Function at 0x18000f934
Capabilities:
Enumerate files on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x110]
sub rsp, 0x210
mov rax, qword [0x18007f088]
xor rax, rsp
mov qword [rbp + 0x100], rax
mov rdi, rcx
mov qword [rsp + 0x48], rcx
xor r15d, r15d
movabs rsi, 0x7fffffffffffffff
mov rax, rsi
mov rcx, qword [0x180081178]
sub rax, rcx
cmp rax, 2
jb 0x18000fc80
lea r9, [0x180081168]
cmp qword [0x180081180], 0x10
cmovae r9, qword [0x180081168]
mov qword [rsp + 0x30], 2
lea rax, [0x18006800c]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r8, [0x180081168]
mov dl, byte [rsp + 0x40]
lea rcx, [rsp + 0x78]
call fcn.1800062f0
lea rcx, [rsp + 0x78]
cmp qword [rbp - 0x70], 0x10
cmovae rcx, qword [rsp + 0x78]
lea rdx, [rbp - 0x40]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov r14, rax
mov r12d, 0x1000
mov rdx, qword [rbp - 0x70]
cmp rdx, 0x10
jb 0x18000fa33
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, r12
jb 0x18000fa2e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000fc86
call fcn.18003a324
movdqa xmm0, xmmword [0x180068b70]
movdqu xmmword [rbp - 0x78], xmm0
mov byte [rsp + 0x78], r15b
cmp r14, 0xffffffffffffffff
jne 0x18000fa65
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], 0xf
mov byte [rdi], r15b
jmp 0x18000fc4c
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r15
mov qword [rbp - 0x50], r15
lea rax, [rbp - 0x14]
or r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r15b
jne 0x18000fa7c
lea rdx, [rbp - 0x14]
lea rcx, [rbp - 0x68]
call fcn.180002be0
nop
mov r8d, 1
lea rdx, str.d.d.d.d
lea rcx, [rsp + 0x50]
call fcn.1800061d8
nop
xor r8d, r8d
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.180005690
mov bl, al
lea rcx, [rsp + 0x50]
call fcn.1800074d8
test bl, bl
jne 0x18000fb24
mov rdx, qword [rbp - 0x50]
cmp rdx, 0x10
jb 0x18000fb01
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, r12
jb 0x18000fafc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000fc8c
call fcn.18003a324
lea rdx, [rbp - 0x40]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x18000fa65
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FindClose]
jmp 0x18000fa4b
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rax, qword [0x180081178]
sub rsi, rax
cmp rsi, 1
jb 0x18000fc92
lea r9, [0x180081168]
cmp qword [0x180081180], 0x10
cmovae r9, qword [0x180081168]
mov qword [rsp + 0x30], 1
lea rcx, [0x180068020]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea r8, [0x180081168]
mov dl, byte [rsp + 0x40]
lea rcx, [rsp + 0x78]
call fcn.1800062f0
nop
lea rdx, [rbp - 0x68]
cmp qword [rbp - 0x50], 0x10
cmovae rdx, qword [rbp - 0x68]
mov r8, qword [rbp - 0x58]
lea rcx, [rsp + 0x78]
call fcn.18000ddfc
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], r15
movups xmm0, xmmword [rax]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdi + 0x10], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], r15b
mov rdx, qword [rbp - 0x70]
cmp rdx, 0x10
jb 0x18000fc07
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, r12
jb 0x18000fc02
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000fc98
call fcn.18003a324
movdqa xmm0, xmmword [0x180068b70]
movdqu xmmword [rbp - 0x78], xmm0
mov byte [rsp + 0x78], r15b
mov rdx, qword [rbp - 0x50]
cmp rdx, 0x10
jb 0x18000fc4c
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, r12
jb 0x18000fc47
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000fc7a
call fcn.18003a324
mov rax, rdi
mov rcx, qword [rbp + 0x100]
xor rcx, rsp
call fcn.18003a7c0
lea r11, [rsp + 0x210]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call fcn.180040fc4
int3
call fcn.18000ddc0
int3
call fcn.180040fc4
int3
call fcn.180040fc4
nop
call fcn.18000ddc0
nop
call fcn.180040fc4
int3