Function at 0x18005f8c0
Capabilities:
Enumerate files on windows

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r14
lea rbp, [rsp - 0xf0]
sub rsp, 0x1f0
mov rax, qword [0x18026b028]
xor rax, rsp
mov qword [rbp + 0xe0], rax
mov rdi, qword [0x18039ab68]
lea rax, [rbp - 0x80]
xorps xmm0, xmm0
mov qword [rbp - 0x70], 0
movups xmmword [rbp - 0x80], xmm0
mov esi, 0xf
mov byte [rbp - 0x80], 0
lea rcx, [rsp + 0x20]
mov qword [rbp - 0x68], rsi
mov qword [rsp + 0x20], rax
call fcn.18005fc50
mov rbx, qword [rdi + 0x18]
mov r14, qword [rdi + 0x20]
cmp rbx, r14
je 0x18005f949
nop
mov rcx, rbx
call fcn.180063ad0
add rbx, 0x20
cmp rbx, r14
jne 0x18005f930
mov rax, qword [rdi + 0x18]
mov qword [rdi + 0x20], rax
movabs rax, 0x465628bf659becf2
movabs rcx, 0x74fb78b4058a361a
mov qword [rsp + 0x20], rax
mov rbx, 0xffffffffffffffff
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x20], rcx
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x58], rax
movabs rax, 0x46564fd906b5c6dd
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x20], rcx
mov rax, qword [rsp + 0x20]
movdqa xmm0, xmmword [rsp + 0x50]
mov r12, qword [rbp - 0x70]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x50]
xorps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x50], xmm0
inc rbx
cmp byte [rax + rbx], 0
jne 0x18005f9c4
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r12
cmp rax, rbx
jb 0x18005fc42
cmp qword [rbp - 0x68], 0x10
lea r14, [rsp + 0x28]
mov qword [rsp + 0x220], r13
xorps xmm0, xmm0
mov qword [rsp + 0x228], r15
lea r13, [rbp - 0x80]
cmovae r13, qword [rbp - 0x80]
lea r15, [rbx + r12]
xorps xmm1, xmm1
movups xmmword [rsp + 0x28], xmm0
movdqu xmmword [rsp + 0x38], xmm1
cmp r15, rsi
jbe 0x18005fa51
mov rsi, r15
or rsi, 0xf
cmp rsi, rcx
jbe 0x18005fa34
mov rsi, rcx
jmp 0x18005fa40
mov eax, 0x16
cmp rsi, rax
cmovb rsi, rax
lea rcx, [rsi + 1]
call fcn.1800466e0
mov r14, rax
mov qword [rsp + 0x28], rax
mov r8, r12
mov qword [rsp + 0x38], r15
mov rdx, r13
mov qword [rsp + 0x40], rsi
mov rcx, r14
call fcn.18015f7f0
lea rcx, [r14 + r12]
mov r8, rbx
lea rdx, [rsp + 0x50]
call fcn.18015f7f0
mov byte [r14 + r15], 0
lea rcx, [rsp + 0x28]
cmp qword [rsp + 0x40], 0x10
lea rdx, [rbp - 0x60]
cmovae rcx, qword [rsp + 0x28]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov r15, qword [rsp + 0x228]
mov rbx, rax
mov r13, qword [rsp + 0x220]
cmp rax, 0xffffffffffffffff
je 0x18005fb93
nop word [rax + rax]
test byte [rbp - 0x60], 0x10
jne 0x18005fb75
xor eax, eax
xorps xmm0, xmm0
mov qword [rsp + 0x70], rax
mov r8, 0xffffffffffffffff
mov qword [rsp + 0x78], rax
lea rax, [rbp - 0x34]
movups xmmword [rsp + 0x60], xmm0
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x18005faf0
lea rdx, [rbp - 0x34]
lea rcx, [rsp + 0x60]
call fcn.180069fd0
mov rdx, qword [rdi + 0x20]
cmp rdx, qword [rdi + 0x28]
je 0x18005fb2a
movups xmm0, xmmword [rsp + 0x60]
movups xmm1, xmmword [rsp + 0x70]
movups xmmword [rdx], xmm0
movups xmmword [rdx + 0x10], xmm1
add qword [rdi + 0x20], 0x20
jmp 0x18005fb75
lea r8, [rsp + 0x60]
lea rcx, [rdi + 0x18]
call fcn.180070d80
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x18005fb75
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18005fb70
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005fc3c
call fcn.18015cfec
lea rdx, [rbp - 0x60]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x18005fac0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rdx, qword [rsp + 0x40]
cmp rdx, 0x10
jb 0x18005fbcc
mov rcx, qword [rsp + 0x28]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18005fbc7
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005fc3c
call fcn.18015cfec
mov rdx, qword [rbp - 0x68]
movdqa xmm0, xmmword [0x18024db50]
mov byte [rsp + 0x28], 0
movdqu xmmword [rsp + 0x38], xmm0
cmp rdx, 0x10
jb 0x18005fc16
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18005fc11
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005fc3c
call fcn.18015cfec
mov rcx, qword [rbp + 0xe0]
xor rcx, rsp
call fcn.18015cd30
mov rbx, qword [rsp + 0x230]
add rsp, 0x1f0
pop r14
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.18016c8a4
int3
call fcn.180048fe0
int3