Function at 0x180134790
Capabilities:
Enumerate files on windows

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2f0]
sub rsp, 0x3f0
mov rax, qword [0x180515618]
xor rax, rsp
mov qword [rbp + 0x2e0], rax
movzx ebx, r9b
mov qword [rsp + 0x78], r8
mov rdi, rdx
mov qword [rbp - 0x80], rdx
mov rsi, rcx
mov qword [rsp + 0x70], rcx
mov qword [rbp - 0x18], rcx
xor r15d, r15d
mov dword [rsp + 0x40], r15d
mov qword [rcx], r15
mov qword [rcx + 8], r15
mov qword [rcx + 0x10], r15
mov r13d, 1
mov dword [rsp + 0x40], r13d
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], r15
mov r8, rdx
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.1800d18d0
test bl, bl
je 0x18013482b
lea rdx, [rsp + 0x48]
mov rcx, rdi
call fcn.1801343e0
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x68], rax
mov rcx, qword [rsp + 0x50]
mov qword [rbp - 0x70], rcx
cmp rax, rcx
je 0x1801353b4
movzx ebx, byte [rsp + 0x44]
mov r8d, 0x16
movabs rdx, 0x8000000000000027
movabs rcx, 0x7fffffffffffffff
mov qword [rbp - 0x10], r15
mov qword [rbp], r15
mov qword [rbp + 8], r15
mov rsi, qword [rax + 0x10]
mov r14, rax
cmp qword [rax + 0x18], 0x10
jb 0x180134883
mov r14, qword [rax]
cmp rsi, 0x10
jae 0x18013489e
movups xmm0, xmmword [r14]
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp + 8], send
jmp 0x180134928
mov rdi, rsi
or rdi, 0xf
cmp rdi, rcx
cmova rdi, rcx
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x1801348e8
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18013545a
mov rcx, rax
call fcn.1801690ac
mov rcx, rax
test rax, rax
je 0x1801354cc
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1801348f7
test rcx, rcx
je 0x1801348f4
call fcn.1801690ac
jmp 0x1801348f7
mov rax, r15
mov qword [rbp - 0x10], rax
lea r8, [rsi + 1]
mov rdx, r14
mov rcx, rax
call fcn.180185a30
mov qword [rbp + 8], rdi
movabs rcx, 0x7fffffffffffffff
movabs rdx, 0x8000000000000027
mov r8d, 0x16
mov qword [rbp], rsi
mov r14, qword [rbp]
mov rax, rcx
sub rax, r14
cmp rax, 2
jb 0x18013544e
lea r12, [rbp - 0x10]
cmp qword [rbp + 8], 0x10
cmovae r12, qword [rbp - 0x10]
mov qword [rbp + 0x70], r15
mov qword [rbp + 0x80], r15
mov qword [rbp + 0x88], r15
lea r15, [r14 + 2]
mov edi, send
lea rsi, [rbp + 0x70]
cmp r15, rdi
jbe 0x1801349dc
mov rdi, r15
or rdi, 0xf
cmp rdi, rcx
jbe 0x180134986
mov rdi, rcx
mov rax, rdx
jmp 0x1801349a8
cmp rdi, 0x16
cmovb rdi, r8
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x1801349c7
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180135466
mov rcx, rax
call fcn.1801690ac
test rax, rax
je 0x180135460
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x1801349d8
test rcx, rcx
je 0x1801349d6
call fcn.1801690ac
mov rsi, rax
jmp 0x1801349d8
xor esi, esi
mov qword [rbp + 0x70], rsi
mov qword [rbp + 0x80], r15
mov qword [rbp + 0x88], rdi
mov r8, r14
mov rdx, r12
mov rcx, rsi
call fcn.180185a30
mov eax, 0x2a5c
mov word [rsi + r14], ax
mov byte [rsi + r15], 0
or r13d, 2
mov dword [rsp + 0x40], r13d
mov r15, qword [rsp + 0x78]
mov rdx, r15
cmp qword [r15 + 0x18], 0x10
jb 0x180134a22
mov rdx, qword [r15]
mov r8, qword [r15 + 0x10]
lea rcx, [rbp + 0x70]
call fcn.1800f0660
xor r15d, r15d
mov qword [rbp + 0xb0], r15
mov qword [rbp + 0xc0], r15
mov qword [rbp + 0xc8], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xb0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xc0], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], send
mov byte [rax], r15b
or r13d, 4
mov dword [rsp + 0x40], r13d
and r13d, 0xfffffffd
mov dword [rsp + 0x40], r13d
mov rdx, qword [rbp + 0x88]
cmp rdx, 0x10
jb 0x180134abb
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180134ab6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18013546c
call fcn.1801690e8
mov qword [rbp + 0x80], r15
mov qword [rbp + 0x88], send
mov byte [rbp + 0x70], 0
lea rcx, [rbp + 0xb0]
cmp qword [rbp + 0xc8], 0x10
cmovae rcx, qword [rbp + 0xb0]
lea rdx, [rbp + 0x1a0]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov rdi, rax
mov qword [rbp - 0x78], rax
cmp rax, 0xffffffffffffffff
je 0x1801352e9
nop word [rax + rax]
test byte [rbp + 0x1a0], 0x10
jne 0x1801352c8
mov qword [rbp + 0x50], r15
mov qword [rbp + 0x60], r15
mov qword [rbp + 0x68], r15
mov qword [rbp + 0x60], r15
mov qword [rbp + 0x68], send
mov byte [rbp + 0x50], 0
lea rax, [rbp + 0x1cc]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x180134b50
lea rdx, [rbp + 0x1cc]
lea rcx, [rbp + 0x50]
call fcn.1800d0120
nop
mov qword [rbp + 0x10], r15
mov qword [rbp + 0x20], r15
mov qword [rbp + 0x28], r15
mov qword [rbp + 0x20], r15
mov qword [rbp + 0x28], send
mov byte [rbp + 0x10], 0
mov qword [rbp + 0x20], r15
mov byte [rbp + 0x10], 0
mov rdi, qword [rbp - 0x80]
mov rdx, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x180134ba0
mov rdx, qword [rdi]
lea rcx, [rbp - 0x10]
cmp qword [rbp + 8], 0x10
cmovae rcx, qword [rbp - 0x10]
mov r8, qword [rbp]
cmp r8, qword [rdi + 0x10]
jne 0x180134bc5
call fcn.180186290
test eax, eax
jne 0x180134bc5
mov al, 1
jmp 0x180134bc7
xor al, al
test al, al
jne 0x180134da9
mov qword [rbp + 0x30], r15
mov qword [rbp + 0x40], r15
mov qword [rbp + 0x48], r15
mov qword [rbp + 0x40], r15
mov qword [rbp + 0x48], send
mov byte [rbp + 0x30], al
mov qword [rbp + 0x40], r15
mov byte [rbp + 0x30], al
mov rcx, qword [rdi + 0x10]
movabs rax, 0x7fffffffffffffff
sub rax, rcx
cmp rax, 1
jb 0x180135484
mov r9, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x180134c19
mov r9, qword [rdi]
mov qword [rsp + 0x30], 1
lea rax, [0x1801e6ba0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov r8, rdi
movzx edx, bl
lea rcx, [rbp + 0x140]
call fcn.1800e4210
or r13d, 8
mov dword [rsp + 0x40], r13d
lea r9, [rbp + 0x30]
lea r8, [rbp + 0x140]
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x180]
call fcn.180138440
nop
lea rcx, [rbp + 0x10]
cmp rcx, rax
je 0x180134ca1
mov qword [rbp + 0x20], r15
mov qword [rbp + 0x28], send
mov byte [rbp + 0x10], 0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x10], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x20], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], send
mov byte [rax], 0
mov rdx, qword [rbp + 0x198]
cmp rdx, 0x10
jb 0x180134ce2
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180134cdd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180135472
call fcn.1801690e8
mov qword [rbp + 0x190], r15
mov qword [rbp + 0x198], send
mov byte [rbp + 0x180], 0
and r13d, 0xfffffff7
mov dword [rsp + 0x40], r13d
mov rdx, qword [rbp + 0x158]
cmp rdx, 0x10
jb 0x180134d45
inc rdx
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180134d40
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180135478
call fcn.1801690e8
mov qword [rbp + 0x150], r15
mov qword [rbp + 0x158], send
mov byte [rbp + 0x140], 0
mov rdx, qword [rbp + 0x48]
cmp rdx, 0x10
jb 0x180134d99
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180134d94
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18013547e
call fcn.1801690e8
mov qword [rbp + 0x40], r15
mov qword [rbp + 0x48], send
mov byte [rbp + 0x30], 0
mov r14, qword [rbp]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r14
cmp rax, 1
jb 0x1801354c0
lea r12, [rbp - 0x10]
cmp qword [rbp + 8], 0x10
cmovae r12, qword [rbp - 0x10]
mov qword [rbp + 0x90], r15
mov qword [rbp + 0xa0], r15
mov qword [rbp + 0xa8], r15
lea r15, [r14 + 1]
mov edi, send
lea rsi, [rbp + 0x90]
cmp r15, rdi
jbe 0x180134e78
mov rdi, r15
or rdi, 0xf
cmp rdi, rcx
jbe 0x180134e1a
mov rdi, rcx
movabs rax, 0x8000000000000027
jmp 0x180134e41
cmp rdi, 0x16
mov eax, 0x16
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x180134e60
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180135490
mov rcx, rax
call fcn.1801690ac
test rax, rax
je 0x18013548a
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x180134e71
test rcx, rcx
je 0x180134e6f
call fcn.1801690ac
mov rsi, rax
jmp 0x180134e71
xor esi, esi
mov qword [rbp + 0x90], rsi
mov qword [rbp + 0xa0], r15
mov qword [rbp + 0xa8], rdi
mov r8, r14
mov rdx, r12
mov rcx, rsi
call fcn.180185a30
mov byte [rsi + r14], 0x5c
mov byte [rsi + r15], 0
or r13d, 0x10
mov dword [rsp + 0x40], r13d
lea r8, [rbp + 0x50]
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 0x160]
call fcn.1800d0c50
nop
and r13d, 0xffffffef
mov dword [rsp + 0x40], r13d
mov rdx, qword [rbp + 0xa8]
cmp rdx, 0x10
jb 0x180134f09
inc rdx
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180134f04
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180135496
call fcn.1801690e8
xor r15d, r15d
mov qword [rbp + 0xa0], r15
mov qword [rbp + 0xa8], send
mov byte [rbp + 0x90], r15b
mov eax, dword [rbp + 0x1c0]
mov dword [rsp + 0x60], eax
mov eax, dword [rbp + 0x1bc]
mov dword [rsp + 0x64], eax
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0xd0], rax
lea rax, [rbp + 0xd8]
mov qword [rbp - 0x68], rax
lea rdx, [rbp + 0x160]
lea rcx, [rbp + 0xd8]
call fcn.1800e3f40
nop
lea rax, [rbp + 0xf8]
mov qword [rbp - 0x60], rax
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0xf8]
call fcn.1800e3f40
nop
lea rax, [rbp + 0x118]
mov qword [rbp - 0x58], rax
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x118]
call fcn.1800e3f40
nop
or r13d, 0x40
mov dword [rsp + 0x40], r13d
mov rcx, qword [rsp + 0x70]
mov rdx, qword [rcx + 8]
cmp rdx, qword [rcx + 0x10]
je 0x180135090
mov qword [rbp - 0x50], rdx
mov rax, qword [rbp + 0xd0]
mov qword [rdx], rax
lea rax, [rdx + 8]
mov qword [rbp - 0x48], rax
mov qword [rax], r15
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], r15
movups xmm0, xmmword [rbp + 0xd8]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rbp + 0xe8]
movups xmmword [rax + 0x10], xmm1
mov qword [rbp + 0xe8], r15
mov qword [rbp + send0], 0xf
mov byte [rbp + 0xd8], r15b
lea rax, [rdx + 0x28]
mov qword [rbp - 0x40], rax
mov qword [rax], r15
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], r15
movups xmm0, xmmword [rbp + 0xf8]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rbp + 0x108]
movups xmmword [rax + 0x10], xmm1
mov qword [rbp + 0x108], r15
mov qword [rbp + 0x110], send
mov byte [rbp + 0xf8], r15b
lea rax, [rdx + 0x48]
mov qword [rbp - 0x38], rax
mov qword [rax], r15
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], r15
movups xmm0, xmmword [rbp + 0x118]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rbp + 0x128]
movups xmmword [rax + 0x10], xmm1
mov qword [rbp + 0x128], r15
mov qword [rbp + 0x130], send
mov byte [rbp + 0x118], r15b
add qword [rcx + 8], 0x68
jmp 0x18013509c
lea r8, [rbp + 0xd0]
call fcn.180133680
and r13d, 0xffffffbf
mov dword [rsp + 0x40], r13d
lea rax, [rbp + 0x118]
mov qword [rbp - 0x30], rax
mov rdx, qword [rbp + 0x130]
cmp rdx, 0x10
jb 0x1801350f1
inc rdx
mov rcx, qword [rbp + 0x118]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1801350ec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18013549c
call fcn.1801690e8
mov qword [rbp + 0x128], r15
mov qword [rbp + 0x130], send
mov byte [rbp + 0x118], 0
lea rax, [rbp + 0xf8]
mov qword [rbp - 0x28], rax
mov rdx, qword [rbp + 0x110]
cmp rdx, 0x10
jb 0x180135156
inc rdx
mov rcx, qword [rbp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180135151
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801354a2
call fcn.1801690e8
mov qword [rbp + 0x108], r15
mov qword [rbp + 0x110], send
mov byte [rbp + 0xf8], 0
lea rax, [rbp + 0xd8]
mov qword [rbp - 0x20], rax
mov rdx, qword [rbp + 0xf0]
cmp rdx, 0x10
jb 0x1801351bb
inc rdx
mov rcx, qword [rbp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1801351b6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801354a8
call fcn.1801690e8
mov qword [rbp + 0xe8], r15
mov qword [rbp + send0], 0xf
mov byte [rbp + 0xd8], 0
mov rdx, qword [rbp + 0x178]
cmp rdx, 0x10
jb 0x180135215
inc rdx
mov rcx, qword [rbp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180135210
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801354ae
call fcn.1801690e8
mov qword [rbp + 0x170], r15
mov qword [rbp + 0x178], send
mov byte [rbp + 0x160], 0
mov rdx, qword [rbp + 0x28]
cmp rdx, 0x10
jb 0x180135269
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180135264
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801354b4
call fcn.1801690e8
mov qword [rbp + 0x20], r15
mov qword [rbp + 0x28], send
mov byte [rbp + 0x10], 0
mov rdx, qword [rbp + 0x68]
cmp rdx, 0x10
jb 0x1801352b4
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1801352af
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801354ba
call fcn.1801690e8
mov qword [rbp + 0x60], r15
mov qword [rbp + 0x68], send
mov byte [rbp + 0x50], 0
mov rdi, qword [rbp - 0x78]
lea rdx, [rbp + 0x1a0]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x180134b10
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindClose]
and r13d, 0xfffffffb
mov dword [rsp + 0x40], r13d
mov rdx, qword [rbp + 0xc8]
cmp rdx, 0x10
jb 0x180135333
inc rdx
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18013532e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801354c6
call fcn.1801690e8
mov qword [rbp + 0xc0], r15
mov qword [rbp + 0xc8], send
mov byte [rbp + 0xb0], 0
mov rdx, qword [rbp + 8]
cmp rdx, 0x10
jb 0x180135387
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180135382
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1801354cc
call fcn.1801690e8
mov qword [rbp], r15
mov qword [rbp + 8], send
mov byte [rbp - 0x10], 0
mov rax, qword [rsp + 0x68]
add rax, 0x20
mov qword [rsp + 0x68], rax
cmp rax, qword [rbp - 0x70]
jne 0x18013484c
mov rsi, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x48]
test rbx, rbx
je 0x180135421
mov rdi, qword [rsp + 0x50]
cmp rbx, rdi
je 0x1801353de
mov rcx, rbx
call fcn.1800cffc0
add rbx, 0x20
cmp rbx, rdi
jne 0x1801353c8
mov rbx, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x58]
sub rdx, rbx
and rdx, 0xffffffffffffffe0
mov rax, rbx
cmp rdx, 0x1000
jb 0x18013540b
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180135454
mov rcx, rbx
call fcn.1801690e8
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], r15
mov rax, rsi
mov rcx, qword [rbp + 0x2e0]
xor rcx, rsp
call fcn.180169060
mov rbx, qword [rsp + 0x448]
add rsp, 0x3f0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1800d0090
nop
call fcn.18019241c
nop
call fcn.1800d0070
nop
call fcn.18019241c
int3
call fcn.1800d0070
nop
call fcn.18019241c
nop
call fcn.18019241c
nop
call fcn.18019241c
nop
call fcn.18019241c
nop
call fcn.1800d0090
nop
call fcn.18019241c
int3
call fcn.1800d0070
nop
call fcn.18019241c
nop
call fcn.18019241c
nop
call fcn.18019241c
nop
call fcn.18019241c
nop
call fcn.18019241c
nop
call fcn.18019241c
nop
call fcn.18019241c
nop
call fcn.1800d0090
nop
call fcn.18019241c
nop
call fcn.18019241c
int3