Function at 0x1400331f0
Capabilities:
Enumerate files on windows

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f0]
sub rsp, 0x2f0
mov r13, rcx
lea rcx, [rsp + 0x20]
call fcn.140033130
nop
mov r8d, 1
lea rdx, [0x1400888e0]
mov rcx, rax
call fcn.14002c3f0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
xor ebx, ebx
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 7
mov word [rax], bx
mov rdx, qword [rsp + 0x38]
cmp rdx, 8
jb 0x140033294
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x20]
cmp rdx, 0x1000
jb 0x14003328f
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140033662
mov rcx, r8
call fcn.14003f840
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], 7
mov word [rsp + 0x20], bx
mov rdi, qword [str..json.gz]
movabs rdx, 0x7ffffffffffffffe
mov rax, rdx
mov rcx, qword [rbp - 0x70]
sub rax, rcx
mov qword [rbp + 0x240], rax
cmp rax, 1
jb 0x14003365c
lea r15, [rbp - 0x80]
mov r12, qword [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae r15, r12
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rbx
lea r14, [rcx + 1]
mov ebx, 7
lea rsi, [rsp + 0x40]
lea eax, [rbx + 3]
cmp r14, rbx
jbe 0x140033336
mov rbx, r14
or rbx, 7
cmp rbx, rdx
jbe 0x140033315
mov rbx, rdx
jmp 0x14003331c
cmp rbx, rax
cmovb rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rsp + 0x40]
call fcn.140014a40
mov rsi, rax
mov qword [rsp + 0x40], rax
mov rcx, qword [rbp - 0x70]
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], rbx
lea rbx, [rcx + rcx]
mov qword [rbp + 0x248], rbx
mov r8, rbx
mov rdx, r15
mov rcx, rsi
call fcn.140043570
mov eax, 0x2a
mov word [rbx + rsi], ax
xor r15d, r15d
mov word [rsi + r14*2], r15w
mov r8, 0xffffffffffffffff
inc r8
cmp word [rdi + r8*2], 0
jne 0x140033371
mov rdx, rdi
lea rcx, [rsp + 0x40]
call fcn.14002c3f0
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], r15
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x1400333f6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
cmp rdx, 0x1000
jb 0x1400333f1
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140033668
mov rcx, r8
call fcn.14003f840
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], 7
mov word [rsp + 0x40], r15w
lea rcx, [rsp + 0x60]
cmp qword [rsp + 0x78], 8
cmovae rcx, qword [rsp + 0x60]
lea rdx, [rbp - 0x60]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov qword [rbp + 0x238], rax
cmp rax, 0xffffffffffffffff
je 0x1400335a6
mov rbx, rax
nop dword [rax]
test byte [rbp - 0x60], 0x10
jne 0x140033587
lea rax, [rbp - 0x34]
mov rbx, 0xffffffffffffffff
inc rbx
cmp word [rax + rbx*2], 0
jne 0x140033455
cmp qword [rbp + 0x240], rbx
jb 0x140033674
lea r15, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae r15, r12
mov r14, qword [rbp - 0x70]
add r14, rbx
mov edi, 7
lea rsi, [rsp + 0x20]
cmp r14, rdi
jbe 0x1400334cd
mov rdi, r14
or rdi, 7
movabs rax, 0x7ffffffffffffffe
cmp rdi, rax
jbe 0x1400334aa
mov rdi, rax
jmp 0x1400334b7
cmp rdi, 0xa
mov eax, 0xa
cmovb rdi, rax
lea rdx, [rdi + 1]
lea rcx, [rsp + 0x20]
call fcn.140014a40
mov rsi, rax
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x38], rdi
mov rdi, qword [rbp + 0x248]
mov r8, rdi
mov rdx, r15
mov rcx, rsi
call fcn.140043570
lea rcx, [rdi + rsi]
lea r8, [rbx + rbx]
lea rdx, [rbp - 0x34]
call fcn.140043570
xor r15d, r15d
mov word [rsi + r14*2], r15w
mov rdx, qword [r13 + 8]
cmp rdx, qword [r13 + 0x10]
je 0x140033531
movups xmm0, xmmword [rsp + 0x20]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rsp + 0x30]
movups xmmword [rdx + 0x10], xmm1
lea edx, [r15 + 7]
mov word [rsp + 0x20], r15w
add qword [r13 + 8], 0x20
jmp 0x140033543
lea r8, [rsp + 0x20]
mov rcx, r13
call fcn.14002f6a0
mov rdx, qword [rsp + 0x38]
cmp rdx, 8
jb 0x140033580
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x20]
cmp rdx, 0x1000
jb 0x14003357b
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14003366e
mov rcx, r8
call fcn.14003f840
mov rbx, qword [rbp + 0x238]
lea rdx, [rbp - 0x60]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x140033440
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x1400335e4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
cmp rdx, 0x1000
jb 0x1400335df
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140033650
mov rcx, r8
call fcn.14003f840
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], r15w
mov rax, qword [rbp - 0x68]
cmp rax, 8
jb 0x140033635
lea rdx, [rax*2 + 2]
cmp rdx, 0x1000
jb 0x14003362d
add rdx, 0x27
mov rcx, qword [r12 - 8]
sub r12, rcx
lea rax, [r12 - 8]
cmp rax, 0x1f
ja 0x140033656
mov r12, rcx
mov rcx, r12
call fcn.14003f840
mov rbx, qword [rsp + 0x330]
add rsp, 0x2f0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14004dd7c
nop
call fcn.14004dd7c
nop
call fcn.1400119a0
int3
call fcn.14004dd7c
nop
call fcn.14004dd7c
int3
call fcn.14004dd7c
int3
call fcn.1400119a0
int3