Function at 0x14002d220
Capabilities:
Enumerate files on windows

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r14
lea rbp, [rsp - 0x3f0]
sub rsp, 0x4f0
mov rax, qword [0x1400db800]
xor rax, rsp
mov qword [rbp + 0x3e0], rax
mov rsi, rdx
mov rbx, r8
mov edx, reloc.OLEAUT32.dll_SafeArrayGetDim
call qword [sym.imp.USER32.dll_GetWindowLongPtrW]
lea r8, [rbp + 0x1d0]
mov edx, 0x104
sub rax, r8
lea rcx, [rbp + 0x1d0]
lea r8, [rax + 0x74]
nop dword [rax]
lea rax, [rdx + 0x7ffffefa]
test rax, rax
je 0x14002d2a3
movzx eax, word [r8 + rcx]
test ax, ax
je 0x14002d2a3
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x14002d280
test rdx, rdx
lea rax, [rcx - 2]
cmovne rax, rcx
xor r14d, r14d
lea rcx, [rbp + 0x1d0]
mov word [rax], r14w
lea rax, [rbp + 0x1d0]
movzx edx, word [rbp + 0x1d0]
test dx, dx
je 0x14002d2f1
nop
cmp dx, 0x5c
je 0x14002d2e2
cmp dx, 0x2f
je 0x14002d2e2
add rax, 2
jmp 0x14002d2e9
add rax, 2
mov rcx, rax
movzx edx, word [rax]
test dx, dx
jne 0x14002d2d0
mov r8, rbx
mov edx, 0x40
sub r8, rcx
nop dword [rax]
lea rax, [rdx + 0x7fffffbe]
test rax, rax
je 0x14002d323
movzx eax, word [r8 + rcx]
test ax, ax
je 0x14002d323
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x14002d300
test rdx, rdx
lea rax, [rcx - 2]
lea rdx, [rbp - 0x80]
cmovne rax, rcx
lea rcx, [rbp + 0x1d0]
mov word [rax], r14w
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x14002d4e2
test byte [rbp - 0x80], 0x10
jne 0x14002d4c4
movzx ecx, word [rbx]
xorps xmm0, xmm0
xor eax, eax
mov r8, rbx
mov qword [rsp + 0x70], rax
lea rax, [rbp + 0x1d0]
movups xmmword [rsp + 0x20], xmm0
mov dword [rsp + 0x24], 0x7fffffff
mov dword [rsp + 0x20], 3
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x38], rax
mov rax, rbx
movups xmmword [rsp + 0x40], xmm0
movups xmmword [rsp + 0x50], xmm0
movups xmmword [rsp + 0x60], xmm0
test cx, cx
je 0x14002d436
nop dword [rax + rax]
cmp cx, 0x5c
je 0x14002d3c2
cmp cx, 0x2f
je 0x14002d3c2
add rax, 2
jmp 0x14002d3c9
add rax, 2
mov r8, rax
movzx ecx, word [rax]
test cx, cx
jne 0x14002d3b0
cmp r8, rbx
jbe 0x14002d436
sub r8, rbx
sar r8, 1
cmp r8, 0x7ffffffe
ja 0x14002d436
lea r9, [r8 - 0x104]
mov edx, 0x104
mov r8, rbx
lea rax, [rbp + 0x1d0]
sub r8, rax
lea rcx, [rbp + 0x1d0]
lea rax, [r9 + rdx]
test rax, rax
je 0x14002d425
movzx eax, word [r8 + rcx]
test ax, ax
je 0x14002d425
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x14002d405
test rdx, rdx
lea rax, [rcx - 2]
cmovne rax, rcx
mov word [rax], r14w
jmp 0x14002d43e
mov word [rbp + 0x1d0], r14w
lea r8, [rbp - 0x54]
mov edx, 0x104
lea rcx, [rbp + 0x1d0]
call fcn.140005a80
lea r9, [rsp + 0x20]
xor r8d, r8d
mov edx, 0x104d
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9d, dword [rbp - 0x64]
lea r8, str._u_KiB
inc dword [rsp + 0x28]
lea rcx, [rbp + 0x1d0]
mov dword [rsp + 0x24], eax
mov edx, 0x104
lea rax, [rbp + 0x1d0]
shl r9, 0x16
mov qword [rsp + 0x38], rax
mov eax, dword [rbp - 0x60]
shr eax, 0xa
or r9d, eax
mov dword [rsp + 0x20], 1
call fcn.140001040
lea r9, [rsp + 0x20]
xor r8d, r8d
mov edx, 0x104c
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rdx, [rbp - 0x80]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x14002d350
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rcx, qword [rbp + 0x3e0]
xor rcx, rsp
call fcn.140094850
lea r11, [rsp + 0x4f0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret