Function at 0x140003e20
Capabilities:
Enumerate files on windows

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r14
push rbp
lea rbp, [rax - 0xbc8]
sub rsp, 0xcc0
mov rdi, rcx
xor ebx, ebx
mov rcx, qword [0x1400477e8]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x184
mov esi, ebx
call qword [sym.imp.USER32.dll_SendMessageW]
call fcn.14000318c
lea r14d, [rbx + 0x5c]
cmp word [rdi], r14w
jne 0x140003f5a
cmp word [rdi + 2], bx
je 0x140003e85
cmp word [rdi + 2], r14w
jne 0x140003f5a
mov edx, r14d
lea rcx, [rdi + 4]
call fcn.140015b90
test rax, rax
jne 0x140003eb4
cmp word [rdi + 2], r14w
lea edx, [rax + 1]
cmove rbx, rdi
mov rcx, rbx
call fcn.1400046e0
call fcn.1400032a8
jmp 0x1400040da
cmp word [rax + 2], bx
jne 0x140003f5a
mov rdx, rdi
lea rcx, [rbp + 0x380]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
lea rcx, [rbp + 0x380]
call fcn.140002634
call fcn.140004620
xor edx, edx
xor ecx, ecx
call fcn.1400046e0
cmp qword [0x140047810], rbx
je 0x1400040d8
call fcn.1400045ec
jmp 0x140003f44
mov rdx, rax
lea rcx, [rbp + 0x7a0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
lea rcx, [rbp + 0x380]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
movsxd r8, eax
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0x7a0]
call fcn.14001a8d0
test eax, eax
jne 0x140003f3f
lea rcx, [rbp + 0x7a0]
call fcn.1400044ec
call fcn.140004604
test rax, rax
jne 0x140003efc
call fcn.1400045e4
mov esi, eax
call fcn.1400045dc
jmp 0x1400040d8
mov rdx, rdi
lea rcx, [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
movzx ecx, word [rsp + 0x20]
call fcn.14001a840
test eax, eax
je 0x140003fb3
movzx eax, word [rsp + 0x22]
cmp ax, 0x3a
je 0x140003f86
test ax, ax
jne 0x140003fb3
test ax, ax
jne 0x140003f94
lea rdx, [0x140031930]
jmp 0x140003fa8
cmp ax, 0x3a
jne 0x140003fb3
cmp word [rsp + 0x24], bx
jne 0x140003fb3
lea rdx, [0x140031804]
lea rcx, [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_lstrcatW]
lea rcx, [rsp + 0x20]
call fcn.140019100
mov edx, r14d
mov rcx, rax
mov rdi, rax
call fcn.140015e24
mov r14, rax
test rax, rax
jne 0x140003fe2
mov rcx, rdi
call fcn.140019698
xor eax, eax
jmp 0x1400040da
mov rdx, rdi
mov word [rax], bx
lea rcx, [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
lea rdx, [r14 + 2]
lea rcx, [rbp + 0x9b0]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
lea r9, [rbp + 0x9b0]
lea r8, [rsp + 0x20]
lea rdx, [0x140031938]
lea rcx, [rbp + 0x590]
call qword [sym.imp.USER32.dll_wsprintfW]
mov rcx, rdi
call fcn.140019698
lea rdx, [rbp + 0x130]
lea rcx, [rbp + 0x590]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x140003fdb
test byte [rbp + 0x130], 0x10
je 0x1400040b7
lea rdx, [0x140031948]
lea rcx, [rbp + 0x15c]
call fcn.14001a84c
test eax, eax
je 0x1400040b7
lea rdx, [0x14003194c]
lea rcx, [rbp + 0x15c]
call fcn.14001a84c
test eax, eax
je 0x1400040b7
test byte [rbp + 0x130], 6
jne 0x1400040b7
lea r9, [rbp + 0x15c]
lea r8, [rsp + 0x20]
lea rdx, str._s_s
lea rcx, [rbp + 0x590]
call qword [sym.imp.USER32.dll_wsprintfW]
lea rcx, [rbp + 0x590]
call fcn.140003198
inc esi
lea rdx, [rbp + 0x130]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x140004049
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindClose]
mov eax, esi
lea r11, [rsp + 0xcc0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret