Function at 0x14004e0e0
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2a0]
sub rsp, 0x3a0
mov qword [rbp - 0x68], 0xfffffffffffffffe
mov qword [rsp + 0x3f8], rbx
mov rax, qword [0x14023c048]
xor rax, rsp
mov qword [rbp + 0x290], rax
mov r13, r8
mov rsi, rdx
mov qword [rbp - 0x78], rdx
mov r14, rcx
mov qword [rbp - 0x60], rcx
xor r15d, r15d
mov r12d, r15d
mov dword [r8], r15d
mov qword [rbp - 0x40], 7
mov word [rbp - 0x58], r15w
mov qword [rbp - 0x48], 1
lea r8d, [r15 + 2]
lea rdx, [0x1401e58ac]
lea rcx, [rbp - 0x58]
call fcn.1401679c0
mov word [rbp - 0x56], r15w
mov rdx, r14
lea rcx, [rsp + 0x48]
call fcn.140032eb0
nop
lea r8, [rbp - 0x58]
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.140033f20
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 8
jb 0x14004e1c5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004e1c0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004e916
call fcn.140148ec0
movdqa xmm0, xmmword [0x1401e87c0]
movdqu xmmword [rsp + 0x58], xmm0
mov word [rsp + 0x48], r15w
mov rdx, qword [rbp - 0x40]
cmp rdx, 8
jb 0x14004e219
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004e214
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004e91c
call fcn.140148ec0
xor eax, eax
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rax
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rax
mov qword [rbp], rax
mov qword [rbp + 8], rax
mov qword [rbp + 0x10], rax
mov qword [rbp - 0x80], r15
cmp qword [sym.imp.KERNEL32.dll_FindClose], rax
je 0x14004e26d
lea rax, vtable.std::_Func_impl_no_alloc_int____cdecl___void____ptr64___int__void____ptr64_.0
mov qword [rsp + 0x48], rax
mov rax, qword [sym.imp.KERNEL32.dll_FindClose]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x48]
mov qword [rbp - 0x80], rax
lea rax, [rsp + 0x48]
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x20]
cmp qword [rbp + 0x38], 8
cmovae rcx, qword [rbp + 0x20]
lea rdx, [rbp + 0x40]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
nop
mov qword [rbp - 0x30], rax
lea rax, [rbp - 0x28]
mov qword [rbp - 0x38], rax
mov rcx, r15
mov qword [rbp + 0x10], rcx
mov r8, qword [rbp - 0x80]
test r8, r8
je 0x14004e2ca
mov rax, qword [r8]
lea rdx, [rbp - 0x28]
mov rcx, r8
mov rax, qword [rax]
call qword [case.0x140024b66.0]
mov rcx, rax
mov qword [rbp + 0x10], rax
mov r8, qword [rbp - 0x80]
test r8, r8
je 0x14004e2ee
mov rax, qword [r8]
lea rcx, [rsp + 0x48]
cmp r8, rcx
setne dl
mov rcx, r8
mov rax, qword [rax + 0x20]
call qword [case.0x140024b66.0]
mov rcx, qword [rbp + 0x10]
cmp qword [rbp - 0x30], 0xffffffffffffffff
je 0x14004e858
mov qword [rbp - 0x48], r15
mov qword [rbp - 0x40], 7
mov word [rbp - 0x58], r15w
lea rax, str..:__
mov qword [rsp + 0x40], rax
lea rbx, [0x1401e5f48]
mov rcx, 0xffffffffffffffff
test byte [rbp + 0x40], 0x10
je 0x14004e7ea
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], 7
mov word [rsp + 0x20], r15w
lea rax, [rbp + 0x6c]
mov rdx, rcx
nop dword [rax]
inc rdx
cmp word [rax + rdx*2], 0
jne 0x14004e350
lea rcx, [rsp + 0x20]
cmp rdx, 7
ja 0x14004e389
mov qword [rsp + 0x30], rdx
lea rbx, [rdx + rdx]
mov r8, rbx
lea rdx, [rbp + 0x6c]
call fcn.1401679c0
mov word [rsp + rbx + 0x20], r15w
lea rbx, [0x1401e5f48]
jmp 0x14004e395
lea r9, [rbp + 0x6c]
xor r8d, r8d
call fcn.14001f490
lea r9, [rsp + 0x20]
mov r10, qword [rsp + 0x20]
mov rdi, qword [rsp + 0x38]
cmp rdi, 8
cmovae r9, r10
mov r11, qword [rsp + 0x30]
cmp r11, 1
jne 0x14004e3f7
mov r8, r11
lea rax, str..:__
movzx ecx, word [r9]
mov edx, 0x2e
cmp cx, dx
jb 0x14004e3f7
sub r9, qword [rsp + 0x40]
cmp cx, dx
ja 0x14004e3f7
cmp r8, 1
je 0x14004e4e2
dec r8
add rax, 2
movzx ecx, word [rax + r9]
movzx edx, word [rax]
cmp cx, dx
jae 0x14004e3d7
lea r9, [rsp + 0x20]
cmp rdi, 8
cmovae r9, r10
cmp r11, 2
jne 0x14004e444
mov r8, r11
mov rax, rbx
movzx ecx, word [r9]
mov edx, 0x2e
cmp cx, dx
jb 0x14004e444
sub r9, rbx
cmp cx, dx
ja 0x14004e444
cmp r8, 1
je 0x14004e4e2
dec r8
add rax, 2
movzx ecx, word [rax + r9]
movzx edx, word [rax]
cmp cx, dx
jae 0x14004e424
mov bl, 1
cmp rdi, 8
jb 0x14004e481
lea rdx, [rdi*2 + 2]
mov rax, r10
cmp rdx, 0x1000
jb 0x14004e479
add rdx, 0x27
mov r10, qword [r10 - 8]
sub rax, r10
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004e928
mov rcx, r10
call fcn.140148ec0
test bl, bl
je 0x14004e7e1
mov dword [rbp - 0x38], r15d
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], 7
mov word [rsp + 0x20], r15w
lea rax, [rbp + 0x6c]
mov rdx, 0xffffffffffffffff
nop dword [rax]
inc rdx
cmp word [rax + rdx*2], 0
jne 0x14004e4b0
lea rcx, [rsp + 0x20]
cmp rdx, 7
ja 0x14004e4e9
mov qword [rsp + 0x30], rdx
lea rbx, [rdx + rdx]
mov r8, rbx
lea rdx, [rbp + 0x6c]
call fcn.1401679c0
mov word [rsp + rbx + 0x20], r15w
jmp 0x14004e4f6
xor bl, bl
jmp 0x14004e446
lea r9, [rbp + 0x6c]
xor r8d, r8d
call fcn.14001f490
nop
lea r8, [rsp + 0x20]
mov rdx, r14
lea rcx, [rsp + 0x48]
call fcn.140033f20
mov rbx, rax
lea rax, [rbp - 0x58]
cmp rax, rbx
je 0x14004e53c
lea rcx, [rbp - 0x58]
call fcn.14001fb60
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x58], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x48], xmm1
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 7
mov word [rbx], r15w
mov rdx, qword [rsp + 0x60]
cmp rdx, 8
jb 0x14004e57e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004e579
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004e92e
call fcn.140148ec0
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x60], 7
mov word [rsp + 0x48], r15w
mov rdx, qword [rsp + 0x38]
cmp rdx, 8
jb 0x14004e5d4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004e5cf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004e934
call fcn.140148ec0
xor r9d, r9d
lea r8, [rbp - 0x38]
mov rdx, rsi
lea rcx, [rbp - 0x58]
call fcn.14004e0e0
mov r15, rax
mov r14d, dword [rbp - 0x38]
xor ebx, ebx
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], rbx
mov rdi, qword [rbp - 0x48]
lea rsi, [rbp - 0x58]
cmp qword [rbp - 0x40], 8
cmovae rsi, qword [rbp - 0x58]
cmp rdi, 8
jae 0x14004e628
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x38], 7
jmp 0x14004e6cd
mov rbx, rdi
or rbx, 7
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
cmova rbx, rax
lea rax, [rbx + 1]
lea rdx, [rax + rax]
movabs rcx, 0x7fffffffffffffff
cmp rax, rcx
jbe 0x14004e663
mov rax, 0xffffffffffffffff
mov rdx, rax
jmp 0x14004e673
cmp rdx, 0x1000
jb 0x14004e69d
mov rax, 0xffffffffffffffff
lea rcx, [rdx + 0x27]
cmp rcx, rdx
cmovbe rcx, rax
call fcn.140148e84
mov rcx, rax
test rax, rax
je 0x14004e93a
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14004e6ae
test rdx, rdx
je 0x14004e6ac
mov rcx, rdx
call fcn.140148e84
jmp 0x14004e6ae
xor eax, eax
mov qword [rsp + 0x20], rax
lea r8, [rdi*2 + 2]
mov rdx, rsi
mov rcx, rax
call fcn.1401679c0
mov qword [rsp + 0x38], rbx
xor ebx, ebx
mov qword [rsp + 0x30], rdi
lea rax, [rsp + 0x20]
mov qword [rbp - 0x70], rax
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x48]
call fcn.140028260
mov qword [rsp + 0x68], r15
mov dword [rsp + 0x70], r14d
mov rdx, qword [rsp + 0x38]
cmp rdx, 8
jb 0x14004e736
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004e731
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004e940
call fcn.140148ec0
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], 7
mov word [rsp + 0x20], bx
mov rsi, qword [rbp - 0x78]
mov rbx, qword [rsi]
mov rdi, qword [rbx + 8]
lea r9, [rsp + 0x48]
mov r8, rdi
mov rdx, rbx
call fcn.14004e960
mov rcx, rax
mov rdx, qword [rsi + 8]
movabs rax, 0x3fffffffffffffe
sub rax, rdx
cmp rax, 1
jb 0x14004e94c
lea rax, [rdx + 1]
mov qword [rsi + 8], rax
mov qword [rbx + 8], rcx
mov qword [rdi], rcx
mov rdx, qword [rsp + 0x60]
cmp rdx, 8
jb 0x14004e7d3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004e7ce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004e946
call fcn.140148ec0
add r12, r15
inc dword [r13]
mov r14, qword [rbp - 0x60]
xor r15d, r15d
lea rbx, [0x1401e5f48]
jmp 0x14004e7fe
mov ecx, dword [rbp + 0x5c]
shl rcx, 0x20
mov eax, dword [rbp + 0x60]
add r12, rax
add r12, rcx
inc dword [r13]
lea rdx, [rbp + 0x40]
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x14004e31d
mov rdx, qword [rbp - 0x40]
cmp rdx, 8
jb 0x14004e854
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004e84f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004e922
call fcn.140148ec0
mov rcx, qword [rbp + 0x10]
mov rax, qword [rbp - 0x30]
test rax, rax
je 0x14004e887
mov qword [rbp - 0x60], rax
test rcx, rcx
je 0x14004e959
mov rax, qword [rcx]
lea rdx, [rbp - 0x60]
mov rax, qword [rax + 0x10]
call qword [case.0x140024b66.0]
mov qword [rbp - 0x30], r15
mov rcx, qword [rbp + 0x10]
test rcx, rcx
je 0x14004e8a7
mov rax, qword [rcx]
lea rdx, [rbp - 0x28]
cmp rcx, rdx
setne dl
mov rax, qword [rax + 0x20]
call qword [case.0x140024b66.0]
mov qword [rbp + 0x10], r15
mov rdx, qword [rbp + 0x38]
cmp rdx, 8
jb 0x14004e8e3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004e8de
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004e910
call fcn.140148ec0
mov rax, r12
mov rcx, qword [rbp + 0x290]
xor rcx, rsp
call fcn.140149290
mov rbx, qword [rsp + 0x3f8]
add rsp, 0x3a0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14016ae5c
nop
call fcn.14016ae5c
nop
call fcn.14016ae5c
nop
call fcn.14016ae5c
nop
call fcn.14016ae5c
nop
call fcn.14016ae5c
nop
call fcn.14016ae5c
int3
call fcn.14016ae5c
int3
call fcn.14016ae5c
int3
call fcn.14016ae5c
nop
lea rcx, str.list_T__too_long
call fcn.140126d64
nop
call fcn.140126d20
int3