Function at 0x140048fd0
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2c0]
sub rsp, 0x3c0
mov qword [rbp - 0x40], 0xfffffffffffffffe
mov qword [rsp + 0x418], rbx
mov rax, qword [0x14022b078]
xor rax, rsp
mov qword [rbp + 0x2b0], rax
mov r13, r8
mov qword [rbp - 0x58], rdx
mov rdi, rcx
mov qword [rbp - 0x50], rcx
xor esi, esi
mov r15d, esi
mov dword [rsp + 0x60], esi
mov r12d, esi
mov dword [r8], esi
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], si
mov qword [rsp + 0x40], 1
lea r8d, [rsi + 2]
lea rdx, [0x1401d7a2c]
lea rcx, [rsp + 0x30]
call fcn.14015dc80
mov word [rsp + 0x32], si
mov rdx, rdi
lea rcx, [rbp - 0x30]
call fcn.14002f990
nop
lea r8, [rsp + 0x30]
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.140030740
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 8
jb 0x1400490b9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400490b4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004983e
call fcn.14013f180
movdqa xmm0, xmmword [0x1401da830]
movdqu xmmword [rbp - 0x20], xmm0
mov word [rbp - 0x30], si
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x14004910c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140049107
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140049844
call fcn.14013f180
movdqa xmm0, xmmword [0x1401da830]
movdqu xmmword [rsp + 0x40], xmm0
mov word [rsp + 0x30], si
xor eax, eax
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], rax
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], rax
mov qword [rbp + 0x30], rax
mov qword [rbp + 0x38], rax
mov qword [rbp + 0x40], rax
mov qword [rbp + 0x48], rax
mov qword [rbp + 0x50], rax
mov qword [rbp - 0x60], rsi
cmp qword [sym.imp.KERNEL32.dll_FindClose], rax
je 0x140049173
lea rax, vtable.std::_Func_impl_no_alloc_int____cdecl___void____ptr64___int__void____ptr64_.0
mov qword [rsp + 0x68], rax
mov rax, qword [sym.imp.KERNEL32.dll_FindClose]
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x68]
mov qword [rbp - 0x60], rax
lea rcx, [rbp - 0x10]
cmp qword [rbp + 8], 8
cmovae rcx, qword [rbp - 0x10]
lea rdx, [rbp + 0x60]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rdx, rax
lea r8, [rsp + 0x68]
lea rcx, [rbp + 0x10]
call fcn.1400168f0
nop
cmp qword [rbp + 0x10], 0xffffffffffffffff
je 0x1400497c5
mov qword [rbp - 0x20], rsi
mov qword [rbp - 0x18], 7
mov word [rbp - 0x30], si
mov r14, 0xffffffffffffffff
lea rbx, [0x1401d81c8]
test byte [rbp + 0x60], 0x10
je 0x140049757
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], si
lea rax, [rbp + 0x8c]
mov rdx, r14
nop dword [rax]
inc rdx
cmp word [rax + rdx*2], 0
jne 0x1400491f0
lea rcx, [rsp + 0x30]
cmp rdx, 7
ja 0x14004922b
mov qword [rsp + 0x40], rdx
lea rbx, [rdx + rdx]
mov r8, rbx
lea rdx, [rbp + 0x8c]
call fcn.14015dc80
mov word [rsp + rbx + 0x30], si
lea rbx, [0x1401d81c8]
jmp 0x14004923a
lea r9, [rbp + 0x8c]
xor r8d, r8d
call fcn.140016ea0
lea r8, [rsp + 0x30]
mov r9, qword [rsp + 0x30]
mov r11, qword [rsp + 0x48]
cmp r11, 8
cmovae r8, r9
mov r10, qword [rsp + 0x40]
cmp r10, 1
jne 0x140049288
mov rdx, r10
lea rax, [0x1401d7a3c]
mov rcx, rax
sub r8, rax
nop dword [rax]
movzx eax, word [rcx]
cmp word [rcx + r8], ax
jne 0x140049288
add rcx, 2
sub rdx, 1
jne 0x140049270
xor bl, bl
jmp 0x1400492be
lea r8, [rsp + 0x30]
cmp r11, 8
cmovae r8, r9
cmp r10, 2
jne 0x1400492bc
mov rdx, r10
mov rcx, rbx
sub r8, rbx
movzx eax, word [rcx]
cmp word [rcx + r8], ax
jne 0x1400492bc
add rcx, 2
sub rdx, 1
jne 0x1400492a4
xor bl, bl
jmp 0x1400492be
mov bl, 1
cmp r11, 8
jb 0x1400492f9
lea rdx, [r11*2 + 2]
mov rax, r9
cmp rdx, 0x1000
jb 0x1400492f1
add rdx, 0x27
mov r9, qword [r9 - 8]
sub rax, r9
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140049850
mov rcx, r9
call fcn.14013f180
test bl, bl
je 0x14004974e
mov dword [rbp - 0x38], esi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], si
lea rax, [rbp + 0x8c]
mov rdx, r14
inc rdx
cmp word [rax + rdx*2], 0
jne 0x140049321
lea rcx, [rsp + 0x30]
cmp rdx, 7
ja 0x140049355
mov qword [rsp + 0x40], rdx
lea rbx, [rdx + rdx]
mov r8, rbx
lea rdx, [rbp + 0x8c]
call fcn.14015dc80
mov word [rsp + rbx + 0x30], si
jmp 0x140049365
lea r9, [rbp + 0x8c]
xor r8d, r8d
call fcn.140016ea0
nop
mov rdx, rdi
lea rcx, [rsp + 0x68]
call fcn.140020720
mov r14, rax
or r15d, 2
mov dword [rsp + 0x60], r15d
lea rcx, [rsp + 0x68]
call fcn.140033e90
mov rcx, rax
mov rsi, qword [rsp + 0x78]
lea rax, [rsi - 1]
cmp rcx, rax
je 0x140049405
mov rcx, qword [rbp - 0x80]
mov rax, rcx
sub rax, rsi
cmp rax, 1
jb 0x1400493df
lea rdi, [rsi + 1]
mov qword [rsp + 0x78], rdi
lea rbx, [rsp + 0x68]
cmp rcx, 8
cmovae rbx, qword [rsp + 0x68]
lea rcx, [rbx + rsi*2]
mov r8d, 2
lea rdx, [0x1401d7eac]
call fcn.14015dc80
xor eax, eax
mov word [rbx + rdi*2], ax
jmp 0x140049400
mov qword [rsp + 0x20], 1
lea r9, [0x1401d7eac]
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rsp + 0x68]
call fcn.1400249f0
mov rsi, qword [rsp + 0x78]
lea r9, [rsp + 0x30]
cmp qword [rsp + 0x48], 8
cmovae r9, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x40]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
sub rax, rsi
cmp rdi, rax
ja 0x14004945e
lea rax, [rsi + rdi]
mov qword [rsp + 0x78], rax
lea rbx, [rsp + 0x68]
cmp rcx, 8
cmovae rbx, qword [rsp + 0x68]
lea r8, [rdi + rdi]
lea rcx, [rbx + rsi*2]
mov rdx, r9
call fcn.14015dc80
lea rax, [rsi + rdi]
xor edi, edi
mov word [rbx + rax*2], di
jmp 0x140049475
mov qword [rsp + 0x20], rdi
xor r8d, r8d
mov rdx, rdi
lea rcx, [rsp + 0x68]
call fcn.1400249f0
xor edi, edi
lea rax, [rbp - 0x30]
cmp rax, r14
je 0x1400494a8
lea rcx, [rbp - 0x30]
call fcn.140017110
movups xmm0, xmmword [r14]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [r14 + 0x10]
movups xmmword [rbp - 0x20], xmm1
mov qword [r14 + 0x10], rdi
mov qword [r14 + 0x18], 7
mov word [r14], di
and r15d, 0xfffffffd
mov dword [rsp + 0x60], r15d
mov rdx, qword [rbp - 0x80]
cmp rdx, 8
jb 0x1400494f2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400494ed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140049856
call fcn.14013f180
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x80], 7
mov word [rsp + 0x68], di
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x140049546
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140049541
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004985c
call fcn.14013f180
xor r9d, r9d
lea r8, [rbp - 0x38]
mov rdx, qword [rbp - 0x58]
lea rcx, [rbp - 0x30]
call fcn.140048fd0
mov r14, rax
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x80], rdi
mov rdi, qword [rbp - 0x20]
lea rsi, [rbp - 0x30]
cmp qword [rbp - 0x18], 8
cmovae rsi, qword [rbp - 0x30]
cmp rdi, 8
jae 0x140049593
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x68], xmm0
mov qword [rbp - 0x80], 7
jmp 0x140049635
mov rbx, rdi
or rbx, 7
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
cmova rbx, rax
lea rax, [rbx + 1]
lea rdx, [rax + rax]
movabs rcx, 0x7fffffffffffffff
cmp rax, rcx
jbe 0x1400495ce
mov rax, 0xffffffffffffffff
mov rdx, rax
jmp 0x1400495de
cmp rdx, 0x1000
jb 0x140049608
mov rax, 0xffffffffffffffff
lea rcx, [rdx + 0x27]
cmp rcx, rdx
cmovbe rcx, rax
call fcn.14013f144
mov rcx, rax
test rax, rax
je 0x140049862
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140049619
test rdx, rdx
je 0x140049617
mov rcx, rdx
call fcn.14013f144
jmp 0x140049619
xor eax, eax
mov qword [rsp + 0x68], rax
lea r8, [rdi*2 + 2]
mov rdx, rsi
mov rcx, rax
call fcn.14015dc80
mov qword [rbp - 0x80], rbx
mov qword [rsp + 0x78], rdi
lea rax, [rsp + 0x68]
mov qword [rbp - 0x48], rax
mov ebx, dword [rbp - 0x38]
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x30]
call fcn.140020720
mov qword [rsp + 0x50], r14
mov dword [rsp + 0x58], ebx
mov rdx, qword [rbp - 0x80]
cmp rdx, 8
jb 0x14004969f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004969a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140049868
call fcn.14013f180
xor eax, eax
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x80], 7
mov word [rsp + 0x68], ax
mov rsi, qword [rbp - 0x58]
mov rbx, qword [rsi]
mov rdi, qword [rbx + 8]
lea r9, [rsp + 0x30]
mov r8, rdi
mov rdx, rbx
call fcn.140049890
mov rcx, rax
mov rdx, qword [rsi + 8]
movabs rax, 0x3fffffffffffffe
sub rax, rdx
cmp rax, 1
jb 0x140049874
lea rax, [rdx + 1]
mov qword [rsi + 8], rax
mov qword [rbx + 8], rcx
mov qword [rdi], rcx
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x14004973d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140049738
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004986e
call fcn.14013f180
add r12, r14
inc dword [r13]
mov rdi, qword [rbp - 0x50]
xor esi, esi
lea r14, [rsi - 1]
lea rbx, [0x1401d81c8]
jmp 0x14004976e
mov ecx, dword [rbp + 0x7c]
shl rcx, 0x20
mov eax, dword [rbp + 0x80]
add r12, rax
add r12, rcx
inc dword [r13]
lea rdx, [rbp + 0x60]
mov rcx, qword [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x1400491c6
mov rdx, qword [rbp - 0x18]
cmp rdx, 8
jb 0x1400497c5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400497bf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004984a
call fcn.14013f180
nop
lea rcx, [rbp + 0x10]
call fcn.140016800
nop
mov rdx, qword [rbp + 8]
cmp rdx, 8
jb 0x14004980b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140049806
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140049838
call fcn.14013f180
mov rax, r12
mov rcx, qword [rbp + 0x2b0]
xor rcx, rsp
call fcn.14013f550
mov rbx, qword [rsp + 0x418]
add rsp, 0x3c0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14016111c
nop
call fcn.14016111c
nop
call fcn.14016111c
nop
call fcn.14016111c
nop
call fcn.14016111c
nop
call fcn.14016111c
nop
call fcn.14016111c
int3
call fcn.14016111c
int3
call fcn.14016111c
int3
call fcn.14016111c
nop
lea rcx, str.list_T__too_long
call fcn.14011d024
int3