Function at 0x180051a20
Capabilities:
Enumerate files on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x270
lea rbp, [rsp + 0x40]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1800ce040]
xor rax, rsp
mov qword [rbp + 0x220], rax
mov r15, rcx
mov qword [rbp + 0x60], rcx
xor r13d, r13d
mov dword [rbp], r13d
xorps xmm0, xmm0
movups xmmword [rcx], xmm0
mov qword [rcx], r13
mov qword [rcx + 8], r13
mov qword [rcx + 0x10], r13
mov dword [rbp], 1
movabs rax, 0x69677b08f09eb027
mov qword [rbp + 0x200], rax
movabs rbx, 0xcec574f1c51ae064
mov qword [rbp + 0x208], rbx
movabs rax, 0x94112b3e67caaef9
mov qword [rbp + 0x210], rax
movabs rcx, 0xd19eac674afef69e
mov qword [rbp + 0x218], rcx
movabs rax, 0x1d0e1661bcc28a64
mov qword [rbp + 0x10], rax
movabs rax, 0xa0aa37adb6698508
mov qword [rbp + 0x18], rax
movabs rax, 0x9411016214adc79f
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], rcx
movups xmm0, xmmword [rbp + 0x10]
movaps xmmword [rbp + 0x40], xmm0
movups xmm1, xmmword [rbp + 0x20]
movaps xmmword [rbp + 0x50], xmm1
vmovdqu ymm0, ymmword [rbp + 0x40]
vpxor ymm1, ymm0, ymmword [rbp + 0x200]
vmovdqa ymmword [rbp + 0x40], ymm1
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x40]
vzeroupper
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov r12, rax
lea rdx, [rbp + 0xb0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
je 0x180051f9d
movabs r14, 0x7fffffffffffffff
nop dword [rax]
test byte [rbp + 0xb0], 0x10
jne 0x180051f85
xorps xmm0, xmm0
movups xmmword [rbp + 0x88], xmm0
mov qword [rbp + 0x98], r13
mov qword [rbp + 0xa0], r13
lea rax, [rbp + 0xdc]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x180051b83
lea rdx, [rbp + 0xdc]
lea rcx, [rbp + 0x88]
call fcn.180003490
nop
mov rdi, qword [rbp + 0x98]
cmp rdi, 4
jae 0x180051bf8
mov rdx, qword [rbp + 0xa0]
cmp rdx, 0xf
jbe 0x180051f85
inc rdx
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180051bee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180051fd0
call fcn.180053720
jmp 0x180051f85
xorps xmm0, xmm0
movups xmmword [rbp + 0x68], xmm0
mov qword [rbp + 0x78], r13
mov qword [rbp + 0x80], r13
lea rsi, [rbp + 0x88]
cmp qword [rbp + 0xa0], 0xf
cmova rsi, qword [rbp + 0x88]
cmp rdi, r14
ja 0x180051fdc
cmp rdi, 0xf
ja 0x180051c4c
mov qword [rbp + 0x78], rdi
mov edx, 0xf
mov qword [rbp + 0x80], rdx
movups xmm0, xmmword [rsi]
movups xmmword [rbp + 0x68], xmm0
jmp 0x180051d01
mov qword [rbp + 0x80], 0xf
mov rbx, rdi
or rbx, 0xf
cmp rbx, r14
jbe 0x180051c76
mov rbx, r14
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x180051c9d
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x180051cbf
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180051fe2
mov rcx, rax
call fcn.180053728
mov rcx, rax
test rax, rax
je 0x180051fd6
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x180051cce
test rcx, rcx
je 0x180051ccb
call fcn.180053728
jmp 0x180051cce
mov rax, r13
mov qword [rbp + 0x68], rax
mov qword [rbp + 0x78], rdi
mov qword [rbp + 0x80], rbx
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call fcn.18007e290
mov rdx, qword [rbp + 0x80]
mov rdi, qword [rbp + 0x78]
movabs rbx, 0xcec574f1c51ae064
lea rax, [rbp + 0x68]
cmp rdx, 0xf
seta cl
mov r8, qword [rbp + 0x68]
cmova rax, r8
lea rdx, [rax - 4]
add rdx, rdi
lea rax, [rbp + 0x68]
mov r9, r13
test cl, cl
je 0x180051d38
sub rdx, r8
mov rax, rdi
sub rax, r13
cmp rax, rdx
cmovb rdx, rax
jmp 0x180051d46
sub rdx, rax
cmp rdi, rdx
cmovb rdx, rdi
lea r8, [rbp + 0x68]
lea rcx, [r8 + r9]
sub rdi, rdx
mov r8, rdi
sub r8, r9
inc r8
add rdx, rcx
call fcn.18007e290
mov qword [rbp + 0x78], rdi
movabs rax, 0x69677b08f09eb027
mov qword [rbp + 0x200], rax
mov qword [rbp + 0x208], rbx
movabs rax, 0x69677b0899f0d909
mov qword [rbp + 0x40], rax
mov qword [rbp + 0x48], rbx
movdqu xmm0, xmmword [rbp + 0x40]
xorps xmm0, xmmword [rbp + 0x200]
movdqa xmmword [rbp + 0x10], xmm0
lea rcx, [rbp + 0x10]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x180051db0
lea rcx, [rbp + 0x68]
mov rsi, qword [rbp + 0x80]
cmp rsi, 0xf
seta r14b
mov rbx, qword [rbp + 0x68]
cmova rcx, rbx
cmp rdi, rax
jne 0x180051eeb
mov r8, rdi
lea rdx, [rbp + 0x10]
call fcn.18007ed70
test eax, eax
jne 0x180051eeb
lea r9, [rbp + 0x88]
cmp qword [rbp + 0xa0], 0xf
seta dl
mov r8, qword [rbp + 0x88]
cmova r9, r8
mov rbx, qword [rbp + 0x98]
add r9, rbx
lea rax, [rbp + 0x88]
test dl, dl
je 0x180051e32
lea rax, [r8 - 4]
add rax, rbx
mov rdx, rax
sub rdx, r8
jmp 0x180051e4d
add rax, 0xfffffffffffffffc
add rax, rbx
lea rcx, [rbp + 0x88]
mov rdx, rax
sub rdx, rcx
lea r8, [rbp + 0x88]
sub r9, rax
mov rax, rbx
sub rax, rdx
cmp rax, r9
cmovb r9, rax
lea rcx, [r8 + rdx]
sub rbx, r9
mov r8, rbx
sub r8, rdx
inc r8
lea rdx, [rcx + r9]
call fcn.18007e290
mov qword [rbp + 0x98], rbx
mov rax, qword [r15 + 8]
cmp rax, qword [r15 + 0x10]
je 0x180051e9d
lea rdx, [rbp + 0x88]
mov rcx, rax
call fcn.18004d3b0
add qword [r15 + 8], 0x20
jmp 0x180051eb0
lea r8, [rbp + 0x88]
mov rdx, rax
mov rcx, r15
call fcn.1800523e0
nop
mov rdx, qword [rbp + 0x80]
cmp rdx, 0xf
jbe 0x180051f21
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180051f1c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180051fd6
jmp 0x180051f1c
test r14b, r14b
je 0x180051f21
lea rdx, [rsi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x180051f19
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180051fd6
mov rcx, rbx
call fcn.180053720
mov byte [rbp + 0x68], 0
mov qword [rbp + 0x80], 0xf
mov qword [rbp + 0x78], r13
mov rdx, qword [rbp + 0xa0]
cmp rdx, 0xf
jbe 0x180051f71
inc rdx
mov rcx, qword [rbp + 0x88]
cmp rdx, 0x1000
mov rax, rcx
jb 0x180051f6c
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180051fd0
call fcn.180053720
movabs r14, 0x7fffffffffffffff
movabs rbx, 0xcec574f1c51ae064
lea rdx, [rbp + 0xb0]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x180051b50
mov rax, r15
mov rcx, qword [rbp + 0x220]
xor rcx, rsp
call fcn.180053700
lea r11, [rsp + 0x270]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.18005aa30
nop
call fcn.18005aa30
int3
call fcn.180001bd0
int3
call fcn.180001b30
int3