Function at 0x180001df0
Capabilities:
Enumerate files on windows

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x100]
sub rsp, 0x200
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0xe0], rax
xor r12d, r12d
mov r15, rcx
mov qword [rcx], r12
mov edi, 0x104
mov qword [rcx + 8], r12
mov r14, rdx
mov qword [rcx + 0x10], r12
mov ecx, edi
call fcn.1800083e0
mov rdx, r14
lea rcx, [rsp + 0x28]
call fcn.1800038b0
mov rbx, rax
mov rcx, qword [rax + 0x10]
inc rcx
call fcn.180004464
cmp qword [rbx + 0x18], 0xf
mov rsi, rax
mov r8, rbx
jbe 0x180001e6e
mov r8, qword [rbx]
mov rdx, qword [rbx + 0x10]
mov rcx, rsi
inc rdx
movaps xmmword [rsp + 0x1f0], xmm6
call fcn.18000836c
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x180001ebf
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x180001eba
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800021b0
mov rcx, r8
call fcn.18000445c
mov qword [rbx + 0x10], r12
mov rax, rdi
mov qword [rbx + 0x18], 0xf
mov rcx, rsi
mov byte [rbx], r12b
cmp byte [rcx], r12b
je 0x180001ee4
inc rcx
sub rax, 1
jne 0x180001ed4
jmp 0x180001f2b
sub rdi, rax
lea rcx, [rdi + rsi]
test rax, rax
je 0x180001f25
lea r9, [0x18001ac1c]
mov edx, 0x7ffffffe
sub r9, rcx
nop
test rdx, rdx
je 0x180001f28
movzx r8d, byte [r9 + rcx]
test r8b, r8b
je 0x180001f20
mov byte [rcx], r8b
dec rdx
inc rcx
sub rax, 1
jne 0x180001f00
jmp 0x180001f25
test rax, rax
jne 0x180001f28
dec rcx
mov byte [rcx], r12b
lea rdx, [rbp - 0x60]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov rdi, rax
cmp rax, 0xffffffffffffffff
jne 0x180001fc0
mov rdx, qword [r14 + 0x18]
cmp rdx, 0xf
jbe 0x180001f7b
mov rcx, qword [r14]
inc rdx
cmp rdx, 0x1000
jb 0x180001f76
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
add rcx, 0xfffffffffffffff8
cmp rcx, 0x1f
ja 0x1800021b0
mov rcx, r8
call fcn.18000445c
movaps xmm6, xmmword [rsp + 0x1f0]
mov rax, r15
mov byte [r14], r12b
mov qword [r14 + 0x18], 0xf
mov qword [r14 + 0x10], r12
mov rcx, qword [rbp + 0xe0]
xor rcx, rsp
call fcn.180004400
lea r11, [rsp + 0x200]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
movsd xmm6, qword [0x18001aea0]
nop dword [rax + rax]
test byte [rbp - 0x60], 0x10
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x50], r12b
movups xmmword [rsp + 0x70], xmm0
mov byte [rsp + 0x70], r12b
movsd qword [rbp - 0x70], xmm6
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], 0xf
mov qword [rbp - 0x78], 0xf
je 0x18000202d
mov eax, dword [0x18001ac20]
mov word [rsp + 0x70], ax
movzx eax, byte [0x18001ac22]
mov byte [rsp + 0x72], al
mov qword [rbp - 0x80], 3
mov byte [rsp + 0x73], r12b
jmp 0x180002061
mov eax, dword [rbp - 0x40]
xorps xmm0, xmm0
mov dword [rsp + 0x20], eax
mov eax, dword [rbp - 0x44]
mov dword [rsp + 0x24], eax
cvtsi2sd xmm0, qword [rsp + 0x20]
mov eax, dword [str.File]
mov qword [rbp - 0x80], 4
mov dword [rsp + 0x70], eax
mov byte [rsp + 0x74], r12b
movsd qword [rbp - 0x70], xmm0
lea rax, [rbp - 0x34]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], r12b
jne 0x180002070
lea rdx, [rbp - 0x34]
lea rcx, [rsp + 0x50]
call fcn.1800039d0
mov rbx, qword [r15 + 8]
cmp rbx, qword [r15 + 0x10]
je 0x1800020bd
lea rdx, [rsp + 0x50]
mov rcx, rbx
call fcn.1800038b0
lea rcx, [rbx + 0x20]
lea rdx, [rsp + 0x70]
call fcn.1800038b0
movsd xmm0, qword [rbp - 0x70]
add qword [r15 + 8], 0x48
movsd qword [rbx + 0x40], xmm0
jmp 0x1800020cd
lea r8, [rsp + 0x50]
mov rdx, rbx
mov rcx, r15
call fcn.180003d20
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x180002109
mov rcx, qword [rsp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180002104
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800021aa
call fcn.18000445c
mov rdx, qword [rsp + 0x68]
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], r12b
cmp rdx, 0xf
jbe 0x180002153
mov rcx, qword [rsp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000214e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800021aa
call fcn.18000445c
lea rdx, [rbp - 0x60]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x180001fd0
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rdx, qword [r14 + 0x18]
cmp rdx, 0xf
jbe 0x180001f7b
mov rcx, qword [r14]
inc rdx
cmp rdx, 0x1000
jb 0x180001f76
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
jmp 0x180001f6d
call fcn.1800082f4
int3
call fcn.1800082f4
int3