Function at 0x14002b800
Capabilities:
Enumerate files on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x278
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x1e0], xmm6
mov qword [rbp + 0x1d8], 0xfffffffffffffffe
mov rsi, r8
mov r8, rdx
mov r14, rcx
lea rdx, [rbp + 0x110]
mov qword [rbp + 0x160], r8
call fcn.14003b980
cmp qword [rbp + 0x130], 0x10
jb 0x14002b85c
mov rcx, qword [rbp + 0x118]
jmp 0x14002b863
lea rcx, [rbp + 0x118]
lea rdx, [rbp - 0x58]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov qword [rbp + 0x168], rax
cmp rax, 0xffffffffffffffff
je 0x14002bcff
lea r13, [rbp + 0x190]
lea rax, [r14 + 8]
mov qword [rbp + 0x170], rax
lea rdi, [rbp + 0x188]
lea rbx, [rbp + 0xe8]
xorps xmm6, xmm6
jmp 0x14002b913
mov rcx, rsi
mov rdx, rdi
lea r8, [rbp + 0x188]
call fcn.14002c110
lea rcx, [rbp + 0x1b0]
call fcn.14003d790
lea rdi, [rbp + 0x188]
mov rcx, rdi
call fcn.14003d790
lea rcx, [rbp + 0x138]
call fcn.14003d790
mov rcx, qword [rbp + 0x168]
lea rdx, [rbp - 0x58]
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
lea r13, [rbp + 0x190]
mov r14, rbx
lea rbx, [rbp + 0xe8]
je 0x14002bcff
mov rcx, qword [rbp + 0x160]
mov rdx, rdi
call fcn.14003c0c0
mov rcx, rbx
lea rdx, [rbp - 0x2c]
call fcn.14003bba0
mov rcx, rdi
lea rdx, [rbp + 0x138]
mov r8, rbx
call fcn.14003b980
mov rcx, rbx
call fcn.14003d790
mov rcx, rdi
call fcn.14003d790
lea rax, vtable.UtPathname.0
mov qword [rbp + 0x188], rax
movups xmmword [r13 + 0x10], xmm6
movups xmmword [r13], xmm6
cmp qword [r14 + 0x20], 0x10
mov rdi, qword [rbp + 0x170]
jb 0x14002b97a
mov rdi, qword [r14 + 8]
mov rbx, r14
mov r14, qword [r14 + 0x18]
test r14, r14
js 0x14002bd26
cmp r14, 0xf
ja 0x14002b9b0
mov qword [rbp + 0x1a0], r14
mov qword [rbp + 0x1a8], 0xf
movups xmm0, xmmword [rdi]
movups xmmword [r13], xmm0
jmp 0x14002ba2c
mov qword [rbp + 0x1a8], 0xf
mov r12, r14
or r12, 0xf
cmp r12, 0x17
mov r15d, 0x16
cmovae r15, r12
cmp r15, 0xfff
jb 0x14002ba00
add r15, 0x28
mov rcx, r15
call fcn.140117ae8
mov rcx, rax
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
mov r15, r12
jmp 0x14002ba09
lea rcx, [r15 + 1]
call fcn.140117ae8
mov qword [r13], rax
mov qword [rbp + 0x1a0], r14
mov qword [rbp + 0x1a8], r15
inc r14
mov rcx, rax
mov rdx, rdi
mov r8, r14
call fcn.1400adb90
lea rax, vtable.UtDirname.0
mov qword [rbp + 0x188], rax
lea rax, vtable.UtPathname.0
mov qword [rbp + 0x1b0], rax
lea rax, [rbp + 0x1b8]
movups xmmword [rax + 0x10], xmm6
movups xmmword [rax], xmm6
mov rdi, qword [rbp + 0x150]
cmp qword [rbp + 0x158], 0x10
lea r14, [rbp + 0x140]
jb 0x14002ba75
mov r14, qword [rbp + 0x140]
test rdi, rdi
js 0x14002bd2b
cmp rdi, 0xf
ja 0x14002bab0
mov qword [rbp + 0x1c8], rdi
mov qword [rbp + 0x1d0], 0xf
movups xmm0, xmmword [r14]
movups xmmword [rax], xmm0
jmp 0x14002bb2f
mov qword [rbp + 0x1d0], 0xf
mov r12, rdi
or r12, 0xf
cmp r12, 0x17
mov r15d, 0x16
cmovae r15, r12
cmp r15, 0xfff
jb 0x14002bb00
add r15, 0x28
mov rcx, r15
call fcn.140117ae8
mov rcx, rax
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
mov r15, r12
jmp 0x14002bb09
lea rcx, [r15 + 1]
call fcn.140117ae8
mov qword [rbp + 0x1b8], rax
mov qword [rbp + 0x1c8], rdi
mov qword [rbp + 0x1d0], r15
inc rdi
mov rcx, rax
mov rdx, r14
mov r8, rdi
call fcn.1400adb90
lea rax, vtable.UtFilename.0
mov qword [rbp + 0x1b0], rax
mov rdi, qword [rsi + 8]
cmp rdi, qword [rsi + 0x10]
je 0x14002b8b0
lea rax, vtable.UtPathname.0
mov qword [rdi], rax
movups xmmword [rdi + 8], xmm6
movups xmmword [rdi + 0x18], xmm6
cmp qword [rbp + 0x1a8], 0x10
mov r14, r13
jb 0x14002bb71
mov r14, qword [rbp + 0x190]
mov r15, qword [rbp + 0x1a0]
test r15, r15
js 0x14002bd30
cmp r15, 0xf
ja 0x14002bba0
lea rax, [rdi + 8]
mov qword [rdi + 0x18], r15
mov qword [rdi + 0x20], 0xf
movups xmm0, xmmword [r14]
movups xmmword [rax], xmm0
jmp 0x14002bc0c
mov qword [rdi + 0x20], 0xf
mov r12, r15
or r12, 0xf
cmp r12, 0x17
mov r13d, 0x16
cmovae r13, r12
cmp r13, 0xfff
jb 0x14002bbe6
add r13, 0x28
mov rcx, r13
call fcn.140117ae8
mov rcx, rax
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
mov r13, r12
jmp 0x14002bbef
lea rcx, [r13 + 1]
call fcn.140117ae8
mov qword [rdi + 8], rax
mov qword [rdi + 0x18], r15
mov qword [rdi + 0x20], r13
inc r15
mov rcx, rax
mov rdx, r14
mov r8, r15
call fcn.1400adb90
lea rax, vtable.UtDirname.0
mov qword [rdi], rax
lea rax, vtable.UtPathname.0
mov qword [rdi + 0x28], rax
movups xmmword [rdi + 0x30], xmm6
movups xmmword [rdi + 0x40], xmm6
mov r15, qword [rbp + 0x1c8]
cmp qword [rbp + 0x1d0], 0x10
lea r14, [rbp + 0x1b8]
jb 0x14002bc48
mov r14, qword [rbp + 0x1b8]
test r15, r15
js 0x14002bd35
cmp r15, 0xf
ja 0x14002bc70
lea rax, [rdi + 0x30]
mov qword [rdi + 0x40], r15
mov qword [rdi + 0x48], 0xf
movups xmm0, xmmword [r14]
movups xmmword [rax], xmm0
jmp 0x14002bcea
mov qword [rdi + 0x48], 0xf
mov r12, r15
or r12, 0xf
cmp r12, 0x17
mov r13d, 0x16
cmovae r13, r12
cmp r13, 0xfff
jb 0x14002bcbd
add r13, 0x28
mov qword [rbp + 0x180], rdi
mov rcx, r13
call fcn.140117ae8
mov rcx, rax
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
mov r13, r12
jmp 0x14002bccd
lea rcx, [r13 + 1]
mov qword [rbp + 0x180], rdi
call fcn.140117ae8
mov qword [rdi + 0x30], rax
mov qword [rdi + 0x40], r15
mov qword [rdi + 0x48], r13
inc r15
mov rcx, rax
mov rdx, r14
mov r8, r15
call fcn.1400adb90
lea rax, vtable.UtFilename.0
mov qword [rdi + 0x28], rax
add qword [rsi + 8], 0x50
jmp 0x14002b8c2
lea rcx, [rbp + 0x110]
call fcn.14003d790
movaps xmm6, xmmword [rbp + 0x1e0]
add rsp, 0x278
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
call fcn.140003290
call fcn.140003290
call fcn.140003290
mov qword [rbp + 0x178], rdi
call fcn.140003290
int3