Function at 0x180081570
Capabilities:
Enumerate files on windows

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x5d0]
sub rsp, 0x6d0
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov qword [rsp + 0x720], rbx
mov rax, qword [0x180248950]
xor rax, rsp
mov qword [rbp + 0x5c0], rax
mov rsi, rcx
mov r8, rdx
lea rdx, [0x1801ec548]
lea rcx, [rbp + 0x3b0]
call fcn.1800b5a54
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x3b0]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x18008185e
or r12, 0xffffffffffffffff
xor r15d, r15d
lea r13, str.default
nop word [rax + rax]
lea rdx, [rsp + 0x50]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x18008185e
cmp word [rsp + 0x7c], 0x2e
je 0x180081600
movzx eax, word [rsp + 0x7e]
test ax, ax
je 0x180081600
cmp ax, 0x2e
jne 0x180081635
cmp word [rbp - 0x80], 0
je 0x180081600
test byte [rsp + 0x50], 0x10
jne 0x180081600
lea rdx, str..wnpf
lea rcx, [rsp + 0x7c]
call fcn.1800bae90
test rax, rax
je 0x180081600
lea r8, [rsp + 0x7c]
lea rdx, [0x1801ec2c4]
lea rcx, [rbp + 0x1a0]
call fcn.1800b5a54
lea rcx, [rbp + 0x1a0]
mov rax, r12
lea rax, [rax + 1]
cmp word [rcx + rax*2], 0
jne 0x180081674
lea rax, [rax*2 - 0xa]
cmp rax, 0x208
jae 0x180081858
mov word [rbp + rax + 0x1a0], r15w
mov rcx, r15
lea rdx, [rbp + 0x1a0]
nop word [rax + rax]
movzx eax, word [rdx + rcx*2]
inc rcx
cmp ax, word [r13 + rcx*2 - 2]
jne 0x1800816ca
cmp rcx, 8
jne 0x1800816b0
jmp 0x180081600
mov rax, qword [rsi + 0x10]
mov rbx, qword [rax]
cmp rbx, qword [rax + 8]
je 0x1800817e4
nop dword [rax + rax]
mov qword [rsp + 0x40], 7
mov qword [rsp + 0x38], r15
mov word [rsp + 0x28], r15w
mov r9, r12
xor r8d, r8d
mov rdx, rbx
lea rcx, [rsp + 0x28]
call fcn.180005100
nop
cmp word [rbp + 0x1a0], 0
jne 0x180081717
mov rax, r15
jmp 0x18008172b
lea rcx, [rbp + 0x1a0]
mov rax, r12
inc rax
cmp word [rcx + rax*2], 0
jne 0x180081721
lea rdx, [rsp + 0x28]
mov rdi, qword [rsp + 0x28]
mov r11, qword [rsp + 0x40]
cmp r11, 8
cmovae rdx, rdi
mov r9, rax
mov r10, qword [rsp + 0x38]
cmp r10, rax
cmovb r9, r10
test r9, r9
je 0x180081787
lea r8, [rbp + 0x1a0]
nop dword [rax]
movzx ecx, word [r8]
cmp word [rdx], cx
jne 0x180081778
add rdx, 2
add r8, 2
dec r9
jne 0x180081760
jmp 0x180081787
mov r9d, 1
cmp word [rdx], cx
cmovb r9d, r12d
jmp 0x18008178a
mov r9d, r15d
movsxd rcx, r9d
test r9d, r9d
jne 0x1800817a7
cmp r10, rax
jae 0x18008179c
mov ecx, r12d
jmp 0x1800817a7
mov edx, r15d
cmp r10, rax
setne dl
mov ecx, edx
test ecx, ecx
je 0x1800817cd
cmp r11, 8
jb 0x1800817b9
mov rcx, rdi
call fcn.1800b5354
add rbx, 0x20
mov rax, qword [rsi + 0x10]
cmp rbx, qword [rax + 8]
jne 0x1800816e0
jmp 0x1800817e4
cmp r11, 8
jb 0x180081600
mov rcx, rdi
call fcn.1800b5354
jmp 0x180081600
mov qword [rsp + 0x40], 7
mov qword [rsp + 0x38], r15
mov word [rsp + 0x28], r15w
cmp word [rbp + 0x1a0], 0
jne 0x180081807
mov r8, r15
jmp 0x18008181c
lea rax, [rbp + 0x1a0]
mov r8, r12
inc r8
cmp word [rax + r8*2], 0
jne 0x180081811
lea rdx, [rbp + 0x1a0]
lea rcx, [rsp + 0x28]
call fcn.180005450
nop
lea rdx, [rsp + 0x28]
mov rcx, qword [rsi + 0x10]
call fcn.180011b50
nop
cmp qword [rsp + 0x40], 8
jb 0x180081600
mov rcx, qword [rsp + 0x28]
call fcn.1800b5354
jmp 0x180081600
call fcn.1800ba0d8
int3
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rcx, qword [rbp + 0x5c0]
xor rcx, rsp
call fcn.1800b5370
mov rbx, qword [rsp + 0x720]
add rsp, 0x6d0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret