Function at 0x180007ea0
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x320]
sub rsp, 0x420
mov rax, qword [0x1800801c0]
xor rax, rsp
mov qword [rbp + 0x310], rax
mov r14, r8
mov qword [rsp + 0x48], r8
mov r12, rdx
mov qword [rsp + 0x58], rdx
mov r15, rcx
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x68], r8
xor ebx, ebx
mov rdx, rcx
cmp qword [rcx + 0x18], 0xf
jbe 0x180007f01
mov rdx, qword [rcx]
lea rcx, [rbp + 0xa0]
call fcn.1800079b0
mov rcx, rax
mov r8, qword [rax + 0x10]
mov r10, qword [rax + 0x18]
mov rax, r10
sub rax, r8
cmp rax, 1
jb 0x180007f4a
lea r9, [r8 + 1]
mov qword [rcx + 0x10], r9
mov rdx, rcx
cmp r10, 7
jbe 0x180007f38
mov rdx, qword [rcx]
mov eax, dword [str.._]
mov word [rdx + r8*2], ax
mov word [rdx + r9*2], bx
jmp 0x180007f60
mov qword [rsp + 0x20], 1
mov edx, 1
call fcn.1800091d0
mov rcx, rax
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], rbx
mov qword [rbp + 0x18], rbx
movups xmm0, xmmword [rcx]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rbp + 0x10], xmm1
mov qword [rcx + 0x10], rbx
mov qword [rcx + 0x18], 7
mov word [rcx], bx
mov rdx, qword [rbp + 0xb8]
cmp rdx, 7
jbe 0x180007fd3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007fce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800086a3
call fcn.18004224c
mov qword [rbp + 0xb0], rbx
mov qword [rbp + 0xb8], 7
mov word [rbp + 0xa0], bx
lea rcx, [rbp]
cmp qword [rbp + 0x18], 7
cmova rcx, qword [rbp]
lea rdx, [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r13, rax
mov qword [rsp + 0x40], rax
cmp rax, 0xffffffffffffffff
jne 0x1800080c7
mov rdx, qword [rbp + 0x18]
cmp rdx, 7
jbe 0x180008059
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008054
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008691
call fcn.18004224c
mov qword [rbp + 0x10], rbx
mov qword [rbp + 0x18], 7
mov word [rbp], bx
mov rcx, qword [r12 + 0x38]
test rcx, rcx
je 0x180008084
cmp rcx, r12
mov rax, qword [rcx]
setne dl
call qword [rax + 0x20]
mov qword [r12 + 0x38], rbx
mov rcx, qword [r14 + 0x38]
test rcx, rcx
je 0x18000809d
cmp rcx, r14
mov rax, qword [rcx]
setne dl
call qword [rax + 0x20]
mov qword [r14 + 0x38], rbx
mov rcx, qword [rbp + 0x310]
xor rcx, rsp
call fcn.180041db0
mov rbx, qword [rsp + 0x478]
add rsp, 0x420
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea rdx, [rbp + 0xc0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x18000854b
nop
mov rcx, r15
cmp qword [r15 + 0x18], 0xf
jbe 0x1800080ed
mov rcx, qword [r15]
mov rax, qword [r15 + 0x10]
movzx esi, byte [rax + rcx - 1]
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
mov r9d, 0xffffffff
lea r8, [rbp + 0xec]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
movsxd rdi, eax
test eax, eax
jg 0x180008147
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], rbx
mov edi, 0xf
mov qword [rbp + 0x58], rdi
mov byte [rbp + 0x40], 0
jmp 0x1800081e0
mov rcx, rdi
call fcn.180042280
mov rbx, rax
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rax
mov r9d, 0xffffffff
lea r8, [rbp + 0xec]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
xor eax, eax
mov qword [rbp + 0x70], rax
mov qword [rbp + 0x78], rax
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rbx + r8], al
jne 0x1800081a0
mov rdx, rbx
lea rcx, [rbp + 0x60]
call fcn.1800024f0
mov rcx, rbx
call fcn.18004224c
movups xmm0, xmmword [rbp + 0x60]
movups xmmword [rbp + 0x40], xmm0
movups xmm1, xmmword [rbp + 0x70]
movups xmmword [rbp + 0x50], xmm1
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rdi, xmm0
movq rbx, xmm1
lea r8, [0x180075584]
cmp sil, 0x5c
lea rax, [0x180074c3c]
cmove r8, rax
mov rdx, r15
lea rcx, [rbp + 0x60]
call fcn.180002600
nop
lea rdx, [rbp + 0x40]
cmp rdi, 0xf
cmova rdx, qword [rbp + 0x40]
mov r8, rbx
mov rcx, rax
call fcn.180003c70
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
xor ebx, ebx
mov qword [rbp + 0x30], rbx
mov qword [rbp + 0x38], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x30], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x180008284
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000827f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800086a9
call fcn.18004224c
mov qword [rbp + 0x70], rbx
mov qword [rbp + 0x78], 0xf
mov byte [rbp + 0x60], 0
mov rcx, qword [r14 + 0x38]
test rcx, rcx
je 0x1800082ab
mov rax, qword [rcx]
call qword [rax + 0x10]
test al, al
jne 0x1800085ba
mov r13, qword [rbp + 0x58]
mov rsi, qword [rbp + 0x40]
cmp dword [rbp + 0xc0], 0x10
jne 0x18000859d
lea rax, [rbp + 0x40]
cmp r13, 0xf
cmova rax, rsi
mov rcx, qword [rbp + 0x50]
cmp rcx, 1
jne 0x1800082df
cmp byte [rax], 0x2e
je 0x1800084ac
lea rax, [rbp + 0x40]
cmp r13, 0xf
cmova rax, rsi
cmp rcx, 2
jne 0x1800082fc
cmp word [rax], 0x2e2e
je 0x1800084ac
lea rax, [rbp - 0x80]
mov qword [rsp + 0x70], rax
mov qword [rbp - 0x48], rbx
mov rcx, qword [r14 + 0x38]
test rcx, rcx
je 0x18000831f
mov rax, qword [rcx]
lea rdx, [rbp - 0x80]
call qword [rax]
mov qword [rbp - 0x48], rax
lea rax, [rbp - 0x40]
mov qword [rsp + 0x78], rax
mov qword [rbp - 8], rbx
mov rcx, qword [r12 + 0x38]
test rcx, rcx
je 0x180008343
mov rax, qword [rcx]
lea rdx, [rbp - 0x40]
call qword [rax]
mov qword [rbp - 8], rax
mov r14, qword [rbp + 0x30]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r14
cmp rax, 1
jb 0x1800086c1
lea r12, [rbp + 0x20]
cmp qword [rbp + 0x38], 0xf
cmova r12, qword [rbp + 0x20]
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], rbx
mov qword [rbp + 0x98], rbx
lea r15, [r14 + 1]
mov edi, 0xf
lea rbx, [rbp + 0x80]
cmp r15, rdi
jbe 0x180008419
mov rdi, r15
or rdi, 0xf
cmp rdi, rcx
jbe 0x1800083bb
mov rdi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x1800083eb
cmp rdi, 0x16
mov eax, 0x16
cmovb rdi, rax
lea rcx, [rdi + 1]
test rcx, rcx
jne 0x1800083d5
xor ebx, ebx
jmp 0x180008412
cmp rcx, 0x1000
jb 0x18000840a
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1800086b5
mov rcx, rax
call fcn.180041dd0
test rax, rax
je 0x1800086af
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x180008412
call fcn.180041dd0
mov rbx, rax
mov qword [rbp + 0x80], rbx
mov qword [rbp + 0x90], r15
mov qword [rbp + 0x98], rdi
mov r8, r14
mov rdx, r12
mov rcx, rbx
call fcn.18005e840
movzx ecx, word [0x180075590]
mov byte [rbx + r14], cl
mov byte [rbx + r15], 0
lea r8, [rbp - 0x80]
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0x80]
call fcn.180007ea0
nop
mov rdx, qword [rbp + 0x98]
cmp rdx, 0xf
jbe 0x18000849b
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008496
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800086bb
call fcn.18004224c
xor ebx, ebx
mov r12, qword [rsp + 0x58]
mov r15, qword [rsp + 0x50]
mov r14, qword [rsp + 0x48]
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x1800084e7
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800084e2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800086c7
call fcn.18004224c
mov qword [rbp + 0x30], rbx
mov qword [rbp + 0x38], 0xf
mov byte [rbp + 0x20], 0
cmp r13, 0xf
jbe 0x18000852e
lea rdx, [r13 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x180008526
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000868b
mov rcx, rsi
call fcn.18004224c
lea rdx, [rbp + 0xc0]
mov r13, qword [rsp + 0x40]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x1800080e0
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
mov rdx, qword [rbp + 0x18]
cmp rdx, 7
jbe 0x180008059
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008054
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008691
jmp 0x180008054
mov rcx, qword [r12 + 0x38]
test rcx, rcx
je 0x18000869d
mov rax, qword [rcx]
lea rdx, [rbp + 0x20]
call qword [rax + 0x10]
jmp 0x1800084ac
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x1800085ff
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800085fa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800086c7
call fcn.18004224c
mov qword [rbp + 0x30], rbx
mov qword [rbp + 0x38], 0xf
mov byte [rbp + 0x20], 0
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x180008647
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008641
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000868b
call fcn.18004224c
nop
mov rdx, qword [rbp + 0x18]
cmp rdx, 7
jbe 0x180008059
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008054
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180008697
jmp 0x180008054
call fcn.180048608
nop
call fcn.180048608
int3
call fcn.180048608
nop
call fcn.18004139c
nop
call fcn.180048608
nop
call fcn.180048608
nop
call fcn.180048608
int3
call fcn.180001800
nop
call fcn.180048608
nop
call fcn.1800018a0
nop
call fcn.180048608
int3