Function at 0x1400298e0
Capabilities:
Enumerate files on windows

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x240]
sub rsp, 0x340
mov qword [rsp + 0x30], 0xfffffffffffffffe
mov qword [rsp + 0x398], rbx
mov rax, qword [0x1402a98a8]
xor rax, rsp
mov qword [rbp + 0x230], rax
mov rbx, r8
mov qword [rsp + 0x20], rbx
mov r14, rdx
mov r13, rcx
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x78], xmm0
mov rdi, qword [r8 + 0x10]
mov rsi, r8
cmp qword [r8 + 0x18], 8
jb 0x140029944
mov rsi, qword [r8]
movabs rax, 0x7ffffffffffffffe
cmp rdi, 8
jae 0x140029966
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x70], 7
jmp 0x1400299a3
mov rbx, rdi
or rbx, 7
cmp rbx, rax
cmova rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rsp + 0x78]
call fcn.1400069a0
mov qword [rsp + 0x78], rax
lea r8, [rdi*2 + 2]
mov rdx, rsi
mov rcx, rax
call fcn.14019f8d0
mov qword [rbp - 0x70], rbx
mov rbx, qword [rsp + 0x20]
mov qword [rbp - 0x78], rdi
mov r8, r14
lea rdx, [rsp + 0x78]
lea rcx, [rbp - 0x68]
call fcn.140027b00
mov rdx, qword [rbp - 0x50]
cmp rdx, 8
jb 0x1400299f8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400299f3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140029f73
call fcn.1401812c4
lea rcx, [rsp + 0x78]
cmp qword [rbp - 0x70], 8
cmovae rcx, qword [rsp + 0x78]
lea rdx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r15, rax
mov qword [rsp + 0x28], rax
xor r12d, r12d
cmp rax, 0xffffffffffffffff
je 0x140029ee9
test byte [rbp - 0x20], 0x10
jne 0x140029ee9
mov rdx, rbx
lea rcx, [rbp - 0x48]
call fcn.140002f50
nop
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x48], xmm0
movdqa xmm1, xmmword [0x1401e5030]
movdqu xmmword [rsp + 0x48], xmm1
mov word [rsp + 0x38], r12w
lea rax, [rbp + 0xc]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x140029a70
lea rdx, [rbp + 0xc]
lea rcx, [rsp + 0x38]
call fcn.140006d70
nop
lea r8, [rsp + 0x38]
lea rdx, [rbp - 0x48]
lea rcx, [rbp - 0x68]
call fcn.140027b00
mov rdx, qword [rbp - 0x50]
cmp rdx, 8
jb 0x140029adc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140029ad7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140029f79
call fcn.1401812c4
movdqa xmm0, xmmword [0x1401e5030]
movdqu xmmword [rbp - 0x58], xmm0
mov word [rbp - 0x68], r12w
mov rdx, qword [rsp + 0x50]
cmp rdx, 8
jb 0x140029b30
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140029b2b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140029f7f
call fcn.1401812c4
movdqa xmm0, xmmword [0x1401e5030]
movdqu xmmword [rsp + 0x48], xmm0
mov word [rsp + 0x38], r12w
mov rdi, qword [r13 + 8]
cmp qword [r13 + 0x10], rdi
je 0x140029bd9
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], r12
lea rsi, [rbp - 0x48]
cmp qword [rbp - 0x30], 8
cmovae rsi, qword [rbp - 0x48]
mov r14, qword [rbp - 0x38]
cmp r14, 8
jae 0x140029b8b
movups xmm0, xmmword [rsi]
movups xmmword [rdi], xmm0
mov qword [rdi + 0x18], 7
mov qword [rdi + 0x10], r14
add qword [r13 + 8], 0x20
jmp 0x140029be8
mov rbx, r14
or rbx, 7
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
cmova rbx, rax
lea rdx, [rbx + 1]
mov rcx, rdi
call fcn.1400069a0
mov qword [rdi], rax
lea r8, [r14*2 + 2]
mov rdx, rsi
mov rcx, rax
call fcn.14019f8d0
mov qword [rdi + 0x18], rbx
mov rbx, qword [rsp + 0x20]
mov qword [rdi + 0x10], r14
add qword [r13 + 8], 0x20
jmp 0x140029be8
lea r8, [rbp - 0x48]
mov rdx, rdi
mov rcx, r13
call fcn.140010820
lea rdx, [rbp - 0x20]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x140029e97
nop dword [rax]
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
mov rdi, qword [rbx + 0x10]
mov rsi, rbx
cmp qword [rbx + 0x18], 8
jb 0x140029c1b
mov rsi, qword [rbx]
cmp rdi, 8
jae 0x140029c34
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x70], 7
jmp 0x140029c77
mov rbx, rdi
or rbx, 7
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
cmova rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rsp + 0x58]
call fcn.1400069a0
mov qword [rsp + 0x58], rax
lea r8, [rdi*2 + 2]
mov rdx, rsi
mov rcx, rax
call fcn.14019f8d0
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x68], rdi
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x50], 7
mov word [rsp + 0x38], r12w
lea rax, [rbp + 0xc]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x140029ca5
lea rdx, [rbp + 0xc]
lea rcx, [rsp + 0x38]
call fcn.140006d70
nop
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x58]
lea rcx, [rbp - 0x68]
call fcn.140027b00
mov rdx, qword [rbp - 0x50]
cmp rdx, 8
jb 0x140029d12
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140029d0d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140029f85
call fcn.1401812c4
mov qword [rbp - 0x58], r12
mov qword [rbp - 0x50], 7
mov word [rbp - 0x68], r12w
mov rdx, qword [rsp + 0x50]
cmp rdx, 8
jb 0x140029d65
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140029d60
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140029f8b
call fcn.1401812c4
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x50], 7
mov word [rsp + 0x38], r12w
mov rdi, qword [r13 + 8]
cmp qword [r13 + 0x10], rdi
je 0x140029e13
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], r12
lea r15, [rsp + 0x58]
mov rsi, qword [rsp + 0x58]
mov r14, qword [rsp + 0x70]
cmp r14, 8
cmovae r15, rsi
mov r12, qword [rsp + 0x68]
cmp r12, 8
jae 0x140029dc2
movups xmm0, xmmword [r15]
movups xmmword [rdi], xmm0
mov qword [rdi + 0x18], 7
jmp 0x140029e00
mov rbx, r12
or rbx, 7
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
cmova rbx, rax
lea rdx, [rbx + 1]
mov rcx, rdi
call fcn.1400069a0
mov qword [rdi], rax
lea r8, [r12*2 + 2]
mov rdx, r15
mov rcx, rax
call fcn.14019f8d0
mov qword [rdi + 0x18], rbx
mov qword [rdi + 0x10], r12
add qword [r13 + 8], 0x20
mov r15, qword [rsp + 0x28]
xor r12d, r12d
jmp 0x140029e2d
lea r8, [rsp + 0x58]
mov rdx, rdi
mov rcx, r13
call fcn.140010820
mov r14, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x58]
cmp r14, 8
jb 0x140029e68
lea rdx, [r14*2 + 2]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140029e60
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140029f91
mov rcx, rsi
call fcn.1401812c4
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], r12w
lea rdx, [rbp - 0x20]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x140029e97
mov rbx, qword [rsp + 0x20]
jmp 0x140029c00
mov rax, qword [rbp - 0x30]
cmp rax, 8
jb 0x140029ed7
lea rdx, [rax*2 + 2]
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140029ed2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140029f97
call fcn.1401812c4
movdqa xmm0, xmmword [0x1401e5030]
movdqu xmmword [rbp - 0x38], xmm0
mov word [rbp - 0x48], r12w
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
mov rdx, qword [rbp - 0x70]
cmp rdx, 8
jb 0x140029f30
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140029f2b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140029f6d
call fcn.1401812c4
movdqa xmm0, xmmword [0x1401e5030]
movdqu xmmword [rbp - 0x78], xmm0
mov word [rsp + 0x78], r12w
mov rcx, qword [rbp + 0x230]
xor rcx, rsp
call fcn.1401813e0
mov rbx, qword [rsp + 0x398]
add rsp, 0x340
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1401a2d8c
nop
call fcn.1401a2d8c
nop
call fcn.1401a2d8c
nop
call fcn.1401a2d8c
nop
call fcn.1401a2d8c
nop
call fcn.1401a2d8c
nop
call fcn.1401a2d8c
nop
call fcn.1401a2d8c
int3