Function at 0x10005930
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x978
mov eax, dword [0x1002bea0]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
push esi
mov esi, dword [ebp + 8]
mov edx, esi
mov dword [ebp - 0x968], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x970], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x974], ecx
lea ecx, [edx + 1]
push edi
mov dword [ebp - 0x96c], eax
nop
mov al, byte [edx]
inc edx
test al, al
jne 0x10005970
movzx eax, byte [ebp + 0x20]
sub edx, ecx
mov edi, dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov ecx, 1
mov bl, byte [edx + esi - 1]
cmp bl, 0x5c
cmovne ecx, eax
test cl, cl
jne 0x100059e8
lea eax, [ebp - 0x964]
push eax
push esi
call edi
cmp eax, 0xffffffff
je 0x10005be3
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
test byte [ebp - 0x964], 0x10
jne 0x100059e8
mov edx, dword [ebp - 0x968]
xor eax, eax
add eax, dword [ebp - 0x944]
mov ecx, dword [ebp - 0x948]
adc ecx, 0
add dword [edx], eax
pop edi
adc dword [edx + 4], ecx
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1001025d
mov esp, ebp
pop ebp
ret 0x1c
push esi
lea eax, [ebp - 0x824]
push 0x410
push eax
call fcn.1001557c
add esp, 0xc
cmp bl, 0x5c
je 0x10005a1b
push 0x10022480
lea eax, [ebp - 0x824]
push 0x410
push eax
call fcn.10015828
add esp, 0xc
lea eax, [ebp - 0x824]
push eax
lea eax, [ebp - 0x414]
push 0x410
push eax
call fcn.1001557c
push 0x100224d8
lea eax, [ebp - 0x414]
push 0x410
push eax
call fcn.10015828
add esp, 0x18
lea eax, [ebp - 0x964]
push eax
lea eax, [ebp - 0x414]
push eax
call edi
mov dword [ebp - 0x978], eax
cmp eax, 0xffffffff
je 0x10005bdc
mov edi, dword [ebp + 0x1c]
mov ebx, dword [ebp + 0x18]
mov esi, dword [ebp - 0x968]
nop word [eax + eax]
mov eax, dword [ebp - 0x970]
cmp byte [eax], 0
jne 0x10005be3
mov eax, dword [ebp - 0x96c]
cmp byte [eax], 0
jne 0x10005be3
test byte [ebp - 0x964], 0x10
je 0x10005b71
mov ecx, 0x100224dc
lea eax, [ebp - 0x938]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10005ad6
test dl, dl
je 0x10005ad2
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10005ad6
add eax, 2
add ecx, 2
test dl, dl
jne 0x10005ab6
xor eax, eax
jmp 0x10005adb
sbb eax, eax
or eax, 1
test eax, eax
je 0x10005b8f
mov ecx, 0x100224e0
lea eax, [ebp - 0x938]
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10005b10
test dl, dl
je 0x10005b0c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10005b10
add eax, 2
add ecx, 2
test dl, dl
jne 0x10005af0
xor eax, eax
jmp 0x10005b15
sbb eax, eax
or eax, 1
test eax, eax
je 0x10005b8f
lea eax, [ebp - 0x824]
push eax
lea eax, [ebp - 0x414]
push 0x410
push eax
call fcn.1001557c
lea eax, [ebp - 0x938]
push eax
lea eax, [ebp - 0x414]
push 0x410
push eax
call fcn.10015828
mov ecx, dword [ebp - 0x974]
lea eax, [ebp - 0x414]
add esp, 0x18
push 1
push edi
push ebx
push dword [ebp - 0x96c]
push dword [ebp - 0x970]
push esi
push eax
call fcn.10005930
jmp 0x10005b8f
mov edx, dword [ebp - 0x968]
xor eax, eax
add eax, dword [ebp - 0x944]
mov esi, edx
mov ecx, dword [ebp - 0x948]
adc ecx, 0
add dword [edx], eax
adc dword [edx + 4], ecx
mov edx, dword [ebp - 0x974]
mov ecx, dword [edx + 0xc]
mov eax, ecx
and eax, 0x80000fff
jns 0x10005baa
dec eax
or eax, 0xfffff000
add eax, 1
lea eax, [ecx + 1]
mov dword [edx + 0xc], eax
jne 0x10005bbb
push edi
push ebx
mov ecx, edx
call fcn.10005c60
lea eax, [ebp - 0x964]
push eax
push dword [ebp - 0x978]
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x10005a80
mov eax, dword [ebp - 0x978]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1001025d
mov esp, ebp
pop ebp
ret 0x1c