Function at 0x140010bf0
Capabilities:
Enumerate files on windows

Disassembly:
mov dword [rsp + 0x18], r8d
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1d8]
sub rsp, 0x2d8
mov qword [rsp + 0x70], 0xfffffffffffffffe
mov rsi, rdx
mov rbx, rcx
xor r14d, r14d
mov dword [rsp + 0x28], r14d
call fcn.1402255b4
mov rcx, rax
mov eax, r14d
test rcx, rcx
setne al
test eax, eax
jne 0x140010c51
mov ecx, 0x80004005
call fcn.1400042e0
int3
mov rax, qword [rcx]
call qword [rax + 0x18]
lea rdi, [rax + 0x18]
mov qword [rsp + 0x20], rdi
call fcn.1402255b4
mov rdx, rax
mov ecx, r14d
test rax, rax
setne cl
test ecx, ecx
jne 0x140010c80
mov ecx, 0x80004005
call fcn.1400042e0
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x38], rax
lea rax, [0x1405369f8]
mov r13, rax
shr r13, 0x10
test r13, r13
jne 0x140010cc6
movzx esi, ax
mov ecx, esi
call fcn.1402253fc
test rax, rax
je 0x140010cd8
mov r8d, esi
mov rdx, rax
lea rcx, [rsp + 0x38]
call fcn.140003e00
jmp 0x140010cd8
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x38]
call fcn.140004100
jmp 0x140010cdf
mov rsi, qword [rbp + 0x228]
lea r8, str..
mov rdx, rsi
lea rcx, [rsp + 0x68]
call fcn.1400045a0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rdi, 0xffffffffffffffe8
or r12, 0xffffffffffffffff
cmp rcx, rdi
je 0x140010d59
cmp dword [rdi + 0x10], 0
jl 0x140010d4a
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x140010d4a
call fcn.140003c60
mov rsi, rax
mov ecx, r12d
lock xadd dword [rdi + 0x10], ecx
dec ecx
test ecx, ecx
jg 0x140010d38
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rax, [rsi + 0x18]
mov qword [rsp + 0x20], rax
mov rsi, qword [rbp + 0x228]
jmp 0x140010d59
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x20]
call fcn.140004100
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140010d79
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, [rbp - 0x80]
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r15, rax
cmp rax, 0xffffffffffffffff
jne 0x140010e2a
mov r8, qword [rsi]
lea rdx, str.getNewestSubDir_____Error__Could_not_get_handle_to_first_file_in__s_n
lea rcx, [0x140636e50]
call fcn.140019030
lea rdx, [0x1405369f8]
mov rcx, rbx
call fcn.1400041f0
mov dword [rsp + 0x28], 1
mov rdx, qword [rsp + 0x38]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140010de3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x20]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140010e04
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsi]
sub rdx, 0x18
lock xadd dword [rdx + 0x10], r12d
dec r12d
test r12d, r12d
jg 0x140010e22
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, rbx
jmp 0x1400112ae
mov qword [rsp + 0x48], r14
call fcn.1402255b4
mov rdx, rax
mov ecx, r14d
test rax, rax
setne cl
test ecx, ecx
jne 0x140010e4f
mov ecx, 0x80004005
call fcn.1400042e0
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x238], rbx
lea rdx, [0x1405369f8]
test r13, r13
jne 0x140010e92
movzx edi, dx
mov ecx, edi
call fcn.1402253fc
test rax, rax
je 0x140010ea8
mov r8d, edi
mov rdx, rax
lea rcx, [rbp + 0x238]
call fcn.140003e00
jmp 0x140010ea1
xor r8d, r8d
lea rcx, [rbp + 0x238]
call fcn.140004100
mov rbx, qword [rbp + 0x238]
nop dword [rax + rax]
cmp dword [rbp + 0x230], 0
je 0x140010ec3
test byte [rbp - 0x80], 0x10
je 0x140011008
lea rsi, [rbp - 0x54]
lea rdi, [0x1403d2258]
mov ecx, 2
repe cmpsw word [rsi], word [rdi]
je 0x140011008
lea rsi, [rbp - 0x54]
lea rdi, [0x1403d2250]
mov ecx, 3
repe cmpsw word [rsi], word [rdi]
je 0x140011008
mov rax, qword [rbp - 0x7c]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_CompareFileTime]
cmp eax, 1
jne 0x140011008
mov rax, qword [rbp - 0x7c]
mov qword [rsp + 0x48], rax
xor eax, eax
mov rcx, r12
lea rdi, [rbp - 0x54]
repne scasw ax, word [rdi]
not rcx
dec rcx
mov rdi, rcx
test ecx, ecx
jne 0x140010f91
lea rdx, [rbx - 0x18]
mov rdi, qword [rdx]
cmp dword [rdx + 8], eax
je 0x140011008
cmp dword [rdx + 0x10], eax
jge 0x140010f64
cmp dword [rbx - 0xc], eax
jl 0x14001101e
mov dword [rbx - 0x10], r14d
mov word [rbx], r14w
jmp 0x140011008
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140010f7b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x238], rbx
jmp 0x140011008
mov r13d, dword [rbx - 0x10]
lea rsi, [rbp - 0x54]
sub rsi, rbx
sar rsi, 1
test ecx, ecx
js 0x140011034
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edi
or eax, ecx
jge 0x140010fcd
mov edx, edi
lea rcx, [rbp + 0x238]
call fcn.1400040a0
mov rbx, qword [rbp + 0x238]
movsxd rax, edi
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
add rdx, rdx
cmp rsi, r13
lea r13, [rax + rax]
mov r9, r13
ja 0x140010ff1
lea r8, [rbx + rsi*2]
call fcn.1403606d8
jmp 0x140010ffa
lea r8, [rbp - 0x54]
call fcn.140360650
cmp edi, dword [rbx - 0xc]
jg 0x140011029
mov dword [rbx - 0x10], edi
mov word [r13 + rbx], r14w
lea rdx, [rbp - 0x80]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x14001103f
jmp 0x140010eb0
mov ecx, 0x80070057
call fcn.1400042e0
int3
mov ecx, 0x80070057
call fcn.1400042e0
int3
mov ecx, 0x80070057
call fcn.1400042e0
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x12
je 0x140011060
mov r8d, eax
lea rdx, str.Error__getNewestSubDir_____Error_getting_latest_subfolder:__u_n
lea rcx, [0x140636e50]
call fcn.140019030
call fcn.1402255b4
mov rdx, rax
mov ecx, r14d
test rax, rax
setne cl
test ecx, ecx
jne 0x140011080
mov ecx, 0x80004005
call fcn.1400042e0
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
lea rdi, [rax + 0x18]
mov qword [rsp + 0x40], rdi
call fcn.1402255b4
mov rcx, rax
test rax, rax
setne r14b
test r14d, r14d
jne 0x1400110b1
mov ecx, 0x80004005
call fcn.1400042e0
int3
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x30], rax
lea rdx, [0x140536ef0]
test rdx, 0xffffffffffff0000
jne 0x1400110f1
movzx esi, dx
mov ecx, esi
call fcn.1402253fc
test rax, rax
je 0x1400110fc
mov r8d, esi
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140003e00
jmp 0x1400110fc
lea rcx, [rsp + 0x30]
call fcn.140188680
nop
lea r8, [rsp + 0x30]
mov rbx, qword [rbp + 0x228]
mov rdx, rbx
lea rcx, [rsp + 0x58]
call fcn.1400044f0
nop
lea r8, [rbp + 0x238]
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.1400044f0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rdi, 0xffffffffffffffe8
cmp rcx, rdi
je 0x140011185
cmp dword [rdi + 0x10], 0
jl 0x140011176
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x140011176
call fcn.140003c60
mov rsi, rax
mov ecx, r12d
lock xadd dword [rdi + 0x10], ecx
dec ecx
test ecx, ecx
jg 0x14001116b
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rax, [rsi + 0x18]
mov qword [rsp + 0x40], rax
jmp 0x140011185
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x40]
call fcn.140004100
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400111a6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400111c7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400111e7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rdi, qword [rsp + 0x40]
lea rcx, [rdi - 0x18]
call fcn.140003c60
add rax, 0x18
mov rsi, qword [rbp + 0x220]
mov qword [rsi], rax
mov dword [rsp + 0x28], 1
mov eax, r12d
lock xadd dword [rdi - 8], eax
dec eax
test eax, eax
jg 0x140011228
mov rcx, qword [rdi - 0x18]
mov rax, qword [rcx]
lea rdx, [rdi - 0x18]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x238]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x14001124b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x38]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x14001126c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x20]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x14001128d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbx]
sub rdx, 0x18
lock xadd dword [rdx + 0x10], r12d
dec r12d
test r12d, r12d
jg 0x1400112ab
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, rsi
add rsp, 0x2d8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret