Function at 0x14000f5d0
Capabilities:
Enumerate files on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x1e8
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x150], xmm6
mov qword [rbp + 0x148], 0xfffffffffffffffe
mov qword [rbp + 0x138], rcx
xorps xmm0, xmm0
movups xmmword [rcx], xmm0
mov qword [rcx + 0x10], 0
mov rsi, qword [rdx + 0x10]
movabs rax, 0x7ffffffffffffffd
cmp rsi, rax
mov qword [rbp + 0x140], r8
mov qword [rbp + 0x130], rdx
jge 0x14000fab4
mov rdi, qword [rdx]
mov r14, qword [rdx + 0x18]
movaps xmmword [rbp - 0x40], xmm0
movaps xmmword [rbp - 0x50], xmm0
lea r15, [rsi + 3]
cmp r15, 0x10
jb 0x14000f662
cmp rsi, 0xfffffffffffffffd
jge 0x14000f671
movabs r12, 0x7fffffffffffffff
jmp 0x14000f68f
mov r13, r8
lea rbx, [rbp - 0x50]
mov r12d, 0xf
jmp 0x14000f6c2
mov rax, r15
or rax, 0xf
cmp rax, 0x17
mov r12d, 0x16
cmovae r12, rax
cmp r12, 0xfff
jb 0x14000f6aa
lea rcx, [r12 + 0x28]
call fcn.140052e40
mov rbx, rax
add rbx, 0x27
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x14000f6b7
lea rcx, [r12 + 1]
call fcn.140052e40
mov rbx, rax
mov qword [rbp - 0x50], rbx
mov r13, qword [rbp + 0x140]
cmp r14, 0x10
cmovb rdi, qword [rbp + 0x130]
mov qword [rbp - 0x40], r15
mov qword [rbp - 0x38], r12
mov rcx, rbx
mov rdx, rdi
mov r8, rsi
call fcn.14008ff30
mov dword [rbx + rsi], 0x2e2a5c
mov r8, qword [r13 + 0x10]
cmp qword [r13 + 0x18], 0x10
mov r9, r13
jb 0x14000f6fd
mov r9, qword [r13]
mov rcx, qword [rbp - 0x40]
mov rax, qword [rbp - 0x38]
mov rdx, rax
sub rdx, rcx
cmp rdx, r8
jae 0x14000f72d
mov qword [rsp + 0x20], r8
lea rcx, [rbp - 0x50]
mov rdx, r8
call fcn.140030ed0
mov rsi, rax
mov r13, qword [rbp + 0x140]
jmp 0x14000f755
lea rdi, [rcx + r8]
mov qword [rbp - 0x40], rdi
lea rsi, [rbp - 0x50]
mov rbx, rsi
cmp rax, 0x10
jb 0x14000f746
mov rbx, qword [rbp - 0x50]
add rcx, rbx
mov rdx, r9
call fcn.14008ff30
mov byte [rbx + rdi], 0
movups xmm0, xmmword [rsi]
movups xmm1, xmmword [rsi + 0x10]
movaps xmmword [rbp + 0x100], xmm1
movaps xmmword [rbp + 0xf0], xmm0
mov qword [rsi + 0x10], 0
mov qword [rsi + 0x18], 0xf
mov byte [rsi], 0
mov rax, qword [rbp - 0x38]
cmp rax, 0x10
mov rbx, qword [rbp + 0x138]
jb 0x14000f7c3
mov rcx, qword [rbp - 0x50]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14000f7be
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14000faaf
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.140052e84
cmp qword [rbp + 0x108], 0x10
jb 0x14000f7d6
mov rcx, qword [rbp + 0xf0]
jmp 0x14000f7dd
lea rcx, [rbp + 0xf0]
lea rdx, [rbp - 0x50]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp rax, 0xffffffffffffffff
je 0x14000f99f
mov rsi, rax
lea rdi, [rbp - 0x24]
xorps xmm6, xmm6
lea r14, [rbp - 0x50]
mov r13, qword [sym.imp.KERNEL32.dll_FindNextFileA]
jmp 0x14000f845
movups xmmword [rdx + 0x10], xmm6
movups xmmword [rdx], xmm6
movaps xmm0, xmmword [rbp + 0x110]
movaps xmm1, xmmword [rbp + 0x120]
movups xmmword [rdx], xmm0
movups xmmword [rdx + 0x10], xmm1
add rdx, 0x20
mov qword [rbx + 8], rdx
mov rcx, rsi
mov rdx, r14
call r13
test eax, eax
je 0x14000f98f
movaps xmmword [rbp + 0x120], xmm6
movaps xmmword [rbp + 0x110], xmm6
mov rcx, rdi
call fcn.14006ede0
test rax, rax
js 0x14000faaa
mov r15, rax
cmp rax, 0xf
ja 0x14000f8a0
mov qword [rbp + 0x120], r15
mov qword [rbp + 0x128], 0xf
lea rcx, [rbp + 0x110]
mov rdx, rdi
mov r8, r15
call fcn.14008ff30
add r15, rbp
add r15, 0x110
jmp 0x14000f919
mov rbx, r15
or rbx, 0xf
cmp rbx, 0x17
mov eax, 0x16
cmovb rbx, rax
cmp rbx, 0xfff
jb 0x14000f8e0
lea rcx, [rbx + 0x28]
call fcn.140052e40
mov r12, rax
add r12, 0x27
and r12, 0xffffffffffffffe0
mov qword [r12 - 8], rax
jmp 0x14000f8ec
lea rcx, [rbx + 1]
call fcn.140052e40
mov r12, rax
mov qword [rbp + 0x110], r12
mov qword [rbp + 0x120], r15
mov qword [rbp + 0x128], rbx
mov rcx, r12
mov rdx, rdi
mov r8, r15
call fcn.14008ff30
add r15, r12
mov rbx, qword [rbp + 0x138]
mov byte [r15], 0
mov rdx, qword [rbx + 8]
cmp rdx, qword [rbx + 0x10]
jne 0x14000f810
mov rcx, rbx
lea r8, [rbp + 0x110]
call fcn.14000b2b0
mov rax, qword [rbp + 0x128]
cmp rax, 0x10
mov rbx, qword [rbp + 0x138]
jb 0x14000f834
mov rcx, qword [rbp + 0x110]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14000f985
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14000faaf
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.140052e84
jmp 0x14000f834
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FindClose]
mov r13, qword [rbp + 0x140]
mov rax, qword [rbp + 0x108]
cmp rax, 0x10
mov rsi, qword [rbp + 0x130]
jb 0x14000f9eb
mov rcx, qword [rbp + 0xf0]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14000f9e6
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14000faaf
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.140052e84
mov rax, qword [rsi + 0x18]
cmp rax, 0x10
jb 0x14000fa29
mov rcx, qword [rsi]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14000fa24
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14000faaf
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.140052e84
mov qword [rsi + 0x10], 0
mov qword [rsi + 0x18], 0xf
mov byte [rsi], 0
mov rax, qword [r13 + 0x18]
cmp rax, 0x10
jb 0x14000fa77
mov rcx, qword [r13]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14000fa72
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14000faaf
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.140052e84
mov qword [r13 + 0x10], 0
mov qword [r13 + 0x18], 0xf
mov byte [r13], 0
mov rax, rbx
movaps xmm6, xmmword [rbp + 0x150]
add rsp, 0x1e8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
call fcn.14002e640
call fcn.140066794
call fcn.14002e640
int3