Function at 0x10035d90
Capabilities:
Enumerate files on windows
Set file attributes
Timestomp file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006e4f6
mov eax, dword fs:[0]
push eax
mov eax, 0x21b4
call fcn.10042c60
mov eax, dword [0x10086e84]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
cmp byte [ebp + 8], 0
mov dword [ebp - 0x21c0], ecx
je 0x10035dd6
add ecx, 0x662
jmp 0x10035dd9
add ecx, 0x48
xor ebx, ebx
push 0x820
lea eax, [ebp - 0x1056]
push ebx
push eax
mov dword [ebp - 0x21a4], ecx
mov word [ebp - 0x1058], bx
call fcn.10042010
mov ecx, dword [0x10086cf8]
mov edx, dword [ebp - 0x21a4]
push ecx
push edx
lea eax, [ebp - 0x1058]
push str._s_s
push eax
call fcn.10043b8d
push 0x24c
lea ecx, [ebp - 0x12a4]
push ebx
push ecx
mov dword [ebp - 0x12a8], ebx
call fcn.10042010
add esp, 0x28
lea edx, [ebp - 0x12a8]
push edx
lea eax, [ebp - 0x1058]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
xor ecx, ecx
cmp eax, 0xffffffff
setne cl
mov dword [ebp - 0x219c], eax
cmp ecx, ebx
mov dword [ebp - 0x2198], ecx
je 0x100361f3
jmp 0x10035e72
xor ebx, ebx
push 0x820
lea ecx, [ebp - 0x832]
push ebx
push ecx
mov word [ebp - 0x834], bx
call fcn.10042010
mov esi, dword [ebp - 0x1294]
mov edi, dword [ebp - 0x1290]
add esp, 0xc
lea edx, [ebp - 0x21ac]
push edx
mov byte [ebp - 0x2191], 1
mov dword [ebp - 0x21b8], ebx
mov dword [ebp - 0x21ac], ebx
mov dword [ebp - 0x21a8], ebx
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov ecx, dword [ebp - 0x21ac]
mov edx, dword [ebp - 0x12a4]
mov eax, dword [ebp - 0x21a8]
mov dword [ebp - 0x21b8], ebx
sub ecx, edx
mov dword [ebp - 0x21b8], ebx
mov ebx, dword [ebp - 0x12a0]
mov dword [ebp - 0x21b4], ecx
mov ecx, eax
sbb ecx, ebx
mov ebx, dword [ebp - 0x12a8]
shr ebx, 1
and bl, 1
mov dword [ebp - 0x21b0], ecx
mov byte [ebp - 0x2192], 0
je 0x10035f4d
cmp ecx, 0x1792
jl 0x10035f29
jg 0x10035f20
cmp dword [ebp - 0x21b4], 0xf8648000
jbe 0x10035f29
mov byte [ebp - 0x2192], 1
jmp 0x10035f46
cmp byte [ebp + 0xc], 0
jne 0x10035f4d
add esi, 0x61c46800
adc edi, 8
cmp eax, edi
jg 0x10035f4d
jl 0x10035f46
cmp dword [ebp - 0x21ac], esi
jae 0x10035f4d
mov byte [ebp - 0x2191], 0
mov edi, dword [ebp - 0x21c0]
cmp byte [edi + 0xed8], 0
jne 0x10035f6f
mov dword [ebp - 0x2198], 0
mov byte [ebp - 0x2191], 0
jmp 0x10035f78
cmp byte [ebp - 0x2191], 0
jne 0x10035f85
cmp byte [ebp - 0x2192], 0
je 0x100361c2
mov ecx, dword [ebp - 0x21a4]
lea eax, [ebp - 0x127c]
push eax
push ecx
lea edx, [ebp - 0x834]
push str._s_s
push edx
call fcn.10043b8d
add esp, 0x10
lea eax, [ebp - 0x834]
push eax
mov ecx, edi
call fcn.10031210
test eax, eax
mov dword [ebp - 0x21b8], eax
je 0x100361c2
lea ecx, [ebp - 0x834]
push ecx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, eax
test esi, esi
mov dword [ebp - 0x21a0], esi
je 0x1003621d
push 1
lea edx, [edi + 0xcc4]
push edx
lea ecx, [ebp - 0x2190]
mov dword [ebp - 4], 0
call fcn.10035ba0
push esi
lea ecx, [ebp - 0x2190]
mov byte [ebp - 4], 1
call fcn.10035310
cmp byte [ebp - 0x2191], 0
je 0x10036034
xor ecx, ecx
cmp eax, ecx
jne 0x1003603e
mov eax, dword [edi + 0xed4]
mov edx, dword [edi + 0xed0]
push esi
push eax
lea ecx, [ebp - 0x2190]
push ecx
call edx
add esp, 0xc
test eax, eax
je 0x10036146
xor ecx, ecx
cmp eax, 1
je 0x1003613d
cmp eax, 0x800700a2
jne 0x10036059
mov dword [ebp - 0x2198], ecx
jmp 0x1003613d
cmp eax, 0x80040301
jne 0x1003606b
mov dword [ebp - 0x2198], ecx
jmp 0x1003613d
cmp eax, 0x80040302
jne 0x1003607d
mov dword [ebp - 0x2198], ecx
jmp 0x1003613d
cmp eax, 0x80040303
jne 0x1003608f
mov dword [ebp - 0x2198], ecx
jmp 0x1003613d
cmp eax, 0x80004004
je 0x1003613d
test bl, bl
je 0x100360c0
cmp dword [ebp - 0x21b0], 0x580
jg 0x10036146
jl 0x100360c0
cmp dword [ebp - 0x21b4], 0x28e44000
ja 0x10036146
mov eax, dword [ebp - 0x12a8]
push ecx
push eax
push 3
push ecx
push 3
push 0x40000000
lea ecx, [ebp - 0x834]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x10036118
lea edx, [ebp - 0x21ac]
push edx
push 0
push 0
push esi
call dword [sym.imp.KERNEL32.dll_SetFileTime]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x12a8]
or eax, 2
push eax
lea eax, [ebp - 0x834]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
jmp 0x10036137
cmp byte [ebp + 8], 0
jne 0x10036137
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
jne 0x10036137
lea ecx, [ebp - 0x834]
push ecx
mov ecx, edi
call fcn.10033590
mov esi, dword [ebp - 0x21a0]
cmp byte [ebp - 0x2192], 0
je 0x10036184
lea ecx, [ebp - 0x2190]
call fcn.10032090
mov edx, dword [ebp - 0x12a8]
push 0
or edx, 0x4000000
push edx
push 3
push 0
push 7
push 0x40000000
lea eax, [ebp - 0x834]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
je 0x10036184
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 1
lea ecx, [ebp - 0x2190]
call fcn.10035940
mov edi, dword [ebp - 0x21b8]
push edi
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x2190]
mov byte [ebp - 4], 0
call fcn.10031970
push esi
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp dword [ebp - 0x2198], 0
je 0x100361ed
mov edx, dword [ebp - 0x219c]
lea ecx, [ebp - 0x12a8]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
mov dword [ebp - 0x2198], eax
jne 0x10035e70
mov eax, dword [ebp - 0x219c]
cmp eax, 0xffffffff
je 0x100361ff
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10041ffa
mov esp, ebp
pop ebp
ret 8
push 0x8007000e
call fcn.100011df
int3