Function at 0x180008680
Capabilities:
Enumerate files on windows

Disassembly:
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x240]
sub rsp, 0x340
mov rbx, rdx
mov rsi, rcx
xor r15d, r15d
mov r13d, r15d
mov dword [rsp + 0x30], r15d
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x38], xmm0
mov r12d, r15d
mov qword [rsp + 0x48], r15
lea r8, str..txt
lea rcx, [rbp - 0x30]
call fcn.180010c60
cmp qword [rax + 0x18], 7
jbe 0x1800086e5
mov rax, qword [rax]
lea rdx, [rbp - 0x10]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r14, rax
mov qword [rbp + 0x290], rax
lea rcx, [rbp - 0x30]
call fcn.18000f230
mov rdi, qword [rsp + 0x40]
cmp r14, 0xffffffffffffffff
je 0x180008911
test byte [rbp - 0x10], 0x10
jne 0x1800088f3
lea r8, [0x1800aefe8]
mov rdx, rbx
lea rcx, [rsp + 0x50]
call fcn.180010c60
mov rbx, rax
lea rax, [rbp + 0x1c]
mov rdx, 0xffffffffffffffff
inc rdx
cmp word [rax + rdx*2], 0
jne 0x180008740
mov rcx, qword [rbx + 0x10]
mov r8, qword [rbx + 0x18]
mov rax, r8
sub rax, rcx
cmp rdx, rax
ja 0x180008795
lea r15, [rcx + rdx]
mov qword [rbx + 0x10], r15
mov r14, rbx
cmp r8, 7
jbe 0x180008771
mov r14, qword [rbx]
lea rcx, [r14 + rcx*2]
lea r8, [rdx + rdx]
lea rdx, [rbp + 0x1c]
call fcn.18009e720
xor eax, eax
mov word [r14 + r15*2], ax
mov r14, qword [rbp + 0x290]
xor r15d, r15d
jmp 0x1800087ac
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0x1c]
xor r8d, r8d
mov rcx, rbx
call fcn.1800179e0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x58], r15
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 7
mov word [rbx], r15w
or r13d, 2
mov dword [rsp + 0x30], r13d
lea rcx, [rsp + 0x50]
call fcn.18000f230
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x50]
call fcn.1800083a0
nop
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x50]
call fcn.1800159d0
nop
lea rdx, [rbp + 0x1c]
lea rcx, [rsp + 0x70]
call fcn.18000d300
nop
cmp rdi, r12
je 0x180008871
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rdi + 0x10], xmm1
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r15w
movups xmm0, xmmword [rsp + 0x70]
movups xmmword [rdi + 0x20], xmm0
movups xmm1, xmmword [rbp - 0x80]
movups xmmword [rdi + 0x30], xmm1
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], r15w
add rdi, 0x40
mov qword [rsp + 0x40], rdi
jmp 0x18000888d
lea r8, [rsp + 0x50]
mov rdx, rdi
lea rcx, [rsp + 0x38]
call fcn.180017380
mov r12, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x40]
lea rcx, [rsp + 0x70]
call fcn.18000f230
lea rcx, [rsp + 0x50]
call fcn.18000f230
nop
lea rcx, [rbp - 0x50]
call fcn.18000f230
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 7
jbe 0x1800088ec
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800088e7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008a05
call fcn.18007bea8
mov rbx, qword [rbp + 0x288]
lea rdx, [rbp - 0x10]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x180008714
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FindClose]
mov r8, rdi
mov r14, qword [rsp + 0x38]
sub r8, r14
sar r8, 6
xor r9d, r9d
mov rdx, rdi
mov rcx, r14
call fcn.180018e70
mov qword [rsi], r15
mov qword [rsi + 8], r15
mov qword [rsi + 0x10], r15
or r13d, 1
mov dword [rsp + 0x30], r13d
cmp r14, rdi
je 0x180008987
lea rbx, [r14 + 0x20]
nop dword [rax + rax]
mov rax, qword [rsi + 8]
cmp rax, qword [rsi + 0x10]
je 0x18000896c
mov rdx, rbx
mov rcx, rax
call fcn.1800159d0
add qword [rsi + 8], 0x20
jmp 0x18000897a
mov r8, rbx
mov rdx, rax
mov rcx, rsi
call fcn.1800175b0
add rbx, 0x40
lea rax, [rbx - 0x20]
cmp rax, rdi
jne 0x180008950
test r14, r14
je 0x1800089e1
mov rbx, r14
cmp r14, rdi
je 0x1800089ae
lea rcx, [rbx + 0x20]
call fcn.18000f230
mov rcx, rbx
call fcn.18000f230
add rbx, 0x40
cmp rbx, rdi
jne 0x180008994
sub r12, r14
and r12, 0xffffffffffffffc0
mov rax, r14
cmp r12, 0x1000
jb 0x1800089d6
add r12, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800089ff
mov rdx, r12
mov rcx, r14
call fcn.18007bea8
mov rax, rsi
mov rbx, qword [rsp + 0x398]
add rsp, 0x340
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1800868b0
nop
call fcn.1800868b0
int3