Function at 0x1800b3ae0
Capabilities:
Enumerate files on windows

Disassembly:
push rbp
push rbx
push rdi
push r12
push r14
lea rbp, [rsp - 0x120]
sub rsp, 0x220
mov rax, qword [0x180126010]
xor rax, rsp
mov qword [rbp + 0x110], rax
mov rax, qword [rdx + 0x10]
xor r12d, r12d
mov rdi, rcx
mov dword [rbp - 0x80], r12d
mov rbx, rdx
mov qword [rsp + 0x40], r12
mov r14d, r12d
mov qword [rsp + 0x50], r12
lea rcx, [rax - 1]
mov qword [rsp + 0x58], 0xf
cmp rax, rcx
jb 0x1800b40e0
cmp qword [rdx + 0x18], 0x10
mov rax, rdx
jb 0x1800b3b49
mov rax, qword [rdx]
lea rdx, [rax + rcx]
mov qword [rsp + 0x260], rsi
lea rcx, [rsp + 0x40]
mov r8d, 1
call fcn.1800bfba0
mov rdx, qword [rsp + 0x58]
lea rax, [rsp + 0x40]
mov rcx, qword [rsp + 0x40]
cmp rdx, 0x10
cmovae rax, rcx
cmp qword [rsp + 0x50], 1
jne 0x1800b3b8e
cmp byte [rax], 0x5c
jne 0x1800b3b8e
xor sil, sil
jmp 0x1800b3b91
mov sil, 1
mov qword [rsp + 0x268], r15
cmp rdx, 0x10
jb 0x1800b3bcc
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b3bc7
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b40da
call fcn.1800cd2cc
mov rcx, qword [rbx + 0x10]
movabs rax, 0x7fffffffffffffff
sub rax, rcx
test sil, sil
je 0x1800b3c0b
cmp rax, 2
jb 0x1800b40e6
cmp qword [rbx + 0x18], 0x10
mov r9, rbx
jb 0x1800b3bf9
mov r9, qword [rbx]
mov qword [rsp + 0x30], 2
lea rax, [0x180115238]
jmp 0x1800b3c32
cmp rax, 1
jb 0x1800b40e6
cmp qword [rbx + 0x18], 0x10
mov r9, rbx
jb 0x1800b3c22
mov r9, qword [rbx]
mov qword [rsp + 0x30], 1
lea rax, [0x18010e748]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x60]
call fcn.1800c27f0
lea rdx, [rsp + 0x60]
mov rcx, rbx
call fcn.1800bf3b0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x1800b3c90
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b3c8b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b40da
call fcn.1800cd2cc
xor r8d, r8d
mov qword [rdi], r12
lea rdx, [0x18010a500]
mov qword [rdi + 0x10], r12
mov rcx, rdi
mov qword [rdi + 0x18], 0xf
call fcn.1800bfba0
cmp qword [rbx + 0x18], 0x10
mov rcx, rbx
jb 0x1800b3cbe
mov rcx, qword [rbx]
lea rdx, [rbp - 0x30]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov r15, rax
nop dword [rax + rax]
mov qword [rbp - 0x58], r12
lea rax, [rbp - 4]
mov qword [rbp - 0x48], r12
mov r8, 0xffffffffffffffff
mov qword [rbp - 0x40], 0xf
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], r12b
jne 0x1800b3cf0
lea rdx, [rbp - 4]
lea rcx, [rbp - 0x58]
call fcn.1800bfba0
test byte [rbp - 0x30], 0x10
jne 0x1800b4005
mov rax, qword [rbx + 0x10]
mov rdx, rbx
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], 0xf
lea r8, [rax - 2]
cmp rax, r8
cmovb r8, rax
cmp qword [rbx + 0x18], 0x10
jb 0x1800b3d3f
mov rdx, qword [rbx]
lea rcx, [rsp + 0x60]
call fcn.1800bfba0
mov r8d, 1
lea rdx, [0x1801150b8]
lea rcx, [rsp + 0x60]
call fcn.1800bf270
cmp qword [rbp - 0x40], 0x10
lea rdx, [rbp - 0x58]
mov r8, qword [rbp - 0x48]
lea rcx, [rsp + 0x40]
cmovae rdx, qword [rbp - 0x58]
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
call fcn.1800bf270
lea rcx, [rbp - 0x78]
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x78], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x68], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
call fcn.1800b37c0
mov rdx, qword [rsp + 0x58]
test al, al
sete sil
cmp rdx, 0x10
jb 0x1800b3e15
mov rcx, qword [rsp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b3e10
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b40ec
call fcn.1800cd2cc
mov rdx, qword [rsp + 0x78]
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], r12b
cmp rdx, 0x10
jb 0x1800b3e65
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b3e60
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b40ec
call fcn.1800cd2cc
test sil, sil
je 0x1800b3e7f
mov r8d, 1
lea rdx, [0x180115a9c]
mov rcx, rdi
call fcn.1800bfba0
mov rax, qword [rbx + 0x10]
or r14d, 1
mov qword [rsp + 0x60], r12
mov rdx, rbx
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], 0xf
lea r8, [rax - 2]
cmp rax, r8
cmovb r8, rax
cmp qword [rbx + 0x18], 0x10
jb 0x1800b3eb2
mov rdx, qword [rbx]
lea rcx, [rsp + 0x60]
call fcn.1800bfba0
mov r8d, 1
lea rdx, [0x1801150b8]
lea rcx, [rsp + 0x60]
call fcn.1800bf270
cmp qword [rbp - 0x40], 0x10
lea rdx, [rbp - 0x58]
mov r8, qword [rbp - 0x48]
lea rcx, [rsp + 0x40]
cmovae rdx, qword [rbp - 0x58]
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
call fcn.1800bf270
lea rcx, [rbp - 0x78]
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x78], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x68], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
call fcn.18008b3c0
cmp eax, 0x2800
jge 0x1800b3f57
cmp qword [rdi + 0x10], r12
jne 0x1800b3f57
mov sil, 1
jmp 0x1800b3f5a
xor sil, sil
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x1800b3f97
mov rcx, qword [rsp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b3f92
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b40d4
call fcn.1800cd2cc
mov rdx, qword [rsp + 0x78]
and r14d, 0xfffffffc
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], r12b
cmp rdx, 0x10
jb 0x1800b3feb
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b3fe6
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b40d4
call fcn.1800cd2cc
test sil, sil
je 0x1800b4005
mov r8d, 1
lea rdx, [0x18010b9b0]
mov rcx, rdi
call fcn.1800bfba0
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x1800b4040
mov rcx, qword [rbp - 0x58]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b403b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b40da
call fcn.1800cd2cc
lea rdx, [rbp - 0x30]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x1800b3cd0
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x1800b4094
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x1800b408f
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800b40da
mov rcx, r8
call fcn.1800cd2cc
mov r15, qword [rsp + 0x268]
mov rax, rdi
mov rsi, qword [rsp + 0x260]
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], 0xf
mov byte [rbx], r12b
mov rcx, qword [rbp + 0x110]
xor rcx, rsp
call fcn.1800cd010
add rsp, 0x220
pop r14
pop r12
pop rdi
pop rbx
pop rbp
ret
call fcn.1800dc358
int3
call fcn.1800dc358
int3
call fcn.1800bfe50
int3
call fcn.180088c60
int3
call fcn.1800dc358
int3