Function at 0x14000ad80
Capabilities:
Enumerate files on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x180]
sub rsp, 0x280
mov rax, qword [0x1400ce010]
xor rax, rsp
mov qword [rbp + 0x170], rax
mov rbx, rcx
mov rdx, rcx
lea rcx, [rbp + 8]
call fcn.140003a70
nop
lea rax, [rsp + 0x78]
mov qword [rsp + 0x70], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x78], xmm0
mov rdi, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 0x10
jb 0x14000ade9
mov rbx, qword [rbx]
call fcn.140094dc0
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rdi
lea r8, [rsp + 0x40]
mov edx, eax
lea rcx, [rsp + 0x50]
call fcn.140008530
nop
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x20]
call fcn.140009320
nop
lea rdx, [rsp + 0x78]
mov rcx, rax
call fcn.14000c390
nop
lea rcx, [rsp + 0x50]
call fcn.14000c0c0
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov r13, qword [rbp + 0x18]
sub rax, r13
cmp rax, 6
jb 0x14000b421
lea r14, [rbp + 8]
mov r12, qword [rbp + 8]
cmp qword [rbp + 0x20], 0x10
cmovae r14, r12
mov qword [rsp + 0x50], 0
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x60], xmm0
lea rsi, [r13 + 6]
mov ebx, 0xf
lea rdi, [rsp + 0x50]
lea edx, [rbx + 7]
lea rax, [rbx - 0x10]
cmp rsi, rbx
jbe 0x14000aefe
mov rbx, rsi
or rbx, 0xf
cmp rbx, rcx
jbe 0x14000ae9e
mov rbx, rcx
jmp 0x14000aea5
cmp rbx, rdx
cmovb rbx, rdx
mov rcx, rbx
add rcx, 1
cmovb rcx, rax
cmp rcx, 0x1000
jb 0x14000aee8
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000b427
mov rcx, rax
call fcn.140095020
test rax, rax
je 0x14000aee1
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14000aef9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14000aef7
call fcn.140095020
mov rdi, rax
jmp 0x14000aef9
xor edi, edi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rbx
mov r8, r13
mov rdx, r14
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [0x1400aa744]
mov dword [rdi + r13], eax
movzx eax, word [0x1400aa748]
mov word [rdi + r13 + 4], ax
mov byte [rdi + rsi], 0
lea rcx, [rsp + 0x50]
cmp qword [rsp + 0x68], 0x10
cmovae rcx, qword [rsp + 0x50]
lea rdx, [rbp + 0x30]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov r15, rax
mov qword [rsp + 0x70], rax
lea rcx, [rsp + 0x50]
call fcn.140003b50
nop
cmp r15, 0xffffffffffffffff
je 0x14000b3b9
lea r14, [rbp + 8]
cmp qword [rbp + 0x20], 0x10
cmovae r14, r12
xor eax, eax
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
lea rsi, [r13 + 1]
mov edi, 0xf
lea rbx, [rsp + 0x20]
cmp rsi, rdi
jbe 0x14000b020
mov rdi, rsi
or rdi, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rdi, rcx
jbe 0x14000afba
mov rdi, rcx
jmp 0x14000afc7
cmp rdi, 0x16
mov ecx, 0x16
cmovb rdi, rcx
mov rcx, rdi
add rcx, 1
mov rdx, 0xffffffffffffffff
cmovb rcx, rdx
cmp rcx, 0x1000
jb 0x14000b00e
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000b42d
mov rcx, rax
call fcn.140095020
test rax, rax
je 0x14000b407
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x14000b01b
test rcx, rcx
je 0x14000b018
call fcn.140095020
mov rbx, rax
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x38], rdi
mov r8, r13
mov rdx, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
movzx eax, byte [0x1400aa474]
mov byte [rbx + r13], al
mov byte [rbx + rsi], 0
lea rax, [rbp + 0x5c]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x14000b052
lea rdx, [rbp + 0x5c]
lea rcx, [rsp + 0x20]
call fcn.140003d10
xor ebx, ebx
mov qword [rbp - 0x18], rbx
mov qword [rbp - 8], rbx
mov qword [rbp], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x18], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 8], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
lea rcx, [rsp + 0x20]
call fcn.140003b50
mov qword [rbp - 0x38], rbx
mov qword [rbp - 0x28], rbx
mov qword [rbp - 0x20], rbx
mov rdi, qword [rbp - 8]
lea rsi, [rbp - 0x18]
cmp qword [rbp], 0x10
cmovae rsi, qword [rbp - 0x18]
cmp rdi, 0x10
jae 0x14000b0d4
movups xmm0, xmmword [rsi]
movups xmmword [rbp - 0x38], xmm0
mov qword [rbp - 0x20], 0xf
jmp 0x14000b14f
mov rbx, rdi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14000b128
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000b433
mov rcx, rax
call fcn.140095020
mov rcx, rax
test rax, rax
je 0x14000b40e
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14000b136
test rcx, rcx
je 0x14000b134
call fcn.140095020
jmp 0x14000b136
xor eax, eax
mov qword [rbp - 0x38], rax
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp - 0x20], rbx
xor ebx, ebx
mov qword [rbp - 0x28], rdi
lea rdx, [rbp - 0x38]
mov rcx, qword [0x1400dd8f8]
call fcn.140094260
mov r14, rax
test rax, rax
jne 0x14000b18a
lea rdx, [rbp - 0x18]
cmp qword [rbp], 0x10
cmovae rdx, qword [rbp - 0x18]
lea rcx, str._tFailed_to_load:__s_n
call fcn.1400074f0
jmp 0x14000b3b0
mov qword [rbp - 0x38], rbx
mov qword [rbp - 0x28], rbx
mov qword [rbp - 0x20], 0xf
mov byte [rbp - 0x38], 0
lea rax, [rbp + 0x5c]
mov rdi, 0xffffffffffffffff
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000b1b0
lea rdx, [rbp + 0x5c]
lea rcx, [rbp - 0x38]
call fcn.140003bb0
nop
lea rbx, [rbp - 0x38]
mov r15, qword [rbp - 0x38]
mov r12, qword [rbp - 0x20]
cmp r12, 0x10
cmovae rbx, r15
mov rsi, qword [rbp - 0x28]
cmp rsi, 4
jb 0x14000b26e
lea rdi, [rsi + rbx]
lea r8, [rdi - 3]
sub r8, rbx
mov edx, 0x2e
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov r9, rax
test rax, rax
je 0x14000b260
nop word [rax + rax]
xor ecx, ecx
lea rax, str..png
nop dword [rax]
movzx edx, byte [r9 + rcx]
inc rcx
cmp dl, byte [rax + rcx - 1]
jne 0x14000b238
cmp rcx, 4
jne 0x14000b220
xor eax, eax
jmp 0x14000b23d
sbb eax, eax
or eax, 1
test eax, eax
je 0x14000b269
inc r9
lea r8, [rdi - 3]
sub r8, r9
mov edx, 0x2e
mov rcx, r9
call sub.VCRUNTIME140.dll_memchr
mov r9, rax
test rax, rax
jne 0x14000b210
mov r9, 0xffffffffffffffff
jmp 0x14000b271
sub r9, rbx
jmp 0x14000b271
mov r9, rdi
cmp rsi, r9
jb 0x14000b41b
mov rax, rsi
sub rax, r9
mov edx, 4
cmp rax, rdx
cmovb rdx, rax
lea rcx, [rbp - 0x38]
cmp r12, 0x10
cmovae rcx, r15
add rcx, r9
sub rsi, rdx
mov qword [rbp - 0x28], rsi
sub rsi, r9
lea r8, [rsi + 1]
add rdx, rcx
call sub.VCRUNTIME140.dll_memmove
lea rdx, [rbp - 0x38]
lea rcx, [rbp - 0x78]
call fcn.140003a70
mov rdx, rax
lea rcx, [rbp - 0x58]
call fcn.140094a20
mov rdi, rax
mov r8, rax
lea rdx, [rsp + 0x20]
call fcn.14000ce40
mov rbx, qword [rsp + 0x30]
cmp byte [rbx + 0x19], 0
jne 0x14000b2f9
lea r8, [rbx + 0x20]
mov rdx, rdi
call fcn.140007460
test al, al
je 0x14000b390
movabs rax, 0x38e38e38e38e38e
cmp qword [0x1400dd930], rax
je 0x14000b415
mov rbx, qword [0x1400dd928]
lea r15, [0x1400dd928]
mov qword [rsp + 0x78], r15
xor esi, esi
mov qword [rbp - 0x80], rsi
lea ecx, [rsi + 0x48]
call fcn.140095020
nop
mov qword [rax + 0x20], rsi
mov qword [rax + 0x30], rsi
mov qword [rax + 0x38], rsi
movups xmm0, xmmword [rdi]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rax + 0x30], xmm1
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], 0xf
mov byte [rdi], sil
mov qword [rax + 0x40], rsi
mov qword [rax], rbx
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbx
mov word [rax + 0x18], si
mov qword [rbp - 0x80], rsi
movups xmm0, xmmword [rsp + 0x20]
movaps xmmword [rsp + 0x20], xmm0
mov r8, rax
lea rdx, [rsp + 0x20]
mov rcx, r15
call fcn.140006f40
mov rbx, rax
mov qword [rbx + 0x40], r14
lea rcx, [rbp - 0x58]
call fcn.140003b50
nop
lea rcx, [rbp - 0x38]
call fcn.140003b50
mov r15, qword [rsp + 0x70]
mov r12, qword [rbp + 8]
lea rcx, [rbp - 0x18]
call fcn.140003b50
lea rdx, [rbp + 0x30]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x14000af60
lea rcx, [rbp + 8]
call fcn.140003b50
mov rcx, qword [rbp + 0x170]
xor rcx, rsp
call fcn.140095000
lea r11, [rsp + 0x280]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140004500
nop
call fcn.140003da0
nop
call fcn.140003990
int3
call fcn.1400038f0
int3
call fcn.1400038f0
nop
call fcn.1400038f0
int3