Function at 0x180002480
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x228]
sub rsp, 0x328
mov qword [rsp + 0x38], 0xfffffffffffffffe
mov rax, qword [0x18003e0a8]
xor rax, rsp
mov qword [rbp + 0x210], rax
movzx r12d, r9b
mov r14, r8
mov r13, rdx
xor ebx, ebx
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], bx
mov rdx, rcx
lea rcx, [rsp + 0x60]
call fcn.180002b30
nop
lea rcx, [rsp + 0x60]
call fcn.180002ea0
test eax, eax
jne 0x180002506
lea r8d, [rbx + 1]
lea rdx, [0x180027654]
lea rcx, [rsp + 0x60]
call fcn.180001b70
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], rbx
movdqa xmm0, xmmword [0x180027690]
movdqu xmmword [rsp + 0x50], xmm0
mov word [rsp + 0x40], bx
lea rdx, [0x1800277a0]
lea rcx, [rsp + 0x40]
call fcn.180002b30
nop
movdqa xmm0, xmmword [0x180027690]
movdqu xmmword [rbp - 0x70], xmm0
mov word [rbp - 0x80], bx
mov rdx, r13
lea rcx, [rbp - 0x80]
call fcn.180002b30
nop
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x80]
call fcn.180002ee0
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x1800025ab
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800025a6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180002b0a
call fcn.18000b848
movdqa xmm0, xmmword [0x180027690]
movdqu xmmword [rbp - 0x70], xmm0
mov word [rbp - 0x80], bx
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x1800025fe
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800025f9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180002b10
call fcn.18000b848
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x50], xmm0
mov rsi, qword [rsp + 0x70]
lea rdi, [rsp + 0x60]
cmp qword [rsp + 0x78], 8
cmovae rdi, qword [rsp + 0x60]
movabs rax, 0x7ffffffffffffffe
cmp rsi, 8
jae 0x18000263d
movups xmm0, xmmword [rdi]
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x48], 7
jmp 0x180002675
mov rbx, rsi
or rbx, 7
cmp rbx, rax
cmova rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rbp - 0x60]
call fcn.180001b00
mov qword [rbp - 0x60], rax
lea r8, [rsi*2 + 2]
mov rdx, rdi
mov rcx, rax
call fcn.18000d6b0
mov qword [rbp - 0x48], rbx
xor ebx, ebx
mov qword [rbp - 0x50], rsi
mov r8d, 3
lea rdx, [0x180027658]
lea rcx, [rbp - 0x60]
call fcn.180001b70
lea rcx, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae rcx, qword [rbp - 0x60]
lea rdx, [rbp - 0x40]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r15, rax
cmp rax, 0xffffffffffffffff
je 0x1800029d3
test byte [rbp - 0x40], 0x10
je 0x1800027de
cmp word [rbp - 0x14], 0x2e
je 0x1800029b1
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rbx
mov rsi, qword [rsp + 0x70]
lea rdi, [rsp + 0x60]
cmp qword [rsp + 0x78], 8
cmovae rdi, qword [rsp + 0x60]
cmp rsi, 8
jae 0x180002702
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x58], 7
jmp 0x180002745
mov rbx, rsi
or rbx, 7
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
cmova rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rsp + 0x40]
call fcn.180001b00
mov qword [rsp + 0x40], rax
lea r8, [rsi*2 + 2]
mov rdx, rdi
mov rcx, rax
call fcn.18000d6b0
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x50], rsi
lea rax, [rbp - 0x14]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x180002755
lea rdx, [rbp - 0x14]
lea rcx, [rsp + 0x40]
call fcn.180001b70
test r12b, r12b
je 0x180002794
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rcx, qword [rsp + 0x40]
movzx r9d, r12b
mov r8, r14
mov rdx, r13
call fcn.180002480
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x1800029b1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800029ac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180002b04
jmp 0x1800029ac
lea rdx, [rbp - 0x14]
lea rcx, [rbp - 0x80]
call fcn.1800023a0
nop
lea rcx, [rbp - 0x80]
call fcn.180003270
xor dil, dil
mov rax, qword [rsp + 0x20]
mov r11, qword [rbp - 0x68]
mov r10, qword [rbp - 0x80]
mov rbx, qword [rsp + 0x28]
cmp rax, rbx
je 0x180002859
nop
mov r9, rax
cmp qword [rax + 0x18], 8
jb 0x18000281d
mov r9, qword [rax]
lea rcx, [rbp - 0x80]
cmp r11, 8
cmovae rcx, r10
sub r9, rcx
nop dword [rax]
movzx r8d, word [rcx]
movzx edx, word [rcx + r9]
sub r8d, edx
jne 0x180002846
add rcx, 2
test edx, edx
jne 0x180002830
test r8d, r8d
je 0x180002856
add rax, 0x20
cmp rax, rbx
jne 0x180002810
jmp 0x180002859
mov dil, 1
test dil, dil
je 0x180002976
mov rsi, qword [rsp + 0x70]
lea rdi, [rsp + 0x60]
cmp qword [rsp + 0x78], 8
cmovae rdi, qword [rsp + 0x60]
cmp rsi, 8
jae 0x180002891
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x58], 7
jmp 0x1800028d4
mov rbx, rsi
or rbx, 7
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
cmova rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rsp + 0x40]
call fcn.180001b00
mov qword [rsp + 0x40], rax
lea r8, [rsi*2 + 2]
mov rdx, rdi
mov rcx, rax
call fcn.18000d6b0
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x50], rsi
lea rax, [rbp - 0x14]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x1800028e4
lea rdx, [rbp - 0x14]
lea rcx, [rsp + 0x40]
call fcn.180001b70
mov rax, qword [r14 + 8]
cmp qword [r14 + 0x10], rax
je 0x18000291b
lea rdx, [rsp + 0x40]
mov rcx, rax
call fcn.180001790
add qword [r14 + 8], 0x20
jmp 0x18000292c
lea r8, [rsp + 0x40]
mov rdx, rax
mov rcx, r14
call fcn.1800012e0
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x18000296e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180002969
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180002b16
call fcn.18000b848
mov r10, qword [rbp - 0x80]
mov r11, qword [rbp - 0x68]
cmp r11, 8
jb 0x1800029b1
lea rdx, [r11*2 + 2]
mov rax, r10
cmp rdx, 0x1000
jb 0x1800029a9
add rdx, 0x27
mov r10, qword [r10 - 8]
sub rax, r10
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180002b1c
mov rcx, r10
call fcn.18000b848
lea rdx, [rbp - 0x40]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x1800029c9
xor ebx, ebx
jmp 0x1800026b4
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x180002a13
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180002a0e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180002b22
call fcn.18000b848
movdqa xmm0, xmmword [0x180027690]
movdqu xmmword [rbp - 0x50], xmm0
xor esi, esi
mov word [rbp - 0x60], si
mov rbx, qword [rsp + 0x20]
test rbx, rbx
je 0x180002a9d
mov rdi, qword [rsp + 0x28]
cmp rbx, rdi
je 0x180002a56
nop word [rax + rax]
mov rcx, rbx
call fcn.1800019d0
add rbx, 0x20
cmp rbx, rdi
jne 0x180002a40
mov rbx, qword [rsp + 0x20]
mov rdx, qword [rsp + 0x30]
sub rdx, rbx
and rdx, 0xffffffffffffffe0
mov rax, rbx
cmp rdx, 0x1000
jb 0x180002a87
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180002b28
mov rcx, rbx
call fcn.18000b848
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], rsi
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x180002adb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180002ad6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180002afe
call fcn.18000b848
mov rcx, qword [rbp + 0x210]
xor rcx, rsp
call fcn.18000b960
add rsp, 0x328
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.180010294
nop
call fcn.180010294
nop
call fcn.180010294
nop
call fcn.180010294
nop
call fcn.180010294
nop
call fcn.180010294
nop
call fcn.180010294
nop
call fcn.180010294
int3