Function at 0x140004e30
Capabilities:
Enumerate files on windows

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x248]
sub rsp, 0x320
mov qword [rsp + 0x28], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x1403c6400]
xor rax, rsp
mov qword [rbp + 0x210], rax
mov r12, rdx
mov qword [rsp + 0x30], rdx
xor r13d, r13d
mov dword [rsp + 0x20], r13d
mov qword [rdx], r13
mov qword [rdx + 8], r13
mov qword [rdx + 0x10], r13
mov dword [rsp + 0x20], 1
lea rcx, [rsp + 0x58]
call fcn.14000b0e0
nop
cmp qword [rax + 0x18], 8
jb 0x140004ea8
mov rax, qword [rax]
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x70], 7
mov word [rsp + 0x78], r13w
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x140004ec1
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.140003740
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x140004f1c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004f17
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000547c
call fcn.140004a20
movdqa xmm0, xmmword [0x140369280]
movdqu xmmword [rsp + 0x68], xmm0
mov word [rsp + 0x58], r13w
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x58], xmm0
lea rdi, [rsp + 0x78]
mov r14, qword [rsp + 0x78]
mov r15, qword [rbp - 0x70]
cmp r15, 8
cmovae rdi, r14
movabs rax, 0x7ffffffffffffffe
movabs rcx, 0x7fffffffffffffff
mov rsi, qword [rbp - 0x78]
cmp rsi, 8
jae 0x140004f80
movups xmm0, xmmword [rdi]
movups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x50], 7
jmp 0x14000500e
mov rbx, rsi
or rbx, 7
cmp rbx, rax
cmova rbx, rax
mov rax, rbx
add rax, 1
mov r8, 0xffffffffffffffff
cmovb rax, r8
lea rdx, [rax + rax]
cmp rax, rcx
jbe 0x140004fae
mov rdx, r8
jmp 0x140004fb7
cmp rdx, 0x1000
jb 0x140004fe1
lea rcx, [rdx + 0x27]
cmp rcx, rdx
cmovbe rcx, r8
call fcn.1400d5ff8
mov rcx, rax
test rax, rax
je 0x140005482
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140004ff3
test rdx, rdx
je 0x140004ff0
mov rcx, rdx
call fcn.1400d5ff8
jmp 0x140004ff3
mov rax, r13
mov qword [rbp - 0x68], rax
lea r8, [rsi*2 + 2]
mov rdx, rdi
mov rcx, rax
call fcn.140268a80
mov qword [rbp - 0x50], rbx
mov qword [rbp - 0x58], rsi
mov r8d, SafeArrayGetLBound
lea rdx, str.Exceptions.
lea rcx, [rbp - 0x68]
call fcn.1400056e0
xor edx, edx
mov r8d, 0x250
lea rcx, [rbp - 0x40]
call fcn.140268ee0
lea rcx, [rbp - 0x68]
cmp qword [rbp - 0x50], 8
cmovae rcx, qword [rbp - 0x68]
lea rdx, [rbp - 0x40]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rbx, rax
mov qword [rbp - 0x48], rax
cmp rax, 0xffffffffffffffff
je 0x1400053aa
lea rdi, [0x1403688d0]
nop dword [rax]
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], r13w
lea rax, [rbp - 0x14]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rax + r8*2], 0
jne 0x140005090
lea rdx, [rbp - 0x14]
lea rcx, [rsp + 0x58]
call fcn.140003740
nop
lea r9, [rsp + 0x58]
mov r14, qword [rsp + 0x58]
mov r15, qword [rsp + 0x70]
cmp r15, 8
cmovae r9, r14
mov r13, qword [rsp + 0x68]
cmp r13, 1
jne 0x140005106
mov r8, r13
mov rax, rdi
movzx ecx, word [r9]
mov edx, 0x2e
cmp cx, dx
jb 0x140005106
sub r9, rdi
cmp cx, dx
ja 0x140005106
cmp r8, 1
je 0x140005193
dec r8
add rax, 2
movzx ecx, word [rax + r9]
movzx edx, word [rax]
cmp cx, dx
jae 0x1400050e6
lea r9, [rsp + 0x58]
cmp r15, 8
cmovae r9, r14
cmp r13, 2
jne 0x140005156
mov r8, r13
lea r10, [0x1403688d4]
mov rax, r10
movzx ecx, word [r9]
mov edx, 0x2e
cmp cx, dx
jb 0x140005156
sub r9, r10
cmp cx, dx
ja 0x140005156
cmp r8, 1
je 0x140005193
dec r8
add rax, 2
movzx ecx, word [rax + r9]
movzx edx, word [rax]
cmp cx, dx
jae 0x14000513a
xor ecx, ecx
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x50], rcx
lea rdi, [rsp + 0x78]
cmp qword [rbp - 0x70], 8
cmovae rdi, qword [rsp + 0x78]
cmp rsi, 8
jae 0x1400051d6
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x50], 7
jmp 0x140005287
cmp r15, 8
jb 0x1400051ce
lea rdx, [r15*2 + 2]
mov rax, r14
cmp rdx, 0x1000
jb 0x1400051c6
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000548e
mov rcx, r14
call fcn.140004a20
xor r13d, r13d
jmp 0x14000538c
or rsi, 7
movabs rax, 0x7ffffffffffffffe
cmp rsi, rax
cmova rsi, rax
mov rax, rsi
add rax, 1
mov r8, 0xffffffffffffffff
cmovb rax, r8
lea rdx, [rax + rax]
movabs r9, 0x7fffffffffffffff
cmp rax, r9
jbe 0x140005215
mov rdx, r8
jmp 0x14000521e
cmp rdx, 0x1000
jb 0x140005248
lea rcx, [rdx + 0x27]
cmp rcx, rdx
cmovbe rcx, r8
call fcn.1400d5ff8
mov rcx, rax
test rax, rax
je 0x140005494
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14000525a
test rdx, rdx
je 0x140005257
mov rcx, rdx
call fcn.1400d5ff8
jmp 0x14000525a
mov rax, rcx
mov qword [rsp + 0x38], rax
mov r8, qword [rbp - 0x78]
lea r8, [r8*2 + 2]
mov rdx, rdi
mov rcx, rax
call fcn.140268a80
mov rax, qword [rbp - 0x78]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rsi
mov rsi, rax
mov r8d, reloc.WS2_32.dll_inet_addr
lea rdx, str.Exceptions_
lea rcx, [rsp + 0x38]
call fcn.1400056e0
lea rdx, [rsp + 0x58]
cmp r15, 8
cmovae rdx, r14
mov r8, r13
lea rcx, [rsp + 0x38]
call fcn.1400056e0
mov rax, qword [r12 + 8]
cmp qword [r12 + 0x10], rax
je 0x1400052d9
lea rdx, [rsp + 0x38]
mov rcx, rax
call fcn.1400055f0
add qword [r12 + 8], 0x20
jmp 0x1400052ea
lea r8, [rsp + 0x38]
mov rdx, rax
mov rcx, r12
call fcn.1400057e0
nop
mov rdx, qword [rsp + 0x50]
cmp rdx, 8
jb 0x14000532c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005327
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000549a
call fcn.140004a20
xor r13d, r13d
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], 7
mov word [rsp + 0x38], r13w
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x140005385
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005380
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400054a0
call fcn.140004a20
lea rdi, [0x1403688d0]
lea rdx, [rbp - 0x40]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x140005070
mov r14, qword [rsp + 0x78]
mov r15, qword [rbp - 0x70]
cmp rbx, 0xffffffffffffffff
je 0x1400053ba
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
mov rdx, qword [rbp - 0x50]
cmp rdx, 8
jb 0x1400053fa
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400053f5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005488
call fcn.140004a20
movdqa xmm0, xmmword [0x140369280]
movdqu xmmword [rbp - 0x58], xmm0
mov word [rbp - 0x68], r13w
cmp r15, 8
jb 0x140005443
lea rdx, [r15*2 + 2]
mov rax, r14
cmp rdx, 0x1000
jb 0x14000543b
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005476
mov rcx, r14
call fcn.140004a20
mov rax, r12
mov rcx, qword [rbp + 0x210]
xor rcx, rsp
call fcn.140263a60
lea r11, [rsp + 0x320]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14026bb04
nop
call fcn.14026bb04
int3
call fcn.14026bb04
int3
call fcn.14026bb04
nop
call fcn.14026bb04
nop
call fcn.14026bb04
int3
call fcn.14026bb04
nop
call fcn.14026bb04
int3