Function at 0x140006ac8
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x5b0]
sub rsp, 0x6b0
mov rax, qword [0x140015078]
xor rax, rsp
mov qword [rbp + 0x5a0], rax
mov r14d, edx
mov rsi, rcx
lea rdx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
nop dword [rax + rax]
xor r15d, r15d
mov rdi, rax
test rsi, rsi
je 0x140006dc1
or r13, 0xffffffffffffffff
lea r12d, [r15 + 0x2e]
cmp rax, r13
je 0x140006c55
mov edx, r12d
lea rcx, [rsp + 0x5c]
call qword [sym.imp.msvcrt.dll_wcsrchr]
nop dword [rax + rax]
test byte [rsp + 0x30], 0x10
mov rbx, rax
jne 0x140006c2a
test rax, rax
je 0x140006b84
lea rdx, str..log
mov rcx, rax
call sub.msvcrt.dll_wcscmp
test eax, eax
je 0x140006c2a
lea rdx, str..dmp
mov rcx, rbx
call sub.msvcrt.dll_wcscmp
test eax, eax
je 0x140006c2a
mov ebx, 0x106
lea rcx, [rbp + 0x180]
mov edx, ebx
mov r8, rsi
call fcn.140001270
mov edx, 0x5c
lea rcx, [rbp + 0x180]
call qword [sym.imp.msvcrt.dll_wcsrchr]
nop dword [rax + rax]
lea r8, [rsp + 0x5c]
mov edx, ebx
lea rcx, [rbp + 0x180]
mov word [rax + 2], r15w
call fcn.14000429c
lea rax, [rbp + 0x180]
mov rcx, r13
inc rcx
cmp word [rax + rcx*2], r15w
jne 0x140006bd4
inc rcx
mov eax, 2
mul rcx
cmovo rax, r13
mov rcx, rax
call fcn.140009e48
mov qword [rsp + 0x20], rax
lea rcx, [rbp + 0x180]
mov rdx, r13
inc rdx
cmp word [rcx + rdx*2], r15w
jne 0x140006c04
inc rdx
lea r8, [rbp + 0x180]
mov rcx, rax
call fcn.140001270
lea rdx, [rsp + 0x20]
call fcn.1400087d0
lea rdx, [rsp + 0x30]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
nop dword [rax + rax]
test eax, eax
jne 0x140006b2f
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindClose]
nop dword [rax + rax]
mov edi, 0x106
lea rcx, [rbp + 0x390]
mov edx, edi
mov r8, rsi
call fcn.140001270
mov edx, 0x5c
lea rcx, [rbp + 0x390]
call qword [sym.imp.msvcrt.dll_wcsrchr]
nop dword [rax + rax]
lea r8, [0x140011ca4]
mov edx, edi
lea rcx, [rbp + 0x390]
mov word [rax + 2], r15w
call fcn.14000429c
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x390]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
nop dword [rax + rax]
mov rbx, rax
cmp rax, r13
je 0x140006dc1
test byte [rsp + 0x30], 0x10
je 0x140006d96
movzx ecx, word [rsp + 0x5e]
cmp word [rsp + 0x5c], r12w
jne 0x140006cfc
test cx, cx
je 0x140006d96
cmp word [rsp + 0x5c], r12w
jne 0x140006cfc
cmp cx, r12w
jne 0x140006cfc
cmp word [rsp + 0x60], r15w
je 0x140006d96
lea r8, [rbp + 0x390]
mov rdx, rdi
lea rcx, [rbp + 0x180]
call fcn.140001270
mov r13d, 0x5c
lea rcx, [rbp + 0x180]
mov edx, r13d
call qword [sym.imp.msvcrt.dll_wcsrchr]
nop dword [rax + rax]
lea r8, [rsp + 0x5c]
mov rdx, rdi
lea rcx, [rbp + 0x180]
mov word [rax + 2], r15w
call fcn.14000429c
lea r8, [0x14000b7c0]
mov rdx, rdi
lea rcx, [rbp + 0x180]
call fcn.14000429c
mov edx, r13d
mov rcx, rsi
call qword [sym.imp.msvcrt.dll_wcsrchr]
nop dword [rax + rax]
mov rdx, rdi
lea rcx, [rbp + 0x180]
lea r8, [rax + 2]
call fcn.14000429c
lea edx, [r14 - 1]
test edx, edx
je 0x140006d96
lea rcx, [rbp + 0x180]
call fcn.140006ac8
lea rdx, [rsp + 0x30]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
nop dword [rax + rax]
test eax, eax
jne 0x140006cc1
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindClose]
nop dword [rax + rax]
mov rcx, qword [rbp + 0x5a0]
xor rcx, rsp
call fcn.14000a1a0
mov rbx, qword [rsp + 0x700]
add rsp, 0x6b0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret