Function at 0x1800b88d0
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x130]
sub rsp, 0x230
mov rax, qword [0x180126010]
xor rax, rsp
mov qword [rbp + 0x120], rax
mov rax, qword [rcx + 0x10]
xor r15d, r15d
mov rbx, rcx
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], 0xf
lea rcx, [rax - 1]
cmp rax, rcx
jb 0x1800b9072
cmp qword [rbx + 0x18], 0x10
mov rax, rbx
jb 0x1800b893f
mov rax, qword [rbx]
lea rdx, [rax + rcx]
mov r8d, 1
lea rcx, [rsp + 0x60]
call fcn.1800bfba0
mov rdx, qword [rsp + 0x78]
lea rax, [rsp + 0x60]
mov rcx, qword [rsp + 0x60]
cmp rdx, 0x10
cmovae rax, rcx
cmp qword [rsp + 0x70], 1
jne 0x1800b897c
cmp byte [rax], 0x5c
jne 0x1800b897c
xor dil, dil
jmp 0x1800b897f
mov dil, 1
cmp rdx, 0x10
jb 0x1800b89b2
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b89ad
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b90ba
call fcn.1800cd2cc
lea rsi, [0x1801150b8]
movabs r13, 0x7fffffffffffffff
test dil, dil
je 0x1800b8a54
mov rcx, qword [rbx + 0x10]
mov rax, r13
sub rax, rcx
cmp rax, 1
jb 0x1800b9078
cmp qword [rbx + 0x18], 0x10
mov r9, rbx
jb 0x1800b89ed
mov r9, qword [rbx]
mov qword [rsp + 0x30], 1
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x60]
call fcn.1800c27f0
lea rdx, [rsp + 0x60]
mov rcx, rbx
call fcn.1800bf3b0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x1800b8a54
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b8a4f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b90ba
call fcn.1800cd2cc
mov rcx, qword [rbx + 0x10]
mov rax, r13
sub rax, rcx
cmp rax, 3
jb 0x1800b907e
cmp qword [rbx + 0x18], 0x10
mov r9, rbx
jb 0x1800b8a75
mov r9, qword [rbx]
lea rax, [0x180115138]
mov qword [rsp + 0x30], 3
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x60]
call fcn.1800c27f0
cmp qword [rsp + 0x78], 0x10
lea rcx, [rsp + 0x60]
lea rdx, [rbp - 0x20]
cmovae rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov rdx, qword [rsp + 0x78]
mov r12, rax
cmp rdx, 0x10
jb 0x1800b8af4
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b8aef
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b9084
call fcn.1800cd2cc
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], r15b
nop word [rax + rax]
mov qword [rbp - 0x60], r15
lea rax, [rbp + 0xc]
mov qword [rbp - 0x50], r15
mov r8, 0xffffffffffffffff
mov qword [rbp - 0x48], 0xf
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1800b8b30
lea rdx, [rbp + 0xc]
lea rcx, [rbp - 0x60]
call fcn.1800bfba0
mov rcx, qword [rbx + 0x10]
mov rax, r13
sub rax, rcx
test byte [rbp - 0x20], 0x10
je 0x1800b8e19
cmp rax, 1
jb 0x1800b909c
cmp qword [rbx + 0x18], 0x10
mov r9, rbx
jb 0x1800b8b72
mov r9, qword [rbx]
mov qword [rsp + 0x30], 1
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x40]
call fcn.1800c27f0
cmp qword [rbp - 0x48], 0x10
lea rdx, [rbp - 0x60]
mov r8, qword [rbp - 0x50]
lea rcx, [rsp + 0x40]
cmovae rdx, qword [rbp - 0x60]
call fcn.1800bf270
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x58]
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm1
cmp rdx, 0x10
jb 0x1800b8c06
mov rcx, qword [rsp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b8c01
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b908a
call fcn.1800cd2cc
mov rax, qword [rbp - 0x30]
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], 0xf
lea rcx, [rax - 1]
cmp rax, rcx
jb 0x1800b9072
sub rax, rcx
lea rdx, [rbp - 0x40]
mov r8d, 1
cmp rax, r8
cmovb r8, rax
cmp qword [rbp - 0x28], 0x10
cmovae rdx, qword [rbp - 0x40]
add rdx, rcx
lea rcx, [rsp + 0x40]
call fcn.1800bfba0
mov rdx, qword [rsp + 0x58]
lea rax, [rsp + 0x40]
mov rcx, qword [rsp + 0x40]
cmp rdx, 0x10
cmovae rax, rcx
cmp qword [rsp + 0x50], 1
jne 0x1800b8c7e
cmp byte [rax], 0x2e
jne 0x1800b8c7e
xor sil, sil
jmp 0x1800b8c81
mov sil, 1
cmp rdx, 0x10
jb 0x1800b8cb4
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b8caf
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b90ba
call fcn.1800cd2cc
mov r13, qword [rbp - 0x28]
mov rdi, qword [rbp - 0x40]
test sil, sil
je 0x1800b8d7c
mov r14, qword [rbp - 0x30]
lea r15, [rbp - 0x40]
cmp r13, 0x10
cmovae r15, rdi
cmp r14, 0x10
jae 0x1800b8cef
movups xmm0, xmmword [r15]
mov qword [rsp + 0x58], 0xf
movups xmmword [rsp + 0x40], xmm0
jmp 0x1800b8d6a
movabs rax, 0x7fffffffffffffff
mov rsi, r14
or rsi, 0xf
cmp rsi, rax
cmova rsi, rax
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x1800b8d43
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1800b9096
mov rcx, rax
call fcn.1800cd2d4
mov rcx, rax
test rax, rax
je 0x1800b9090
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1800b8d51
test rcx, rcx
je 0x1800b8d4f
call fcn.1800cd2d4
jmp 0x1800b8d51
xor eax, eax
lea r8, [r14 + 1]
mov qword [rsp + 0x40], rax
mov rdx, r15
mov rcx, rax
call fcn.1800d03a0
mov qword [rsp + 0x58], rsi
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x50], r14
call fcn.1800b88d0
xor r15d, r15d
cmp r13, 0x10
jb 0x1800b8db3
lea rdx, [r13 + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x1800b8dab
mov rdi, qword [rdi - 8]
add rdx, 0x27
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b90ba
mov rcx, rdi
call fcn.1800cd2cc
movabs r13, 0x7fffffffffffffff
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x1800b8df8
mov rcx, qword [rbp - 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b8df3
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b90ba
call fcn.1800cd2cc
lea rdx, [rbp - 0x20]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
je 0x1800b8fea
lea rsi, [0x1801150b8]
jmp 0x1800b8b10
cmp rax, 1
jb 0x1800b906c
cmp qword [rbx + 0x18], 0x10
mov r9, rbx
jb 0x1800b8e30
mov r9, qword [rbx]
mov qword [rsp + 0x30], 1
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x40]
call fcn.1800c27f0
cmp qword [rbp - 0x48], 0x10
lea rdx, [rbp - 0x60]
mov r8, qword [rbp - 0x50]
lea rcx, [rsp + 0x40]
cmovae rdx, qword [rbp - 0x60]
call fcn.1800bf270
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x68], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x1800b8ed0
mov rcx, qword [rsp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b8ecb
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b90a2
call fcn.1800cd2cc
cmp qword [rbp - 0x68], 0x10
lea r14, [rbp - 0x80]
mov rsi, qword [rbp - 0x70]
cmovae r14, qword [rbp - 0x80]
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], r15
cmp rsi, 0x10
jae 0x1800b8f0b
movups xmm0, xmmword [r14]
mov qword [rsp + 0x58], 0xf
movups xmmword [rsp + 0x40], xmm0
jmp 0x1800b8f7d
mov rdi, rsi
or rdi, 0xf
cmp rdi, r13
cmova rdi, r13
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x1800b8f55
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1800b90ae
mov rcx, rax
call fcn.1800cd2d4
mov rcx, rax
test rax, rax
je 0x1800b90a8
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1800b8f64
test rcx, rcx
je 0x1800b8f61
call fcn.1800cd2d4
jmp 0x1800b8f64
mov rax, r15
lea r8, [rsi + 1]
mov qword [rsp + 0x40], rax
mov rdx, r14
mov rcx, rax
call fcn.1800d03a0
mov qword [rsp + 0x58], rdi
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x50], rsi
call fcn.18008b3c0
cmp eax, 0x19000
jle 0x1800b8fa6
cmp qword [rbp - 0x68], 0x10
lea rcx, [rbp - 0x80]
cmovae rcx, qword [rbp - 0x80]
call fcn.1800d9174
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x1800b8dbd
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b8fe0
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b90b4
call fcn.1800cd2cc
jmp 0x1800b8dbd
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x1800b902d
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x1800b9028
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800b90ba
mov rcx, r8
call fcn.1800cd2cc
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rcx, qword [rbp + 0x120]
xor rcx, rsp
call fcn.1800cd010
lea r11, [rsp + 0x230]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.180088c60
int3
call fcn.1800bfe50
int3
call fcn.180088c60
int3
call fcn.180088c60
int3
call fcn.1800dc358
int3
call fcn.1800dc358
int3
call fcn.1800dc358
int3
call fcn.180088bc0
int3
call fcn.180088c60
int3
call fcn.1800dc358
int3
call fcn.1800dc358
int3
call fcn.180088bc0
int3
call fcn.1800dc358
int3
call fcn.1800dc358
int3