Function at 0x14002f5f0
Capabilities:
Accept command line arguments
Enumerate files on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x9b8
movaps xmmword [rsp + 0x9a0], xmm6
mov rsi, r8
mov qword [rsp + 0x28], rdx
mov r13, rcx
mov rax, qword [0x14019ac40]
xor rax, rsp
mov qword [rsp + 0x998], rax
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov rbx, rax
mov eax, dword [0x14019c710]
mov ecx, dword [0x14019dd7c]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 0x14]
jg 0x1400301ce
lea r12, [rsp + 0x1d8]
mov qword [rsp + 0x1c0], r12
movaps xmm6, xmmword [0x14016f070]
movups xmmword [rsp + 0x1c8], xmm6
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
lea rcx, [rsp + 0x520]
lea r9, [rsp + 0x1c0]
mov rdx, rbx
mov r8, rax
call fcn.1400363e0
mov eax, dword [rsp + 0x520]
test eax, eax
je 0x14002f6c4
mov ecx, dword [rsp + 0x524]
mov rdx, qword [rsp + 0x528]
mov dword [r13], eax
mov dword [r13 + 4], ecx
mov qword [r13 + 8], rdx
jmp 0x14002ff7c
mov qword [rsp + 0x30], r13
lea rax, [rsp + 0x120]
mov qword [rsp + 0x110], rax
movabs rax, 0x1400000000
mov qword [rsp + 0x118], rax
mov qword [rsp + 0x78], rsi
movups xmm0, xmmword [rsp + 0x1c0]
movups xmmword [rsp + 0x68], xmm0
lea rcx, [rsp + 0x68]
lea rdx, [rsp + 0x78]
lea r8, [rsp + 0x110]
xor r9d, r9d
call fcn.14000d420
mov eax, dword [rsp + 0x118]
test rax, rax
je 0x14002fc79
mov r13, qword [rsp + 0x110]
lea rax, [rax*8]
add rax, r13
mov qword [rsp + 0x50], rax
lea rdi, [rsp + 0x2f8]
mov rax, qword [rsp + 0x28]
add rax, 0x10
mov qword [rsp + 0x40], rax
lea rsi, [rsp + 0x520]
nop dword [rax]
mov rcx, qword [r13]
mov qword [rsp + 0x58], rcx
test rcx, rcx
je 0x14002f780
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
jmp 0x14002f782
xor eax, eax
mov rbx, rsi
mov qword [rsp + 0x60], rax
mov eax, dword [0x14019c710]
mov ecx, dword [0x14019dd7c]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 0x14]
jg 0x14002fc43
lea rax, [0x14016f77c]
mov qword [rsp + 0x100], rax
mov qword [rsp + 0x108], 2
lea rcx, [rsp + 0x58]
lea rdx, [rsp + 0x100]
xor r8d, r8d
call fcn.140023ff0
mov rsi, qword [rsp + 0x58]
cmp rax, 0xffffffffffffffff
je 0x14002f8f0
cmp qword [rsp + 0x60], 2
jne 0x14002f812
movzx eax, word [rsi]
cmp eax, 0x3f2f
je 0x14002f8f0
movzx eax, word [rsi]
cmp eax, 0x3f2d
je 0x14002f8f0
lea rax, [rsp + 0x790]
mov qword [rsp + 0x778], rax
movups xmmword [rsp + 0x780], xmm6
movups xmm0, xmmword [rsp + 0x58]
movaps xmmword [rsp + 0xf0], xmm0
mov rsi, rbx
mov rcx, rbx
lea rdx, [rsp + 0xf0]
lea r8, [rsp + 0x778]
call fcn.140036220
mov ebp, dword [rsp + 0x520]
mov eax, dword [rsp + 0x524]
mov dword [rsp + 0x3c], eax
mov r15, qword [rsp + 0x528]
test ebp, ebp
jne 0x14002fbc2
mov rcx, qword [rsp + 0x778]
mov rdx, rsi
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov qword [rsp + 0x48], rax
cmp rax, 0xffffffffffffffff
je 0x14002f927
mov r12, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x60]
lea rdx, [rsp + 0x418]
mov qword [rsp + 0x400], rdx
movups xmmword [rsp + 0x408], xmm6
cmp rbx, 0x105
jb 0x14002f95c
mov r9d, 1
lea rcx, [rsp + 0x400]
mov r8, rbx
call fcn.1400291c0
mov rax, qword [rsp + 0x400]
mov rcx, qword [rsp + 0x408]
jmp 0x14002f96e
mov rax, qword [rsp + 0x28]
mov r8d, dword [rax + 8]
cmp r8d, dword [rax + 0xc]
jae 0x14002fbf9
mov rdx, qword [rsp + 0x28]
mov rax, qword [rdx]
mov ecx, r8d
mov qword [rax + rcx*8], rsi
add dword [rdx + 8], 1
xor ebp, ebp
lea r15, [0x14019a518]
mov rsi, rbx
jmp 0x14002fbdd
mov rsi, qword [rsp + 0x58]
mov rax, qword [rsp + 0x28]
mov r8d, dword [rax + 8]
cmp r8d, dword [rax + 0xc]
jae 0x14002fc1e
mov rdx, qword [rsp + 0x28]
mov rax, qword [rdx]
mov ecx, r8d
mov qword [rax + rcx*8], rsi
add dword [rdx + 8], 1
xor ebp, ebp
mov rsi, rbx
jmp 0x14002fbc2
mov ecx, 0
mov rax, rdx
mov edx, 0
test rbx, rbx
je 0x14002f984
add rcx, rax
mov rdx, r12
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
mov rdx, qword [rsp + 0x408]
add rdx, rbx
mov qword [rsp + 0x408], rdx
lea rcx, [rsp + 0x400]
mov edx, 2
call fcn.140032210
movsxd r12, dword [rsp + 0x408]
jmp 0x14002f9c6
mov rcx, qword [rsp + 0x48]
mov rdx, rsi
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x14002fb94
mov qword [rsp + 0x2e0], rdi
movups xmmword [rsp + 0x2e8], xmm6
lea rbx, [rsp + 0x54c]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
lea r14, [rsp + 0xd8]
mov rcx, r14
mov rdx, rbx
mov r8, rax
lea rbx, [rsp + 0x2e0]
mov r9, rbx
call fcn.1400363e0
mov ebp, dword [rsp + 0xd8]
mov eax, dword [rsp + 0xdc]
mov dword [rsp + 0x3c], eax
mov r15, qword [rsp + 0xe0]
test ebp, ebp
jne 0x14002fb81
mov word [rsp + 0xe8], 0x101
mov word [rsp + 0xd0], 0x101
mov word [rsp + 0xb8], 0x101
mov word [rsp + 0xa0], 0x106
mov qword [rsp + 0x90], rbx
mov qword [rsp + 0x20], r14
lea rcx, [rsp + 0x400]
lea rdx, [rsp + 0x90]
lea r8, [rsp + 0xa8]
lea r9, [rsp + 0xc0]
call fcn.1400320c0
movups xmm0, xmmword [rsp + 0x400]
movups xmmword [rsp + 0x80], xmm0
lea rcx, [rsp + 0x78]
mov rdx, r14
lea r8, [rsp + 0x80]
call fcn.140030a40
mov r14, qword [rsp + 0xd8]
mov rax, qword [rsp + 0x28]
mov r8d, dword [rax + 8]
cmp r8d, dword [rax + 0xc]
jae 0x14002fb5c
mov rdx, qword [rsp + 0x28]
mov rax, qword [rdx]
mov ecx, r8d
mov qword [rax + rcx*8], r14
add dword [rdx + 8], 1
mov rcx, qword [rsp + 0x408]
cmp rcx, r12
jbe 0x14002faf0
mov qword [rsp + 0x408], r12
jmp 0x14002fb40
jae 0x14002fb40
cmp qword [rsp + 0x410], r12
jae 0x14002fb22
mov r9d, 1
lea rcx, [rsp + 0x400]
lea rdx, [rsp + 0x418]
mov r8, r12
call fcn.1400291c0
mov rcx, qword [rsp + 0x408]
mov r8, r12
sub r8, rcx
je 0x14002fae4
add rcx, qword [rsp + 0x400]
xor edx, edx
call sub.VCRUNTIME140.dll_memset
jmp 0x14002fae4
mov rcx, qword [rsp + 0x2e0]
cmp rcx, rdi
je 0x14002f9b0
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x14002f9b0
add r8, 1
mov r9d, 8
mov rbx, qword [rsp + 0x28]
mov rcx, rbx
mov rdx, qword [rsp + 0x40]
call fcn.1400290c0
mov r8d, dword [rbx + 8]
jmp 0x14002fac4
mov rcx, qword [rsp + 0x2e0]
cmp rcx, rdi
je 0x14002fb94
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rcx, qword [rsp + 0x400]
lea rax, [rsp + 0x418]
cmp rcx, rax
je 0x14002fbba
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
lea r12, [rsp + 0x1d8]
mov rcx, qword [rsp + 0x778]
lea rax, [rsp + 0x790]
cmp rcx, rax
je 0x14002fbdd
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
test ebp, ebp
jne 0x14002fdc3
add r13, 8
cmp r13, qword [rsp + 0x50]
jne 0x14002f760
jmp 0x14002fc79
add r8, 1
mov r9d, 8
mov rbp, qword [rsp + 0x28]
mov rcx, rbp
mov rdx, qword [rsp + 0x40]
call fcn.1400290c0
mov r8d, dword [rbp + 8]
jmp 0x14002f903
add r8, 1
mov r9d, 8
mov rbp, qword [rsp + 0x28]
mov rcx, rbp
mov rdx, qword [rsp + 0x40]
call fcn.1400290c0
mov r8d, dword [rbp + 8]
jmp 0x14002f93f
lea rcx, [0x14019c710]
call fcn.14016a3dc
cmp dword [0x14019c710], 0xffffffff
jne 0x14002f7af
lea rcx, [0x1400309c0]
call fcn.14016a724
lea rcx, [0x14019c710]
call fcn.14016a37c
jmp 0x14002f7af
mov rax, qword [rsp + 0x28]
mov rax, qword [rax]
mov rsi, qword [rax]
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rbp, rax
lea rbx, [rsp + 0x790]
mov qword [rsp + 0x778], rbx
movups xmmword [rsp + 0x780], xmm6
cmp rax, 0x105
jb 0x14002fccf
lea rcx, [rsp + 0x778]
mov r9d, 1
mov rdx, rbx
mov r8, rbp
call fcn.1400291c0
mov r13, qword [rsp + 0x30]
jmp 0x14002fcd9
test rbp, rbp
mov r13, qword [rsp + 0x30]
je 0x14002fcf4
mov rcx, qword [rsp + 0x778]
add rcx, qword [rsp + 0x780]
mov rdx, rsi
mov r8, rbp
call sub.VCRUNTIME140.dll_memcpy
add qword [rsp + 0x780], rbp
lea r14, [rsp + 0x418]
mov qword [rsp + 0x400], r14
movups xmmword [rsp + 0x408], xmm6
lea rsi, [rsp + 0x778]
mov rcx, rsi
mov edx, 2
call fcn.140032210
lea rbp, [rsp + 0x520]
xor ecx, ecx
mov rdx, rbp
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
cmp eax, 0x104
je 0x14002fd87
test eax, eax
je 0x14002fd87
lea rcx, [rsp + 0x520]
mov rdx, rcx
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
test eax, eax
je 0x14002fd87
mov r8d, eax
cmp r8d, 0x105
jb 0x14002ffbe
lea rcx, [rsp + 0xc0]
mov edx, 0x7a
jmp 0x14002fd97
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rsp + 0xc0]
mov edx, eax
call fcn.14002e8d0
mov eax, dword [rsp + 0xc0]
test eax, eax
je 0x14002fde5
mov ecx, dword [rsp + 0xc4]
mov rsi, qword [rsp + 0xc8]
mov dword [r13], eax
mov dword [r13 + 4], ecx
jmp 0x14002ff37
mov r13, qword [rsp + 0x30]
mov dword [r13], ebp
mov eax, dword [rsp + 0x3c]
mov dword [r13 + 4], eax
mov qword [r13 + 8], r15
lea rdi, [rsp + 0x120]
jmp 0x14002ff69
mov word [rsp + 0x530], 0x101
mov word [rsp + 0x2f0], 0x101
mov word [rsp + 0xe8], 0x101
mov word [rsp + 0xd0], 0x106
lea rax, [rsp + 0x400]
mov qword [rsp + 0xc0], rax
mov qword [rsp + 0x20], rbp
lea rdx, [rsp + 0xc0]
lea r8, [rsp + 0xd8]
lea r9, [rsp + 0x2e0]
mov rcx, rsi
call fcn.1400320c0
mov word [rsp + 0x2f0], 0x106
mov qword [rsp + 0x2e0], rsi
lea rcx, [rsp + 0x2e0]
mov rdx, rbp
call fcn.1400400d0
mov rax, qword [rsp + 0x530]
cmp qword [rsp + 0x538], 0xf
jbe 0x14002fe7f
mov rbp, qword [rsp + 0x520]
mov qword [rsp + 0xd8], rbp
mov qword [rsp + 0xe0], rax
lea rcx, [rsp + 0x78]
lea rdx, [rsp + 0xc0]
lea r8, [rsp + 0xd8]
call fcn.140030a40
mov rax, qword [rsp + 0x538]
cmp rax, 0x10
jb 0x14002fef0
mov rcx, qword [rsp + 0x520]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14002feeb
mov rbp, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbp
cmp rcx, 0x20
jae 0x140030243
add rax, 0x28
mov rdx, rax
mov rcx, rbp
call fcn.14016a23c
mov rax, qword [rsp + 0xc0]
mov rcx, qword [rsp + 0x28]
mov rcx, qword [rcx]
mov qword [rcx], rax
mov dword [r13], 0
mov eax, dword [0x14019c710]
mov ecx, dword [0x14019dd7c]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
lea rsi, [0x14019a518]
cmp eax, dword [rcx + 0x14]
jg 0x140030204
lea rdi, [rsp + 0x120]
mov qword [r13 + 8], rsi
mov rcx, qword [rsp + 0x400]
cmp rcx, r14
je 0x14002ff56
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rsp + 0x778]
cmp rcx, rbx
je 0x14002ff69
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rsp + 0x110]
cmp rcx, rdi
je 0x14002ff7c
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rsp + 0x1c0]
cmp rcx, r12
je 0x14002ff8f
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rsp + 0x998]
xor rcx, rsp
call fcn.14016a260
mov rax, r13
movaps xmm6, xmmword [rsp + 0x9a0]
add rsp, 0x9b8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rcx, [rsp + 0xd8]
lea rdx, [rsp + 0x520]
lea r9, [rsp + 0x400]
call fcn.1400363e0
cmp dword [rsp + 0xd8], 0
je 0x14002fffa
movups xmm0, xmmword [rsp + 0xd8]
movaps xmmword [rsp + 0xc0], xmm0
jmp 0x14002fd9c
mov rcx, qword [rsp + 0x400]
mov qword [rsp + 0xa8], rcx
test rcx, rcx
je 0x140030016
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
jmp 0x140030018
xor eax, eax
mov qword [rsp + 0xb0], rax
lea rcx, [rsp + 0xc0]
lea rdx, [rsp + 0xa8]
mov r8d, 2
call fcn.140032e20
mov r9, qword [rsp + 0xc0]
test r9, r9
je 0x14003007f
mov r15, qword [rsp + 0xc8]
movaps xmm0, xmmword [0x14016c7a0]
movups xmmword [rsp + 0x2f0], xmm0
mov byte [rsp + 0x2e0], 0
cmp r15, 0xf
jbe 0x140030098
lea rcx, [rsp + 0x2e0]
mov rdx, r15
call fcn.1400058f0
jmp 0x1400300bc
movaps xmm0, xmmword [0x14016c7a0]
movups xmmword [rsp + 0x2f0], xmm0
mov byte [rsp + 0x2e0], 0
jmp 0x1400300bc
mov qword [rsp + 0x2f0], r15
lea rcx, [rsp + 0x2e0]
mov rdx, r9
mov r8, r15
call sub.VCRUNTIME140.dll_memmove
mov byte [rsp + r15 + 0x2e0], 0
mov r15, qword [rsp + 0x2f0]
cmp qword [rsp + 0x2f8], 0xf
jbe 0x1400300d9
mov r12, qword [rsp + 0x2e0]
jmp 0x1400300e1
lea r12, [rsp + 0x2e0]
mov qword [rsp + 0x408], 0
cmp qword [rsp + 0x410], r15
jae 0x14003011a
lea rcx, [rsp + 0x400]
mov r9d, 1
mov rdx, r14
mov r8, r15
call fcn.1400291c0
mov rcx, qword [rsp + 0x408]
jmp 0x14003011c
xor ecx, ecx
add rcx, qword [rsp + 0x400]
mov rdx, r12
mov r8, r15
call sub.VCRUNTIME140.dll_memmove
add qword [rsp + 0x408], r15
mov dword [rsp + 0xc0], 0
mov eax, dword [0x14019c710]
mov ecx, dword [0x14019dd7c]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 0x14]
jg 0x140030249
lea rax, [0x14019a518]
mov qword [rsp + 0xc8], rax
mov rax, qword [rsp + 0x2f8]
cmp rax, 0x10
lea r12, [rsp + 0x1d8]
jb 0x14002fd9c
mov rcx, qword [rsp + 0x2e0]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x1400301c4
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x140030243
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.14016a23c
jmp 0x14002fd9c
lea rcx, [0x14019c710]
call fcn.14016a3dc
cmp dword [0x14019c710], 0xffffffff
jne 0x14002f656
lea rcx, [0x1400309c0]
call fcn.14016a724
lea rcx, [0x14019c710]
call fcn.14016a37c
jmp 0x14002f656
lea rcx, [0x14019c710]
call fcn.14016a3dc
cmp dword [0x14019c710], 0xffffffff
jne 0x140030231
lea rcx, [0x1400309c0]
call fcn.14016a724
lea rcx, [0x14019c710]
call fcn.14016a37c
mov r13, qword [rsp + 0x30]
lea r12, [rsp + 0x1d8]
jmp 0x14002ff37
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
lea rcx, [0x14019c710]
call fcn.14016a3dc
cmp dword [0x14019c710], 0xffffffff
jne 0x140030167
lea rcx, [0x1400309c0]
call fcn.14016a724
lea rcx, [0x14019c710]
call fcn.14016a37c
jmp 0x140030167