Function at 0x1400121f0
Capabilities:
Enumerate files on windows

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x180]
sub rsp, 0x280
mov rax, qword [0x1400e8180]
xor rax, rsp
mov qword [rbp + 0x170], rax
mov r15, r8
mov rdi, rdx
mov r12, rcx
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x78], r8
xor r14d, r14d
mov dword [rsp + 0x44], r14d
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
movdqu xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], r14
mov qword [rbp - 0x60], r14
lea ecx, [r14 + 0x10]
call fcn.140080f58
mov qword [rax + 8], r14
mov qword [rbp - 0x80], rax
lea rcx, [rbp - 0x80]
mov qword [rax], rcx
xorps xmm0, xmm0
movups xmmword [r12], xmm0
mov qword [r12], r14
mov qword [r12 + 8], r14
mov qword [r12 + 0x10], r14
mov r13d, 1
mov dword [rsp + 0x44], r13d
mov rcx, qword [rbp - 0x60]
lea rax, [rcx + 1]
mov rdx, qword [rbp - 0x70]
cmp rdx, rax
ja 0x1400122ae
lea rcx, [rbp - 0x80]
call fcn.14002cf10
mov rcx, qword [rbp - 0x60]
mov rdx, qword [rbp - 0x70]
dec rdx
mov rax, qword [rbp - 0x68]
and rax, rdx
mov qword [rbp - 0x68], rax
add rcx, rax
and rcx, rdx
lea rbx, [rcx*8]
mov rcx, qword [rbp - 0x78]
cmp qword [rbx + rcx], 0
jne 0x1400122ee
mov ecx, 0x20
call fcn.140080f58
mov rcx, rax
mov rax, qword [rbp - 0x78]
mov qword [rbx + rax], rcx
mov rcx, qword [rbp - 0x78]
mov rdx, rdi
mov rcx, qword [rbx + rcx]
call fcn.14001f140
mov rcx, qword [rbp - 0x60]
add rcx, r13
mov qword [rbp - 0x60], rcx
je 0x14001280c
movabs rsi, 0x7fffffffffffffff
movzx edi, byte [rsp + 0x40]
movzx ebx, byte [rsp + 0x40]
nop
mov rax, qword [rbp - 0x68]
dec rax
add rcx, rax
mov rdx, qword [rbp - 0x70]
dec rdx
and rdx, rcx
mov rax, qword [rbp - 0x78]
mov rdx, qword [rax + rdx*8]
lea rcx, [rbp - 0x18]
call fcn.14001f140
nop
lea rcx, [rbp - 0x80]
call fcn.1400209a0
mov rax, rsi
mov rcx, qword [rbp - 8]
sub rax, rcx
cmp rax, 2
jb 0x140012889
lea r9, [rbp - 0x18]
cmp qword [rbp], 0x10
cmovae r9, qword [rbp - 0x18]
mov qword [rsp + 0x30], 2
lea rax, [0x1400d06f4]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r8, [rbp - 0x18]
movzx edx, dil
lea rcx, [rbp + 8]
call fcn.14002d660
or r13d, 2
mov dword [rsp + 0x44], r13d
lea rcx, [rbp + 8]
cmp qword [rbp + 0x20], 0x10
cmovae rcx, qword [rbp + 8]
lea rdx, [rbp + 0x30]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov rcx, rax
mov qword [rsp + 0x48], rax
cmp rax, 0xffffffffffffffff
je 0x140012772
nop
movzx edx, byte [rbp + 0x5c]
movzx ecx, byte [rbp + 0x5d]
cmp dl, 0x2e
jne 0x1400123f7
test cl, cl
je 0x140012756
cmp dl, dl
jne 0x1400123f7
cmp cl, dl
jne 0x1400123f7
cmp byte [rbp + 0x5e], 0
je 0x140012756
test dword [rbp + 0x30], 0x400
jne 0x140012756
mov rax, rsi
mov rcx, qword [rbp - 8]
sub rax, rcx
cmp rax, 1
jb 0x1400128a7
lea r9, [rbp - 0x18]
cmp qword [rbp], 0x10
cmovae r9, qword [rbp - 0x18]
mov qword [rsp + 0x30], 1
lea rax, [0x1400d0114]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r8, [rbp - 0x18]
movzx edx, bl
lea rcx, [rsp + 0x50]
call fcn.14002d660
or r13d, 4
mov dword [rsp + 0x44], r13d
lea rax, [rbp + 0x5c]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x140012465
lea rdx, [rbp + 0x5c]
lea rcx, [rsp + 0x50]
call fcn.140021a00
mov qword [rbp - 0x38], r14
mov qword [rbp - 0x28], r14
mov qword [rbp - 0x20], r14
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x38], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x28], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
or r13d, 8
mov dword [rsp + 0x44], r13d
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x1400124ed
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400124e8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001289b
call fcn.140080f50
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
mov qword [rbp - 0x58], r14
mov qword [rbp - 0x48], r14
mov qword [rbp - 0x40], 0xf
mov byte [rbp - 0x58], 0
lea rax, [rbp + 0x5c]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140012520
lea rdx, [rbp + 0x5c]
lea rcx, [rbp - 0x58]
call fcn.1400218a0
nop
test byte [rbp + 0x30], 0x10
je 0x1400125f9
mov rcx, qword [rbp - 0x60]
lea rax, [rcx + 1]
mov rdx, qword [rbp - 0x70]
cmp rdx, rax
ja 0x140012564
lea rcx, [rbp - 0x80]
call fcn.14002cf10
mov rcx, qword [rbp - 0x60]
mov rdx, qword [rbp - 0x70]
dec rdx
mov rax, qword [rbp - 0x68]
and rax, rdx
mov qword [rbp - 0x68], rax
add rcx, rax
and rcx, rdx
lea rsi, [rcx*8]
mov rcx, qword [rbp - 0x78]
cmp qword [rcx + rsi], 0
jne 0x1400125a4
mov ecx, 0x20
call fcn.140080f58
mov rcx, rax
mov rax, qword [rbp - 0x78]
mov qword [rax + rsi], rcx
mov rcx, qword [rbp - 0x78]
lea rdx, [rbp - 0x38]
mov rcx, qword [rcx + rsi]
call fcn.14001f140
inc qword [rbp - 0x60]
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x1400125f0
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400125eb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001288f
call fcn.140080f50
mov byte [rbp - 0x58], 0
jmp 0x140012705
mov rax, qword [r15 + 0x10]
mov r9, r15
cmp qword [r15 + 0x18], 0x10
jb 0x14001260a
mov r9, qword [r15]
lea rcx, [rbp - 0x58]
mov rsi, qword [rbp - 0x58]
mov r14, qword [rbp - 0x40]
cmp r14, 0x10
cmovae rcx, rsi
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, qword [rbp - 0x48]
call fcn.140027870
cmp rax, 0xffffffffffffffff
je 0x1400126c7
lea rdx, [rbp - 0x38]
cmp qword [rbp - 0x20], 0x10
cmovae rdx, qword [rbp - 0x38]
mov r8, qword [rbp - 0x28]
lea rcx, [0x1400ec5f0]
call fcn.14002fa00
mov rcx, rax
call fcn.1400262c0
mov rax, qword [r12 + 8]
cmp rax, qword [r12 + 0x10]
je 0x14001267f
lea rdx, [rbp - 0x38]
mov rcx, rax
call fcn.14001f140
add qword [r12 + 8], 0x20
jmp 0x14001268f
lea r8, [rbp - 0x38]
mov rdx, rax
mov rcx, r12
call fcn.140026eb0
nop
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x1400126fe
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400126f9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001288f
jmp 0x1400126f9
cmp r14, 0x10
jb 0x1400126fe
lea rdx, [r14 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x1400126f6
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001288f
mov rcx, rsi
call fcn.140080f50
xor r14d, r14d
mov byte [rbp - 0x58], r14b
mov qword [rbp - 0x48], r14
mov qword [rbp - 0x40], 0xf
mov rdx, qword [rbp - 0x20]
cmp rdx, 0x10
jb 0x14001274c
mov rcx, qword [rbp - 0x38]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012747
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400128a1
call fcn.140080f50
movabs rsi, 0x7fffffffffffffff
lea rdx, [rbp + 0x30]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x1400123d0
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
mov rdx, qword [rbp + 0x20]
cmp rdx, 0x10
jb 0x1400127b4
inc rdx
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400127af
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400128ad
call fcn.140080f50
mov qword [rbp + 0x18], r14
mov qword [rbp + 0x20], 0xf
mov byte [rbp + 8], 0
mov rdx, qword [rbp]
cmp rdx, 0x10
jb 0x1400127ff
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400127fa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400128b3
call fcn.140080f50
mov rcx, qword [rbp - 0x60]
test rcx, rcx
jne 0x140012320
lea rcx, [rbp - 0x80]
call fcn.14001c3b0
nop
mov rdx, qword [r15 + 0x18]
cmp rdx, 0x10
jb 0x14001284c
inc rdx
mov rcx, qword [r15]
cmp rdx, 0x1000
jb 0x140012847
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140012895
mov rcx, r8
call fcn.140080f50
mov qword [r15 + 0x10], r14
mov qword [r15 + 0x18], 0xf
mov byte [r15], 0
mov rax, r12
mov rcx, qword [rbp + 0x170]
xor rcx, rsp
call fcn.140080f30
mov rbx, qword [rsp + 0x2d8]
add rsp, 0x280
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140002cb0
nop
call fcn.1400996b0
nop
call fcn.1400996b0
nop
call fcn.1400996b0
nop
call fcn.1400996b0
int3
call fcn.140002cb0
nop
call fcn.1400996b0
nop
call fcn.1400996b0
int3