Function at 0x140005950
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push rbx
push rsi
mov eax, 0x6b8
call fcn.14000c460
sub rsp, rax
mov qword [rsp + 0x6d0], rbp
lea r8, [0x140030220]
mov qword [rsp + 0x6d8], rdi
mov r9, rcx
mov qword [rsp + 0x6e0], r12
xor ebp, ebp
mov qword [rsp + 0x6b0], r13
mov r13, rcx
mov qword [rsp + 0x6a8], r14
lea rcx, [rsp + 0x490]
mov qword [rsp + 0x6a0], r15
mov r15, rdx
mov edx, 0x104
call fcn.140006730
lea rcx, [rsp + 0x490]
call fcn.1400062e0
lea rdx, [rsp + 0x240]
mov rcx, rax
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r12, rax
cmp rax, 0xffffffffffffffff
je 0x140005bc5
lea rsi, [0x14002ee10]
movzx edx, word [rsp + 0x26c]
movzx ecx, word [rsp + 0x26e]
cmp dx, 0x2e
jne 0x140005a20
test cx, cx
je 0x140005b14
cmp dx, dx
jne 0x140005a20
cmp cx, dx
jne 0x140005a20
cmp word [rsp + 0x270], bp
je 0x140005b14
lea rax, [rsp + 0x26c]
mov r9, r13
lea r8, str._s_s
mov qword [rsp + 0x20], rax
mov edx, 0x104
lea rcx, [rsp + 0x30]
call fcn.140006730
test byte [rsp + 0x240], 0x10
lea rcx, [rsp + 0x30]
je 0x140005aa3
lea r9, [rsp + 0x30]
mov edx, 0x104
lea r8, [0x140030238]
call fcn.140006730
mov rdx, r15
lea rcx, [rsp + 0x30]
call fcn.140005950
mov esi, eax
test eax, eax
je 0x140005b0d
call fcn.140003e20
mov rcx, rax
lea r8, [rsp + 0x30]
mov r9d, esi
lea rdx, str.add_dir_entries_error:__S__err:__d
call fcn.1400089d0
jmp 0x140005bc7
call fcn.1400063e0
mov r14, rax
test rax, rax
je 0x140005b46
mov ecx, 0x30
call fcn.14000c4b0
mov rdi, rax
test rax, rax
je 0x140005ae1
mov dword [rax + 8], 1
mov qword [rax + 0x10], rbp
mov qword [rax], rsi
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rbp
mov dword [rax + 0x28], ebp
jmp 0x140005ae4
mov rdi, rbp
mov rax, qword [rdi]
mov rdx, r14
mov rcx, rdi
call qword [rax + 8]
mov esi, eax
test eax, eax
jne 0x140005c10
mov rcx, r14
call fcn.1400109d4
mov rdx, rdi
mov rcx, r15
call fcn.140002970
lea rsi, [0x14002ee10]
lea rdx, [rsp + 0x240]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x1400059e9
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rcx, r13
call fcn.1400063e0
mov rsi, rax
test rax, rax
jne 0x140005b4d
mov esi, 5
jmp 0x140005bc7
mov ecx, 0x30
call fcn.14000c4b0
mov rdi, rax
test rax, rax
je 0x140005b81
mov dword [rax + 8], 1
mov qword [rax + 0x10], rbp
lea rax, [0x14002ef50]
mov qword [rdi], rax
mov qword [rdi + 0x18], rbp
mov qword [rdi + 0x20], rbp
mov dword [rdi + 0x28], ebp
jmp 0x140005b84
mov rdi, rbp
mov rax, qword [rdi]
mov rdx, rsi
mov rcx, rdi
call qword [rax + 8]
mov ebp, eax
test eax, eax
je 0x140005bb2
call fcn.140003e20
mov rcx, rax
lea rdx, str.add_dir_entries_Parse_error_on_close:__S__err:__d
mov r9d, ebp
mov r8, rsi
call fcn.1400089d0
jmp 0x140005bbd
mov rdx, rdi
mov rcx, r15
call fcn.140002970
mov rcx, rsi
call fcn.1400109d4
mov esi, ebp
mov r15, qword [rsp + 0x6a0]
mov r14, qword [rsp + 0x6a8]
mov r13, qword [rsp + 0x6b0]
mov r12, qword [rsp + 0x6e0]
mov rdi, qword [rsp + 0x6d8]
mov rbp, qword [rsp + 0x6d0]
test rbx, rbx
je 0x140005c04
mov rcx, rbx
call fcn.14000c4ec
mov eax, esi
add rsp, 0x6b8
pop rsi
pop rbx
ret
call fcn.140003e20
mov rcx, rax
lea rdx, str.add_dir_entries_Parse_error_on_recurse:__S__err:__d
mov r9d, esi
mov r8, r14
call fcn.1400089d0
jmp 0x140005bc7