Function at 0x140107f50
Capabilities:
Enumerate files on windows

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x210]
sub rsp, 0x310
mov rax, qword [0x140672360]
xor rax, rsp
mov qword [rbp + 0x200], rax
movzx r12d, dl
mov rbx, rcx
cmp qword [rcx + 0x18], 8
jb 0x140107f91
mov rcx, qword [rcx]
mov edx, 0x5c
call fcn.14035b2dc
mov r8, rax
mov rax, rbx
mov rcx, qword [rbx + 0x18]
cmp rcx, 8
jb 0x140107fae
mov rax, qword [rbx]
sub r8, rax
sar r8, 1
inc r8
xor r13d, r13d
mov qword [rsp + 0x70], r13
mov qword [rbp - 0x80], r13
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], r13w
cmp qword [rbx + 0x10], r8
cmovb r8, qword [rbx + 0x10]
cmp rcx, 8
jb 0x140107fe3
mov rbx, qword [rbx]
mov rdx, rbx
lea rcx, [rsp + 0x70]
call fcn.1400739a0
nop
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], r13
lea rbx, [rsp + 0x70]
cmp qword [rbp - 0x78], 8
cmovae rbx, qword [rsp + 0x70]
movabs rdi, 0x7ffffffffffffffe
movabs rax, 0x7fffffffffffffff
mov r14, qword [rbp - 0x80]
cmp r14, 8
jae 0x140108046
movups xmm0, xmmword [rbx]
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x68], 7
mov esi, 7
jmp 0x14010808d
mov rsi, r14
or rsi, 7
cmp rsi, rdi
cmova rsi, rdi
lea rcx, [rsi + 1]
cmp rcx, rax
ja 0x140108434
lfence
add rcx, rcx
call fcn.140073800
mov qword [rsp + 0x50], rax
mov r14, qword [rbp - 0x80]
lea r8, [r14*2 + 2]
mov rdx, rbx
mov rcx, rax
call fcn.14035bc80
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x60], r14
mov rax, rsi
sub rax, r14
cmp rax, 5
jb 0x1401080dd
lea rdi, [r14 + 5]
mov qword [rsp + 0x60], rdi
lea rbx, [rsp + 0x50]
cmp rsi, 8
cmovae rbx, qword [rsp + 0x50]
lea rcx, [rbx + r14*2]
mov r8d, 0xa
lea rdx, [0x1405f9048]
call fcn.14035bc80
mov word [rbx + rdi*2], r13w
movabs rdi, 0x7ffffffffffffffe
jmp 0x140108103
lfence
mov qword [rsp + 0x20], 5
lea r9, [0x1405f9048]
mov edx, 5
lea rcx, [rsp + 0x50]
call fcn.1400735a0
mov r14, qword [rbp - 0x80]
lea rcx, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rcx, qword [rsp + 0x50]
lea rdx, [rbp - 0x50]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r15, rax
cmp rax, 0xffffffffffffffff
je 0x140108371
nop dword [rax + rax]
mov edx, 0x2d
lea rcx, [rbp - 0x24]
call fcn.14035b2dc
test rax, rax
jne 0x140108347
lea rdx, str.cpl.
lea rcx, [rbp - 0x24]
call fcn.14035b7a0
test rax, rax
jne 0x140108347
lea r8d, [rax + 4]
lea rdx, str.java
lea rcx, [rbp - 0x24]
call fcn.14036ef28
test eax, eax
je 0x140108190
lea rdx, str.jp2launcher.exe
lea rcx, [rbp - 0x24]
call fcn.1403681bc
test eax, eax
jne 0x140108347
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x58], r13
lea rbx, [rsp + 0x70]
cmp qword [rbp - 0x78], 8
cmovae rbx, qword [rsp + 0x70]
cmp r14, 8
jae 0x1401081c0
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x70], xmm0
mov esi, 7
jmp 0x14010820b
mov rsi, r14
or rsi, 7
cmp rsi, rdi
cmova rsi, rdi
lea rcx, [rsi + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x140108446
lfence
add rcx, rcx
call fcn.140073800
mov qword [rbp - 0x70], rax
mov r14, qword [rbp - 0x80]
lea r8, [r14*2 + 2]
mov rdx, rbx
mov rcx, rax
call fcn.14035bc80
mov qword [rbp - 0x58], rsi
mov qword [rbp - 0x60], r14
lea rax, [rbp - 0x24]
mov rdx, 0xffffffffffffffff
nop
inc rdx
cmp word [rax + rdx*2], 0
jne 0x140108220
mov rax, rsi
sub rax, r14
cmp rdx, rax
ja 0x140108262
lea rdi, [r14 + rdx]
mov qword [rbp - 0x60], rdi
lea rbx, [rbp - 0x70]
cmp rsi, 8
cmovae rbx, qword [rbp - 0x70]
lea rcx, [rbx + r14*2]
lea r8, [rdx + rdx]
lea rdx, [rbp - 0x24]
call fcn.14035bc80
mov word [rbx + rdi*2], r13w
jmp 0x14010827b
lfence
mov qword [rsp + 0x20], rdx
lea r9, [rbp - 0x24]
lea rcx, [rbp - 0x70]
call fcn.1400735a0
mov r14, qword [rbp - 0x80]
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], r13w
mov r8d, 4
lea rdx, str.Java
lea rcx, [rsp + 0x30]
call fcn.1400739a0
nop
movzx r8d, r12b
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x70]
call fcn.140100de0
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x140108301
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401082fc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14010843a
call fcn.140359090
mov word [rsp + 0x30], r13w
mov rdx, qword [rbp - 0x58]
cmp rdx, 8
jb 0x140108347
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140108342
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140108440
call fcn.140359090
lea rdx, [rbp - 0x50]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x140108367
movabs rdi, 0x7ffffffffffffffe
jmp 0x140108130
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x1401083b3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401083ae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14010844c
call fcn.140359090
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r13w
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x140108404
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401083ff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14010842e
call fcn.140359090
mov rcx, qword [rbp + 0x200]
xor rcx, rsp
call fcn.140359070
mov rbx, qword [rsp + 0x360]
add rsp, 0x310
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140368068
nop
call fcn.140073980
nop
call fcn.140368068
nop
call fcn.140368068
int3
call fcn.140073980
nop
call fcn.140368068
int3