Function at 0x140014278
Capabilities:
Enumerate files on windows

Disassembly:
push rbx
push rsi
push rdi
push r14
push r15
sub rsp, 0x1e0
mov qword [rsp + 0x80], 0xfffffffffffffffe
mov rax, qword [0x14009b3d0]
xor rax, rsp
mov qword [rsp + 0x1d0], rax
mov r14, r8
mov rdi, rdx
mov r15, rcx
xor ebx, ebx
mov qword [rsp + 0x70], rbx
xor esi, esi
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140.dll_Ordinal_316]
nop
lea rcx, [rsp + 0x68]
call qword [sym.imp.mfc140.dll_Ordinal_316]
nop
lea rcx, [rsp + 0x58]
call qword [sym.imp.mfc140.dll_Ordinal_316]
nop
test rdi, rdi
je 0x14001456b
mov rdx, rdi
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140.dll_Ordinal_1507]
mov rax, qword [rsp + 0x50]
mov edx, dword [rax - 0x10]
dec edx
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140.dll_Ordinal_4903]
cmp al, 0x5c
je 0x14001431d
lea rdx, [0x14006f88c]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140.dll_Ordinal_1674]
lea r8, [0x14006fd9c]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x60]
call fcn.1400139d8
nop
mov rdx, rax
lea rcx, [rsp + 0x68]
call qword [sym.imp.mfc140.dll_Ordinal_1504]
nop
lea rcx, [rsp + 0x60]
call qword [sym.imp.mfc140.dll_Ordinal_1032]
lea rdx, [rsp + 0x90]
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov rbx, rax
mov qword [rsp + 0x70], rax
cmp rax, 0xffffffffffffffff
je 0x14001456b
test esi, esi
jne 0x14001456b
lea rcx, [rsp + 0x48]
call qword [sym.imp.mfc140.dll_Ordinal_316]
nop
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call qword [sym.imp.mfc140.dll_Ordinal_1504]
lea rdx, [rsp + 0xbc]
lea rcx, [rsp + 0x48]
call qword [sym.imp.mfc140.dll_Ordinal_1674]
lea rdx, [rsp + 0xbc]
lea rcx, [rsp + 0x60]
call qword [sym.imp.mfc140.dll_Ordinal_310]
nop
mov eax, dword [rsp + 0x90]
and eax, 0x10
test al, al
jne 0x140014529
lea rdx, str.AutoImportLog.txt
lea rcx, [rsp + 0x60]
call qword [sym.imp.mfc140.dll_Ordinal_2899]
test eax, eax
je 0x140014529
lea rcx, [rsp + 0x40]
call qword [sym.imp.mfc140.dll_Ordinal_316]
nop
mov dl, 0x2e
lea rcx, [rsp + 0x48]
call qword [sym.imp.mfc140.dll_Ordinal_12510]
cmp eax, 0xffffffff
je 0x14001451e
lea r8d, [rax + 1]
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x48]
call qword [sym.imp.mfc140.dll_Ordinal_8417]
nop
mov rdx, rax
lea rcx, [rsp + 0x40]
call qword [sym.imp.mfc140.dll_Ordinal_1504]
nop
lea rcx, [rsp + 0x78]
call qword [sym.imp.mfc140.dll_Ordinal_1032]
lea rcx, [rsp + 0x40]
call qword [sym.imp.mfc140.dll_Ordinal_8374]
lea rdx, [0x14006f428]
lea rcx, [rsp + 0x40]
call qword [sym.imp.mfc140.dll_Ordinal_2899]
test eax, eax
je 0x14001450d
lea rdx, [0x14006f42c]
lea rcx, [rsp + 0x40]
call qword [sym.imp.mfc140.dll_Ordinal_2899]
test eax, eax
je 0x14001450d
lea rdx, [0x14006f430]
lea rcx, [rsp + 0x40]
call qword [sym.imp.mfc140.dll_Ordinal_2899]
test eax, eax
je 0x14001450d
lea rdx, str.profile
lea rcx, [rsp + 0x40]
call qword [sym.imp.mfc140.dll_Ordinal_2899]
test eax, eax
je 0x14001450d
lea rdx, [0x14006f3e0]
lea rcx, [rsp + 0x40]
call qword [sym.imp.mfc140.dll_Ordinal_2899]
test eax, eax
je 0x14001450d
mov r8, qword [rsp + 0x48]
lea rdx, str._s_has_an_invalid_file_extension.
lea rcx, [rsp + 0x58]
call qword [sym.imp.mfc140.dll_Ordinal_4648]
mov rdx, r14
mov rcx, qword [rsp + 0x58]
call fcn.140013d2c
mov byte [rsp + 0x30], sil
and qword [rsp + 0x28], 0
and qword [rsp + 0x20], 0
mov r9, qword [rsp + 0x58]
lea edx, [rsi + 0x40]
mov r8d, 0x800436ee
mov ecx, dword [0x1400a3b30]
call qword [sym.imp.TraceAPI.DLL_EvTraceString]
jmp 0x14001451e
mov r8, r14
lea rdx, [rsp + 0x48]
mov rcx, r15
call fcn.1400145c4
nop
lea rcx, [rsp + 0x40]
call qword [sym.imp.mfc140.dll_Ordinal_1032]
lea rdx, [rsp + 0x90]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x14001454f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, 1
cmp eax, 0x12
cmove esi, ecx
lea rcx, [rsp + 0x60]
call qword [sym.imp.mfc140.dll_Ordinal_1032]
nop
lea rcx, [rsp + 0x48]
call qword [sym.imp.mfc140.dll_Ordinal_1032]
jmp 0x140014373
jmp 0x140014572
test rbx, rbx
je 0x140014581
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
lea rcx, [rsp + 0x58]
call qword [sym.imp.mfc140.dll_Ordinal_1032]
nop
lea rcx, [rsp + 0x68]
call qword [sym.imp.mfc140.dll_Ordinal_1032]
nop
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc140.dll_Ordinal_1032]
mov rcx, qword [rsp + 0x1d0]
xor rcx, rsp
call fcn.14005d930
add rsp, 0x1e0
pop r15
pop r14
pop rdi
pop rsi
pop rbx
ret