Function at 0x140050580
Capabilities:
Enumerate files on windows

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x210]
sub rsp, 0x310
mov rax, qword [0x1400b0068]
xor rax, rsp
mov qword [rbp + 0x200], rax
mov r15, rdx
mov rbx, rcx
xor r12b, r12b
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x20], xmm0
xor r13d, r13d
mov r14d, r13d
mov qword [rsp + 0x30], r13
movdqu xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], r13
mov rsi, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 8
jb 0x1400505f5
mov rbx, qword [rcx]
cmp rsi, 8
jae 0x140050613
movups xmm0, xmmword [rbx]
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x68], 7
mov edi, 7
jmp 0x140050651
mov rdi, rsi
or rdi, 7
movabs rax, 0x7ffffffffffffffe
cmp rdi, rax
cmova rdi, rax
lea rdx, [rdi + 1]
call fcn.1400328b0
mov qword [rsp + 0x50], rax
lea r8, [rsi*2 + 2]
mov rdx, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x68], rdi
mov qword [rsp + 0x60], rsi
lea rcx, [rsp + 0x50]
cmp rdi, 8
cmovae rcx, qword [rsp + 0x50]
lea rdx, [rbp - 0x50]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rdi, rax
mov rbx, qword [rsp + 0x28]
cmp rax, 0xffffffffffffffff
je 0x1400507e9
mov r12b, 1
test byte [rbp - 0x50], 0x10
jne 0x1400507d4
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x58], 7
mov word [rbp - 0x70], r13w
lea rax, [rbp - 0x24]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rax + r8*2], 0
jne 0x1400506b0
lea rdx, [rbp - 0x24]
lea rcx, [rbp - 0x70]
call fcn.140032770
nop
lea rdx, [rbp - 0x70]
cmp qword [rbp - 0x58], 8
cmovae rdx, qword [rbp - 0x70]
mov qword [rsp + 0x70], r13
mov qword [rbp - 0x80], r13
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], r13w
mov r8, 0xffffffffffffffff
inc r8
cmp word [rdx + r8*2], 0
jne 0x1400506f5
lea rcx, [rsp + 0x70]
call fcn.140032770
nop
cmp rbx, r14
je 0x140050736
movups xmm0, xmmword [rsp + 0x70]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rbp - 0x80]
movups xmmword [rbx + 0x10], xmm1
mov edx, 7
mov word [rsp + 0x70], r13w
add rbx, 0x20
mov qword [rsp + 0x28], rbx
jmp 0x140050756
lea r8, [rsp + 0x70]
mov rdx, rbx
lea rcx, [rsp + 0x20]
call fcn.140050d00
mov r14, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x28]
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x140050794
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005078e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140050850
call fcn.140058b8c
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 8
jb 0x1400507d4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400507cf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140050857
call fcn.140058b8c
lea rdx, [rbp - 0x50]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x140050684
lea rax, [rsp + 0x20]
mov rsi, qword [rsp + 0x20]
cmp r15, rax
je 0x140050806
mov r8, rbx
mov rdx, rsi
mov rcx, r15
call fcn.140050e60
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x140050863
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005085e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005085e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140058b8c
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r13w
test rsi, rsi
je 0x1400508cf
mov rdi, rsi
cmp rsi, rbx
je 0x140050895
mov rcx, rdi
call fcn.14003e170
add rdi, 0x20
cmp rdi, rbx
jne 0x140050884
sub r14, rsi
and r14, 0xffffffffffffffe0
mov rax, rsi
cmp r14, 0x1000
jb 0x1400508c4
add r14, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400508c4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rdx, r14
mov rcx, rsi
call fcn.140058b8c
movzx eax, r12b
mov rcx, qword [rbp + 0x200]
xor rcx, rsp
call fcn.140058810
mov rbx, qword [rsp + 0x360]
add rsp, 0x310
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret