Function at 0x74a724d0
Capabilities:
Allocate or change rwx memory
Enumerate files on windows
Enumerate files recursively
Get file size
Read file on windows

Disassembly:
push rbp
mov rbp, rsp
lea rsp, [rsp - 0x740]
mov qword [rbp - 8], rcx
mov qword [rbp - 0x10], rdx
mov qword [rbp - 0x18], r8
mov qword [rbp - 0x20], r9
mov qword [rbp - 0x28], 0
lea rax, [rbp - 0x4a0]
mov rcx, rax
mov r8, qword [rbp - 8]
lea rdx, [0x74a7c088]
call sub.user32.dll_wsprintfW
lea rcx, [rbp - 0x4a0]
lea rdx, [rbp - 0x288]
call sub.kernel32.dll_FindFirstFileW
mov qword [rbp - 0x290], rax
cmp qword [rbp - 0x290], 0xffffffffffffffff
je 0x74a7284b
nop
lea rcx, [rbp - 0x25c]
call sub.kernel32.dll_lstrlenW
mov dword [rbp - 0x6b8], eax
lea rcx, [rbp - 0x25c]
mov edx, dword [rbp - 0x6b8]
call sub.user32.dll_CharLowerBuffW
lea r8, [rbp - 0x6f8]
mov edx, dword [rbp - 0x6b8]
shl edx, 1
lea rcx, [rbp - 0x25c]
call fcn.74a71710
test al, al
je 0x74a72811
lea rcx, [rbp - 0x6f8]
mov rdx, qword [rbp - 0x18]
mov r8d, 0x14
call fcn.74a71930
test al, al
je 0x74a72795
lea r9, [rbp - 0x25c]
lea rcx, [rbp - 0x6b0]
mov r8, qword [rbp - 8]
lea rdx, [0x74a7c0a8]
call sub.user32.dll_wsprintfW
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 3
lea rcx, [rbp - 0x6b0]
movabs r9, 0
mov r8d, 1
mov edx, 0x80000000
call sub.kernel32.dll_CreateFileW
mov qword [rbp - 0x30], rax
cmp qword [rbp - 0x30], 0xffffffffffffffff
je 0x74a72795
mov rcx, qword [rbp - 0x30]
movabs rdx, 0
call sub.kernel32.dll_GetFileSize
mov dword [rbp - 0x700], eax
cmp qword [rbp - 0x20], 0
jne 0x74a726e9
mov rax, qword [rbp + 0x30]
mov edx, dword [rbp - 0x700]
mov dword [rax], edx
mov dword [rsp + 0x20], 0x40
mov rax, qword [rbp + 0x30]
movsxd rax, dword [rax]
lea r8, [rax + 0x100]
mov r9d, 0x3000
movabs rdx, 0
movabs rcx, 0xffffffffffffffff
call sub.kernel32.dll_VirtualAllocEx
mov qword [rbp - 0x28], rax
cmp qword [rbp - 0x28], 0
je 0x74a72757
mov qword [rsp + 0x20], 0
mov rax, qword [rbp + 0x30]
mov r8d, dword [rax]
mov rdx, qword [rbp - 0x28]
lea r9, [rbp - 0x38]
mov rcx, qword [rbp - 0x30]
call sub.kernel32.dll_ReadFile
test eax, eax
je 0x74a726bc
mov rax, qword [rbp + 0x30]
movsxd rax, dword [rax]
mov edx, dword [rbp - 0x38]
cmp rax, rdx
sete al
and eax, 0xff
neg eax
test eax, eax
jne 0x74a72757
mov rdx, qword [rbp - 0x28]
mov r9d, 0x8000
movabs r8, 0
movabs rcx, 0xffffffffffffffff
call sub.kernel32.dll_VirtualFreeEx
mov qword [rbp - 0x28], 0
jmp 0x74a72757
mov rax, qword [rbp + 0x30]
mov eax, dword [rax]
cmp eax, dword [rbp - 0x700]
setge al
and eax, 0xff
neg eax
test eax, eax
je 0x74a72757
mov qword [rsp + 0x20], 0
mov rdx, qword [rbp - 0x20]
lea r9, [rbp - 0x38]
mov r8d, dword [rbp - 0x700]
mov rcx, qword [rbp - 0x30]
call sub.kernel32.dll_ReadFile
test eax, eax
je 0x74a72757
movsxd rax, dword [rbp - 0x700]
mov edx, dword [rbp - 0x38]
cmp rax, rdx
sete al
and eax, 0xff
neg eax
test eax, eax
je 0x74a72757
mov rdx, qword [rbp + 0x30]
mov eax, dword [rbp - 0x700]
mov dword [rdx], eax
mov rax, qword [rbp - 0x20]
mov qword [rbp - 0x28], rax
cmp qword [rbp - 0x28], 0
je 0x74a7278c
cmp qword [rbp + 0x38], 0
je 0x74a72775
lea rdx, [rbp - 0x24e]
mov rcx, qword [rbp + 0x38]
call sub.kernel32.dll_lstrcpyW
cmp qword [rbp + 0x40], 0
je 0x74a7278c
lea rdx, [rbp - 0x6b0]
mov rcx, qword [rbp + 0x40]
call sub.kernel32.dll_lstrcpyW
mov rcx, qword [rbp - 0x30]
call sub.kernel32.dll_CloseHandle
cmp qword [rbp - 0x10], 0
je 0x74a72811
lea rcx, [rbp - 0x6f8]
mov rdx, qword [rbp - 0x10]
mov r8d, 0x14
call fcn.74a71930
test al, al
je 0x74a72811
lea r9, [rbp - 0x25c]
lea rcx, [rbp - 0x6b0]
mov r8, qword [rbp - 8]
lea rdx, str._s_s_
call sub.user32.dll_wsprintfW
mov rax, qword [rbp + 0x40]
mov qword [rsp + 0x30], rax
mov rax, qword [rbp + 0x38]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp + 0x30]
mov qword [rsp + 0x20], rax
lea rcx, [rbp - 0x6b0]
mov r9, qword [rbp - 0x20]
mov r8, qword [rbp - 0x18]
movabs rdx, 0
call fcn.74a724d0
mov qword [rbp - 0x28], rax
lea rdx, [rbp - 0x288]
mov rcx, qword [rbp - 0x290]
call sub.kernel32.dll_FindNextFileW
test eax, eax
je 0x74a7283f
cmp qword [rbp - 0x28], 0
sete al
and eax, 0xff
neg eax
test eax, eax
jne 0x74a72538
mov rcx, qword [rbp - 0x290]
call sub.kernel32.dll_FindClose
mov rax, qword [rbp - 0x28]
nop
lea rsp, [rbp]
pop rbp
ret