Function at 0x14008e000
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x228]
sub rsp, 0x328
mov qword [rsp + 0x30], 0xfffffffffffffffe
mov rax, qword [0x1402a98a8]
xor rax, rsp
mov qword [rbp + 0x210], rax
mov rdi, r9
mov r12, r8
mov rbx, rdx
mov r13, rcx
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x58], xmm0
movdqa xmm1, xmmword [0x1401e5030]
movdqu xmmword [rbp - 0x58], xmm1
xor eax, eax
mov word [rbp - 0x68], ax
mov r8, 0xffffffffffffffff
inc r8
cmp word [rdx + r8*2], ax
jne 0x14008e064
lea rcx, [rbp - 0x68]
call fcn.140006d70
nop
mov r8d, 3
lea rdx, [0x1401e62d0]
lea rcx, [rbp - 0x68]
call fcn.140006aa0
lea rcx, [rbp - 0x68]
cmp qword [rbp - 0x50], 8
cmovae rcx, qword [rbp - 0x68]
lea rdx, [rbp - 0x40]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r15, rax
movzx r14d, byte [rbp + 0x298]
movzx esi, byte [rbp + 0x290]
cmp rax, 0xffffffffffffffff
je 0x14008e3d4
mov ecx, dword [rbp - 0x40]
test cl, 0x10
je 0x14008e219
test r14b, r14b
jne 0x14008e0dc
test cl, 2
jne 0x14008e3d4
test sil, sil
je 0x14008e3d4
lea rdx, [0x1401e5cd0]
lea rcx, [rbp - 0x14]
call fcn.1400279d0
test eax, eax
je 0x14008e3d4
lea rdx, [0x1401e62d8]
lea rcx, [rbp - 0x14]
call fcn.1400279d0
test eax, eax
je 0x14008e3d4
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x48], xmm0
movdqa xmm1, xmmword [0x1401e5030]
movdqu xmmword [rsp + 0x48], xmm1
xor eax, eax
mov word [rsp + 0x38], ax
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rbx + r8*2], ax
jne 0x14008e140
mov rdx, rbx
lea rcx, [rsp + 0x38]
call fcn.140006d70
nop
lea rax, [rbp - 0x14]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x14008e163
lea rdx, [rbp - 0x14]
lea rcx, [rsp + 0x38]
call fcn.140006aa0
mov r8d, 1
lea rdx, [0x1401e62c8]
lea rcx, [rsp + 0x38]
call fcn.140006aa0
lea rdx, [rsp + 0x38]
cmp qword [rsp + 0x50], 8
cmovae rdx, qword [rsp + 0x38]
mov byte [rsp + 0x28], r14b
mov byte [rsp + 0x20], sil
mov r9, rdi
mov r8, r12
mov rcx, r13
call fcn.14008e000
nop
mov rdx, qword [rsp + 0x50]
cmp rdx, 8
jb 0x14008e1ff
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008e1fa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008e761
call fcn.1401812c4
movdqa xmm0, xmmword [0x1401e5030]
movdqu xmmword [rsp + 0x48], xmm0
xor eax, eax
mov word [rsp + 0x38], ax
jmp 0x14008e3d4
mov rdx, r12
lea rcx, [rbp - 0x14]
call fcn.14002a570
test al, al
je 0x14008e3d4
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x68], xmm0
movdqa xmm1, xmmword [0x1401e5030]
movdqu xmmword [rsp + 0x68], xmm1
xor eax, eax
mov word [rsp + 0x58], ax
mov r8, 0xffffffffffffffff
inc r8
cmp word [rbx + r8*2], ax
jne 0x14008e252
mov rdx, rbx
lea rcx, [rsp + 0x58]
call fcn.140006d70
nop
lea rax, [rbp - 0x14]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x14008e275
lea rdx, [rbp - 0x14]
lea rcx, [rsp + 0x58]
call fcn.140006aa0
lea rdx, [rsp + 0x58]
cmp qword [rsp + 0x70], 8
cmovae rdx, qword [rsp + 0x58]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x48], xmm0
movdqa xmm1, xmmword [0x1401e5030]
movdqu xmmword [rsp + 0x48], xmm1
xor eax, eax
mov word [rsp + 0x38], ax
mov r8, 0xffffffffffffffff
inc r8
cmp word [rdx + r8*2], ax
jne 0x14008e2c4
lea rcx, [rsp + 0x38]
call fcn.140006d70
nop
mov rdx, qword [rdi + 8]
cmp qword [rdi + 0x10], rdx
je 0x14008e318
xor eax, eax
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], rax
movups xmm0, xmmword [rsp + 0x38]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rsp + 0x48]
movups xmmword [rdx + 0x10], xmm1
movdqa xmm0, xmmword [0x1401e5030]
movdqu xmmword [rsp + 0x48], xmm0
mov word [rsp + 0x38], ax
add qword [rdi + 8], 0x20
jmp 0x14008e326
lea r8, [rsp + 0x38]
mov rcx, rdi
call fcn.140001d70
nop
mov rdx, qword [rsp + 0x50]
cmp rdx, 8
jb 0x14008e368
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008e363
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008e767
call fcn.1401812c4
movdqa xmm0, xmmword [0x1401e5030]
movdqu xmmword [rsp + 0x48], xmm0
xor eax, eax
mov word [rsp + 0x38], ax
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x14008e3c1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008e3ba
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008e76d
call fcn.1401812c4
xor eax, eax
movdqa xmm0, xmmword [0x1401e5030]
movdqu xmmword [rsp + 0x68], xmm0
mov word [rsp + 0x58], ax
lea rdx, [rbp - 0x40]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x14008e6df
mov eax, dword [rbp - 0x40]
test al, 0x10
je 0x14008e524
test r14b, r14b
jne 0x14008e3fd
test al, 2
jne 0x14008e3d4
test sil, sil
je 0x14008e3d4
lea rdx, [0x1401e5cd0]
lea rcx, [rbp - 0x14]
call fcn.1400279d0
test eax, eax
je 0x14008e3d4
lea rdx, [0x1401e62d8]
lea rcx, [rbp - 0x14]
call fcn.1400279d0
test eax, eax
je 0x14008e3d4
xor eax, eax
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], ax
mov r8, 0xffffffffffffffff
inc r8
cmp word [rbx + r8*2], ax
jne 0x14008e450
mov rdx, rbx
lea rcx, [rsp + 0x58]
call fcn.140006d70
nop
lea rax, [rbp - 0x14]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x14008e473
lea rdx, [rbp - 0x14]
lea rcx, [rsp + 0x58]
call fcn.140006aa0
mov r8d, 1
lea rdx, [0x1401e62c8]
lea rcx, [rsp + 0x58]
call fcn.140006aa0
lea rdx, [rsp + 0x58]
cmp qword [rsp + 0x70], 8
cmovae rdx, qword [rsp + 0x58]
mov byte [rsp + 0x28], r14b
mov byte [rsp + 0x20], sil
mov r9, rdi
mov r8, r12
mov rcx, r13
call fcn.14008e000
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x14008e50f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008e50a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008e773
call fcn.1401812c4
xor eax, eax
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], 7
jmp 0x14008e3cf
mov rdx, r12
lea rcx, [rbp - 0x14]
call fcn.14002a570
test al, al
je 0x14008e3d4
xor eax, eax
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], 7
mov word [rsp + 0x38], ax
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rbx + r8*2], ax
jne 0x14008e560
mov rdx, rbx
lea rcx, [rsp + 0x38]
call fcn.140006d70
nop
lea rax, [rbp - 0x14]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x14008e583
lea rdx, [rbp - 0x14]
lea rcx, [rsp + 0x38]
call fcn.140006aa0
lea rdx, [rsp + 0x38]
cmp qword [rsp + 0x50], 8
cmovae rdx, qword [rsp + 0x38]
xor eax, eax
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x70], 7
mov word [rsp + 0x78], ax
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rdx + r8*2], ax
jne 0x14008e5d0
lea rcx, [rsp + 0x78]
call fcn.140006d70
nop
mov rdx, qword [rdi + 8]
cmp qword [rdi + 0x10], rdx
je 0x14008e621
xor eax, eax
mov qword [rdx + 0x10], rax
mov qword [rdx + 0x18], rax
movups xmm0, xmmword [rsp + 0x78]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rbp - 0x78]
movups xmmword [rdx + 0x10], xmm1
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x70], 7
mov word [rsp + 0x78], ax
add qword [rdi + 8], 0x20
jmp 0x14008e62f
lea r8, [rsp + 0x78]
mov rcx, rdi
call fcn.140001d70
nop
mov rdx, qword [rbp - 0x70]
cmp rdx, 8
jb 0x14008e670
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008e66b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008e779
call fcn.1401812c4
xor eax, eax
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x70], 7
mov word [rsp + 0x78], ax
mov rdx, qword [rsp + 0x50]
cmp rdx, 8
jb 0x14008e6c7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008e6c0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008e77f
call fcn.1401812c4
xor eax, eax
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], 7
mov word [rsp + 0x38], ax
jmp 0x14008e3d4
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
mov rdx, qword [rbp - 0x50]
cmp rdx, 8
jb 0x14008e725
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008e720
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008e75b
call fcn.1401812c4
movdqa xmm0, xmmword [0x1401e5030]
movdqu xmmword [rbp - 0x58], xmm0
xor eax, eax
mov word [rbp - 0x68], ax
mov rcx, qword [rbp + 0x210]
xor rcx, rsp
call fcn.1401813e0
add rsp, 0x328
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.1401a2d8c
nop
call fcn.1401a2d8c
nop
call fcn.1401a2d8c
nop
call fcn.1401a2d8c
int3
call fcn.1401a2d8c
nop
call fcn.1401a2d8c
nop
call fcn.1401a2d8c
int3