Function at 0x1400016e0
Capabilities:
Enumerate files on windows

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xc0]
sub rsp, 0x1c0
mov rax, qword [0x14008f8c0]
xor rax, rsp
mov qword [rbp + 0xb0], rax
mov r14, rdx
mov rbx, rcx
mov qword [rsp + 0x48], rcx
mov dword [rsp + 0x20], 1
xorps xmm0, xmm0
movups xmmword [rcx], xmm0
xor r12d, r12d
mov qword [rcx], r12
mov qword [rcx + 8], r12
mov qword [rcx + 0x10], r12
mov dword [rsp + 0x20], 1
mov r13, qword [rdx + 0x10]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r13
cmp rax, 2
jb 0x1400019e6
cmp qword [rdx + 0x18], 0xf
jbe 0x140001767
mov r14, qword [rdx]
movups xmmword [rsp + 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x38], xmm1
lea r15, [r13 + 2]
mov edi, reloc.WS2_32.dll_ntohs
lea rsi, [rsp + 0x28]
cmp r15, rdi
jbe 0x140001803
mov rdi, r15
or rdi, 0xf
cmp rdi, rcx
jbe 0x1400017c4
mov rdi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14006d430
test rax, rax
je 0x140001882
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x1400017fe
mov eax, socket
cmp rdi, rax
cmovb rdi, rax
lea rcx, [rdi + 1]
test rcx, rcx
jne 0x1400017de
mov rsi, r12
jmp 0x1400017fe
cmp rcx, 0x1000
jb 0x1400017f6
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400019ec
jmp 0x1400017a5
call fcn.14006d430
mov rsi, rax
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x40], rdi
mov r8, r13
mov rdx, r14
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov word [rsi + r13], 0x2a5c
mov byte [rsi + r15], 0
mov dword [rsp + 0x20], 3
lea rcx, [rsp + 0x28]
cmp qword [rsp + 0x40], 0xf
cmova rcx, qword [rsp + 0x28]
lea rdx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov rdi, rax
mov rdx, qword [rsp + 0x40]
cmp rdx, 0xf
jbe 0x14000188e
inc rdx
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001889
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001889
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006d544
movdqa xmm0, xmmword [0x140084500]
movdqu xmmword [rsp + 0x38], xmm0
mov byte [rsp + 0x28], 0
cmp rdi, 0xffffffffffffffff
je 0x1400019b2
nop dword [rax + rax]
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
lea rax, [rbp - 0x64]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400018d0
lea rdx, [rbp - 0x64]
lea rcx, [rsp + 0x50]
call fcn.140006c20
nop
lea rdx, [rsp + 0x50]
mov rcx, qword [rsp + 0x50]
mov rax, qword [rsp + 0x68]
cmp rax, 0xf
cmova rdx, rcx
mov r8, qword [rsp + 0x60]
cmp r8, 1
jne 0x140001910
cmp byte [rdx], 0x2e
je 0x140001962
lea rdx, [rsp + 0x50]
cmp rax, 0xf
cmova rdx, rcx
cmp r8, 2
jne 0x14000192a
cmp word [rdx], 0x2e2e
je 0x140001962
mov rax, qword [rbx + 8]
cmp rax, qword [rbx + 0x10]
je 0x140001948
lea rdx, [rsp + 0x50]
mov rcx, rax
call fcn.140005f50
add qword [rbx + 8], 0x20
jmp 0x140001958
lea r8, [rsp + 0x50]
mov rdx, rax
mov rcx, rbx
call fcn.140007450
mov rcx, qword [rsp + 0x50]
mov rax, qword [rsp + 0x68]
cmp rax, 0xf
jbe 0x140001992
lea rdx, [rax + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000198d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400019df
call fcn.14006d544
lea rdx, [rsp + 0x70]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x1400018b0
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
mov rax, rbx
mov rcx, qword [rbp + 0xb0]
xor rcx, rsp
call fcn.14006d410
mov rbx, qword [rsp + 0x210]
add rsp, 0x1c0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140001270
int3
call fcn.1400011d0
int3