Function at 0x14002ebd0
Capabilities:
Enumerate files on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x278
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x1e0], xmm6
mov qword [rbp + 0x1d8], 0xfffffffffffffffe
mov rsi, r8
mov r8, rdx
mov r14, rcx
lea rdx, [rbp + 0x110]
mov qword [rbp + 0x160], r8
call fcn.14003b980
cmp qword [rbp + 0x130], 0x10
jb 0x14002ec2c
mov rcx, qword [rbp + 0x118]
jmp 0x14002ec33
lea rcx, [rbp + 0x118]
lea rdx, [rbp - 0x58]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov qword [rbp + 0x168], rax
cmp rax, 0xffffffffffffffff
je 0x14002f0cf
lea r13, [rbp + 0x190]
lea rax, [r14 + 8]
mov qword [rbp + 0x170], rax
lea rdi, [rbp + 0x188]
lea rbx, [rbp + 0xe8]
xorps xmm6, xmm6
jmp 0x14002ece3
mov rcx, rsi
mov rdx, rdi
lea r8, [rbp + 0x188]
call fcn.14002c110
lea rcx, [rbp + 0x1b0]
call fcn.14003d790
lea rdi, [rbp + 0x188]
mov rcx, rdi
call fcn.14003d790
lea rcx, [rbp + 0x138]
call fcn.14003d790
mov rcx, qword [rbp + 0x168]
lea rdx, [rbp - 0x58]
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
lea r13, [rbp + 0x190]
mov r14, rbx
lea rbx, [rbp + 0xe8]
je 0x14002f0cf
mov rcx, qword [rbp + 0x160]
mov rdx, rdi
call fcn.14003c0c0
mov rcx, rbx
lea rdx, [rbp - 0x2c]
call fcn.14003bba0
mov rcx, rdi
lea rdx, [rbp + 0x138]
mov r8, rbx
call fcn.14003b980
mov rcx, rbx
call fcn.14003d790
mov rcx, rdi
call fcn.14003d790
lea rax, vtable.UtPathname.0
mov qword [rbp + 0x188], rax
movups xmmword [r13 + 0x10], xmm6
movups xmmword [r13], xmm6
cmp qword [r14 + 0x20], 0x10
mov rdi, qword [rbp + 0x170]
jb 0x14002ed4a
mov rdi, qword [r14 + 8]
mov rbx, r14
mov r14, qword [r14 + 0x18]
test r14, r14
js 0x14002f0f6
cmp r14, 0xf
ja 0x14002ed80
mov qword [rbp + 0x1a0], r14
mov qword [rbp + 0x1a8], 0xf
movups xmm0, xmmword [rdi]
movups xmmword [r13], xmm0
jmp 0x14002edfc
mov qword [rbp + 0x1a8], 0xf
mov r12, r14
or r12, 0xf
cmp r12, 0x17
mov r15d, 0x16
cmovae r15, r12
cmp r15, 0xfff
jb 0x14002edd0
add r15, 0x28
mov rcx, r15
call fcn.140117ae8
mov rcx, rax
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
mov r15, r12
jmp 0x14002edd9
lea rcx, [r15 + 1]
call fcn.140117ae8
mov qword [r13], rax
mov qword [rbp + 0x1a0], r14
mov qword [rbp + 0x1a8], r15
inc r14
mov rcx, rax
mov rdx, rdi
mov r8, r14
call fcn.1400adb90
lea rax, vtable.UtDirname.0
mov qword [rbp + 0x188], rax
lea rax, vtable.UtPathname.0
mov qword [rbp + 0x1b0], rax
lea rax, [rbp + 0x1b8]
movups xmmword [rax + 0x10], xmm6
movups xmmword [rax], xmm6
mov rdi, qword [rbp + 0x150]
cmp qword [rbp + 0x158], 0x10
lea r14, [rbp + 0x140]
jb 0x14002ee45
mov r14, qword [rbp + 0x140]
test rdi, rdi
js 0x14002f0fb
cmp rdi, 0xf
ja 0x14002ee80
mov qword [rbp + 0x1c8], rdi
mov qword [rbp + 0x1d0], 0xf
movups xmm0, xmmword [r14]
movups xmmword [rax], xmm0
jmp 0x14002eeff
mov qword [rbp + 0x1d0], 0xf
mov r12, rdi
or r12, 0xf
cmp r12, 0x17
mov r15d, 0x16
cmovae r15, r12
cmp r15, 0xfff
jb 0x14002eed0
add r15, 0x28
mov rcx, r15
call fcn.140117ae8
mov rcx, rax
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
mov r15, r12
jmp 0x14002eed9
lea rcx, [r15 + 1]
call fcn.140117ae8
mov qword [rbp + 0x1b8], rax
mov qword [rbp + 0x1c8], rdi
mov qword [rbp + 0x1d0], r15
inc rdi
mov rcx, rax
mov rdx, r14
mov r8, rdi
call fcn.1400adb90
lea rax, vtable.UtFilename.0
mov qword [rbp + 0x1b0], rax
mov rdi, qword [rsi + 8]
cmp rdi, qword [rsi + 0x10]
je 0x14002ec80
lea rax, vtable.UtPathname.0
mov qword [rdi], rax
movups xmmword [rdi + 8], xmm6
movups xmmword [rdi + 0x18], xmm6
cmp qword [rbp + 0x1a8], 0x10
mov r14, r13
jb 0x14002ef41
mov r14, qword [rbp + 0x190]
mov r15, qword [rbp + 0x1a0]
test r15, r15
js 0x14002f100
cmp r15, 0xf
ja 0x14002ef70
lea rax, [rdi + 8]
mov qword [rdi + 0x18], r15
mov qword [rdi + 0x20], 0xf
movups xmm0, xmmword [r14]
movups xmmword [rax], xmm0
jmp 0x14002efdc
mov qword [rdi + 0x20], 0xf
mov r12, r15
or r12, 0xf
cmp r12, 0x17
mov r13d, 0x16
cmovae r13, r12
cmp r13, 0xfff
jb 0x14002efb6
add r13, 0x28
mov rcx, r13
call fcn.140117ae8
mov rcx, rax
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
mov r13, r12
jmp 0x14002efbf
lea rcx, [r13 + 1]
call fcn.140117ae8
mov qword [rdi + 8], rax
mov qword [rdi + 0x18], r15
mov qword [rdi + 0x20], r13
inc r15
mov rcx, rax
mov rdx, r14
mov r8, r15
call fcn.1400adb90
lea rax, vtable.UtDirname.0
mov qword [rdi], rax
lea rax, vtable.UtPathname.0
mov qword [rdi + 0x28], rax
movups xmmword [rdi + 0x30], xmm6
movups xmmword [rdi + 0x40], xmm6
mov r15, qword [rbp + 0x1c8]
cmp qword [rbp + 0x1d0], 0x10
lea r14, [rbp + 0x1b8]
jb 0x14002f018
mov r14, qword [rbp + 0x1b8]
test r15, r15
js 0x14002f105
cmp r15, 0xf
ja 0x14002f040
lea rax, [rdi + 0x30]
mov qword [rdi + 0x40], r15
mov qword [rdi + 0x48], 0xf
movups xmm0, xmmword [r14]
movups xmmword [rax], xmm0
jmp 0x14002f0ba
mov qword [rdi + 0x48], 0xf
mov r12, r15
or r12, 0xf
cmp r12, 0x17
mov r13d, 0x16
cmovae r13, r12
cmp r13, 0xfff
jb 0x14002f08d
add r13, 0x28
mov qword [rbp + 0x180], rdi
mov rcx, r13
call fcn.140117ae8
mov rcx, rax
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
mov r13, r12
jmp 0x14002f09d
lea rcx, [r13 + 1]
mov qword [rbp + 0x180], rdi
call fcn.140117ae8
mov qword [rdi + 0x30], rax
mov qword [rdi + 0x40], r15
mov qword [rdi + 0x48], r13
inc r15
mov rcx, rax
mov rdx, r14
mov r8, r15
call fcn.1400adb90
lea rax, vtable.UtFilename.0
mov qword [rdi + 0x28], rax
add qword [rsi + 8], 0x50
jmp 0x14002ec92
lea rcx, [rbp + 0x110]
call fcn.14003d790
movaps xmm6, xmmword [rbp + 0x1e0]
add rsp, 0x278
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
call fcn.140003290
call fcn.140003290
call fcn.140003290
mov qword [rbp + 0x178], rdi
call fcn.140003290
int3