Function at 0x1800b7f80
Capabilities:
Enumerate files on windows

Disassembly:
push rbp
push r12
push r14
lea rbp, [rsp - 0x170]
sub rsp, 0x270
mov rax, qword [0x180128010]
xor rax, rsp
mov qword [rbp + 0x150], rax
mov rax, qword [rcx + 0x10]
xor r12d, r12d
mov r14, rcx
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], 0xf
mov byte [rsp + 0x20], r12b
lea rcx, [rax - 1]
cmp rax, rcx
jb 0x1800b87ca
cmp qword [r14 + 0x18], 0x10
mov rax, r14
jb 0x1800b7fdd
mov rax, qword [r14]
lea rdx, [rax + rcx]
mov qword [rsp + 0x298], rbx
lea rcx, [rsp + 0x20]
mov r8d, 1
call fcn.1800c0190
mov rdx, qword [rsp + 0x38]
lea rax, [rsp + 0x20]
mov rcx, qword [rsp + 0x20]
cmp rdx, 0x10
cmovae rax, rcx
cmp qword [rsp + 0x30], 1
jne 0x1800b8021
cmp byte [rax], 0x5c
jne 0x1800b8021
xor bl, bl
jmp 0x1800b8023
mov bl, 1
mov qword [rsp + 0x2a0], rsi
mov qword [rsp + 0x2a8], rdi
mov qword [rsp + 0x268], r13
mov qword [rsp + 0x260], r15
cmp rdx, 0x10
jb 0x1800b8076
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b8071
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b87c4
call fcn.1800cd020
mov r8, qword [r14 + 0x10]
mov qword [rbp - 8], r12
mov qword [rbp], 0xf
mov byte [rbp - 0x18], r12b
test bl, bl
je 0x1800b8128
lea rdx, [r8 + 2]
cmp rdx, 0xf
jbe 0x1800b80ad
lea rcx, [rbp - 0x18]
call fcn.1800c6590
mov r8, qword [r14 + 0x10]
mov qword [rbp - 8], r12
cmp qword [r14 + 0x18], 0x10
mov rdx, r14
jb 0x1800b80ba
mov rdx, qword [r14]
lea rcx, [rbp - 0x18]
call fcn.1800bf920
mov r8d, 2
lea rdx, [0x180116d6c]
lea rcx, [rbp - 0x18]
call fcn.1800bf920
lea rdx, [rbp - 0x18]
mov rcx, r14
call fcn.1800bfa40
mov rdx, qword [rbp]
cmp rdx, 0x10
jb 0x1800b81b6
mov rcx, qword [rbp - 0x18]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b81b1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b87be
jmp 0x1800b81b1
lea rdx, [r8 + 1]
cmp rdx, 0xf
jbe 0x1800b8143
lea rcx, [rbp - 0x18]
call fcn.1800c6590
mov r8, qword [r14 + 0x10]
mov qword [rbp - 8], r12
cmp qword [r14 + 0x18], 0x10
mov rdx, r14
jb 0x1800b8150
mov rdx, qword [r14]
lea rcx, [rbp - 0x18]
call fcn.1800bf920
mov r8d, 1
lea rdx, [0x1801102f8]
lea rcx, [rbp - 0x18]
call fcn.1800bf920
lea rdx, [rbp - 0x18]
mov rcx, r14
call fcn.1800bfa40
mov rdx, qword [rbp]
cmp rdx, 0x10
jb 0x1800b81b6
mov rcx, qword [rbp - 0x18]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b81b1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b87d0
call fcn.1800cd020
cmp qword [r14 + 0x18], 0x10
mov rcx, r14
jb 0x1800b81c3
mov rcx, qword [r14]
lea rdx, [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov qword [rsp + 0x60], rax
nop dword [rax]
nop word [rax + rax]
mov qword [rbp - 8], r12
lea rax, [rbp + 0x3c]
mov qword [rbp], 0xf
mov r8, 0xffffffffffffffff
mov byte [rbp - 0x18], 0
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1800b8200
lea rdx, [rbp + 0x3c]
lea rcx, [rbp - 0x18]
call fcn.1800c0190
test byte [rbp + 0x10], 0x10
jne 0x1800b86c4
mov r13, qword [rbp]
lea r15, [rbp - 0x18]
mov rdi, qword [rbp - 0x18]
cmp r13, 0x10
mov rbx, qword [rbp - 8]
cmovae r15, rdi
cmp rbx, 0x10
jae 0x1800b8253
movups xmm0, xmmword [r15]
mov qword [rsp + 0x38], 0xf
movups xmmword [rsp + 0x20], xmm0
jmp 0x1800b82cf
movabs rax, 0x7fffffffffffffff
mov rsi, rbx
or rsi, 0xf
cmp rsi, rax
cmova rsi, rax
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x1800b82a7
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1800b87dc
mov rcx, rax
call fcn.1800cd028
mov rcx, rax
test rax, rax
je 0x1800b87d6
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1800b82b6
test rcx, rcx
je 0x1800b82b3
call fcn.1800cd028
jmp 0x1800b82b6
mov rax, r12
lea r8, [rbx + 1]
mov qword [rsp + 0x20], rax
mov rdx, r15
mov rcx, rax
call fcn.1800d06b0
mov qword [rsp + 0x38], rsi
cmp qword [0x18012b770], 0x10
lea r12, [0x18012b758]
mov r15, qword [0x18012b768]
cmovae r12, qword [0x18012b758]
mov qword [rsp + 0x30], rbx
cmp r15, 0x10
jae 0x1800b830d
movups xmm0, xmmword [r12]
mov qword [rsp + 0x58], 0xf
movups xmmword [rsp + 0x40], xmm0
jmp 0x1800b8388
movabs rax, 0x7fffffffffffffff
mov rsi, r15
or rsi, 0xf
cmp rsi, rax
cmova rsi, rax
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x1800b8361
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1800b87dc
mov rcx, rax
call fcn.1800cd028
mov rcx, rax
test rax, rax
je 0x1800b87d6
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1800b836f
test rcx, rcx
je 0x1800b836d
call fcn.1800cd028
jmp 0x1800b836f
xor eax, eax
lea r8, [r15 + 1]
mov qword [rsp + 0x40], rax
mov rdx, r12
mov rcx, rax
call fcn.1800d06b0
mov qword [rsp + 0x58], rsi
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x50], r15
lea rcx, [rsp + 0x68]
call fcn.180089770
mov rcx, rax
lea rdx, [rsp + 0x20]
call fcn.18008b390
test eax, eax
jne 0x1800b86cc
cmp r13, 0x10
lea r15, [rbp - 0x18]
cmovae r15, rdi
cmp rbx, 0x10
jae 0x1800b83d5
movups xmm0, xmmword [r15]
mov qword [rbp - 0x40], 0xf
movups xmmword [rbp - 0x58], xmm0
jmp 0x1800b844e
movabs rax, 0x7fffffffffffffff
mov rsi, rbx
or rsi, 0xf
cmp rsi, rax
cmova rsi, rax
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x1800b8429
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1800b87e8
mov rcx, rax
call fcn.1800cd028
mov rcx, rax
test rax, rax
je 0x1800b87e2
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1800b8437
test rcx, rcx
je 0x1800b8435
call fcn.1800cd028
jmp 0x1800b8437
xor eax, eax
lea r8, [rbx + 1]
mov qword [rbp - 0x58], rax
mov rdx, r15
mov rcx, rax
call fcn.1800d06b0
mov qword [rbp - 0x40], rsi
cmp qword [0x18012b850], 0x10
lea r12, [0x18012b838]
mov r15, qword [0x18012b848]
cmovae r12, qword [0x18012b838]
mov qword [rbp - 0x48], rbx
cmp r15, 0x10
jae 0x1800b8489
movups xmm0, xmmword [r12]
mov qword [rbp - 0x60], 0xf
movups xmmword [rbp - 0x78], xmm0
jmp 0x1800b8502
movabs rax, 0x7fffffffffffffff
mov rsi, r15
or rsi, 0xf
cmp rsi, rax
cmova rsi, rax
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x1800b84dd
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1800b87e8
mov rcx, rax
call fcn.1800cd028
mov rcx, rax
test rax, rax
je 0x1800b87e2
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1800b84eb
test rcx, rcx
je 0x1800b84e9
call fcn.1800cd028
jmp 0x1800b84eb
xor eax, eax
lea r8, [r15 + 1]
mov qword [rbp - 0x78], rax
mov rdx, r12
mov rcx, rax
call fcn.1800d06b0
mov qword [rbp - 0x60], rsi
lea rdx, [rbp - 0x78]
mov qword [rbp - 0x68], r15
lea rcx, [rbp - 0x38]
call fcn.180089770
mov rcx, rax
lea rdx, [rbp - 0x58]
call fcn.18008b390
test eax, eax
jne 0x1800b86cc
mov rax, qword [r14 + 0x10]
xor r12d, r12d
mov qword [rsp + 0x78], r12
mov rdx, r14
mov qword [rbp - 0x80], 0xf
mov byte [rsp + 0x68], r12b
lea r8, [rax - 2]
cmp rax, r8
cmovb r8, rax
cmp qword [r14 + 0x18], 0x10
jb 0x1800b8558
mov rdx, qword [r14]
lea rcx, [rsp + 0x68]
call fcn.1800c0190
mov r8d, 1
lea rdx, [0x180116bd8]
lea rcx, [rsp + 0x68]
call fcn.1800bf920
cmp r13, 0x10
lea rdx, [rbp - 0x18]
mov r8, rbx
lea rcx, [rsp + 0x40]
cmovae rdx, rdi
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
call fcn.1800bf920
lea rcx, [rsp + 0x20]
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x30], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
cmp qword [rsp + 0x38], 0x10
cmovae rcx, qword [rsp + 0x20]
call fcn.1800d91a4
mov rdx, qword [rsp + 0x38]
cmp rdx, 0x10
jb 0x1800b8625
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b8620
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b87b8
call fcn.1800cd020
mov rdx, qword [rsp + 0x58]
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], 0xf
mov byte [rsp + 0x20], r12b
cmp rdx, 0x10
jb 0x1800b8675
mov rcx, qword [rsp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b8670
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b87b8
call fcn.1800cd020
mov rdx, qword [rbp - 0x80]
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], r12b
cmp rdx, 0x10
jb 0x1800b86c4
mov rcx, qword [rsp + 0x68]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b86bf
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b87b8
call fcn.1800cd020
mov rdi, qword [rbp - 0x18]
mov r13, qword [rbp]
cmp r13, 0x10
jb 0x1800b8703
lea rdx, [r13 + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x1800b86fb
mov rdi, qword [rdi - 8]
add rdx, 0x27
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b87c4
mov rcx, rdi
call fcn.1800cd020
mov rbx, qword [rsp + 0x60]
lea rdx, [rbp + 0x10]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
je 0x1800b8721
xor r12d, r12d
jmp 0x1800b81e0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rdx, qword [r14 + 0x18]
cmp rdx, 0x10
jb 0x1800b8760
mov rcx, qword [r14]
inc rdx
cmp rdx, 0x1000
jb 0x1800b875b
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800b87c4
mov rcx, r8
call fcn.1800cd020
mov r13, qword [rsp + 0x268]
mov rdi, qword [rsp + 0x2a8]
mov rsi, qword [rsp + 0x2a0]
mov r15, qword [rsp + 0x260]
mov rbx, qword [rsp + 0x298]
mov qword [r14 + 0x10], 0
mov qword [r14 + 0x18], 0xf
mov byte [r14], 0
mov rcx, qword [rbp + 0x150]
xor rcx, rsp
call fcn.1800ccd60
add rsp, 0x270
pop r14
pop r12
pop rbp
ret
call fcn.1800dce48
int3
call fcn.1800dce48
int3
call fcn.1800dce48
int3
call fcn.1800c0380
int3
call fcn.1800dce48
int3
call fcn.1800dce48
int3
call fcn.1800883c0
int3
call fcn.1800dce48
int3
call fcn.1800883c0
int3