Function at 0x140029880
Capabilities:
Enumerate files on windows

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x240]
sub rsp, 0x340
mov qword [rsp + 0x30], 0xfffffffffffffffe
mov qword [rsp + 0x398], rbx
mov rax, qword [0x1402a6808]
xor rax, rsp
mov qword [rbp + 0x230], rax
mov rbx, r8
mov qword [rsp + 0x20], rbx
mov r14, rdx
mov r13, rcx
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x78], xmm0
mov rdi, qword [r8 + 0x10]
mov rsi, r8
cmp qword [r8 + 0x18], 8
jb 0x1400298e4
mov rsi, qword [r8]
movabs rax, 0x7ffffffffffffffe
cmp rdi, 8
jae 0x140029906
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x70], 7
jmp 0x140029943
mov rbx, rdi
or rbx, 7
cmp rbx, rax
cmova rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rsp + 0x78]
call fcn.140006990
mov qword [rsp + 0x78], rax
lea r8, [rdi*2 + 2]
mov rdx, rsi
mov rcx, rax
call fcn.14019dbf0
mov qword [rbp - 0x70], rbx
mov rbx, qword [rsp + 0x20]
mov qword [rbp - 0x78], rdi
mov r8, r14
lea rdx, [rsp + 0x78]
lea rcx, [rbp - 0x68]
call fcn.140027aa0
mov rdx, qword [rbp - 0x50]
cmp rdx, 8
jb 0x140029998
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140029993
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140029f13
call fcn.14017f5e4
lea rcx, [rsp + 0x78]
cmp qword [rbp - 0x70], 8
cmovae rcx, qword [rsp + 0x78]
lea rdx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r15, rax
mov qword [rsp + 0x28], rax
xor r12d, r12d
cmp rax, 0xffffffffffffffff
je 0x140029e89
test byte [rbp - 0x20], 0x10
jne 0x140029e89
mov rdx, rbx
lea rcx, [rbp - 0x48]
call fcn.140002f40
nop
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x48], xmm0
movdqa xmm1, xmmword [0x1401e3030]
movdqu xmmword [rsp + 0x48], xmm1
mov word [rsp + 0x38], r12w
lea rax, [rbp + 0xc]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x140029a10
lea rdx, [rbp + 0xc]
lea rcx, [rsp + 0x38]
call fcn.140006d60
nop
lea r8, [rsp + 0x38]
lea rdx, [rbp - 0x48]
lea rcx, [rbp - 0x68]
call fcn.140027aa0
mov rdx, qword [rbp - 0x50]
cmp rdx, 8
jb 0x140029a7c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140029a77
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140029f19
call fcn.14017f5e4
movdqa xmm0, xmmword [0x1401e3030]
movdqu xmmword [rbp - 0x58], xmm0
mov word [rbp - 0x68], r12w
mov rdx, qword [rsp + 0x50]
cmp rdx, 8
jb 0x140029ad0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140029acb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140029f1f
call fcn.14017f5e4
movdqa xmm0, xmmword [0x1401e3030]
movdqu xmmword [rsp + 0x48], xmm0
mov word [rsp + 0x38], r12w
mov rdi, qword [r13 + 8]
cmp qword [r13 + 0x10], rdi
je 0x140029b79
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], r12
lea rsi, [rbp - 0x48]
cmp qword [rbp - 0x30], 8
cmovae rsi, qword [rbp - 0x48]
mov r14, qword [rbp - 0x38]
cmp r14, 8
jae 0x140029b2b
movups xmm0, xmmword [rsi]
movups xmmword [rdi], xmm0
mov qword [rdi + 0x18], 7
mov qword [rdi + 0x10], r14
add qword [r13 + 8], 0x20
jmp 0x140029b88
mov rbx, r14
or rbx, 7
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
cmova rbx, rax
lea rdx, [rbx + 1]
mov rcx, rdi
call fcn.140006990
mov qword [rdi], rax
lea r8, [r14*2 + 2]
mov rdx, rsi
mov rcx, rax
call fcn.14019dbf0
mov qword [rdi + 0x18], rbx
mov rbx, qword [rsp + 0x20]
mov qword [rdi + 0x10], r14
add qword [r13 + 8], 0x20
jmp 0x140029b88
lea r8, [rbp - 0x48]
mov rdx, rdi
mov rcx, r13
call fcn.140010810
lea rdx, [rbp - 0x20]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x140029e37
nop dword [rax]
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
mov rdi, qword [rbx + 0x10]
mov rsi, rbx
cmp qword [rbx + 0x18], 8
jb 0x140029bbb
mov rsi, qword [rbx]
cmp rdi, 8
jae 0x140029bd4
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x70], 7
jmp 0x140029c17
mov rbx, rdi
or rbx, 7
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
cmova rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rsp + 0x58]
call fcn.140006990
mov qword [rsp + 0x58], rax
lea r8, [rdi*2 + 2]
mov rdx, rsi
mov rcx, rax
call fcn.14019dbf0
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x68], rdi
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x50], 7
mov word [rsp + 0x38], r12w
lea rax, [rbp + 0xc]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x140029c45
lea rdx, [rbp + 0xc]
lea rcx, [rsp + 0x38]
call fcn.140006d60
nop
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x58]
lea rcx, [rbp - 0x68]
call fcn.140027aa0
mov rdx, qword [rbp - 0x50]
cmp rdx, 8
jb 0x140029cb2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140029cad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140029f25
call fcn.14017f5e4
mov qword [rbp - 0x58], r12
mov qword [rbp - 0x50], 7
mov word [rbp - 0x68], r12w
mov rdx, qword [rsp + 0x50]
cmp rdx, 8
jb 0x140029d05
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140029d00
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140029f2b
call fcn.14017f5e4
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x50], 7
mov word [rsp + 0x38], r12w
mov rdi, qword [r13 + 8]
cmp qword [r13 + 0x10], rdi
je 0x140029db3
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], r12
lea r15, [rsp + 0x58]
mov rsi, qword [rsp + 0x58]
mov r14, qword [rsp + 0x70]
cmp r14, 8
cmovae r15, rsi
mov r12, qword [rsp + 0x68]
cmp r12, 8
jae 0x140029d62
movups xmm0, xmmword [r15]
movups xmmword [rdi], xmm0
mov qword [rdi + 0x18], 7
jmp 0x140029da0
mov rbx, r12
or rbx, 7
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
cmova rbx, rax
lea rdx, [rbx + 1]
mov rcx, rdi
call fcn.140006990
mov qword [rdi], rax
lea r8, [r12*2 + 2]
mov rdx, r15
mov rcx, rax
call fcn.14019dbf0
mov qword [rdi + 0x18], rbx
mov qword [rdi + 0x10], r12
add qword [r13 + 8], 0x20
mov r15, qword [rsp + 0x28]
xor r12d, r12d
jmp 0x140029dcd
lea r8, [rsp + 0x58]
mov rdx, rdi
mov rcx, r13
call fcn.140010810
mov r14, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x58]
cmp r14, 8
jb 0x140029e08
lea rdx, [r14*2 + 2]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140029e00
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140029f31
mov rcx, rsi
call fcn.14017f5e4
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], r12w
lea rdx, [rbp - 0x20]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x140029e37
mov rbx, qword [rsp + 0x20]
jmp 0x140029ba0
mov rax, qword [rbp - 0x30]
cmp rax, 8
jb 0x140029e77
lea rdx, [rax*2 + 2]
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140029e72
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140029f37
call fcn.14017f5e4
movdqa xmm0, xmmword [0x1401e3030]
movdqu xmmword [rbp - 0x38], xmm0
mov word [rbp - 0x48], r12w
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
mov rdx, qword [rbp - 0x70]
cmp rdx, 8
jb 0x140029ed0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140029ecb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140029f0d
call fcn.14017f5e4
movdqa xmm0, xmmword [0x1401e3030]
movdqu xmmword [rbp - 0x78], xmm0
mov word [rsp + 0x78], r12w
mov rcx, qword [rbp + 0x230]
xor rcx, rsp
call fcn.14017f700
mov rbx, qword [rsp + 0x398]
add rsp, 0x340
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1401a10ac
nop
call fcn.1401a10ac
nop
call fcn.1401a10ac
nop
call fcn.1401a10ac
nop
call fcn.1401a10ac
nop
call fcn.1401a10ac
nop
call fcn.1401a10ac
nop
call fcn.1401a10ac
int3