Function at 0x180001270
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
sub rsp, 0x180
mov rbp, rdx
mov rbx, rcx
lea rdx, [rsp + 0x40]
mov rcx, rbp
mov edi, 1
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov rsi, rax
mov qword [rsp + 0x1b8], rax
cmp rax, 0xffffffffffffffff
je 0x18000153b
movzx eax, byte [rbp]
mov r8, rbp
mov qword [rsp + 0x1b0], rbp
mov rcx, rbp
test al, al
je 0x1800012e0
inc rcx
cmp al, 0x5c
je 0x1800012ce
cmp al, 0x2f
jne 0x1800012d1
mov r8, rcx
movzx eax, byte [rcx]
test al, al
jne 0x1800012c3
mov qword [rsp + 0x1b0], r8
xor r9d, r9d
lea r10, [0x180000000]
nop word [rax + rax]
mov rdx, r9
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rsp + rdx + 0x6c]
movzx ecx, byte [rdx + r10 + 0x53ee8]
lea rdx, [rdx + 1]
cmp al, cl
jb 0x180001329
ja 0x180001329
test al, al
je 0x180001503
cmp al, cl
je 0x180001300
jmp 0x180001503
mov rdx, r9
nop dword [rax]
movzx eax, byte [rsp + rdx + 0x6c]
movzx ecx, byte [rdx + r10 + 0x53eec]
lea rdx, [rdx + 1]
cmp al, cl
jb 0x180001359
ja 0x180001359
test al, al
je 0x180001503
cmp al, cl
je 0x180001330
jmp 0x180001503
mov byte [r8], 0
test byte [rsp + 0x40], 0x10
je 0x1800014ac
test byte [rbx + 0x10], 1
je 0x1800013b8
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1800013b8
mov qword [rsp + 0x20], r9
lea rdx, [rsp + 0x6c]
xor r8d, r8d
xor r9d, r9d
call fcn.1800070c0
test eax, eax
je 0x1800013b0
inc dword [rbx + 0x28]
cmp qword [rbx + 0x18], 0
je 0x180001424
lea r8, [rsp + 0x40]
mov rdx, rbp
mov rcx, rbx
call fcn.180001030
mov edi, eax
mov r8, qword [rsp + 0x1b0]
test edi, edi
je 0x1800014ff
test byte [rbx + 0x10], 4
je 0x1800014f7
xor edx, edx
mov rax, rbp
cmp byte [rbp], dl
je 0x1800013df
lea rax, [rax + 1]
inc edx
cmp byte [rax], 0
jne 0x1800013d4
movzx r8d, byte [rsp + 0x6c]
xor r9d, r9d
lea rax, [rsp + 0x6c]
test r8b, r8b
je 0x1800013fe
lea rax, [rax + 1]
inc r9d
cmp byte [rax], 0
jne 0x1800013f2
test edx, edx
je 0x18000142b
lea eax, [rdx - 1]
movzx eax, byte [rax + rbp]
cmp al, 0x2f
je 0x18000142b
cmp al, 0x5c
je 0x18000142b
cmp r8b, 0x2f
je 0x18000142b
cmp r8b, 0x5c
je 0x18000142b
mov eax, 1
jmp 0x18000142d
mov edi, 1
jmp 0x1800013c0
xor eax, eax
mov rcx, qword [rbx]
xor r8d, r8d
test eax, eax
setne r8b
add r9d, 3
add r8d, r9d
add r8d, edx
xor edx, edx
lea r9d, [rdx + 1]
call fcn.180002420
mov rsi, rax
test rax, rax
je 0x1800014a0
lea rdx, [rsp + 0x6c]
mov r8, rax
mov rcx, rbp
call fcn.180001750
lea rdx, [0x180053ef0]
mov r8, rsi
mov rcx, rsi
call fcn.180001750
mov rdx, rsi
mov rcx, rbx
call fcn.180001270
mov rcx, qword [rbx]
mov r8d, 1
mov rdx, rsi
mov edi, eax
call fcn.1800027c0
mov rsi, qword [rsp + 0x1b8]
jmp 0x1800014f7
mov rsi, qword [rsp + 0x1b8]
xor edi, edi
jmp 0x1800014f7
test byte [rbx + 0x10], 2
je 0x1800014ff
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1800014ff
mov qword [rsp + 0x20], r9
lea rdx, [rsp + 0x6c]
xor r8d, r8d
xor r9d, r9d
call fcn.1800070c0
test eax, eax
je 0x1800014f7
inc dword [rbx + 0x2c]
cmp qword [rbx + 0x18], 0
je 0x1800014f2
lea r8, [rsp + 0x40]
mov rdx, rbp
mov rcx, rbx
call fcn.180001030
mov edi, eax
jmp 0x1800014f7
mov edi, 1
mov r8, qword [rsp + 0x1b0]
mov byte [r8], 0x2a
test edi, edi
je 0x180001532
lea rdx, [rsp + 0x40]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
mov r8, qword [rsp + 0x1b0]
mov r9d, 0
lea r10, [0x180000000]
test eax, eax
jne 0x1800012f0
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FindClose]
mov eax, edi
mov rbx, qword [rsp + 0x1a0]
add rsp, 0x180
pop rdi
pop rsi
pop rbp
ret