Function at 0x1800e1ed0
Capabilities:
Enumerate files on windows

Disassembly:
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x430
mov qword [rsp + 0x408], 0xfffffffffffffffe
mov rax, qword [0x180161180]
xor rax, rsp
mov qword [rsp + 0x428], rax
mov qword [rsp + 0x150], 0
mov dword [rsp + 0x3c0], 0
mov dword [rsp + 0x158], 0
mov qword [rsp + 0x2a0], 0
mov r8, qword [rsp + 0x440]
add r8, 0x12a6
lea rdx, [0x180010cb0]
lea rcx, [rsp + 0x2b0]
call fcn.1800eb79c
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x2b0]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov qword [rsp + 0x150], rax
cmp qword [rsp + 0x150], 0xffffffffffffffff
jne 0x1800e2052
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x3c0], eax
mov r8d, dword [rsp + 0x3c0]
lea rdx, [rsp + 0x2b0]
lea rcx, [0x180035ef0]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x3d0], rax
cmp qword [rsp + 0x3d0], 0
je 0x1800e2002
mov r8d, dword [rsp + 0x3c0]
mov eax, dword [rsp + 0x3c0]
mov dword [rsp + 0x28], eax
lea rax, [rsp + 0x2b0]
mov qword [rsp + 0x20], rax
lea r9, [0x180035e90]
mov edx, 5
mov rcx, qword [rsp + 0x3d0]
call fcn.18008d120
mov qword [rsp + 0x410], rax
jmp 0x1800e200e
mov qword [rsp + 0x410], 0
mov rax, qword [rsp + 0x410]
mov qword [rsp + 0x3c8], rax
mov rax, qword [rsp + 0x3c8]
mov qword [rsp + 0x2a0], rax
mov rax, qword [rsp + 0x2a0]
mov qword [rsp + 0x3d8], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x3d8]
call fcn.1800ec370
mov eax, dword [rsp + 0x160]
and eax, 0x10
test eax, eax
je 0x1800e208d
movsx eax, byte [rsp + 0x18c]
cmp eax, 0x2e
jne 0x1800e208d
xor eax, eax
mov rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x18c]
repne scasb al, byte [rdi]
not rcx
sub rcx, 1
cmp rcx, 1
je 0x1800e20d5
mov eax, dword [rsp + 0x160]
and eax, 0x10
test eax, eax
je 0x1800e20da
movsx eax, byte [rsp + 0x18c]
cmp eax, 0x2e
jne 0x1800e20da
movsx eax, byte [rsp + 0x18d]
cmp eax, 0x2e
jne 0x1800e20da
xor eax, eax
mov rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x18c]
repne scasb al, byte [rdi]
not rcx
sub rcx, 1
cmp rcx, 2
jne 0x1800e20da
jmp 0x1800e2174
mov r8, qword [rsp + 0x440]
add r8, 0x12a6
lea r9, [rsp + 0x18c]
lea rdx, [0x180009c88]
lea rcx, [rsp + 0x40]
call fcn.1800eb79c
mov ecx, 0x13d8
call fcn.1800eb9ac
mov qword [rsp + 0x3e8], rax
cmp qword [rsp + 0x3e8], 0
je 0x1800e2158
mov rax, qword [rsp + 0x440]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x160]
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x18c]
mov rcx, qword [rsp + 0x3e8]
call fcn.1800e10b0
mov qword [rsp + 0x418], rax
jmp 0x1800e2164
mov qword [rsp + 0x418], 0
mov rax, qword [rsp + 0x418]
mov qword [rsp + 0x3e0], rax
lea rdx, [rsp + 0x160]
mov rcx, qword [rsp + 0x150]
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
mov dword [rsp + 0x158], eax
cmp dword [rsp + 0x158], 0
jne 0x1800e2052
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x3c0], eax
mov rcx, qword [rsp + 0x150]
call qword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [rsp + 0x3c0], 0x12
je 0x1800e228b
mov edx, dword [rsp + 0x3c0]
lea rcx, [0x180035e30]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x3f8], rax
cmp qword [rsp + 0x3f8], 0
je 0x1800e223b
mov r8d, dword [rsp + 0x3c0]
mov eax, dword [rsp + 0x3c0]
mov dword [rsp + 0x28], eax
lea rax, [rsp + 0x2b0]
mov qword [rsp + 0x20], rax
lea r9, [0x180035de0]
mov edx, 5
mov rcx, qword [rsp + 0x3f8]
call fcn.18008d120
mov qword [rsp + 0x420], rax
jmp 0x1800e2247
mov qword [rsp + 0x420], 0
mov rax, qword [rsp + 0x420]
mov qword [rsp + 0x3f0], rax
mov rax, qword [rsp + 0x3f0]
mov qword [rsp + 0x2a0], rax
mov rax, qword [rsp + 0x2a0]
mov qword [rsp + 0x400], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x400]
call fcn.1800ec370
mov rcx, qword [rsp + 0x428]
xor rcx, rsp
call fcn.1800eb430
add rsp, 0x430
pop rdi
ret