Function at 0x14005ca24
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push rbp
sub rsp, 0x320
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x2b0], rcx
mov qword [rbp + 0x2b8], rdx
mov qword [rbp + 0x288], 0
call fcn.1400bbfe0
mov rax, qword [rbp + 0x2b0]
mov rdx, rax
lea rcx, [rbp + 0x2b0]
call fcn.1400bc3a0
mov rdx, qword [rbp + 0x2b8]
lea rax, [rbp + 0x2b8]
mov rcx, rax
call fcn.1400bc3a0
mov qword [rbp + 0x200], 0
lea rax, [rbp - 0x50]
mov edx, 0x250
mov r8, rdx
mov edx, 0
mov rcx, rax
call fcn.140069270
mov dword [rbp - 0x54], 0
mov qword [rbp - 0x60], 0
call fcn.1400bc050
call fcn.1400bc050
call fcn.1400bc0b0
mov edx, eax
mov rax, qword [rbp + 0x2b0]
mov r8d, edx
mov edx, 1
mov rcx, rax
call fcn.1400b95f0
call fcn.1400bc670
call fcn.1400bc190
mov qword [rbp + 0x280], rax
lea rax, [0x14067b590]
mov qword [rbp + 0x278], rax
mov rdx, qword [rbp + 0x280]
mov rax, qword [rbp + 0x278]
mov rcx, rax
call fcn.1400bc410
test eax, eax
jne 0x14005cb47
call fcn.1400bc050
mov rax, qword [rbp + 0x2b0]
mov rcx, rax
call fcn.1400bc470
lea rcx, [0x14067b590]
call fcn.1400bc470
call fcn.1400bc0b0
mov edx, eax
lea rcx, [rbp + 0x2b0]
call fcn.1400bc290
jmp 0x14005cb48
nop
call fcn.1400bc050
mov rax, qword [rbp + 0x2b0]
mov rcx, rax
call fcn.1400bc470
lea rcx, [0x14068f408]
call fcn.1400bc470
call fcn.1400bc0b0
mov edx, eax
lea rax, [rbp + 0x200]
mov rcx, rax
call fcn.1400bc290
lea rax, [rbp - 0x50]
mov qword [rbp + 0x270], rax
mov rax, qword [rbp + 0x200]
mov rcx, rax
mov rax, qword [rbp + 0x270]
mov rdx, rax
call sub.KERNEL32.DLL_FindFirstFileW
mov qword [rbp + 0x268], rax
mov rax, qword [rbp + 0x268]
mov dword [rbp - 0x54], eax
mov eax, dword [rbp - 0x54]
cmp eax, 0xffffffff
je 0x14005cdcf
call fcn.1400bc050
call fcn.1400bc050
lea rax, [rbp - 0x50]
add rax, 0x2c
mov qword [rbp + 0x260], rax
call fcn.1400bc0b0
mov edx, eax
mov rax, qword [rbp + 0x260]
mov rcx, rax
call fcn.1400ba6a0
call fcn.1400bc0b0
mov edx, eax
lea rax, [rbp - 0x60]
mov rcx, rax
call fcn.1400bc290
mov eax, dword [rbp - 0x50]
cdqe
and eax, 0x10
test rax, rax
je 0x14005cd4b
mov rax, qword [rbp - 0x60]
mov qword [rbp + 0x258], rax
lea rax, [0x140679d5c]
mov qword [rbp + 0x250], rax
mov qword [rbp + 0x298], 0
mov rdx, qword [rbp + 0x258]
mov rax, qword [rbp + 0x250]
mov rcx, rax
call fcn.1400bc410
test eax, eax
jne 0x14005cc91
mov rax, qword [rbp - 0x60]
mov qword [rbp + 0x248], rax
lea rax, [0x14069757a]
mov qword [rbp + 0x240], rax
mov rdx, qword [rbp + 0x248]
mov rax, qword [rbp + 0x240]
mov rcx, rax
call fcn.1400bc410
test eax, eax
jne 0x14005cc94
nop
mov qword [rbp + 0x298], 1
jmp 0x14005cc95
nop
jmp 0x14005cc95
nop
cmp qword [rbp + 0x298], 0
je 0x14005cd4e
call fcn.1400bc050
call fcn.1400bc050
mov rax, qword [rbp + 0x2b0]
mov rcx, rax
call fcn.1400bc470
mov rax, qword [rbp - 0x60]
mov rcx, rax
call fcn.1400bc470
call fcn.1400bc200
mov qword [rbp + 0x238], rax
mov rdx, qword [rbp + 0x2b8]
mov rax, qword [rbp + 0x238]
mov rcx, rax
call fcn.14005ca24
mov qword [rbp + 0x230], rax
call fcn.1400bc120
call fcn.1400bc050
call fcn.1400bc050
mov rax, qword [rbp + 0x2b0]
mov rcx, rax
call fcn.1400bc470
mov rax, qword [rbp - 0x60]
mov rcx, rax
call fcn.1400bc470
call fcn.1400bc200
mov qword [rbp + 0x228], rax
mov rdx, qword [rbp + 0x2b8]
mov rax, qword [rbp + 0x228]
mov rcx, rax
call fcn.14005ce8d
mov qword [rbp + 0x220], rax
call fcn.1400bc120
jmp 0x14005cd4f
nop
jmp 0x14005cd4f
nop
mov qword [rbp + 0x290], 0
mov rax, qword [0x1406a3188]
cmp rax, 1
je 0x14005cd99
lea rax, [rbp - 0x50]
mov qword [rbp + 0x218], rax
mov eax, dword [rbp - 0x54]
cdqe
mov rdx, qword [rbp + 0x218]
mov rcx, rax
call sub.KERNEL32.DLL_FindNextFileW
mov qword [rbp + 0x210], rax
cmp qword [rbp + 0x210], 0
jne 0x14005cda7
jmp 0x14005cd9a
nop
mov qword [rbp + 0x290], 1
jmp 0x14005cda8
nop
cmp qword [rbp + 0x290], 0
jne 0x14005cdb8
nop
jmp 0x14005cbbf
nop
mov eax, dword [rbp - 0x54]
cdqe
mov rcx, rax
call sub.KERNEL32.DLL_FindClose
mov qword [rbp + 0x208], rax
jmp 0x14005cdd0
nop
mov qword [rbp + 0x288], 0
mov rax, qword [rbp + 0x2b0]
mov rcx, rax
call fcn.1400bc370
mov rax, qword [rbp + 0x200]
mov rcx, rax
call fcn.1400bc370
mov rax, qword [rbp + 0x2b8]
mov rcx, rax
call fcn.1400bc370
mov rax, qword [rbp - 0x60]
mov rcx, rax
call fcn.1400bc370
mov rax, qword [rbp + 0x288]
add rsp, 0x320
pop rbp
ret