Function at 0x1400c64d0
Capabilities:
Enumerate files on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x360
mov rax, qword [0x1402708c0]
xor rax, rsp
mov qword [rsp + 0x350], rax
mov r13, rcx
mov qword [rsp + 0x58], rcx
xor ebx, ebx
mov r15d, ebx
mov dword [rsp + 0x48], ebx
lea r8, [0x1401feec0]
mov rdx, rcx
lea rcx, [rsp + 0xc0]
call fcn.1400c5204
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rbx
lea edi, [rbx + 7]
mov qword [rsp + 0x78], rdi
mov word [rsp + 0x60], bx
lea rcx, [rsp + 0xc0]
cmp qword [rsp + 0xd8], rdi
cmova rcx, qword [rsp + 0xc0]
lea rdx, [rsp + 0x100]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r12, rax
mov qword [rsp + 0x50], rax
cmp rax, 0xffffffffffffffff
je 0x1400c6842
mov esi, 0x1000
test byte [rsp + 0x100], 0x10
je 0x1400c6808
xorps xmm0, xmm0
movups xmmword [rsp + 0x80], xmm0
mov qword [rsp + 0x90], rbx
mov qword [rsp + 0x98], rbx
lea rax, [rsp + 0x12c]
or r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], bx
jne 0x1400c65b2
lea rdx, [rsp + 0x12c]
lea rcx, [rsp + 0x80]
call fcn.14004eb54
nop
lea rdx, [0x1401feec8]
lea rcx, [rsp + 0x80]
call fcn.1400c9a7c
test eax, eax
je 0x1400c67c4
lea rdx, [0x1401feecc]
lea rcx, [rsp + 0x80]
call fcn.1400c9a7c
test eax, eax
je 0x1400c67c4
cmp qword [rsp + 0x90], 8
jbe 0x1400c677e
lea r9, str.Resource
xor edx, edx
lea r8d, [rdx + 8]
lea rcx, [rsp + 0x80]
call fcn.1400c9af0
test eax, eax
jne 0x1400c677e
mov rdx, qword [rsp + 0x70]
test rdx, rdx
je 0x1400c66a6
mov r11, qword [rsp + 0x90]
lea rax, [rsp + 0x80]
cmp qword [rsp + 0x98], rdi
cmova rax, qword [rsp + 0x80]
lea r8, [rsp + 0x60]
cmp qword [rsp + 0x78], rdi
cmova r8, qword [rsp + 0x60]
mov rcx, rdx
cmp r11, rdx
cmovb rcx, r11
test rcx, rcx
je 0x1400c66a1
sub r8, rax
movzx r9d, word [rax + r8]
cmp r9w, word [rax]
jne 0x1400c6764
add rax, 2
sub rcx, 1
jne 0x1400c6688
cmp rdx, r11
jae 0x1400c66ee
lea r8, [0x1401feda0]
mov rdx, r13
lea rcx, [rsp + 0xe0]
call fcn.1400c5204
nop
or r15d, 1
mov dword [rsp + 0x48], r15d
lea r8, [rsp + 0x80]
mov rdx, rax
lea rcx, [rsp + 0xa0]
call fcn.1400c5114
mov rcx, rax
call fcn.1400c85b4
test al, al
mov r14b, 1
jne 0x1400c66f1
mov r14b, bl
test r15b, 1
je 0x1400c6708
and r15d, 0xfffffffe
lea rcx, [rsp + 0xe0]
call fcn.140054cd8
test r14b, r14b
je 0x1400c6720
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x60]
call fcn.1400c5fec
nop
mov rdx, qword [rsp + 0x98]
cmp rdx, rdi
jbe 0x1400c6808
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x80]
mov rax, rcx
cmp rdx, rsi
jb 0x1400c6773
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c69c8
jmp 0x1400c6773
sbb eax, eax
and eax, 0xfffffffe
add eax, 1
jns 0x1400c66ee
jmp 0x1400c66a6
call fcn.140172db0
nop
jmp 0x1400c6808
mov rdx, qword [rsp + 0x98]
cmp rdx, rdi
jbe 0x1400c6808
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x80]
mov rax, rcx
cmp rdx, rsi
jb 0x1400c67bc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c69ce
call fcn.140172db0
nop
jmp 0x1400c6808
mov rdx, qword [rsp + 0x98]
cmp rdx, rdi
jbe 0x1400c6808
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x80]
mov rax, rcx
cmp rdx, rsi
jb 0x1400c6802
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c69d4
call fcn.140172db0
nop
lea rdx, [rsp + 0x100]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x1400c657d
jmp 0x1400c6837
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FindClose]
jmp 0x1400c6847
mov esi, 0x1000
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x1400c6943
movabs rax, 0x7ffffffffffffffe
sub rax, rcx
cmp rax, 1
jb 0x1400c69da
lea rax, [rsp + 0x60]
cmp qword [rsp + 0x78], rdi
cmova rax, qword [rsp + 0x60]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 1
lea r9, [0x1401feda0]
lea r8, [rsp + 0x60]
mov dl, byte [rsp + 0x40]
lea rcx, [rsp + 0xa0]
call fcn.140050b60
nop
lea rdx, [rsp + 0xa0]
cmp qword [rsp + 0xb8], rdi
cmova rdx, qword [rsp + 0xa0]
mov r8, qword [rsp + 0xb0]
mov rcx, r13
call fcn.140054e80
nop
lea rcx, [rsp + 0xa0]
call fcn.140054cd8
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, rdi
jbe 0x1400c6923
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, rsi
jb 0x1400c691d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c69e0
call fcn.140172db0
nop
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], rdi
mov word [rsp + 0x60], bx
lea rcx, [rsp + 0xc0]
call fcn.140054cd8
mov al, 1
jmp 0x1400c699b
mov rdx, qword [rsp + 0x78]
cmp rdx, rdi
jbe 0x1400c697d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, rsi
jb 0x1400c6977
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c69e6
call fcn.140172db0
nop
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], rdi
mov word [rsp + 0x60], bx
lea rcx, [rsp + 0xc0]
call fcn.140054cd8
xor al, al
mov rcx, qword [rsp + 0x350]
xor rcx, rsp
call fcn.140173230
lea r11, [rsp + 0x360]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
call fcn.14017a8e4
nop
call fcn.14017a8e4
nop
call fcn.14017a8e4
nop
call fcn.140054d3c
nop
call fcn.14017a8e4
nop
call fcn.14017a8e4
int3