Function at 0x18003eaf0
Capabilities:
Enumerate files on windows

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2b0]
sub rsp, 0x3b0
mov qword [rsp + 0x28], 0xfffffffffffffffe
mov qword [rsp + 0x408], rbx
mov rax, qword [0x180106010]
xor rax, rsp
mov qword [rbp + 0x2a0], rax
mov r15, r8
mov rdi, rdx
lea rbx, [rcx + 0x40]
cmp byte [rbx], 0
jne 0x18003eb44
mov rcx, rbx
call fcn.18004d480
lea rdx, [rbx + 8]
lea rcx, [rsp + 0x60]
call fcn.180006d90
nop
lea rcx, [rsp + 0x60]
call fcn.180005e24
test al, al
je 0x18003eb68
xor bl, bl
jmp 0x18003ef67
mov edx, 0x10
lea rcx, [rsp + 0x60]
call fcn.180056940
mov r8, rdi
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x60]
call fcn.180056c70
nop
mov qword [rsp + 0x58], 0
mov ecx, 8
call fcn.180086a58
mov r12, rax
mov qword [rsp + 0x30], rax
mov qword [rax], 0xffffffffffffffff
mov qword [rsp + 0x58], rax
mov qword [rbp - 0x40], 0
mov qword [rbp - 0x38], 0
mov qword [rbp - 0x30], 0
mov qword [rbp - 0x28], 0
mov qword [rbp - 0x20], 0
lea rcx, [rbp - 0x18]
call fcn.180005bfc
nop
mov rcx, qword [r12]
cmp rcx, 0xffffffffffffffff
je 0x18003ec02
call qword [sym.imp.KERNEL32.dll_FindClose]
test eax, eax
je 0x18003ec80
mov qword [r12], 0xffffffffffffffff
xor edx, edx
mov r8d, 0x250
lea rcx, [rbp + 0x50]
call fcn.18008a090
lea rcx, [rbp - 0x60]
call fcn.180005be4
mov rcx, rax
lea rdx, [rbp + 0x50]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov qword [r12], rax
cmp rax, 0xffffffffffffffff
jne 0x18003ec75
lea rcx, [rsp + 0x38]
call fcn.180005bfc
nop
lea rdx, [rsp + 0x38]
lea rcx, [rbp - 0x60]
call fcn.18006a450
test al, al
je 0x18003ec6b
lea rcx, [rsp + 0x38]
call fcn.180005be4
mov rcx, rax
lea rdx, [rbp + 0x50]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov qword [r12], rax
lea rcx, [rsp + 0x38]
call fcn.180005bf4
cmp qword [r12], 0xffffffffffffffff
jne 0x18003ed85
mov rcx, qword [r12]
cmp rcx, 0xffffffffffffffff
je 0x18003ec9c
call qword [sym.imp.KERNEL32.dll_FindClose]
test eax, eax
je 0x18003ec9c
mov qword [r12], 0xffffffffffffffff
lea rcx, [rsp + 0x60]
call fcn.180009bf0
lea rdx, [rsp + 0x60]
mov ecx, 0x19
call fcn.180058820
test al, al
je 0x18003ef1f
mov r8, rdi
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x38]
call fcn.180056c70
nop
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.180005e60
nop
lea rcx, [rsp + 0x38]
call fcn.180005bf4
mov rcx, qword [r12]
cmp rcx, 0xffffffffffffffff
je 0x18003ed07
call qword [sym.imp.KERNEL32.dll_FindClose]
test eax, eax
je 0x18003ef1f
mov qword [r12], 0xffffffffffffffff
xor edx, edx
mov r8d, 0x250
lea rcx, [rbp + 0x50]
call fcn.18008a090
lea rcx, [rbp - 0x60]
call fcn.180005be4
mov rcx, rax
lea rdx, [rbp + 0x50]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov qword [r12], rax
cmp rax, 0xffffffffffffffff
jne 0x18003ed7a
lea rcx, [rsp + 0x38]
call fcn.180005bfc
nop
lea rdx, [rsp + 0x38]
lea rcx, [rbp - 0x60]
call fcn.18006a450
test al, al
je 0x18003ed70
lea rcx, [rsp + 0x38]
call fcn.180005be4
mov rcx, rax
lea rdx, [rbp + 0x50]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov qword [r12], rax
lea rcx, [rsp + 0x38]
call fcn.180005bf4
cmp qword [r12], 0xffffffffffffffff
je 0x18003ef1f
lea r8, [rbp - 0x40]
lea rdx, [rbp + 0x50]
call fcn.18005d990
lea rdx, [rbp - 0x18]
lea rcx, [rsp + 0x38]
call fcn.180006d90
nop
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x30]
call fcn.180056c70
nop
lea rcx, [rbp - 0x80]
call fcn.180005bfc
nop
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x30]
call fcn.18003f4b0
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x10]
call fcn.180055dd0
nop
lea rcx, [rbp - 0x80]
call fcn.180005e24
test al, al
jne 0x18003ee60
xor esi, esi
mov rcx, r15
call fcn.180006c48
test rax, rax
je 0x18003ee60
call fcn.180005c20
mov r13, rax
xor r14d, r14d
nop dword [rax]
nop word [rax + rax]
mov rbx, qword [r13]
add rbx, r14
lea rcx, [rbp + 0x10]
call fcn.180005be4
mov rdi, rax
mov rcx, rbx
call fcn.180005be4
test rax, rax
jne 0x18003ee38
test rdi, rdi
sete al
jmp 0x18003ee48
test rdi, rdi
je 0x18003ee4c
mov rdx, rdi
mov rcx, rax
call fcn.180054c90
test al, al
jne 0x18003eecb
inc rsi
add r14, 0x20
mov rcx, r15
call fcn.180006c48
cmp rsi, rax
jb 0x18003ee10
mov rbx, qword [r12]
cmp rbx, 0xffffffffffffffff
je 0x18003eef7
xor edx, edx
mov r8d, 0x250
lea rcx, [rbp + 0x50]
call fcn.18008a090
lea rdx, [rbp + 0x50]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x18003eef7
lea r8, [rbp - 0x40]
lea rdx, [rbp + 0x50]
call fcn.18005d990
nop
lea rcx, [rbp + 0x10]
call fcn.180005bf4
nop
lea rcx, [rbp - 0x80]
call fcn.180005bf4
nop
lea rcx, [rbp + 0x30]
call fcn.180005bf4
nop
lea rcx, [rsp + 0x38]
call fcn.180005bf4
jmp 0x18003ed92
mov bl, 1
lea rcx, [rbp + 0x10]
call fcn.180005bf4
nop
lea rcx, [rbp - 0x80]
call fcn.180005bf4
nop
lea rcx, [rbp + 0x30]
call fcn.180005bf4
nop
lea rcx, [rsp + 0x38]
call fcn.180005bf4
jmp 0x18003ef21
lea rcx, [rbp + 0x10]
call fcn.180005bf4
nop
lea rcx, [rbp - 0x80]
call fcn.180005bf4
nop
lea rcx, [rbp + 0x30]
call fcn.180005bf4
nop
lea rcx, [rsp + 0x38]
call fcn.180005bf4
xor bl, bl
lea rcx, [rbp - 0x18]
call fcn.180005bf4
nop
mov rcx, qword [r12]
cmp rcx, 0xffffffffffffffff
je 0x18003ef47
call qword [sym.imp.KERNEL32.dll_FindClose]
test eax, eax
je 0x18003ef47
mov qword [r12], 0xffffffffffffffff
mov edx, 8
mov rcx, r12
call fcn.1800862a4
mov qword [rsp + 0x58], 0
lea rcx, [rbp - 0x60]
call fcn.180005bf4
nop
lea rcx, [rsp + 0x60]
call fcn.180005bf4
movzx eax, bl
mov rcx, qword [rbp + 0x2a0]
xor rcx, rsp
call fcn.180086280
mov rbx, qword [rsp + 0x408]
add rsp, 0x3b0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret