Function at 0x140002130
Capabilities:
Enumerate files on windows
Enumerate files recursively
Move file

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x250]
sub rsp, 0x350
mov rax, qword [0x140026008]
xor rax, rsp
mov qword [rbp + 0x240], rax
mov r13, r8
mov qword [rbp - 0x78], r8
mov r14, rdx
mov qword [rbp - 0x70], rdx
mov r15, rcx
mov qword [rbp - 0x58], r8
xor edi, edi
mov dword [rbp - 0x80], edi
mov rcx, qword [rcx + 0x10]
movabs rbx, 0x7ffffffffffffffe
mov rax, rbx
sub rax, rcx
cmp rax, 2
jb 0x140002f0f
mov r9, r15
cmp qword [r15 + 0x18], 8
jb 0x1400021a5
mov r9, qword [r15]
mov qword [rsp + 0x30], 2
lea rax, [0x140020c10]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp - 0x30]
call fcn.14000a400
mov esi, 4
lea rcx, [rbp - 0x30]
cmp qword [rbp - 0x18], 8
cmovae rcx, qword [rbp - 0x30]
lea rdx, [rbp - 0x10]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r12, rax
mov qword [rbp - 0x60], rax
cmp rax, 0xffffffffffffffff
jne 0x1400022c1
mov rdx, qword [rbp - 0x18]
cmp rdx, 8
jb 0x140002236
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002231
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002f03
call fcn.14000a830
mov word [rbp - 0x30], di
mov qword [rbp - 0x18], 7
mov qword [rbp - 0x20], rdi
mov rdx, qword [r13 + 0x18]
cmp rdx, 8
jb 0x140002286
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
mov rcx, qword [r13]
jb 0x140002281
mov r8, qword [rcx - 8]
sub rcx, r8
add rdx, 0x27
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140002ef7
mov rcx, r8
call fcn.14000a830
mov qword [r13 + 0x10], rdi
mov qword [r13 + 0x18], 7
mov word [r13], di
mov rcx, qword [rbp + 0x240]
xor rcx, rsp
call fcn.14000a810
mov rbx, qword [rsp + 0x3a8]
add rsp, 0x350
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea rdx, [0x140020c18]
mov rcx, qword [r15 + 0x10]
mov rax, rbx
sub rax, rcx
cmp rax, 1
jb 0x140002f09
mov r9, r15
cmp qword [r15 + 0x18], 8
jb 0x1400022e9
mov r9, qword [r15]
mov qword [rsp + 0x30], 1
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x60]
call fcn.14000a400
or esi, 8
or esi, 1
mov dword [rbp - 0x80], esi
lea rax, [rbp + 0x1c]
mov rdx, 0xffffffffffffffff
nop word [rax + rax]
inc rdx
cmp word [rax + rdx*2], 0
jne 0x140002320
mov rcx, qword [rsp + 0x70]
mov r8, qword [rsp + 0x78]
mov rax, r8
sub rax, rcx
cmp rdx, rax
ja 0x140002377
lea rdi, [rcx + rdx]
mov qword [rsp + 0x70], rdi
lea rbx, [rsp + 0x60]
cmp r8, 8
cmovae rbx, qword [rsp + 0x60]
lea rcx, [rbx + rcx*2]
lea r8, [rdx + rdx]
lea rdx, [rbp + 0x1c]
call fcn.14000ea00
xor eax, eax
mov word [rbx + rdi*2], ax
lea rax, [rsp + 0x60]
xor edi, edi
jmp 0x14000238a
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0x1c]
lea rcx, [rsp + 0x60]
call fcn.14000a540
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 7
mov word [rax], di
or esi, 0x12
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rcx, qword [rsp + 0x40]
mov rdx, r14
call fcn.14000f108
test eax, eax
je 0x1400023f6
lea rdx, str.autorun.inf
lea rcx, [rbp + 0x1c]
call fcn.14000f108
test eax, eax
je 0x1400023f6
lea rdx, str.autorun.exe
lea rcx, [rbp + 0x1c]
call fcn.14000f108
test eax, eax
je 0x1400023f6
mov bl, 1
jmp 0x1400023f8
xor bl, bl
test sil, 2
je 0x140002456
and esi, 0xfffffffd
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x140002443
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000243e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002f15
call fcn.14000a830
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], 7
mov word [rsp + 0x40], di
test sil, 1
je 0x1400024a1
and esi, 0xfffffffe
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x1400024a1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000249c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002f1b
call fcn.14000a830
test bl, bl
je 0x140002e89
mov rcx, qword [r15 + 0x10]
movabs rbx, 0x7ffffffffffffffe
mov rax, rbx
sub rax, rcx
cmp rax, 1
jb 0x140002f7b
mov r9, r15
cmp qword [r15 + 0x18], 8
jb 0x1400024d4
mov r9, qword [r15]
mov qword [rsp + 0x30], 1
lea rax, [0x140020c18]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x60]
call fcn.14000a400
or esi, 0x20
lea rax, [rbp + 0x1c]
mov rdx, 0xffffffffffffffff
inc rdx
cmp word [rax + rdx*2], 0
jne 0x140002506
mov rcx, qword [rsp + 0x70]
mov r8, qword [rsp + 0x78]
mov rax, r8
sub rax, rcx
cmp rdx, rax
ja 0x140002567
lea rdi, [rcx + rdx]
mov qword [rsp + 0x70], rdi
lea rbx, [rsp + 0x60]
cmp r8, 8
cmovae rbx, qword [rsp + 0x60]
lea rcx, [rbx + rcx*2]
lea r8, [rdx + rdx]
lea rdx, [rbp + 0x1c]
call fcn.14000ea00
xor eax, eax
mov word [rbx + rdi*2], ax
lea rax, [rsp + 0x60]
xor edi, edi
movabs rbx, 0x7ffffffffffffffe
jmp 0x14000257a
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0x1c]
lea rcx, [rsp + 0x60]
call fcn.14000a540
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 7
mov word [rax], di
or esi, 0x40
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rcx, qword [rsp + 0x40]
call fcn.140001400
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x1400025f5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400025f0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002f21
call fcn.14000a830
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], 7
mov word [rsp + 0x40], di
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x14000264a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002645
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002f27
call fcn.14000a830
mov rcx, qword [r15 + 0x10]
mov rax, rbx
sub rax, rcx
cmp rax, 1
jb 0x140002f75
mov r9, r15
cmp qword [r15 + 0x18], 8
jb 0x14000266b
mov r9, qword [r15]
mov qword [rsp + 0x30], 1
lea rax, [0x140020c18]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x40]
call fcn.14000a400
bts esi, 7
lea rax, [rbp + 0x1c]
mov rdx, 0xffffffffffffffff
nop
inc rdx
cmp word [rax + rdx*2], 0
jne 0x1400026a0
mov rcx, qword [rsp + 0x50]
mov r8, qword [rsp + 0x58]
mov rax, r8
sub rax, rcx
cmp rdx, rax
ja 0x140002701
lea rdi, [rdx + rcx]
mov qword [rsp + 0x50], rdi
lea rbx, [rsp + 0x40]
cmp r8, 8
cmovae rbx, qword [rsp + 0x40]
lea rcx, [rbx + rcx*2]
lea r8, [rdx + rdx]
lea rdx, [rbp + 0x1c]
call fcn.14000ea00
xor eax, eax
mov word [rbx + rdi*2], ax
lea rax, [rsp + 0x40]
xor edi, edi
movabs rbx, 0x7ffffffffffffffe
jmp 0x140002714
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0x1c]
lea rcx, [rsp + 0x40]
call fcn.14000a540
mov qword [rbp - 0x50], rdi
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x38], rdi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x40], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 7
mov word [rax], di
bts esi, 8
lea rcx, [rbp - 0x50]
cmp qword [rbp - 0x38], 8
cmovae rcx, qword [rbp - 0x50]
call fcn.140001520
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 8
jb 0x140002796
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002791
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002f2d
call fcn.14000a830
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x38], 7
mov word [rbp - 0x50], di
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x1400027e8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400027e3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002f33
call fcn.14000a830
test byte [rbp - 0x10], 0x10
je 0x140002a8a
cmp word [rbp + 0x1c], 0x2e
je 0x140002e89
lea rax, [rsp + 0x40]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rdi
mov rdi, qword [r13 + 0x10]
mov r14, r13
cmp qword [r13 + 0x18], 8
jb 0x140002827
mov r14, qword [r13]
cmp rdi, 8
jae 0x140002844
movups xmm0, xmmword [r14]
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x58], 7
jmp 0x1400028d9
mov rbx, rdi
or rbx, 7
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x140002f45
add rcx, rcx
cmp rcx, 0x1000
jb 0x1400028ae
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140002f45
mov rcx, rax
call fcn.14000a838
mov rcx, rax
test rax, rax
je 0x140002efd
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400028bc
test rcx, rcx
je 0x1400028ba
call fcn.14000a838
jmp 0x1400028bc
xor eax, eax
mov qword [rsp + 0x40], rax
lea r8, [rdi*2 + 2]
mov rdx, r14
mov rcx, rax
call fcn.14000ea00
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x50], rdi
mov rcx, qword [r15 + 0x10]
movabs rax, 0x7ffffffffffffffe
sub rax, rcx
cmp rax, 1
jb 0x140002f3f
mov r9, r15
cmp qword [r15 + 0x18], 8
jb 0x140002906
mov r9, qword [r15]
mov qword [rsp + 0x30], 1
lea rax, [0x140020c18]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp - 0x50]
call fcn.14000a400
bts esi, 9
lea rax, [rbp + 0x1c]
mov rdx, 0xffffffffffffffff
nop dword [rax + rax]
inc rdx
cmp word [rax + rdx*2], 0
jne 0x140002940
mov rcx, qword [rbp - 0x40]
mov r8, qword [rbp - 0x38]
mov rax, r8
sub rax, rcx
cmp rdx, rax
ja 0x14000298f
lea rdi, [rdx + rcx]
mov qword [rbp - 0x40], rdi
lea rbx, [rbp - 0x50]
cmp r8, 8
cmovae rbx, qword [rbp - 0x50]
lea rcx, [rbx + rcx*2]
lea r8, [rdx + rdx]
lea rdx, [rbp + 0x1c]
call fcn.14000ea00
xor eax, eax
mov word [rbx + rdi*2], ax
lea rax, [rbp - 0x50]
jmp 0x1400029a1
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0x1c]
lea rcx, [rbp - 0x50]
call fcn.14000a540
xor edi, edi
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], rdi
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 7
mov word [rax], di
bts esi, 0xa
lea r8, [rsp + 0x40]
mov r14, qword [rbp - 0x70]
mov rdx, r14
lea rcx, [rsp + 0x60]
call fcn.140002130
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x140002a2f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002a2a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002f39
call fcn.14000a830
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], di
mov rdx, qword [rbp - 0x38]
cmp rdx, 8
jb 0x140002e89
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002e84
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002efd
jmp 0x140002e84
mov rcx, qword [r15 + 0x10]
mov rax, rbx
sub rax, rcx
cmp rax, 1
jb 0x140002f6f
mov r9, r15
cmp qword [r15 + 0x18], 8
jb 0x140002aab
mov r9, qword [r15]
mov qword [rsp + 0x30], 1
lea rax, [0x140020c18]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x60]
call fcn.14000a400
bts esi, 0xb
lea rax, [rbp + 0x1c]
mov rdx, 0xffffffffffffffff
nop
inc rdx
cmp word [rax + rdx*2], 0
jne 0x140002ae0
mov rcx, qword [rsp + 0x70]
mov r8, qword [rsp + 0x78]
mov rax, r8
sub rax, rcx
cmp rdx, rax
ja 0x140002b37
lea rdi, [rcx + rdx]
mov qword [rsp + 0x70], rdi
lea rbx, [rsp + 0x60]
cmp r8, 8
cmovae rbx, qword [rsp + 0x60]
lea rcx, [rbx + rcx*2]
lea r8, [rdx + rdx]
lea rdx, [rbp + 0x1c]
call fcn.14000ea00
xor eax, eax
mov word [rbx + rdi*2], ax
lea rax, [rsp + 0x60]
xor edi, edi
jmp 0x140002b4a
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0x1c]
lea rcx, [rsp + 0x60]
call fcn.14000a540
mov qword [rbp - 0x50], rdi
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x38], rdi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x40], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 7
mov word [rax], di
bts esi, 0xc
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x140002bba
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002bb5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002f4b
call fcn.14000a830
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], di
mov rbx, r13
cmp qword [r13 + 0x18], 8
jb 0x140002bdb
mov rbx, qword [r13]
lea rcx, [rbp + 0x1c]
call qword [sym.imp.SHLWAPI.dll_PathFindExtensionW]
mov rcx, rax
mov rdx, rbx
call fcn.14000f108
test eax, eax
je 0x140002e49
lea rdx, [rbp - 0x50]
cmp qword [rbp - 0x38], 8
cmovae rdx, qword [rbp - 0x50]
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], 7
mov word [rsp + 0x40], di
mov r8, 0xffffffffffffffff
inc r8
cmp word [rdx + r8*2], 0
jne 0x140002c25
lea rcx, [rsp + 0x40]
call fcn.14000a280
nop
lea rcx, [rsp + 0x40]
call fcn.140001f30
movzx ebx, al
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x140002c8a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002c85
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002f51
call fcn.14000a830
test bl, bl
je 0x140002e49
mov r12, qword [rbp - 0x40]
mov r13, qword [r13 + 0x10]
movabs rcx, 0x7ffffffffffffffe
mov rax, rcx
sub rax, r12
cmp rax, r13
jb 0x140002f63
lea rdx, [rbp - 0x50]
cmp qword [rbp - 0x38], 8
cmovae rdx, qword [rbp - 0x50]
mov qword [rbp - 0x80], rdx
mov rax, qword [rbp - 0x78]
mov qword [rbp - 0x68], rax
cmp qword [rax + 0x18], 8
jb 0x140002cdb
mov rax, qword [rax]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rdi
lea r14, [r12 + r13]
mov ebx, 7
lea rdi, [rsp + 0x40]
cmp r14, rbx
jbe 0x140002d9b
mov rbx, r14
or rbx, 7
cmp rbx, rcx
jbe 0x140002d12
mov rbx, rcx
jmp 0x140002d1f
cmp rbx, 0xa
mov eax, 0xa
cmovb rbx, rax
mov rax, rbx
add rax, 1
mov rcx, 0xffffffffffffffff
cmovb rax, rcx
movabs rcx, 0x7fffffffffffffff
cmp rax, rcx
ja 0x140002f57
lea rcx, [rax + rax]
cmp rcx, 0x1000
jb 0x140002d81
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140002f57
mov rcx, rax
call fcn.14000a838
test rax, rax
je 0x140002f5d
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
mov rdx, qword [rbp - 0x80]
jmp 0x140002d96
test rcx, rcx
je 0x140002d91
call fcn.14000a838
mov rdx, qword [rbp - 0x80]
jmp 0x140002d93
xor eax, eax
mov rdi, rax
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], rbx
lea rbx, [r12 + r12]
mov r8, rbx
mov rcx, rdi
call fcn.14000ea00
lea rcx, [rbx + rdi]
lea r8, [r13*2]
mov rdx, qword [rbp - 0x68]
call fcn.14000ea00
xor eax, eax
mov word [rdi + r14*2], ax
bts esi, 0xd
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rdx, qword [rsp + 0x40]
lea rcx, [rbp - 0x50]
cmp qword [rbp - 0x38], 8
cmovae rcx, qword [rbp - 0x50]
call qword [sym.imp.KERNEL32.dll_MoveFileW]
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x140002e3b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002e36
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002f5d
call fcn.14000a830
xor edi, edi
mov r14, qword [rbp - 0x70]
mov r12, qword [rbp - 0x60]
mov r13, qword [rbp - 0x78]
mov rdx, qword [rbp - 0x38]
cmp rdx, 8
jb 0x140002e89
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002e84
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002f69
call fcn.14000a830
lea rdx, [rbp - 0x10]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x140002ea9
movabs rbx, 0x7ffffffffffffffe
jmp 0x1400022c1
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 8
jb 0x140002236
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002231
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002f03
jmp 0x140002231
call fcn.14000f900
nop
call fcn.14000f900
nop
call fcn.14000f900
nop
call fcn.1400011a0
nop
call fcn.1400011a0
nop
call fcn.14000f900
nop
call fcn.14000f900
nop
call fcn.14000f900
nop
call fcn.14000f900
nop
call fcn.14000f900
nop
call fcn.14000f900
nop
call fcn.14000f900
nop
call fcn.1400011a0
nop
call fcn.140001100
nop
call fcn.14000f900
int3
call fcn.14000f900
int3
call fcn.140001100
int3
call fcn.14000f900
int3
call fcn.1400011a0
nop
call fcn.14000f900
int3
call fcn.1400011a0
int3
call fcn.1400011a0
int3
call fcn.1400011a0
int3