Function at 0x18000e200
Capabilities:
Check if file exists
Enumerate files on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2b0]
sub rsp, 0x3b0
mov rax, qword [0x180092078]
xor rax, rsp
mov qword [rbp + 0x2a0], rax
mov r13, rcx
xor r14d, r14d
mov qword [rsp + 0x60], r14
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
lea r8d, [r14 + 1]
lea rdx, [0x180063308]
lea rcx, [rsp + 0x60]
call fcn.18000bc80
nop
lea rdx, [r13 + 0x20]
lea r8, [rsp + 0x60]
lea rcx, [rbp - 0x58]
call fcn.180010cf0
nop
cmp qword [rax + 0x18], 8
jb 0x18000e27f
mov rax, qword [rax]
lea rdx, [rbp + 0x50]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r12, rax
mov rdx, qword [rbp - 0x40]
cmp rdx, 8
jb 0x18000e2cf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e2ca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e90d
call fcn.180027be4
movdqa xmm0, xmmword [0x1800535b0]
movdqu xmmword [rbp - 0x48], xmm0
mov word [rbp - 0x58], r14w
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x18000e323
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e31e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e913
call fcn.180027be4
movdqa xmm0, xmmword [0x1800535b0]
movdqu xmmword [rsp + 0x70], xmm0
mov word [rsp + 0x60], r14w
cmp r12, 0xffffffffffffffff
je 0x18000e8d7
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x28], rax
mov qword [rbp - 0x30], r14
movdqa xmmword [rbp - 0x20], xmm0
lea r8d, [rax + 1]
lea rdx, [0x1800622b0]
lea rcx, [rbp - 0x30]
call fcn.18000bc80
nop
mov qword [rbp - 0x10], r14
xorps xmm0, xmm0
movdqa xmmword [rbp], xmm0
mov r8d, 2
lea rdx, [0x180063300]
lea rcx, [rbp - 0x10]
call fcn.18000bc80
nop
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x28], r14
mov ecx, 0x40
call fcn.180027ba8
mov qword [rbp + 0x18], rax
mov qword [rbp + 0x20], rax
add rax, 0x40
mov qword [rbp + 0x28], rax
lea rax, [rbp + 0x18]
mov qword [rbp - 0x80], rax
lea rdi, [rbp - 0x30]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], rax
mov rbx, qword [rbp + 0x18]
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x28], rbx
lea rax, [rbp + 0x18]
mov qword [rsp + 0x30], rax
nop word [rax + rax]
mov rdx, rdi
mov rcx, rbx
call fcn.180003de8
add rbx, 0x20
mov qword [rsp + 0x28], rbx
add rdi, 0x20
lea rax, [rbp + 0x10]
cmp rdi, rax
jne 0x18000e3f0
mov qword [rsp + 0x20], rbx
mov qword [rbp + 0x20], rbx
mov qword [rbp - 0x80], r14
lea r9, [fcn.180001820]
mov edx, 0x20
lea r8d, [rdx - 0x1e]
lea rcx, [rbp - 0x30]
call fcn.180027ad8
mov r8, 0xffffffffffffffff
lea edx, [r8 + 0xb]
movabs rcx, 0x7ffffffffffffffe
test byte [rbp + 0x50], 0x10
je 0x18000e851
mov rsi, qword [rbp + 0x18]
mov r15, qword [rbp + 0x20]
cmp rsi, r15
jne 0x18000e4eb
mov rdi, r8
xor al, al
xor r14d, r14d
test al, al
jne 0x18000e851
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], r14
lea rax, [rbp + 0x7c]
mov rbx, rdi
nop dword [rax]
inc rbx
cmp word [rax + rbx*2], r14w
jne 0x18000e490
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
ja 0x18000e907
mov qword [rsp + 0x58], 7
cmp rbx, 8
jae 0x18000e634
mov qword [rsp + 0x50], rbx
add rbx, rbx
mov r8, rbx
lea rdx, [rbp + 0x7c]
lea rcx, [rsp + 0x40]
call fcn.180029a20
mov word [rsp + rbx + 0x40], r14w
jmp 0x18000e690
mov r8, 0xffffffffffffffff
mov qword [rsp + 0x20], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x38], r14
mov rdi, qword [rsi + 0x10]
mov r14, rsi
cmp qword [rsi + 0x18], 8
jb 0x18000e50b
mov r14, qword [rsi]
cmp rdi, rcx
ja 0x18000e91f
mov qword [rsp + 0x38], 7
cmp rdi, 8
jae 0x18000e53d
mov qword [rsp + 0x30], rdi
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetDim
mov rdx, r14
lea rcx, [rsp + 0x20]
call fcn.180029a20
jmp 0x18000e58d
mov rbx, rdi
or rbx, 7
cmp rbx, rcx
jbe 0x18000e54e
mov rbx, rcx
jmp 0x18000e556
cmp rbx, 0xa
cmovb rbx, rdx
mov rdx, rbx
add rdx, 1
cmovb rdx, r8
lea rcx, [rsp + 0x20]
call fcn.180001b00
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], rbx
lea r8, [rdi*2 + 2]
mov rdx, r14
mov rcx, rax
call fcn.180029a20
lea rax, [rsp + 0x20]
mov qword [rbp + 0x10], rax
lea rcx, [rbp + 0x7c]
mov rdi, 0xffffffffffffffff
mov rax, rdi
inc rax
cmp word [rcx + rax*2], 0
jne 0x18000e5a4
lea r8, [rsp + 0x20]
cmp qword [rsp + 0x38], 8
cmovae r8, qword [rsp + 0x20]
mov rdx, qword [rsp + 0x30]
cmp rdx, rax
jne 0x18000e5f8
lea rax, [rbp + 0x7c]
test rdx, rdx
je 0x18000e5f4
lea rcx, [rbp + 0x7c]
sub r8, rcx
nop dword [rax]
movzx ecx, word [r8 + rax]
cmp cx, word [rax]
jne 0x18000e5f8
add rax, 2
sub rdx, 1
jne 0x18000e5e0
mov bl, 1
jmp 0x18000e5fa
xor bl, bl
lea rcx, [rsp + 0x20]
call fcn.180001820
test bl, bl
jne 0x18000e62d
add rsi, 0x20
cmp rsi, r15
movabs rcx, 0x7ffffffffffffffe
mov edx, 0xa
lea r14d, [rdx - 0xa]
jne 0x18000e4e4
jmp 0x18000e46a
mov al, 1
jmp 0x18000e46c
mov rsi, rbx
or rsi, 7
cmp rsi, rax
jbe 0x18000e645
mov rsi, rax
jmp 0x18000e652
cmp rsi, 0xa
mov eax, 0xa
cmovb rsi, rax
mov rdx, rsi
add rdx, 1
cmovb rdx, rdi
lea rcx, [rsp + 0x40]
call fcn.180001b00
mov rdi, rax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rsi
add rbx, rbx
mov r8, rbx
lea rdx, [rbp + 0x7c]
mov rcx, rax
call fcn.180029a20
mov word [rdi + rbx], r14w
lea r8, [rsp + 0x40]
lea rdx, [r13 + 0x20]
lea rcx, [rbp + 0x30]
call fcn.180010cf0
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x18000e6e5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e6e0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e925
call fcn.180027be4
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], 7
mov word [rsp + 0x40], r14w
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], r14
mov r8d, SafeArrayGetDim
lea rdx, str.pending_delete
lea rcx, [rsp + 0x60]
call fcn.18000bc80
nop
lea r8, [rsp + 0x60]
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x78]
call fcn.180010cf0
nop
cmp qword [rax + 0x18], 8
jb 0x18000e73d
mov rax, qword [rax]
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov ebx, eax
mov rdx, qword [rbp - 0x60]
cmp rdx, 8
jb 0x18000e788
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e783
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e92b
call fcn.180027be4
mov qword [rbp - 0x68], r14
mov qword [rbp - 0x60], 7
mov word [rbp - 0x78], r14w
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x18000e7db
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e7d6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e931
call fcn.180027be4
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], r14w
test ebx, ebx
je 0x18000e800
lea rdx, [rbp + 0x30]
mov rcx, r13
call fcn.18000dd60
nop
mov rdx, qword [rbp + 0x48]
cmp rdx, 8
jb 0x18000e840
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e83b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e937
call fcn.180027be4
mov qword [rbp + 0x40], r14
mov qword [rbp + 0x48], 7
mov word [rbp + 0x30], r14w
lea rdx, [rbp + 0x50]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x18000e437
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
mov rbx, qword [rbp + 0x18]
test rbx, rbx
je 0x18000e8d7
mov rdi, qword [rbp + 0x20]
cmp rbx, rdi
je 0x18000e897
mov rcx, rbx
call fcn.180001820
add rbx, 0x20
cmp rbx, rdi
jne 0x18000e882
mov rbx, qword [rbp + 0x18]
mov rdx, qword [rbp + 0x28]
sub rdx, rbx
and rdx, 0xffffffffffffffe0
mov rax, rbx
cmp rdx, 0x1000
jb 0x18000e8c3
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e919
mov rcx, rbx
call fcn.180027be4
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x28], r14
mov rcx, qword [rbp + 0x2a0]
xor rcx, rsp
call fcn.180028080
lea r11, [rsp + 0x3b0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.180001488
nop
call fcn.18002e3bc
nop
call fcn.18002e3bc
int3
call fcn.18002e3bc
nop
call fcn.180001488
nop
call fcn.18002e3bc
nop
call fcn.18002e3bc
nop
call fcn.18002e3bc
nop
call fcn.18002e3bc
int3