Function at 0x1800165e0
Capabilities:
Enumerate files on windows

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2b8]
sub rsp, 0x3b8
mov r13, rdx
mov r14, rcx
mov dword [rbp + 0x318], 1
xor r15d, r15d
mov qword [rcx], r15
mov qword [rcx + 8], r15
mov qword [rcx + 0x10], r15
mov edi, 1
mov dword [rbp + 0x318], edi
lea rax, [rbp - 0x70]
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x58], r15
mov r8d, edi
lea rdx, [0x1800554b4]
lea rcx, [rbp - 0x70]
call fcn.1800097c0
nop
mov rdx, r13
lea rcx, [rbp - 8]
call fcn.180008d30
nop
lea r8, [rbp - 0x70]
mov rdx, rax
lea rcx, [rbp - 0x30]
call fcn.180015fe0
cmp qword [rax + 0x18], 8
jb 0x180016686
mov rax, qword [rax]
lea rdx, [rbp + 0x60]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rbx, rax
mov qword [rsp + 0x40], rax
mov rdx, qword [rbp - 0x18]
cmp rdx, 8
jb 0x1800166db
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800166d6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180016afa
call fcn.180020ec0
movdqa xmm0, xmmword [0x1800564f0]
movdqu xmmword [rbp - 0x20], xmm0
mov word [rbp - 0x30], r15w
cmp rbx, 0xffffffffffffffff
je 0x180016a8a
lea rbx, [0x1800554b8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], r15
lea rax, [rbp + 0x8c]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x180016720
lea rdx, [rbp + 0x8c]
lea rcx, [rsp + 0x70]
call fcn.1800097c0
nop
or edi, 2
mov dword [rbp + 0x318], edi
lea r8, [rsp + 0x70]
mov r15, qword [rbp - 0x78]
cmp r15, 8
setae r12b
mov rsi, qword [rsp + 0x70]
cmovae r8, rsi
cmp qword [rbp - 0x80], 1
jne 0x180016797
mov edx, 1
mov rcx, rbx
sub r8, rbx
movzx eax, word [rcx]
cmp word [rcx + r8], ax
jne 0x180016797
add rcx, 2
sub rdx, 1
jne 0x180016772
mov r10, qword [rsp + 0x68]
mov r9, qword [rsp + 0x50]
xor bl, bl
jmp 0x180016830
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xor eax, eax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rax
lea rax, [rbp + 0x8c]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x1800167c0
lea rdx, [rbp + 0x8c]
lea rcx, [rsp + 0x50]
call fcn.1800097c0
or edi, 4
mov dword [rbp + 0x318], edi
lea r8, [rsp + 0x50]
mov r9, qword [rsp + 0x50]
mov r10, qword [rsp + 0x68]
cmp r10, 8
cmovae r8, r9
cmp qword [rsp + 0x60], 2
jne 0x18001682e
mov edx, 2
lea rax, [0x1800554bc]
mov rcx, rax
sub r8, rax
movzx eax, word [rcx]
cmp word [rcx + r8], ax
jne 0x18001682e
add rcx, 2
sub rdx, 1
jne 0x180016816
xor bl, bl
jmp 0x180016830
mov bl, 1
test dil, 4
je 0x18001687b
and edi, 0xfffffffb
mov dword [rbp + 0x318], edi
cmp r10, 8
jb 0x18001687b
lea rdx, [r10*2 + 2]
mov rax, r9
cmp rdx, 0x1000
jb 0x180016872
add rdx, 0x27
mov r9, qword [r9 - 8]
sub rax, r9
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180016b00
mov rcx, r9
call fcn.180020ec0
nop
test dil, 2
je 0x1800168c4
and edi, 0xfffffffd
mov dword [rbp + 0x318], edi
test r12b, r12b
je 0x1800168c4
lea rdx, [r15*2 + 2]
mov rax, rsi
cmp rdx, 0x1000
jb 0x1800168bc
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180016aee
mov rcx, rsi
call fcn.180020ec0
test bl, bl
je 0x180016a71
lea rax, [rbp + 0x8c]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x1800168e0
mov rsi, qword [rbp + 0x310]
xorps xmm0, xmm0
xor r15d, r15d
lea rdx, [rbp + 0x8c]
test rsi, rsi
jne 0x1800169a5
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], r15
lea rcx, [rsp + 0x20]
call fcn.1800097c0
nop
mov rdx, qword [r14 + 8]
cmp rdx, qword [r14 + 0x10]
je 0x18001694d
movups xmm0, xmmword [rsp + 0x20]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rsp + 0x30]
movups xmmword [rdx + 0x10], xmm1
lea edx, [rsi + 7]
mov word [rsp + 0x20], r15w
add qword [r14 + 8], 0x20
jmp 0x18001695f
lea r8, [rsp + 0x20]
mov rcx, r14
call fcn.18000ab30
mov rdx, qword [rsp + 0x38]
cmp rdx, 8
jb 0x180016a74
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x20]
cmp rdx, 0x1000
mov rax, rcx
jb 0x18001699b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180016aee
call fcn.180020ec0
jmp 0x180016a74
lea rax, [rbp - 0x50]
mov qword [rsp + 0x48], rax
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], r15
mov qword [rbp - 0x38], r15
lea rcx, [rbp - 0x50]
call fcn.1800097c0
nop
mov rdx, r13
lea rcx, [rbp + 0x18]
call fcn.180008d30
nop
lea r8, [rbp - 0x50]
mov rdx, rax
lea rcx, [rbp + 0x38]
call fcn.180015fe0
mov rcx, rax
call rsi
test al, al
je 0x180016a74
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], r15
lea rax, [rbp + 0x8c]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rax + r8*2], 0
jne 0x180016a10
lea rdx, [rbp + 0x8c]
lea rcx, [rsp + 0x20]
call fcn.1800097c0
nop
mov rdx, qword [r14 + 8]
cmp rdx, qword [r14 + 0x10]
je 0x180016a5a
movups xmm0, xmmword [rsp + 0x20]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rsp + 0x30]
movups xmmword [rdx + 0x10], xmm1
mov edx, 7
mov word [rsp + 0x20], r15w
add qword [r14 + 8], 0x20
jmp 0x180016a6c
lea r8, [rsp + 0x20]
mov rcx, r14
call fcn.18000ab30
mov rdx, qword [rsp + 0x38]
jmp 0x18001695f
xor r15d, r15d
lea rdx, [rbp + 0x60]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jmp 0x1800166f1
mov rdx, qword [r13 + 0x18]
cmp rdx, 8
jb 0x180016ac6
lea rdx, [rdx*2 + 2]
mov rcx, qword [r13]
cmp rdx, 0x1000
jb 0x180016ac1
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180016af4
mov rcx, r8
call fcn.180020ec0
mov rax, r14
mov word [r13], r15w
mov qword [r13 + 0x18], 7
mov qword [r13 + 0x10], r15
add rsp, 0x3b8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.180027fe0
nop
call fcn.180027fe0
nop
call fcn.180027fe0
nop
call fcn.180027fe0
int3