Function at 0x140003510
Capabilities:
Enumerate files on windows

Disassembly:
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x790
mov qword [rsp + 0x90], 0xfffffffffffffffe
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x780], rax
mov qword [rsp + 0x58], 0xffffffffffffffff
mov dword [rsp + 0x50], 0
movzx eax, byte [0x14002527f]
mov byte [rsp + 0x1f0], al
lea rax, [rsp + 0x1f1]
mov rdi, rax
xor eax, eax
mov ecx, 9
rep stosb byte [rdi], al
mov dword [rsp + 0x68], 0
mov dword [rsp + 0x6c], 0
mov dword [rsp + 0x70], 0
movzx eax, byte [0x14002528f]
mov byte [rsp + 0x580], al
lea rax, [rsp + 0x581]
mov rdi, rax
xor eax, eax
mov ecx, 0x1ff
rep stosb byte [rdi], al
movzx eax, byte [0x1400252b3]
mov byte [rsp + 0x270], al
lea rax, [rsp + 0x271]
mov rdi, rax
xor eax, eax
mov ecx, 0x1ff
rep stosb byte [rdi], al
mov r8d, 0x103
mov rdx, qword [rsp + 0x7a0]
lea rcx, [rsp + 0x470]
call fcn.14000e9e0
lea rdx, [0x140025430]
lea rcx, [rsp + 0x470]
call qword [sym.imp.KERNEL32.dll_lstrcatA]
nop
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x470]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov qword [rsp + 0x58], rax
cmp qword [rsp + 0x58], 0
je 0x140003626
cmp qword [rsp + 0x58], 0xffffffffffffffff
jne 0x140003630
mov eax, 1
jmp 0x140003ada
mov eax, dword [rsp + 0xb0]
and eax, 0x10
test eax, eax
je 0x1400037ae
lea rax, [rsp + 0xdc]
lea rcx, [0x140025434]
sub rcx, rax
movzx edx, byte [rax]
cmp dl, byte [rax + rcx]
jne 0x140003667
inc rax
test dl, dl
jne 0x140003654
xor eax, eax
jmp 0x14000366c
sbb eax, eax
or eax, 1
test eax, eax
je 0x1400037a9
lea rax, [rsp + 0x200]
mov rdi, rax
xor eax, eax
mov ecx, WSAAsyncSelect
rep stosb byte [rdi], al
lea rax, [0x140025438]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0xdc]
lea r8, [0x14002543c]
mov edx, 0x200
lea rcx, [rsp + 0x270]
call fcn.140001750
mov dword [0x14002be90], 0x7d2
mov rax, qword [rsp + 0xc4]
mov qword [rsp + 0x78], rax
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
movzx eax, word [rsp + 0xa6]
movzx ecx, word [rsp + 0xa4]
movzx edx, word [rsp + 0xa2]
movzx edi, word [rsp + 0xa0]
movzx r8d, word [rsp + 0x9e]
movzx r9d, word [rsp + 0x9a]
movzx r10d, word [rsp + 0x98]
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x38], ecx
mov dword [rsp + 0x30], edx
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], r8d
mov r8d, r10d
lea rdx, [0x140025448]
lea rcx, [rsp + 0x200]
call fcn.1400016f0
lea rax, [rsp + 0x200]
mov qword [rsp + 0x30], rax
lea rax, [0x140025444]
mov qword [rsp + 0x28], rax
lea rax, [0x14002546c]
mov qword [rsp + 0x20], rax
lea r9, [0x140025470]
lea r8, [rsp + 0xdc]
lea rdx, [0x140025478]
lea rcx, [0x14002be94]
call fcn.1400016f0
xor r9d, r9d
mov r8d, 0x1620
lea rdx, [0x14002be90]
mov rcx, qword [0x14002be88]
call fcn.140001440
jmp 0x1400039a0
mov eax, dword [rsp + 0xd0]
mov dword [rsp + 0x80], eax
mov eax, dword [rsp + 0xcc]
mov dword [rsp + 0x84], eax
mov dword [rsp + 0x68], 0
mov dword [rsp + 0x6c], 0
mov dword [rsp + 0x70], 0
mov r8d, WSAAsyncSelect
lea rdx, [rsp + 0xdc]
lea rcx, [rsp + 0x270]
call fcn.14000e9e0
lea rax, [rsp + 0x200]
mov rdi, rax
xor eax, eax
mov ecx, WSAAsyncSelect
rep stosb byte [rdi], al
mov rax, qword [rsp + 0xc4]
mov qword [rsp + 0x78], rax
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
movzx eax, word [rsp + 0xa6]
movzx ecx, word [rsp + 0xa4]
movzx edx, word [rsp + 0xa2]
movzx edi, word [rsp + 0xa0]
movzx r8d, word [rsp + 0x9e]
movzx r9d, word [rsp + 0x9a]
movzx r10d, word [rsp + 0x98]
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x38], ecx
mov dword [rsp + 0x30], edx
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], r8d
mov r8d, r10d
lea rdx, str._d__02d__02d__02d:_02d:_02d._03d
lea rcx, [rsp + 0x200]
call fcn.1400016f0
lea rax, [rsp + 0x580]
mov rdi, rax
xor eax, eax
mov ecx, 0x200
rep stosb byte [rdi], al
mov rax, qword [rsp + 0x80]
cqo
and rdx, 0x3ff
add rax, rdx
sar rax, 0xa
inc rax
mov ecx, 1
imul rcx, rcx, 0
lea rcx, [rsp + rcx + 0x580]
mov r8, rax
lea rdx, str._d_KB
call qword [sym.imp.USER32.dll_wsprintfA]
lea rax, [rsp + 0x580]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0xdc]
lea r8, [0x1400254b4]
mov edx, 0x200
lea rcx, [rsp + 0x270]
call fcn.140001750
mov dword [0x14002be90], 0x7d2
lea rax, [rsp + 0x200]
mov qword [rsp + 0x30], rax
lea rax, [0x140025474]
mov qword [rsp + 0x28], rax
lea rax, [0x1400254bc]
mov qword [rsp + 0x20], rax
lea r9, [0x1400254c0]
lea r8, [rsp + 0x270]
lea rdx, [0x1400254c8]
lea rcx, [0x14002be94]
call fcn.1400016f0
xor r9d, r9d
mov r8d, 0x1620
lea rdx, [0x14002be90]
mov rcx, qword [0x14002be88]
call fcn.140001440
mov eax, 1
imul rax, rax, 0
lea rax, [rsp + rax + 0x270]
mov rdi, rax
xor eax, eax
mov ecx, 0x200
rep stosb byte [rdi], al
lea rdx, [rsp + 0xb0]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x140003630
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x50], eax
mov rax, qword [rsp + 0x7a0]
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x60], 0xffffffffffffffff
inc qword [rsp + 0x60]
mov rax, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x60]
cmp byte [rax + rcx], 0
jne 0x1400039de
mov rax, qword [rsp + 0x60]
cmp rax, 3
je 0x140003a66
mov dword [0x14002be90], 0x7d2
lea rax, [0x1400254c4]
mov qword [rsp + 0x28], rax
lea rax, [0x1400254d8]
mov qword [rsp + 0x20], rax
lea r9, [0x1400254dc]
lea r8, [0x1400254e0]
lea rdx, [0x1400254e8]
lea rcx, [0x14002be94]
call fcn.1400016f0
xor r9d, r9d
mov r8d, 0x1620
lea rdx, [0x14002be90]
mov rcx, qword [0x14002be88]
call fcn.140001440
xor eax, eax
jmp 0x140003ada
mov dword [0x14002be90], 0x7d2
lea rax, [0x1400254e4]
mov qword [rsp + 0x28], rax
lea rax, [0x1400254f4]
mov qword [rsp + 0x20], rax
lea r9, [0x1400254f8]
lea r8, str.Completed
lea rdx, str._s_s_s_s
lea rcx, [0x14002be94]
call fcn.1400016f0
xor r9d, r9d
mov r8d, 0x1620
lea rdx, [0x14002be90]
mov rcx, qword [0x14002be88]
call fcn.140001440
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_FindClose]
xor eax, eax
jmp 0x140003ada
mov rcx, qword [rsp + 0x780]
xor rcx, rsp
call fcn.140007550
add rsp, 0x790
pop rdi
ret