Function at 0x140005d90
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x220]
sub rsp, 0x320
mov rax, qword [0x1400a2060]
xor rax, rsp
mov qword [rbp + 0x210], rax
mov r14, rdx
mov qword [rsp + 0x50], rdx
mov rsi, rcx
mov qword [rsp + 0x38], rcx
xor r15d, r15d
mov r13d, r15d
cmp r8d, 0xffffffff
je 0x140005e60
test r8b, 0x10
jne 0x140005e60
mov rbx, qword [0x1400a8000]
mov rdi, qword [0x1400a8008]
cmp rbx, rdi
je 0x14000623e
mov rdx, rbx
lea rcx, [rsp + 0x78]
call fcn.1400054a0
nop
mov r8, r14
lea rdx, [rsp + 0x78]
mov rcx, rsi
call fcn.140005930
inc r13d
mov rdx, qword [rbp - 0x70]
cmp rdx, 0x10
jb 0x140005e5a
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005e55
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006271
call fcn.14004c810
add rbx, 0x20
jmp 0x140005df4
mov byte [rcx + 0x20], 1
lea rcx, [rbp - 0x68]
call fcn.140006ab0
nop
mov rdx, qword [rbp - 0x58]
mov r8, qword [rbp - 0x50]
mov rax, r8
sub rax, rdx
cmp rax, 4
jb 0x140005eac
lea rcx, [rdx + 4]
mov qword [rbp - 0x58], rcx
lea rax, [rbp - 0x68]
cmp r8, 8
cmovae rax, qword [rbp - 0x68]
movabs r8, 0x2a002e002a005c
mov qword [rax + rdx*2], r8
mov word [rax + rcx*2], r15w
jmp 0x140005ed0
mov qword [rsp + 0x20], 4
lea r9, str..
movzx r8d, byte [rsp + 0x30]
mov edx, 4
lea rcx, [rbp - 0x68]
call fcn.1400080f0
lea rcx, [rbp - 0x68]
cmp qword [rbp - 0x50], 8
cmovae rcx, qword [rbp - 0x68]
lea rdx, [rbp - 0x40]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r12, rax
mov qword [rsp + 0x48], rax
cmp rax, 0xffffffffffffffff
je 0x140006202
movzx ebx, byte [rsp + 0x30]
movzx edi, byte [rsp + 0x30]
nop dword [rax]
nop dword [rax + rax]
mov rdx, r14
lea rcx, [rsp + 0x58]
call fcn.140006ab0
nop
mov rdx, qword [rsp + 0x68]
mov r8, qword [rsp + 0x70]
mov rax, r8
sub rax, rdx
cmp rax, 1
jb 0x140005f5e
lea rcx, [rdx + 1]
mov qword [rsp + 0x68], rcx
lea rax, [rsp + 0x58]
cmp r8, 8
cmovae rax, qword [rsp + 0x58]
mov r8d, 0x5c
mov word [rax + rdx*2], r8w
mov word [rax + rcx*2], r15w
jmp 0x140005f81
mov qword [rsp + 0x20], 1
lea r9, [0x14008ed5c]
movzx r8d, bl
mov edx, 1
lea rcx, [rsp + 0x58]
call fcn.1400080f0
lea rax, [rbp - 0x14]
mov rdx, 0xffffffffffffffff
nop dword [rax]
inc rdx
cmp word [rax + rdx*2], 0
jne 0x140005f90
mov rcx, qword [rsp + 0x68]
mov r8, qword [rsp + 0x70]
mov rax, r8
sub rax, rcx
cmp rdx, rax
ja 0x140005fe6
lea r14, [rcx + rdx]
mov qword [rsp + 0x68], r14
lea rsi, [rsp + 0x58]
cmp r8, 8
cmovae rsi, qword [rsp + 0x58]
lea rcx, [rsi + rcx*2]
lea r8, [rdx + rdx]
lea rdx, [rbp - 0x14]
call fcn.14004ea60
xor eax, eax
mov word [rsi + r14*2], ax
mov rsi, qword [rsp + 0x38]
jmp 0x140005fff
mov qword [rsp + 0x20], rdx
lea r9, [rbp - 0x14]
movzx r8d, dil
lea rcx, [rsp + 0x58]
call fcn.1400080f0
xor eax, eax
mov r8d, dword [rbp - 0x40]
cmp r8d, 0xffffffff
je 0x140006191
test r8b, 0x10
jne 0x140006156
mov rsi, qword [0x1400a8000]
mov r15, qword [0x1400a8008]
mov qword [rsp + 0x40], r15
cmp rsi, r15
je 0x140006191
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x70], rax
mov r14, qword [rsi + 0x10]
mov r12, rsi
cmp qword [rsi + 0x18], 0x10
jb 0x140006051
mov r12, qword [rsi]
cmp r14, 0x10
jae 0x14000606b
movups xmm0, xmmword [r12]
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x70], 0xf
jmp 0x1400060e6
mov r15, r14
or r15, 0xf
movabs rcx, 0x7fffffffffffffff
cmp r15, rcx
cmova r15, rcx
lea rcx, [r15 + 1]
cmp rcx, 0x1000
jb 0x1400060bf
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140006277
mov rcx, rax
call fcn.14004cab8
mov rcx, rax
test rax, rax
je 0x14000627d
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400060c9
test rcx, rcx
je 0x1400060c9
call fcn.14004cab8
mov qword [rsp + 0x78], rax
lea r8, [r14 + 1]
mov rdx, r12
mov rcx, rax
call fcn.14004ea60
mov qword [rbp - 0x70], r15
mov r15, qword [rsp + 0x40]
mov qword [rbp - 0x78], r14
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x78]
mov rcx, qword [rsp + 0x38]
call fcn.140005930
inc r13d
mov rdx, qword [rbp - 0x70]
cmp rdx, 0x10
jb 0x14000613d
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006138
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000627d
call fcn.14004c810
add rsi, 0x20
cmp rsi, r15
mov eax, 0
jne 0x140006033
mov r12, qword [rsp + 0x48]
jmp 0x140006191
movzx ecx, word [rbp - 0x14]
movzx eax, word [rbp - 0x12]
cmp cx, 0x2e
jne 0x14000617a
test ax, ax
je 0x140006191
cmp cx, cx
jne 0x14000617a
cmp ax, cx
jne 0x14000617a
cmp word [rbp - 0x10], 0
je 0x140006191
bt r8d, 0xa
jb 0x140006191
lea rdx, [rsp + 0x58]
mov rcx, rsi
call fcn.140005d90
add r13d, eax
lea rdx, [rbp - 0x40]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
mov esi, eax
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x1400061e2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400061dd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006283
call fcn.14004c810
test esi, esi
je 0x1400061f8
mov rsi, qword [rsp + 0x38]
mov r14, qword [rsp + 0x50]
xor r15d, r15d
jmp 0x140005f10
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
mov rdx, qword [rbp - 0x50]
cmp rdx, 8
jb 0x14000623e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006239
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000626b
call fcn.14004c810
mov eax, r13d
mov rcx, qword [rbp + 0x210]
xor rcx, rsp
call fcn.14004c7f0
mov rbx, qword [rsp + 0x370]
add rsp, 0x320
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140059a5c
int3
call fcn.140059a5c
nop
call fcn.140001b00
nop
call fcn.140059a5c
nop
call fcn.140059a5c
int3