Function at 0x180001210
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
sub rsp, 0x180
mov rbp, rdx
mov rbx, rcx
mov rcx, rbp
lea rdx, [rsp + 0x40]
mov esi, 1
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov qword [rsp + 0x1b8], rax
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x1800014d6
movzx edx, byte [rbp]
mov r9, rbp
mov qword [rsp + 0x1b0], rbp
mov r8, rbp
test dl, dl
je 0x180001292
inc r8
cmp dl, 0x5c
je 0x180001274
cmp dl, 0x2f
je 0x180001274
xor ecx, ecx
jmp 0x180001276
mov ecx, esi
movzx edx, byte [r8]
test ecx, ecx
mov rax, r8
cmove rax, r9
mov r9, rax
test dl, dl
jne 0x180001263
mov qword [rsp + 0x1b0], rax
lea r8, [0x180000000]
nop dword [rax]
xor edx, edx
movzx eax, byte [rsp + rdx + 0x6c]
movzx ecx, byte [rdx + r8 + 0x64cd0]
lea rdx, [rdx + 1]
cmp al, cl
jb 0x1800012cb
ja 0x1800012cb
test al, al
je 0x1800014a4
cmp al, cl
je 0x1800012a2
jmp 0x1800014a4
xor edx, edx
nop dword [rax]
movzx eax, byte [rsp + rdx + 0x6c]
movzx ecx, byte [rdx + r8 + 0x64cd4]
lea rdx, [rdx + 1]
cmp al, cl
jb 0x1800012f9
ja 0x1800012f9
test al, al
je 0x1800014a4
cmp al, cl
je 0x1800012d0
jmp 0x1800014a4
mov byte [r9], 0
test byte [rsp + 0x40], 0x10
je 0x180001457
test byte [rbx + 0x10], 1
je 0x180001351
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x180001351
xor r9d, r9d
mov qword [rsp + 0x20], 0
xor r8d, r8d
lea rdx, [rsp + 0x6c]
call fcn.1800096d0
test eax, eax
je 0x180001349
inc dword [rbx + 0x28]
lea r8, [rsp + 0x40]
mov rdx, rbp
mov rcx, rbx
call section..text
mov esi, eax
mov r9, qword [rsp + 0x1b0]
test esi, esi
je 0x1800014a0
test byte [rbx + 0x10], 4
je 0x1800014a0
xor edx, edx
mov rax, rbp
cmp byte [rbp], dl
je 0x18000137b
nop dword [rax]
lea rax, [rax + 1]
inc edx
cmp byte [rax], 0
jne 0x180001370
movzx r8d, byte [rsp + 0x6c]
lea rax, [rsp + 0x6c]
xor r9d, r9d
test r8b, r8b
je 0x18000139b
nop
inc rax
inc r9d
cmp byte [rax], 0
jne 0x180001390
test edx, edx
je 0x1800013c1
lea eax, [rdx - 1]
movzx eax, byte [rax + rbp]
cmp al, 0x2f
je 0x1800013c3
cmp al, 0x5c
je 0x1800013c3
cmp r8b, 0x2f
je 0x1800013c3
cmp r8b, 0x5c
je 0x1800013c3
mov ecx, 1
jmp 0x1800013c5
xor al, al
xor ecx, ecx
test edx, edx
je 0x1800013e0
cmp al, 0x5c
je 0x1800013d1
cmp al, 0x2f
jne 0x1800013e0
cmp r8b, 0x2f
je 0x1800013dd
cmp r8b, 0x5c
jne 0x1800013e0
dec r9d
lea r8d, [rdx + rcx]
add r9d, 3
mov rcx, qword [rbx]
xor edx, edx
add r8d, r9d
lea r9d, [rdx + 1]
call fcn.180002440
mov rdi, rax
test rax, rax
je 0x18000144b
mov r8, rax
lea rdx, [rsp + 0x6c]
mov rcx, rbp
call fcn.1800016f0
mov r8, rdi
lea rdx, [0x180064cd8]
mov rcx, rdi
call fcn.1800016f0
mov rdx, rdi
mov rcx, rbx
call fcn.180001210
mov rcx, qword [rbx]
mov r8d, 1
mov rdx, rdi
mov esi, eax
call fcn.180002740
mov rdi, qword [rsp + 0x1b8]
jmp 0x180001498
mov rdi, qword [rsp + 0x1b8]
xor esi, esi
jmp 0x180001498
test byte [rbx + 0x10], 2
je 0x1800014a0
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1800014a0
xor r9d, r9d
mov qword [rsp + 0x20], 0
xor r8d, r8d
lea rdx, [rsp + 0x6c]
call fcn.1800096d0
test eax, eax
je 0x180001498
inc dword [rbx + 0x2c]
lea r8, [rsp + 0x40]
mov rdx, rbp
mov rcx, rbx
call section..text
mov esi, eax
mov r9, qword [rsp + 0x1b0]
mov byte [r9], 0x2a
test esi, esi
je 0x1800014cd
lea rdx, [rsp + 0x40]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
mov r9, qword [rsp + 0x1b0]
lea r8, [0x180000000]
test eax, eax
jne 0x1800012a0
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindClose]
mov eax, esi
mov rbx, qword [rsp + 0x1a0]
add rsp, 0x180
pop rdi
pop rsi
pop rbp
ret