Function at 0x18000dfe0
Capabilities:
Enumerate files on windows

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x260]
sub rsp, 0x360
mov qword [rsp + 0x30], 0xfffffffffffffffe
mov qword [rsp + 0x3b8], rbx
mov rax, qword [0x180056148]
xor rax, rsp
mov qword [rbp + 0x250], rax
mov byte [rsp + 0x24], r9b
mov r15, r8
mov rsi, rcx
mov qword [rsp + 0x38], rcx
xor eax, eax
mov dword [rsp + 0x20], eax
mov qword [rcx], rax
mov qword [rcx + 8], rax
mov qword [rcx + 0x10], rax
mov edi, 1
mov dword [rsp + 0x20], edi
movdqa xmm0, xmmword [0x18003aa10]
movdqu xmmword [rbp - 0x70], xmm0
mov word [rbp - 0x80], ax
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rdx + r8*2], 0
jne 0x18000e060
lea rcx, [rbp - 0x80]
call fcn.180001f30
nop
lea rcx, [rbp - 0x80]
call fcn.18000e600
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x50], xmm0
lea rax, [rbp - 0x80]
mov r14, qword [rbp - 0x80]
mov r12, qword [rbp - 0x68]
cmp r12, 8
cmovae rax, r14
mov qword [rsp + 0x28], rax
mov r13, qword [rbp - 0x70]
cmp r13, 8
jae 0x18000e0bd
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x58], 7
jmp 0x18000e102
mov rbx, r13
or rbx, 7
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
cmova rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rsp + 0x40]
call fcn.180001bf0
mov qword [rsp + 0x40], rax
lea r8, [r13*2 + 2]
mov rdx, qword [rsp + 0x28]
mov rcx, rax
call fcn.180016a80
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x50], r13
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [r15 + r8*2], 0
jne 0x18000e110
mov rdx, r15
lea rcx, [rsp + 0x40]
call fcn.180001c60
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rcx, qword [rsp + 0x40]
lea rdx, [rbp]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r15, rax
cmp rax, 0xffffffffffffffff
je 0x18000e514
movzx r14d, byte [rbp + 0x2c8]
movzx ebx, byte [rbp + 0x2c0]
movzx r12d, byte [rsp + 0x24]
cmp word [rbp + 0x2c], 0x2e
jne 0x18000e18a
movzx ecx, word [rbp + 0x2e]
test cx, cx
je 0x18000e4ee
cmp cx, 0x2e
jne 0x18000e18a
cmp word [rbp + 0x30], 0
je 0x18000e4ee
test byte [rbp], 0x10
je 0x18000e346
test r12b, r12b
je 0x18000e4ee
test bl, bl
je 0x18000e1bb
lea r8, [rbp + 0x2c]
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x60]
call fcn.18000d270
nop
or edi, 2
xor r13d, r13d
jmp 0x18000e200
xor r13d, r13d
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], r13w
lea rax, [rbp + 0x2c]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp word [rax + r8*2], r13w
jne 0x18000e1e0
lea rdx, [rbp + 0x2c]
lea rcx, [rsp + 0x60]
call fcn.180001f30
lea rax, [rsp + 0x60]
or edi, 4
mov dword [rsp + 0x20], edi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x30], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 7
mov word [rax], r13w
test dil, 4
je 0x18000e273
and edi, 0xfffffffb
mov dword [rsp + 0x20], edi
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x18000e273
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e26d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e5e1
call fcn.180015044
nop
test dil, 2
je 0x18000e2d1
and edi, 0xfffffffd
mov dword [rsp + 0x20], edi
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x18000e2c0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e2bb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e5e7
call fcn.180015044
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], r13w
mov rax, qword [rsi + 8]
cmp qword [rsi + 0x10], rax
je 0x18000e2ee
lea rdx, [rbp - 0x40]
mov rcx, rax
call fcn.180007890
add qword [rsi + 8], 0x20
jmp 0x18000e2fe
lea r8, [rbp - 0x40]
mov rdx, rax
mov rcx, rsi
call fcn.1800069b0
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x18000e4ee
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e4e9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e5d5
jmp 0x18000e4e9
test r14b, r14b
je 0x18000e4ee
test bl, bl
je 0x18000e36d
lea r8, [rbp + 0x2c]
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x60]
call fcn.18000d270
nop
or edi, 8
xor r13d, r13d
jmp 0x18000e3b0
xor r13d, r13d
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], r13w
lea rax, [rbp + 0x2c]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rax + r8*2], r13w
jne 0x18000e390
lea rdx, [rbp + 0x2c]
lea rcx, [rsp + 0x60]
call fcn.180001f30
lea rax, [rsp + 0x60]
or edi, 0x10
mov dword [rsp + 0x20], edi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x10], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 7
mov word [rax], r13w
test dil, 0x10
je 0x18000e423
and edi, 0xffffffef
mov dword [rsp + 0x20], edi
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x18000e423
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e41d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e5ed
call fcn.180015044
nop
test dil, 8
je 0x18000e481
and edi, 0xfffffff7
mov dword [rsp + 0x20], edi
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x18000e470
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e46b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e5f3
call fcn.180015044
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], r13w
mov rax, qword [rsi + 8]
cmp qword [rsi + 0x10], rax
je 0x18000e49e
lea rdx, [rbp - 0x20]
mov rcx, rax
call fcn.180007890
add qword [rsi + 8], 0x20
jmp 0x18000e4ae
lea r8, [rbp - 0x20]
mov rdx, rax
mov rcx, rsi
call fcn.1800069b0
nop
mov rdx, qword [rbp - 8]
cmp rdx, 8
jb 0x18000e4ee
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e4e9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e5f9
call fcn.180015044
lea rdx, [rbp]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x18000e165
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindClose]
mov r12, qword [rbp - 0x68]
mov r14, qword [rbp - 0x80]
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x18000e556
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e551
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e5db
call fcn.180015044
movdqa xmm0, xmmword [0x18003aa10]
movdqu xmmword [rsp + 0x50], xmm0
xor eax, eax
mov word [rsp + 0x40], ax
cmp r12, 8
jb 0x18000e5a2
lea rdx, [r12*2 + 2]
mov rax, r14
cmp rdx, 0x1000
jb 0x18000e59a
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e5cf
mov rcx, r14
call fcn.180015044
mov rax, rsi
mov rcx, qword [rbp + 0x250]
xor rcx, rsp
call fcn.1800151e0
mov rbx, qword [rsp + 0x3b8]
add rsp, 0x360
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.180019754
nop
call fcn.180019754
nop
call fcn.180019754
nop
call fcn.180019754
nop
call fcn.180019754
nop
call fcn.180019754
nop
call fcn.180019754
nop
call fcn.180019754
int3