Function at 0x180006450
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x150]
sub rsp, 0x250
mov rax, qword [0x1800d9060]
xor rax, rsp
mov qword [rbp + 0x140], rax
mov rdi, rdx
mov rsi, rcx
xor r12d, r12d
mov r14d, r12d
mov dword [rsp + 0x40], r12d
lea r8, [0x1800be1b4]
mov rdx, rcx
lea rcx, [rbp - 0x28]
call fcn.18000a360
nop
lea rcx, [rbp - 0x28]
cmp qword [rbp - 0x10], 0x10
cmovae rcx, qword [rbp - 0x28]
lea rdx, [rbp]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov r15, rax
cmp rax, 0xffffffffffffffff
je 0x1800067c5
movabs r13, 0x7fffffffffffffff
lea rbx, [0x1800be0e0]
nop dword [rax + rax]
mov qword [rsp + 0x70], r12
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], r12
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x70], 0
lea rax, [rbp + 0x2c]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x180006510
lea rdx, [rbp + 0x2c]
lea rcx, [rsp + 0x70]
call fcn.18000dc10
nop
lea rax, [rsp + 0x70]
mov rcx, qword [rsp + 0x70]
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
cmovae rax, rcx
mov r8, qword [rbp - 0x80]
cmp r8, 1
jne 0x18000654e
cmp byte [rax], 0x2e
je 0x180006568
lea rax, [rsp + 0x70]
cmp rdx, 0x10
cmovae rax, rcx
cmp r8, 2
jne 0x180006577
cmp word [rax], 0x2e2e
jne 0x180006577
cmp rdx, 0x10
jb 0x180006795
jmp 0x180006768
mov rcx, qword [rsi + 0x10]
mov rax, r13
sub rax, rcx
cmp rax, 1
jb 0x180006836
mov r9, rsi
cmp qword [rsi + 0x18], 0x10
jb 0x180006598
mov r9, qword [rsi]
mov qword [rsp + 0x30], 1
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x48]
call fcn.18000bd00
or r14d, 2
mov dword [rsp + 0x40], r14d
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x48]
call fcn.18000a4b0
nop
and r14d, 0xfffffffd
mov dword [rsp + 0x40], r14d
mov rdx, qword [rsp + 0x60]
cmp rdx, 0x10
jb 0x180006618
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180006613
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180006842
call fcn.18006d82c
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x60], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x48], 0
test byte [rbp], 0x10
je 0x180006642
mov rdx, rdi
lea rcx, [rbp - 0x48]
call fcn.180006450
jmp 0x18000670e
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], r12
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x70], 0
lea rdx, [rbp - 0x48]
cmp qword [rbp - 0x30], 0x10
cmovae rdx, qword [rbp - 0x48]
mov r8, qword [rbp - 0x38]
lea rcx, [rbp - 0x70]
call fcn.18000dc10
mov rax, qword [rbp + 4]
mov qword [rbp - 0x50], rax
mov rbx, qword [rdi + 8]
cmp rbx, qword [rdi + 0x10]
je 0x1800066ac
mov qword [rsp + 0x68], rbx
lea rdx, [rbp - 0x70]
mov rcx, rbx
call fcn.180008880
nop
mov rax, qword [rbp - 0x50]
mov qword [rbx + 0x20], rax
add qword [rdi + 8], 0x28
jmp 0x1800066bc
lea r8, [rbp - 0x70]
mov rdx, rbx
mov rcx, rdi
call fcn.18000a5b0
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x1800066f7
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800066f2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180006848
call fcn.18006d82c
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x70], 0
lea rbx, [0x1800be0e0]
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x180006749
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180006744
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000684e
call fcn.18006d82c
mov qword [rbp - 0x38], r12
mov qword [rbp - 0x30], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x48], 0
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x180006795
mov rcx, qword [rsp + 0x70]
inc rdx
cmp rdx, 0x1000
mov rax, rcx
jb 0x180006790
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180006854
call fcn.18006d82c
mov byte [rsp + 0x70], 0
mov qword [rbp - 0x78], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x80], r12
lea rdx, [rbp]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x1800064e0
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, 0x10
jb 0x1800067fc
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800067f7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000683c
call fcn.18006d82c
mov qword [rbp - 0x18], r12
mov qword [rbp - 0x10], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x28], 0
mov rcx, qword [rbp + 0x140]
xor rcx, rsp
call fcn.18006d7e0
mov rbx, qword [rsp + 0x2a0]
add rsp, 0x250
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.18000daa0
nop
call fcn.1800742a4
nop
call fcn.1800742a4
int3
call fcn.1800742a4
nop
call fcn.1800742a4
nop
call fcn.1800742a4
int3