Function at 0x140023270
Capabilities:
Enumerate files on windows

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x360]
sub rsp, 0x460
mov rax, qword [0x1401198e8]
xor rax, rsp
mov qword [rbp + 0x350], rax
movzx ebx, r8b
mov byte [rsp + 0x30], bl
mov qword [rbp], rdx
xor eax, eax
mov dword [rsp + 0x34], eax
xorps xmm0, xmm0
movups xmmword [rbp + 0x98], xmm0
mov qword [rbp + 0xa8], rax
mov qword [rbp + 0xb0], rax
mov rdi, 0xffffffffffffffff
mov r8, rdi
inc r8
cmp word [rcx + r8*2], ax
jne 0x1400232d4
mov rdx, rcx
lea rcx, [rbp + 0x98]
call fcn.140003860
nop
lea rax, [0x1400f1b38]
lea rsi, str.AutorunsDisabled
test bl, bl
cmovne rsi, rax
inc rdi
cmp word [rsi + rdi*2], 0
jne 0x140023302
movabs rdx, 0x7ffffffffffffffe
mov rax, rdx
mov rcx, qword [rbp + 0xa8]
sub rax, rcx
cmp rax, rdi
jb 0x140024091
lea r12, [rbp + 0x98]
mov r13, qword [rbp + 0xb0]
cmp r13, 8
cmovae r12, qword [rbp + 0x98]
xorps xmm0, xmm0
movups xmmword [rbp + 0x78], xmm0
lea r15, [rcx + rdi]
mov ebx, 7
lea r14, [rbp + 0x78]
lea eax, [rbx + 3]
cmp r15, rbx
jbe 0x1400233a3
mov rbx, r15
or rbx, 7
cmp rbx, rdx
jbe 0x140023373
mov rbx, rdx
jmp 0x14002337a
cmp rbx, rax
cmovb rbx, rax
mov rdx, rbx
add rdx, 1
mov rax, 0xffffffffffffffff
cmovb rdx, rax
lea rcx, [rbp + 0x78]
call fcn.1400037f0
mov r14, rax
mov qword [rbp + 0x78], rax
mov rcx, qword [rbp + 0xa8]
mov qword [rbp + 0x88], r15
mov qword [rbp + 0x90], rbx
lea rbx, [rcx + rcx]
mov r8, rbx
mov rdx, r12
mov rcx, r14
call fcn.14009d3c0
lea rcx, [rbx + r14]
lea r8, [rdi + rdi]
mov rdx, rsi
call fcn.14009d3c0
xor ecx, ecx
mov word [r14 + r15*2], cx
movabs rdx, 0x7ffffffffffffffe
mov rax, rdx
mov r15, qword [rbp + 0x88]
sub rax, r15
cmp rax, 2
jb 0x140024097
lea r12, [rbp + 0x78]
mov rdi, qword [rbp + 0x90]
cmp rdi, 8
setae byte [rsp + 0x31]
cmovae r12, qword [rbp + 0x78]
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], rcx
mov qword [rbp - 0x50], rcx
lea r14, [r15 + 2]
mov ebx, 7
lea rsi, [rbp - 0x68]
cmp r14, rbx
jbe 0x140023475
mov rbx, r14
or rbx, 7
cmp rbx, rdx
jbe 0x140023446
mov rbx, rdx
jmp 0x140023453
cmp rbx, 0xa
mov eax, 0xa
cmovb rbx, rax
mov rdx, rbx
add rdx, 1
mov rax, 0xffffffffffffffff
cmovb rdx, rax
lea rcx, [rbp - 0x68]
call fcn.1400037f0
mov rsi, rax
mov qword [rbp - 0x68], rax
mov qword [rbp - 0x58], r14
mov qword [rbp - 0x50], rbx
lea rbx, [r15 + r15]
mov r8, rbx
mov rdx, r12
mov rcx, rsi
call fcn.14009d3c0
mov ecx, dword [0x1400f4f30]
mov dword [rsi + rbx], ecx
xor r12d, r12d
mov word [rsi + r14*2], r12w
mov eax, 6
mov dword [rsp + 0x34], eax
lea rcx, [rbp - 0x68]
cmp qword [rbp - 0x50], 8
cmovae rcx, qword [rbp - 0x68]
lea rdx, [rbp + 0x100]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rbx, rax
mov qword [rbp - 0x70], rax
mov rdx, qword [rbp - 0x50]
cmp rdx, 8
jb 0x14002350b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140023506
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002409d
call fcn.14009bfe4
mov qword [rbp - 0x58], r12
mov qword [rbp - 0x50], 7
mov word [rbp - 0x68], r12w
cmp rbx, 0xffffffffffffffff
jne 0x140023529
xor bl, bl
jmp 0x140023fae
movzx ebx, byte [rsp + 0x30]
movzx edi, byte [rsp + 0x30]
mov rsi, qword [rbp - 0x70]
nop word [rax + rax]
movzx ecx, word [rbp + 0x12c]
movzx eax, word [rbp + 0x12e]
cmp cx, 0x2e
jne 0x140023575
test ax, ax
je 0x140023f7d
cmp cx, cx
jne 0x140023575
cmp ax, cx
jne 0x140023575
cmp word [rbp + 0x130], 0
je 0x140023f7d
lea rdx, [0x14011a51a]
lea rcx, [rbp + 0x12c]
call fcn.1400b0f10
test eax, eax
je 0x140023f7d
lea rdx, str.desktop.ini
lea rcx, [rbp + 0x12c]
call fcn.1400b0f10
test eax, eax
je 0x140023f7d
movabs rcx, 0x7ffffffffffffffe
mov rax, rcx
sub rax, r15
cmp rax, 1
jb 0x1400240eb
lea r13, [rbp + 0x78]
cmp byte [rsp + 0x31], 0
cmovne r13, qword [rbp + 0x78]
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x50], r12
lea r12, [r15 + 1]
mov esi, 7
lea r14, [rsp + 0x38]
cmp r12, rsi
jbe 0x14002363a
mov rsi, r12
or rsi, 7
cmp rsi, rcx
jbe 0x140023609
mov rsi, rcx
jmp 0x140023616
cmp rsi, 0xa
mov eax, 0xa
cmovb rsi, rax
mov rdx, rsi
add rdx, 1
mov rax, 0xffffffffffffffff
cmovb rdx, rax
lea rcx, [rsp + 0x38]
call fcn.1400037f0
mov r14, rax
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x50], rsi
lea rsi, [r15 + r15]
mov r8, rsi
mov rdx, r13
mov rcx, r14
call fcn.14009d3c0
mov ecx, dword [0x1400eff20]
mov word [r14 + rsi], cx
xor r13d, r13d
mov word [r14 + r12*2], r13w
lea rax, [rbp + 0x12c]
mov r14, 0xffffffffffffffff
nop word [rax + rax]
inc r14
cmp word [rax + r14*2], 0
jne 0x140023680
mov r15, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
sub rax, r15
cmp r14, rax
ja 0x1400236dc
lea rax, [r15 + r14]
mov qword [rsp + 0x48], rax
lea rsi, [rsp + 0x38]
cmp rcx, 8
cmovae rsi, qword [rsp + 0x38]
lea rcx, [rsi + r15*2]
lea r8, [r14 + r14]
lea rdx, [rbp + 0x12c]
call fcn.14009d3c0
lea rax, [r15 + r14]
mov word [rsi + rax*2], r13w
lea rax, [rsp + 0x38]
jmp 0x1400236f9
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0x12c]
movzx r8d, bl
mov rdx, r14
lea rcx, [rsp + 0x38]
call fcn.140007950
xorps xmm0, xmm0
movups xmmword [rbp + 0x48], xmm0
mov qword [rbp + 0x58], r13
mov qword [rbp + 0x60], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x58], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 7
mov word [rax], r13w
or dword [rsp + 0x34], 0x30
mov rdx, qword [rsp + 0x50]
cmp rdx, 8
jb 0x14002376e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140023769
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400240a9
call fcn.14009bfe4
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], 7
mov word [rsp + 0x38], r13w
xorps xmm0, xmm0
movups xmmword [rbp + 0xb8], xmm0
mov qword [rbp + 0xc8], r13
mov qword [rbp + 0xd0], r13
mov rsi, qword [rbp + 0x58]
lea r14, [rbp + 0x48]
cmp qword [rbp + 0x60], 8
cmovae r14, qword [rbp + 0x48]
movabs r12, 0x7ffffffffffffffe
cmp rsi, r12
ja 0x1400240e5
cmp rsi, 8
jae 0x1400237ee
mov qword [rbp + 0xc8], rsi
mov eax, 7
mov qword [rbp - 0x78], rax
mov qword [rbp + 0xd0], rax
movups xmm0, xmmword [r14]
movups xmmword [rbp + 0xb8], xmm0
movq qword [rbp - 0x28], xmm0
jmp 0x140023862
mov r15, rsi
or r15, 7
cmp r15, r12
jbe 0x140023803
mov r15, r12
mov qword [rbp - 0x78], r12
jmp 0x140023814
cmp r15, 0xa
mov eax, 0xa
cmovb r15, rax
mov qword [rbp - 0x78], r15
mov rdx, r15
add rdx, 1
mov rax, 0xffffffffffffffff
cmovb rdx, rax
lea rcx, [rbp + 0xb8]
call fcn.1400037f0
mov qword [rbp - 0x28], rax
mov qword [rbp + 0xb8], rax
mov qword [rbp + 0xc8], rsi
mov qword [rbp + 0xd0], r15
lea r8, [rsi*2 + 2]
mov rdx, r14
mov rcx, rax
call fcn.14009d3c0
mov rsi, qword [rbp + 0x58]
mov edx, 0x14
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x140135d04], eax
jg 0x14002405a
jmp 0x140023888
mov rsi, qword [rbp + 0x58]
mov r13, qword [0x14011a5b8]
cmp rsi, r13
jb 0x1400239c8
mov rcx, rsi
sub rcx, r13
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
cmp rsi, rcx
jb 0x1400240b5
sub rsi, rcx
mov r14, 0xffffffffffffffff
cmp rsi, r14
cmovb r14, rsi
lea rax, [rbp + 0x48]
cmp qword [rbp + 0x60], 8
cmovae rax, qword [rbp + 0x48]
lea rax, [rax + rcx*2]
mov qword [rsp + 0x58], rax
cmp r14, r12
ja 0x1400240af
cmp r14, 8
jae 0x140023919
mov qword [rbp - 0x38], r14
mov qword [rbp - 0x30], 7
lea rsi, [r14 + r14]
mov r8, rsi
mov rdx, rax
lea rcx, [rbp - 0x48]
call fcn.14009d3c0
xor ecx, ecx
mov word [rbp + rsi - 0x48], cx
mov r15, qword [rbp - 0x30]
mov r14, qword [rbp - 0x38]
mov r12, qword [rbp - 0x48]
jmp 0x140023975
mov r15, r14
or r15, 7
cmp r15, r12
jbe 0x14002392a
mov r15, r12
jmp 0x140023937
cmp r15, 0xa
mov eax, 0xa
cmovb r15, rax
lea rdx, [r15 + 1]
lea rcx, [rbp - 0x48]
call fcn.1400037f0
mov r12, rax
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x38], r14
mov qword [rbp - 0x30], r15
lea rsi, [r14 + r14]
mov r8, rsi
mov rdx, qword [rsp + 0x58]
mov rcx, rax
call fcn.14009d3c0
xor ecx, ecx
mov word [rsi + r12], cx
mov r13, qword [0x14011a5b8]
or dword [rsp + 0x34], 0x41
lea rcx, str..lnk
cmp qword [reloc.OLEAUT32.dll_VariantInit], 8
cmovae rcx, qword [str..lnk]
lea rdx, [rbp - 0x48]
cmp r15, 8
cmovae rdx, r12
cmp r14, r13
jne 0x1400239d0
test r14, r14
je 0x1400239c3
sub rdx, rcx
nop word [rax + rax]
movzx eax, word [rcx + rdx]
cmp ax, word [rcx]
jne 0x1400239d0
add rcx, 2
sub r14, 1
jne 0x1400239b0
mov sil, 1
jmp 0x1400239d3
mov r15, qword [rbp - 0x30]
mov r12, qword [rbp - 0x48]
xor sil, sil
mov r13d, dword [rsp + 0x34]
test r13b, 1
je 0x140023a1e
and r13d, 0xfffffffe
cmp r15, 8
jb 0x140023a1e
lea rdx, [r15*2 + 2]
mov rax, r12
cmp rdx, 0x1000
jb 0x140023a16
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400240bb
mov rcx, r12
call fcn.14009bfe4
test sil, sil
je 0x140023ab5
lea rdx, [rbp + 0x48]
cmp qword [rbp + 0x60], 8
cmovae rdx, qword [rbp + 0x48]
lea rcx, [rbp + 0xd8]
call fcn.14002d5b0
nop
mov r8, qword [rbp + 0xe8]
test r8, r8
je 0x140023a6f
lea rdx, [rbp + 0xd8]
cmp qword [rbp + 0xf0], 8
cmovae rdx, qword [rbp + 0xd8]
lea rcx, [rbp + 0x48]
call fcn.140003510
nop
mov rdx, qword [rbp + 0xf0]
cmp rdx, 8
jb 0x140023ab5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140023ab0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400240bb
call fcn.14009bfe4
mov ecx, 0x148
call fcn.14009bfa8
mov r14, rax
mov qword [rsp + 0x58], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
lea rax, vtable.std::_Ref_count_obj2_struct_AutorunsEntry_.0
mov qword [r14], rax
lea rsi, [r14 + 0x10]
xor edx, edx
mov r8d, 0x138
mov rcx, rsi
call fcn.14009e880
mov rcx, rsi
call fcn.140007090
xorps xmm0, xmm0
movups xmmword [rbp + 0x68], xmm0
or r13d, 8
mov dword [rsp + 0x34], r13d
mov qword [rbp + 0x68], rsi
mov qword [rbp + 0x70], r14
test byte [rbp + 0x100], 0x10
jne 0x140023d86
movups xmmword [rbp + 8], xmm0
mov qword [rbp + 0x18], 1
mov qword [rbp + 0x20], 7
mov eax, dword [0x1400f4b34]
mov word [rbp + 8], ax
xor r12d, r12d
mov word [rbp + 0xa], r12w
lea rdx, [rbp + 0x48]
cmp qword [rbp + 0x60], 8
cmovae rdx, qword [rbp + 0x48]
mov r8, qword [rbp + 0x58]
lea rcx, [rbp + 8]
call fcn.140006fe0
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r12
mov qword [rbp - 0x80], r12
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x78], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
mov rdx, qword [rsp + 0x78]
mov r8, qword [rbp - 0x80]
mov rax, r8
sub rax, rdx
lea rcx, [rsp + 0x68]
cmp rax, 1
jb 0x140023bdd
lea rax, [rdx + 1]
mov qword [rsp + 0x78], rax
cmp r8, 8
cmovae rcx, qword [rsp + 0x68]
mov eax, dword [0x1400f4b34]
mov word [rcx + rdx*2], ax
mov word [rcx + rdx*2 + 2], r12w
lea rax, [rsp + 0x68]
jmp 0x140023bfb
mov qword [rsp + 0x20], 1
lea r9, [0x1400f4b34]
movzx r8d, dil
mov edx, 1
call fcn.140007950
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], r12
mov qword [rbp - 8], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x10], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
or r13d, 0x180
mov dword [rsp + 0x34], r13d
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x28]
call fcn.14002c0f0
lea rcx, [rsi + 0x60]
mov rdx, rax
call fcn.140005f80
mov rdx, qword [rbp + 0x40]
cmp rdx, 8
jb 0x140023c8e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140023c89
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400240c1
call fcn.14009bfe4
mov qword [rbp + 0x38], r12
mov qword [rbp + 0x40], 7
mov word [rbp + 0x28], r12w
mov rdx, qword [rbp - 8]
cmp rdx, 8
jb 0x140023cdf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140023cda
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400240c7
call fcn.14009bfe4
mov qword [rbp - 0x10], r12
mov qword [rbp - 8], 7
mov word [rbp - 0x20], r12w
mov rdx, qword [rbp - 0x80]
cmp rdx, 8
jb 0x140023d31
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140023d2c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400240cd
call fcn.14009bfe4
mov qword [rsp + 0x78], r12
mov qword [rbp - 0x80], 7
mov word [rsp + 0x68], r12w
mov rdx, qword [rbp + 0x20]
cmp rdx, 8
jb 0x140023dad
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140023d7f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400240d3
call fcn.14009bfe4
jmp 0x140023dad
lea rcx, [rsi + 0x60]
lea rax, [rbp + 0x48]
cmp rcx, rax
je 0x140023daa
lea rdx, [rbp + 0x48]
cmp qword [rbp + 0x60], 8
cmovae rdx, qword [rbp + 0x48]
mov r8, qword [rbp + 0x58]
call fcn.140003510
xor r12d, r12d
lea rcx, [rsi + 0x80]
lea rax, [rbp + 0xb8]
cmp rcx, rax
je 0x140023ddd
lea rdx, [rbp + 0xb8]
cmp qword [rbp - 0x78], 8
cmovae rdx, qword [rbp - 0x28]
mov r8, qword [rbp + 0xc8]
call fcn.140003510
lea rax, [rbp + 0x12c]
mov r15, 0xffffffffffffffff
mov r8, r15
nop
inc r8
cmp word [rax + r8*2], 0
jne 0x140023df0
lea rdx, [rbp + 0x12c]
mov rcx, rsi
call fcn.140003510
lea rcx, [rsi + 0xf0]
lea rax, [rbp + 0x98]
cmp rcx, rax
je 0x140023e40
lea rdx, [rbp + 0x98]
cmp qword [rbp + 0xb0], 8
cmovae rdx, qword [rbp + 0x98]
mov r8, qword [rbp + 0xa8]
call fcn.140003510
movzx eax, byte [rsp + 0x30]
xor eax, 1
add eax, eax
or eax, 0x40040
mov dword [rsi + 0x118], eax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
lock inc dword [r14 + 8]
mov rsi, qword [rbp + 0x68]
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x60], r14
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x58]
call fcn.1400263f0
mov rax, qword [rbp]
mov rdx, qword [rax + 8]
cmp rdx, qword [rax + 0x10]
je 0x140023ea4
mov qword [rdx], rsi
mov qword [rdx + 8], r14
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x68], xmm0
add qword [rax + 8], 0x10
jmp 0x140023eb1
lea r8, [rbp + 0x68]
mov rcx, rax
call fcn.1400071a0
nop
mov rcx, qword [rbp + 0x70]
test rcx, rcx
je 0x140023eeb
mov eax, r15d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x140023eeb
mov rsi, qword [rbp + 0x70]
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax]
mov eax, r15d
lock xadd dword [rsi + 0xc], eax
cmp eax, 1
jne 0x140023eeb
mov rcx, qword [rbp + 0x70]
mov rax, qword [rcx]
call qword [rax + VariantCopy]
nop
mov rdx, qword [rbp + 0xd0]
cmp rdx, 8
jb 0x140023f32
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140023f2c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400240d9
call fcn.14009bfe4
nop
mov rdx, qword [rbp + 0x60]
cmp rdx, 8
jb 0x140023f72
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140023f6d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400240df
call fcn.14009bfe4
mov rsi, qword [rbp - 0x70]
mov r15, qword [rbp + 0x88]
lea rdx, [rbp + 0x100]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x140023540
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FindClose]
mov bl, 1
mov rdi, qword [rbp + 0x90]
mov r13, qword [rbp + 0xb0]
cmp byte [rsp + 0x31], 0
je 0x140023fec
lea rdx, [rdi*2 + 2]
mov rcx, qword [rbp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140023fe6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400240a3
call fcn.14009bfe4
nop
cmp r13, 8
jb 0x140024027
lea rdx, [r13*2 + 2]
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024022
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140024054
call fcn.14009bfe4
movzx eax, bl
mov rcx, qword [rbp + 0x350]
xor rcx, rsp
call fcn.14009c570
mov rbx, qword [rsp + 0x4b8]
add rsp, 0x460
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1400a3080
nop
lea rcx, [0x140135d04]
call fcn.14009c3c4
cmp dword [0x140135d04], 0xffffffff
jne 0x140023884
lea rcx, [0x1400d3b10]
call fcn.14009c224
lea rcx, [0x140135d04]
call fcn.14009c364
nop
jmp 0x140023884
call fcn.140003690
nop
call fcn.140003690
int3
call fcn.1400a3080
nop
call fcn.1400a3080
nop
call fcn.1400a3080
nop
call fcn.140003690
int3
call fcn.140007070
int3
call fcn.1400a3080
nop
call fcn.1400a3080
nop
call fcn.1400a3080
nop
call fcn.1400a3080
nop
call fcn.1400a3080
nop
call fcn.1400a3080
nop
call fcn.1400a3080
nop
call fcn.140003690
nop
call fcn.140003690
int3