Function at 0x14000e590
Capabilities:
Enumerate files on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x328]
sub rsp, 0x428
mov rax, qword [0x1403749c0]
xor rax, rsp
mov qword [rbp + 0x310], rax
mov rbx, r9
mov rdi, rdx
mov qword [rsp + 0x78], rcx
mov r15, qword [rbp + 0x390]
mov qword [rsp + 0x48], r15
mov r13, qword [rbp + 0x398]
mov qword [rsp + 0x70], r13
xor eax, eax
mov dword [rbp - 0x28], eax
mov rdx, r8
lea rcx, [rbp + 0x80]
call fcn.140004650
nop
mov rdx, rbx
lea rcx, [rbp + 0xa0]
call fcn.140004650
nop
mov rsi, qword [rdi + 0x10]
cmp qword [rdi + 0x18], 8
jb 0x14000e613
mov rdi, qword [rdi]
movabs rax, 0x7ffffffffffffffe
mov rcx, 0xffffffffffffffff
cmp rsi, 8
jae 0x14000e63a
movups xmm0, xmmword [rdi]
movups xmmword [rbp + 0x20], xmm0
lea ebx, [rcx + 8]
mov r14, qword [rbp + 0x20]
jmp 0x14000e676
mov rbx, rsi
or rbx, 7
cmp rbx, rax
cmova rbx, rax
mov rdx, rbx
add rdx, 1
cmovb rdx, rcx
lea rcx, [rbp + 0x20]
call fcn.140004ca0
mov r14, rax
mov qword [rbp + 0x20], rax
lea r8, [rsi*2 + 2]
mov rdx, rdi
mov rcx, rax
call fcn.14015b790
mov qword [rbp + 0x38], rbx
mov qword [rbp + 0x30], rsi
mov r12, rsi
xor ecx, ecx
mov qword [rbp + 0x60], rcx
movdqa xmm0, xmmword [0x140349cd0]
movdqu xmmword [rbp + 0x70], xmm0
mov word [rbp + 0x60], cx
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x60], xmm1
mov qword [rbp - 0x50], rcx
mov rax, r15
cmp qword [r15 + 0x18], 0x10
jb 0x14000e6b1
mov rax, qword [r15]
mov qword [r15 + 0x10], rcx
mov byte [rax], 0
mov rax, r13
cmp qword [r13 + 0x18], 8
jb 0x14000e6c6
mov rax, qword [r13]
xor r15d, r15d
mov qword [r13 + 0x10], r15
mov word [rax], r15w
test rsi, rsi
jne 0x14000e6f0
lea r8d, [r15 + 0x23]
lea rdx, str.No_localization_directory_specified
mov rcx, r13
call fcn.1400047e0
xor bl, bl
jmp 0x14000ee5e
cmp qword [rbp + 0x90], r15
jne 0x14000e723
lea rdx, [0x140375660]
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae rdx, qword [0x140375660]
mov r8, qword [0x140375670]
lea rcx, [rbp + 0x80]
call fcn.140004930
lea rax, [rbp + 0x20]
cmp rbx, 8
setae cl
cmovae rax, r14
cmp word [rax + rsi*2 - 2], 0x5c
je 0x14000e766
lea rax, [rbp + 0x20]
test cl, cl
cmovne rax, r14
cmp word [rax + rsi*2 - 2], 0x2f
je 0x14000e766
mov edx, 0x5c
lea rcx, [rbp + 0x20]
call fcn.1400173e0
mov rbx, qword [rbp + 0x38]
mov r12, qword [rbp + 0x30]
mov r14, qword [rbp + 0x20]
lea rdx, [rbp + 0x80]
lea rcx, [rbp - 0x80]
call fcn.140017c80
nop
lea rdx, [0x140375640]
cmp qword [reloc.WS2_32.dll_getsockopt], 8
cmovae rdx, qword [0x140375640]
mov r8, qword [0x140375650]
mov rcx, rax
call fcn.14000f720
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x50], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x14000e7fc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e7f7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000eee9
call fcn.1401594f8
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], r15w
movabs rcx, 0x7ffffffffffffffe
mov rax, rcx
sub rax, r12
mov rsi, qword [rbp + 0x50]
cmp rax, rsi
jb 0x14000eeef
lea r15, [rbp + 0x20]
cmp rbx, 8
setae byte [rsp + 0x40]
cmovae r15, r14
lea r13, [rbp + 0x40]
cmp qword [rbp + 0x58], 8
cmovae r13, qword [rbp + 0x40]
xor eax, eax
mov qword [rbp], rax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x10], xmm0
lea r14, [rsi + r12]
mov ebx, 7
lea rdi, [rbp]
cmp r14, rbx
jbe 0x14000e8a8
mov rbx, r14
or rbx, 7
cmp rbx, rcx
jbe 0x14000e87a
mov rbx, rcx
jmp 0x14000e886
mov eax, 0xa
cmp rbx, rax
cmovb rbx, rax
mov rdx, rbx
add rdx, 1
mov rax, 0xffffffffffffffff
cmovb rdx, rax
lea rcx, [rbp]
call fcn.140004ca0
mov rdi, rax
mov qword [rbp], rax
mov qword [rbp + 0x10], r14
mov qword [rbp + 0x18], rbx
lea rbx, [r12 + r12]
mov r8, rbx
mov rdx, r15
mov rcx, rdi
call fcn.14015b790
lea rcx, [rdi + rbx]
lea r8, [rsi + rsi]
mov rdx, r13
call fcn.14015b790
xor r15d, r15d
mov word [rdi + r14*2], r15w
mov dword [rbp - 0x28], 7
lea rcx, [rbp]
cmp qword [rbp + 0x18], 8
cmovae rcx, qword [rbp]
lea rdx, [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x14000e9ed
nop dword [rax]
cmp word [rbp + 0xec], 0x2e
je 0x14000e9be
test byte [rbp + 0xc0], 0x10
jne 0x14000e9be
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x10], r15
mov qword [rbp - 8], 7
mov word [rbp - 0x20], r15w
lea rax, [rbp + 0xec]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rax + r8*2], 0
jne 0x14000e950
lea rdx, [rbp + 0xec]
lea rcx, [rbp - 0x20]
call fcn.1400047e0
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, qword [rbp - 0x50]
je 0x14000e997
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rbp - 0x10]
movups xmmword [rdx + 0x10], xmm1
mov r8d, 7
mov word [rbp - 0x20], r15w
add qword [rbp - 0x58], 0x20
jmp 0x14000e9a8
lea r8, [rbp - 0x20]
lea rcx, [rbp - 0x60]
call fcn.14000cec0
mov r8, qword [rbp - 8]
cmp r8, 8
jb 0x14000e9be
inc r8
mov rdx, qword [rbp - 0x20]
lea rcx, [rbp - 0x20]
call fcn.140004d10
lea rdx, [rbp + 0xc0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x14000e910
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rax, qword [rbp - 0x58]
cmp qword [rbp - 0x60], rax
je 0x14000e9ed
mov bl, 1
jmp 0x14000e9ef
xor bl, bl
lea rcx, [rbp]
call fcn.140004420
test bl, bl
je 0x14000ecd4
lea rdx, [rbp + 0x80]
lea rcx, [rbp - 0x20]
call fcn.140004650
nop
mov rcx, qword [rbp + 0xb0]
test rcx, rcx
je 0x14000ea94
movabs rax, 0x7fffffffffffffff
sub rax, rcx
cmp rax, 1
jb 0x14000eee3
lea rax, [rbp + 0xa0]
cmp qword [rbp + 0xb8], 0x10
cmovae rax, qword [rbp + 0xa0]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 1
lea r9, [0x140347110]
lea rcx, [rbp - 0x48]
call fcn.140005940
nop
lea rdx, [rbp - 0x48]
cmp qword [rbp - 0x30], 0x10
cmovae rdx, qword [rbp - 0x48]
mov r8, qword [rbp - 0x38]
lea rcx, [rbp - 0x20]
call fcn.140004a90
nop
lea rcx, [rbp - 0x48]
call fcn.140004550
lea rdi, [0x140375620]
mov rdx, rdi
lea rcx, [rbp - 0x48]
call fcn.140017ae0
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x14000eab6
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.140004a90
nop
lea rcx, [rbp - 0x48]
call fcn.140004550
lea r10, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
jb 0x14000eae7
mov r9, qword [rbp - 0x20]
mov r11, qword [rbp - 0x10]
add r11, r9
mov r10, r9
jmp 0x14000eaf3
lea r11, [rbp - 0x20]
add r11, qword [rbp - 0x10]
lea r9, [rbp - 0x20]
cmp r9, r11
je 0x14000eb27
sub r10, r9
nop dword [rax + rax]
movsx r8d, byte [r9]
lea edx, [r8 - 0x41]
movzx eax, r8b
or al, 0x20
movzx ecx, al
movzx eax, r8b
cmp edx, 0x19
cmova ecx, eax
mov byte [r10 + r9], cl
inc r9
cmp r9, r11
jne 0x14000eb00
mov qword [rbp - 0x28], r15
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x48]
call fcn.140017c80
mov r9, rax
mov r8, qword [rbp - 0x58]
mov rdx, qword [rbp - 0x60]
lea rcx, [rbp - 0x28]
call fcn.14000f930
lea rcx, [rbp - 0x48]
call fcn.140004420
mov rbx, qword [rbp - 0x28]
cmp rbx, qword [rbp - 0x58]
jne 0x14000ebb5
lea rdx, [rbp + 0x80]
lea rcx, [rsp + 0x50]
call fcn.140017c80
nop
mov r8, rdi
mov rdx, rax
lea rcx, [rbp - 0x48]
call fcn.14000f8d0
nop
lea rcx, [rsp + 0x50]
call fcn.140004420
lea r9, [rbp - 0x48]
mov r8, qword [rbp - 0x58]
mov rdx, qword [rbp - 0x60]
lea rcx, [rbp - 0x28]
call fcn.14000f930
mov rbx, qword [rax]
cmp rbx, qword [rbp - 0x58]
cmove rbx, qword [rbp - 0x60]
lea rcx, [rbp - 0x48]
call fcn.140004420
mov rdx, rbx
lea rcx, [rbp]
call fcn.14000f680
nop
lea r8, [rbp]
lea rdx, [rbp + 0x20]
lea rcx, [rsp + 0x50]
call fcn.14000f7b0
mov rdx, rax
lea rcx, [rbp + 0x60]
call fcn.14000ce20
lea rcx, [rsp + 0x50]
call fcn.140004420
mov rdx, qword [0x140375630]
cmp qword [reloc.WS2_32.dll_getsockopt], 8
cmovae rdi, qword [0x140375620]
lea rcx, [rbp]
cmp qword [rbp + 0x18], 8
setae r14b
mov rsi, qword [rbp]
cmovae rcx, rsi
mov qword [rsp + 0x20], rdx
mov r9, rdi
mov rbx, qword [rbp + 0x10]
mov rdx, rbx
call fcn.14000f9f0
cmp rax, 0xffffffffffffffff
je 0x14000ec96
mov qword [rbp - 0x48], r15
movdqa xmm0, xmmword [0x140349cd0]
movdqu xmmword [rbp - 0x38], xmm0
mov word [rbp - 0x48], r15w
cmp rbx, rax
cmovb rax, rbx
lea rdx, [rbp]
test r14b, r14b
cmovne rdx, rsi
mov r8, rax
lea rcx, [rbp - 0x48]
call fcn.1400047e0
nop
lea rdx, [rbp - 0x48]
lea rcx, [rsp + 0x50]
call fcn.140017ae0
mov rdx, rax
mov rcx, qword [rsp + 0x48]
call fcn.1400045b0
lea rcx, [rsp + 0x50]
call fcn.140004550
nop
lea rcx, [rbp - 0x48]
call fcn.140004420
jmp 0x14000ecbc
lea rdx, [rbp]
lea rcx, [rsp + 0x50]
call fcn.140017ae0
mov rdx, rax
mov rcx, qword [rsp + 0x48]
call fcn.1400045b0
lea rcx, [rsp + 0x50]
call fcn.140004550
nop
lea rcx, [rbp]
call fcn.140004420
nop
lea rcx, [rbp - 0x20]
call fcn.140004550
jmp 0x14000ee3e
lea r13, [0x140375600]
mov rdx, r13
lea rcx, [rbp]
call fcn.140017c80
mov rdi, rax
lea r15, [rbp + 0x20]
cmp byte [rsp + 0x40], 0
cmovne r15, qword [rbp + 0x20]
mov r8, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov rax, rcx
sub rax, r8
cmp r12, rax
ja 0x14000ed90
lea rax, [r8 + r12]
mov qword [rdi + 0x10], rax
mov r14, rdi
cmp rcx, 8
jb 0x14000ed23
mov r14, qword [rdi]
lea rax, [r15 + r12*2]
cmp rax, r14
jbe 0x14000ed4b
lea rax, [r14 + r8*2]
cmp r15, rax
ja 0x14000ed4b
cmp r14, r15
ja 0x14000ed40
xor eax, eax
mov esi, eax
jmp 0x14000ed4e
mov rsi, r14
sub rsi, r15
sar rsi, 1
jmp 0x14000ed4e
mov rsi, r12
lea rcx, [r14 + r12*2]
lea r8, [r8*2 + 2]
mov rdx, r14
call fcn.14015b790
lea rbx, [rsi + rsi]
mov r8, rbx
mov rdx, r15
mov rcx, r14
call fcn.14015b790
mov r8, r12
sub r8, rsi
lea rax, [rsi + r12]
lea rdx, [r15 + rax*2]
lea rcx, [r14 + rbx]
add r8, r8
call fcn.14015b790
jmp 0x14000eda8
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r15
mov rdx, r12
mov rcx, rdi
call fcn.14000fca0
mov rdi, rax
xor r15d, r15d
mov qword [rbp - 0x48], r15
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x38], xmm0
movups xmm0, xmmword [rdi]
movups xmmword [rbp - 0x48], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbp - 0x38], xmm1
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], 7
mov word [rdi], r15w
lea r8, [0x140375620]
lea rdx, [rbp - 0x48]
lea rcx, [rsp + 0x50]
call fcn.14000f8d0
mov rdx, rax
lea rcx, [rbp + 0x60]
call fcn.14000ce20
lea rcx, [rsp + 0x50]
call fcn.140004420
nop
lea rcx, [rbp - 0x48]
call fcn.140004420
nop
lea rcx, [rbp]
call fcn.140004420
mov rcx, qword [rsp + 0x48]
cmp rcx, r13
je 0x14000ee3e
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae r13, qword [0x140375600]
mov r8, qword [0x140375610]
mov rdx, r13
call fcn.140004930
mov r8, qword [rsp + 0x70]
lea rdx, [rbp + 0x60]
mov rcx, qword [rsp + 0x78]
call fcn.14000fe60
movzx ebx, al
lea rcx, [rbp + 0x40]
call fcn.140004420
nop
mov rcx, qword [rbp - 0x60]
test rcx, rcx
je 0x14000ee90
mov rdx, qword [rbp - 0x58]
call fcn.14000d2e0
mov r8, qword [rbp - 0x50]
mov rdx, qword [rbp - 0x60]
sub r8, rdx
sar r8, 5
call fcn.140009e50
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], r15
lea rcx, [rbp + 0x60]
call fcn.140004420
nop
lea rcx, [rbp + 0x20]
call fcn.140004420
nop
lea rcx, [rbp + 0xa0]
call fcn.140004550
nop
lea rcx, [rbp + 0x80]
call fcn.140004550
movzx eax, bl
mov rcx, qword [rbp + 0x310]
xor rcx, rsp
call fcn.140158fa0
add rsp, 0x428
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.140001b10
nop
call fcn.14015fc24
int3
call fcn.140001b10
int3