Function at 0x1800b6630
Capabilities:
Enumerate files on windows

Disassembly:
push rbp
push r12
push r14
lea rbp, [rsp - 0x170]
sub rsp, 0x270
mov rax, qword [0x180124010]
xor rax, rsp
mov qword [rbp + 0x150], rax
mov rax, qword [rcx + 0x10]
xor r12d, r12d
mov r14, rcx
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], 0xf
mov byte [rsp + 0x20], r12b
lea rcx, [rax - 1]
cmp rax, rcx
jb 0x1800b6e7a
cmp qword [r14 + 0x18], 0x10
mov rax, r14
jb 0x1800b668d
mov rax, qword [r14]
lea rdx, [rax + rcx]
mov qword [rsp + 0x298], rbx
lea rcx, [rsp + 0x20]
mov r8d, 1
call fcn.1800bdba0
mov rdx, qword [rsp + 0x38]
lea rax, [rsp + 0x20]
mov rcx, qword [rsp + 0x20]
cmp rdx, 0x10
cmovae rax, rcx
cmp qword [rsp + 0x30], 1
jne 0x1800b66d1
cmp byte [rax], 0x5c
jne 0x1800b66d1
xor bl, bl
jmp 0x1800b66d3
mov bl, 1
mov qword [rsp + 0x2a0], rsi
mov qword [rsp + 0x2a8], rdi
mov qword [rsp + 0x268], r13
mov qword [rsp + 0x260], r15
cmp rdx, 0x10
jb 0x1800b6726
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b6721
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b6e74
call fcn.1800caa30
mov r8, qword [r14 + 0x10]
mov qword [rbp - 8], r12
mov qword [rbp], 0xf
mov byte [rbp - 0x18], r12b
test bl, bl
je 0x1800b67d8
lea rdx, [r8 + 2]
cmp rdx, 0xf
jbe 0x1800b675d
lea rcx, [rbp - 0x18]
call fcn.1800c3fa0
mov r8, qword [r14 + 0x10]
mov qword [rbp - 8], r12
cmp qword [r14 + 0x18], 0x10
mov rdx, r14
jb 0x1800b676a
mov rdx, qword [r14]
lea rcx, [rbp - 0x18]
call fcn.1800bd330
mov r8d, 2
lea rdx, [0x180112dac]
lea rcx, [rbp - 0x18]
call fcn.1800bd330
lea rdx, [rbp - 0x18]
mov rcx, r14
call fcn.1800bd450
mov rdx, qword [rbp]
cmp rdx, 0x10
jb 0x1800b6866
mov rcx, qword [rbp - 0x18]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b6861
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b6e6e
jmp 0x1800b6861
lea rdx, [r8 + 1]
cmp rdx, 0xf
jbe 0x1800b67f3
lea rcx, [rbp - 0x18]
call fcn.1800c3fa0
mov r8, qword [r14 + 0x10]
mov qword [rbp - 8], r12
cmp qword [r14 + 0x18], 0x10
mov rdx, r14
jb 0x1800b6800
mov rdx, qword [r14]
lea rcx, [rbp - 0x18]
call fcn.1800bd330
mov r8d, 1
lea rdx, [0x18010c2f8]
lea rcx, [rbp - 0x18]
call fcn.1800bd330
lea rdx, [rbp - 0x18]
mov rcx, r14
call fcn.1800bd450
mov rdx, qword [rbp]
cmp rdx, 0x10
jb 0x1800b6866
mov rcx, qword [rbp - 0x18]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b6861
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b6e80
call fcn.1800caa30
cmp qword [r14 + 0x18], 0x10
mov rcx, r14
jb 0x1800b6873
mov rcx, qword [r14]
lea rdx, [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov qword [rsp + 0x60], rax
nop dword [rax]
nop word [rax + rax]
mov qword [rbp - 8], r12
lea rax, [rbp + 0x3c]
mov qword [rbp], 0xf
mov r8, 0xffffffffffffffff
mov byte [rbp - 0x18], 0
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1800b68b0
lea rdx, [rbp + 0x3c]
lea rcx, [rbp - 0x18]
call fcn.1800bdba0
test byte [rbp + 0x10], 0x10
jne 0x1800b6d74
mov r13, qword [rbp]
lea r15, [rbp - 0x18]
mov rdi, qword [rbp - 0x18]
cmp r13, 0x10
mov rbx, qword [rbp - 8]
cmovae r15, rdi
cmp rbx, 0x10
jae 0x1800b6903
movups xmm0, xmmword [r15]
mov qword [rsp + 0x38], 0xf
movups xmmword [rsp + 0x20], xmm0
jmp 0x1800b697f
movabs rax, 0x7fffffffffffffff
mov rsi, rbx
or rsi, 0xf
cmp rsi, rax
cmova rsi, rax
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x1800b6957
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1800b6e8c
mov rcx, rax
call fcn.1800caa38
mov rcx, rax
test rax, rax
je 0x1800b6e86
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1800b6966
test rcx, rcx
je 0x1800b6963
call fcn.1800caa38
jmp 0x1800b6966
mov rax, r12
lea r8, [rbx + 1]
mov qword [rsp + 0x20], rax
mov rdx, r15
mov rcx, rax
call fcn.1800ce0c0
mov qword [rsp + 0x38], rsi
cmp qword [0x180127790], 0x10
lea r12, [0x180127778]
mov r15, qword [0x180127788]
cmovae r12, qword [0x180127778]
mov qword [rsp + 0x30], rbx
cmp r15, 0x10
jae 0x1800b69bd
movups xmm0, xmmword [r12]
mov qword [rsp + 0x58], 0xf
movups xmmword [rsp + 0x40], xmm0
jmp 0x1800b6a38
movabs rax, 0x7fffffffffffffff
mov rsi, r15
or rsi, 0xf
cmp rsi, rax
cmova rsi, rax
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x1800b6a11
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1800b6e8c
mov rcx, rax
call fcn.1800caa38
mov rcx, rax
test rax, rax
je 0x1800b6e86
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1800b6a1f
test rcx, rcx
je 0x1800b6a1d
call fcn.1800caa38
jmp 0x1800b6a1f
xor eax, eax
lea r8, [r15 + 1]
mov qword [rsp + 0x40], rax
mov rdx, r12
mov rcx, rax
call fcn.1800ce0c0
mov qword [rsp + 0x58], rsi
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x50], r15
lea rcx, [rsp + 0x68]
call fcn.180089750
mov rcx, rax
lea rdx, [rsp + 0x20]
call fcn.18008b370
test eax, eax
jne 0x1800b6d7c
cmp r13, 0x10
lea r15, [rbp - 0x18]
cmovae r15, rdi
cmp rbx, 0x10
jae 0x1800b6a85
movups xmm0, xmmword [r15]
mov qword [rbp - 0x40], 0xf
movups xmmword [rbp - 0x58], xmm0
jmp 0x1800b6afe
movabs rax, 0x7fffffffffffffff
mov rsi, rbx
or rsi, 0xf
cmp rsi, rax
cmova rsi, rax
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x1800b6ad9
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1800b6e98
mov rcx, rax
call fcn.1800caa38
mov rcx, rax
test rax, rax
je 0x1800b6e92
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1800b6ae7
test rcx, rcx
je 0x1800b6ae5
call fcn.1800caa38
jmp 0x1800b6ae7
xor eax, eax
lea r8, [rbx + 1]
mov qword [rbp - 0x58], rax
mov rdx, r15
mov rcx, rax
call fcn.1800ce0c0
mov qword [rbp - 0x40], rsi
cmp qword [0x180127870], 0x10
lea r12, [0x180127858]
mov r15, qword [0x180127868]
cmovae r12, qword [0x180127858]
mov qword [rbp - 0x48], rbx
cmp r15, 0x10
jae 0x1800b6b39
movups xmm0, xmmword [r12]
mov qword [rbp - 0x60], 0xf
movups xmmword [rbp - 0x78], xmm0
jmp 0x1800b6bb2
movabs rax, 0x7fffffffffffffff
mov rsi, r15
or rsi, 0xf
cmp rsi, rax
cmova rsi, rax
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x1800b6b8d
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1800b6e98
mov rcx, rax
call fcn.1800caa38
mov rcx, rax
test rax, rax
je 0x1800b6e92
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1800b6b9b
test rcx, rcx
je 0x1800b6b99
call fcn.1800caa38
jmp 0x1800b6b9b
xor eax, eax
lea r8, [r15 + 1]
mov qword [rbp - 0x78], rax
mov rdx, r12
mov rcx, rax
call fcn.1800ce0c0
mov qword [rbp - 0x60], rsi
lea rdx, [rbp - 0x78]
mov qword [rbp - 0x68], r15
lea rcx, [rbp - 0x38]
call fcn.180089750
mov rcx, rax
lea rdx, [rbp - 0x58]
call fcn.18008b370
test eax, eax
jne 0x1800b6d7c
mov rax, qword [r14 + 0x10]
xor r12d, r12d
mov qword [rsp + 0x78], r12
mov rdx, r14
mov qword [rbp - 0x80], 0xf
mov byte [rsp + 0x68], r12b
lea r8, [rax - 2]
cmp rax, r8
cmovb r8, rax
cmp qword [r14 + 0x18], 0x10
jb 0x1800b6c08
mov rdx, qword [r14]
lea rcx, [rsp + 0x68]
call fcn.1800bdba0
mov r8d, 1
lea rdx, [0x180112c68]
lea rcx, [rsp + 0x68]
call fcn.1800bd330
cmp r13, 0x10
lea rdx, [rbp - 0x18]
mov r8, rbx
lea rcx, [rsp + 0x40]
cmovae rdx, rdi
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
call fcn.1800bd330
lea rcx, [rsp + 0x20]
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x30], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
cmp qword [rsp + 0x38], 0x10
cmovae rcx, qword [rsp + 0x20]
call fcn.1800d6bb4
mov rdx, qword [rsp + 0x38]
cmp rdx, 0x10
jb 0x1800b6cd5
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b6cd0
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b6e68
call fcn.1800caa30
mov rdx, qword [rsp + 0x58]
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], 0xf
mov byte [rsp + 0x20], r12b
cmp rdx, 0x10
jb 0x1800b6d25
mov rcx, qword [rsp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b6d20
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b6e68
call fcn.1800caa30
mov rdx, qword [rbp - 0x80]
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], r12b
cmp rdx, 0x10
jb 0x1800b6d74
mov rcx, qword [rsp + 0x68]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b6d6f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b6e68
call fcn.1800caa30
mov rdi, qword [rbp - 0x18]
mov r13, qword [rbp]
cmp r13, 0x10
jb 0x1800b6db3
lea rdx, [r13 + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x1800b6dab
mov rdi, qword [rdi - 8]
add rdx, 0x27
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b6e74
mov rcx, rdi
call fcn.1800caa30
mov rbx, qword [rsp + 0x60]
lea rdx, [rbp + 0x10]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
je 0x1800b6dd1
xor r12d, r12d
jmp 0x1800b6890
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rdx, qword [r14 + 0x18]
cmp rdx, 0x10
jb 0x1800b6e10
mov rcx, qword [r14]
inc rdx
cmp rdx, 0x1000
jb 0x1800b6e0b
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800b6e74
mov rcx, r8
call fcn.1800caa30
mov r13, qword [rsp + 0x268]
mov rdi, qword [rsp + 0x2a8]
mov rsi, qword [rsp + 0x2a0]
mov r15, qword [rsp + 0x260]
mov rbx, qword [rsp + 0x298]
mov qword [r14 + 0x10], 0
mov qword [r14 + 0x18], 0xf
mov byte [r14], 0
mov rcx, qword [rbp + 0x150]
xor rcx, rsp
call fcn.1800ca770
add rsp, 0x270
pop r14
pop r12
pop rbp
ret
call fcn.1800d9c90
int3
call fcn.1800d9c90
int3
call fcn.1800d9c90
int3
call fcn.1800bdd90
int3
call fcn.1800d9c90
int3
call fcn.1800d9c90
int3
call fcn.1800883a0
int3
call fcn.1800d9c90
int3
call fcn.1800883a0
int3