Function at 0x14000f600
Capabilities:
Enumerate files on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x1e8
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x150], xmm6
mov qword [rbp + 0x148], 0xfffffffffffffffe
mov qword [rbp + 0x138], rcx
xorps xmm0, xmm0
movups xmmword [rcx], xmm0
mov qword [rcx + 0x10], 0
mov rsi, qword [rdx + 0x10]
movabs rax, 0x7ffffffffffffffd
cmp rsi, rax
mov qword [rbp + 0x140], r8
mov qword [rbp + 0x130], rdx
jge 0x14000fae4
mov rdi, qword [rdx]
mov r14, qword [rdx + 0x18]
movaps xmmword [rbp - 0x40], xmm0
movaps xmmword [rbp - 0x50], xmm0
lea r15, [rsi + 3]
cmp r15, 0x10
jb 0x14000f692
cmp rsi, 0xfffffffffffffffd
jge 0x14000f6a1
movabs r12, 0x7fffffffffffffff
jmp 0x14000f6bf
mov r13, r8
lea rbx, [rbp - 0x50]
mov r12d, 0xf
jmp 0x14000f6f2
mov rax, r15
or rax, 0xf
cmp rax, 0x17
mov r12d, 0x16
cmovae r12, rax
cmp r12, 0xfff
jb 0x14000f6da
lea rcx, [r12 + 0x28]
call fcn.1400574f8
mov rbx, rax
add rbx, 0x27
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x14000f6e7
lea rcx, [r12 + 1]
call fcn.1400574f8
mov rbx, rax
mov qword [rbp - 0x50], rbx
mov r13, qword [rbp + 0x140]
cmp r14, 0x10
cmovb rdi, qword [rbp + 0x130]
mov qword [rbp - 0x40], r15
mov qword [rbp - 0x38], r12
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call fcn.140094760
mov dword [rbx + rsi], 0x2e2a5c
mov r8, qword [r13 + 0x10]
cmp qword [r13 + 0x18], 0x10
mov r9, r13
jb 0x14000f72d
mov r9, qword [r13]
mov rcx, qword [rbp - 0x40]
mov rax, qword [rbp - 0x38]
mov rdx, rax
sub rdx, rcx
cmp rdx, r8
jae 0x14000f75d
mov qword [rsp + 0x20], r8
lea rcx, [rbp - 0x50]
mov rdx, r8
call fcn.140031070
mov rsi, rax
mov r13, qword [rbp + 0x140]
jmp 0x14000f785
lea rdi, [rcx + r8]
mov qword [rbp - 0x40], rdi
lea rsi, [rbp - 0x50]
mov rbx, rsi
cmp rax, 0x10
jb 0x14000f776
mov rbx, qword [rbp - 0x50]
add rcx, rbx
mov rdx, r9
call fcn.140094760
mov byte [rbx + rdi], 0
movups xmm0, xmmword [rsi]
movups xmm1, xmmword [rsi + 0x10]
movaps xmmword [rbp + 0x100], xmm1
movaps xmmword [rbp + 0xf0], xmm0
mov qword [rsi + 0x10], 0
mov qword [rsi + 0x18], 0xf
mov byte [rsi], 0
mov rax, qword [rbp - 0x38]
cmp rax, 0x10
mov rbx, qword [rbp + 0x138]
jb 0x14000f7f3
mov rcx, qword [rbp - 0x50]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14000f7ee
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14000fadf
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.14005753c
cmp qword [rbp + 0x108], 0x10
jb 0x14000f806
mov rcx, qword [rbp + 0xf0]
jmp 0x14000f80d
lea rcx, [rbp + 0xf0]
lea rdx, [rbp - 0x50]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp rax, 0xffffffffffffffff
je 0x14000f9cf
mov rsi, rax
lea rdi, [rbp - 0x24]
xorps xmm6, xmm6
lea r14, [rbp - 0x50]
mov r13, qword [sym.imp.KERNEL32.dll_FindNextFileA]
jmp 0x14000f875
movups xmmword [rdx + 0x10], xmm6
movups xmmword [rdx], xmm6
movaps xmm0, xmmword [rbp + 0x110]
movaps xmm1, xmmword [rbp + 0x120]
movups xmmword [rdx], xmm0
movups xmmword [rdx + 0x10], xmm1
add rdx, 0x20
mov qword [rbx + 8], rdx
mov rcx, rsi
mov rdx, r14
call r13
test eax, eax
je 0x14000f9bf
movaps xmmword [rbp + 0x120], xmm6
movaps xmmword [rbp + 0x110], xmm6
mov rcx, rdi
call fcn.140073920
test rax, rax
js 0x14000fada
mov r15, rax
cmp rax, 0xf
ja 0x14000f8d0
mov qword [rbp + 0x120], r15
mov qword [rbp + 0x128], 0xf
lea rcx, [rbp + 0x110]
mov rdx, rdi
mov r8, r15
call fcn.140094760
add r15, rbp
add r15, 0x110
jmp 0x14000f949
mov rbx, r15
or rbx, 0xf
cmp rbx, 0x17
mov eax, 0x16
cmovb rbx, rax
cmp rbx, 0xfff
jb 0x14000f910
lea rcx, [rbx + 0x28]
call fcn.1400574f8
mov r12, rax
add r12, 0x27
and r12, 0xffffffffffffffe0
mov qword [r12 - 8], rax
jmp 0x14000f91c
lea rcx, [rbx + 1]
call fcn.1400574f8
mov r12, rax
mov qword [rbp + 0x110], r12
mov qword [rbp + 0x120], r15
mov qword [rbp + 0x128], rbx
mov rcx, r12
mov rdx, rdi
mov r8, r15
call fcn.140094760
add r15, r12
mov rbx, qword [rbp + 0x138]
mov byte [r15], 0
mov rdx, qword [rbx + 8]
cmp rdx, qword [rbx + 0x10]
jne 0x14000f840
mov rcx, rbx
lea r8, [rbp + 0x110]
call fcn.14000b2f0
mov rax, qword [rbp + 0x128]
cmp rax, 0x10
mov rbx, qword [rbp + 0x138]
jb 0x14000f864
mov rcx, qword [rbp + 0x110]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14000f9b5
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14000fadf
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.14005753c
jmp 0x14000f864
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FindClose]
mov r13, qword [rbp + 0x140]
mov rax, qword [rbp + 0x108]
cmp rax, 0x10
mov rsi, qword [rbp + 0x130]
jb 0x14000fa1b
mov rcx, qword [rbp + 0xf0]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14000fa16
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14000fadf
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.14005753c
mov rax, qword [rsi + 0x18]
cmp rax, 0x10
jb 0x14000fa59
mov rcx, qword [rsi]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14000fa54
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14000fadf
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.14005753c
mov qword [rsi + 0x10], 0
mov qword [rsi + 0x18], 0xf
mov byte [rsi], 0
mov rax, qword [r13 + 0x18]
cmp rax, 0x10
jb 0x14000faa7
mov rcx, qword [r13]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14000faa2
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14000fadf
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.14005753c
mov qword [r13 + 0x10], 0
mov qword [r13 + 0x18], 0xf
mov byte [r13], 0
mov rax, rbx
movaps xmm6, xmmword [rbp + 0x150]
add rsp, 0x1e8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
call fcn.14002e7d0
call fcn.14006afb4
call fcn.14002e7d0
int3