Function at 0x180084a50
Capabilities:
Enumerate files on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x4f0
lea rbp, [rsp + 0x40]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x180186e90]
cmp rax, qword [0x180186e98]
je 0x180084a8f
mov qword [0x180186e98], rax
movabs rax, 0xbcccdf48b8300fc3
movabs r12, 0xbcaadf2bb81e0fe9
mov qword [rbp], rax
movabs r14, 0xbc9388068023e2c6
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
movabs rax, 0xbc9388068023e2a1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp], r14
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x40]
movzx ecx, word [0x180188fe0]
mov qword [rbp + 0x28], rax
lea rax, [rbp + 0x2a0]
xorps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp + 0x40], xmm0
test cx, cx
je 0x180084b30
lea rdx, [0x180188fe0]
lea r8, [rbp + 0x2a0]
sub rdx, r8
nop dword [rax]
mov word [rax], cx
add rax, 2
movzx ecx, word [rdx + rax]
test cx, cx
jne 0x180084b20
xor esi, esi
movq rcx, xmm0
mov word [rax], si
test cx, cx
je 0x180084b60
lea rdx, [rbp + 0x40]
sub rdx, rax
nop word [rax + rax]
mov word [rax], cx
add rax, 2
movzx ecx, word [rdx + rax]
test cx, cx
jne 0x180084b50
lea rdx, [rbp + 0x50]
mov word [rax], si
lea rcx, [rbp + 0x2a0]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x180084d12
mov r15, 0xffffffffffffffff
movabs r13, 0xd3c9ff4fd66b608f
lea rbx, [rbp + 0x7c]
cmp word [rbp + 0x7c], si
je 0x180084ba9
nop dword [rax]
add rbx, 2
cmp word [rbx], si
jne 0x180084ba0
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
lea rax, [rbp + 0x7c]
sub rbx, rax
mov eax, 2
sar rbx, 1
inc rbx
mul rbx
cmovb rax, r15
xor edx, edx
mov r8, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rdx, qword [0x180186e98]
cmp rdx, qword [0x180186ea0]
mov qword [rbp], rax
je 0x180084c01
mov qword [rdx], rax
mov rcx, qword [0x180186e98]
add rcx, 8
mov qword [0x180186e98], rcx
jmp 0x180084c11
lea r8, [rbp]
call fcn.180086f50
mov rcx, qword [0x180186e98]
movzx eax, word [rbp + 0x7c]
lea rdx, [rbp + 0x7c]
mov rcx, qword [rcx - 8]
test ax, ax
je 0x180084c35
mov word [rcx], ax
lea rdx, [rdx + 2]
movzx eax, word [rdx]
add rcx, 2
test ax, ax
jne 0x180084c22
mov word [rcx], si
lea rdx, [rbp + 0x50]
mov qword [rbp], r13
mov rcx, rdi
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs rax, 0xc8f2fa73e74a84a8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0x2783af1bfbcc4a4a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rax, 0x1ff919c82860edf2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0x42efc67ddba22523
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rax, 0x1ff919c82842cdc8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
movabs rax, 0xbcaadf2bb81e0fcb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp], r14
mov rax, qword [rbp]
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x180084b92
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindClose]
lea r11, [rsp + 0x4f0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret