp
call fcn.14017f700
mov rbx, qword [rsp + 0x3a8]
add rsp, 0x350
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1401a10ac
nop
call fcn.1401a10ac
nop
call fcn.1401a10ac
nop
call fcn.1401a10ac
nop
call fcn.1401a10ac
int3