Function at 0x140001493
Capabilities:
Enumerate files on windows
Get common file path

Disassembly:
push rbp
sub rsp, 0x3d0
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x360], rcx
mov dword [rbp + 0x368], edx
mov qword [rbp + 0x370], r8
mov qword [rbp + 0x378], r9
cmp dword [rbp + 0x368], 0x111
je 0x1400015fe
cmp dword [rbp + 0x368], 0x111
ja 0x14000177a
cmp dword [rbp + 0x368], 0x10
je 0x140001755
cmp dword [rbp + 0x368], 0x10
ja 0x14000177a
cmp dword [rbp + 0x368], 1
je 0x140001513
cmp dword [rbp + 0x368], 2
je 0x14000176a
jmp 0x14000177a
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x48], 1
mov rax, qword [rbp + 0x360]
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], 0x1e
mov dword [rsp + 0x30], 0x12c
mov dword [rsp + 0x28], 0x14
mov dword [rsp + 0x20], 0x14
mov r9d, 0x50800000
lea r8, str.Welcome_to_ComptaSoft_
lea rax, str.static
mov rdx, rax
mov ecx, 0
mov rax, qword [sym.imp.USER32.dll_CreateWindowExA]
call rax
mov qword [0x14000d030], rax
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x48], 2
mov rax, qword [rbp + 0x360]
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], 0x1e
mov dword [rsp + 0x30], 0x96
mov dword [rsp + 0x28], 0x46
mov dword [rsp + 0x20], 0x14
mov r9d, 0x50000000
lea r8, str.Click__TKT_
lea rax, str.button
mov rdx, rax
mov ecx, 0
mov rax, qword [sym.imp.USER32.dll_CreateWindowExA]
call rax
mov qword [0x14000d038], rax
jmp 0x1400017aa
mov rax, qword [rbp + 0x370]
shr rax, 0x10
test ax, ax
jne 0x1400017a9
lea rax, [rbp - 0x20]
mov qword [rsp + 0x20], rax
mov r9d, 0xffffffff
mov r8d, 0
mov edx, 0x7fa0
mov ecx, 0
mov rax, qword [sym.imp.SHELL32.dll_SHGetFolderPathA]
call rax
mov dword [rbp + 0x34c], eax
cmp dword [rbp + 0x34c], 0
jne 0x14000172c
lea rdx, [rbp - 0x20]
lea rax, [rbp + 0xf0]
mov r8, rdx
lea rdx, str._s.
mov rcx, rax
call sym.sprintf
lea rdx, [rbp + 0x200]
lea rax, [rbp + 0xf0]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_FindFirstFileA]
call rax
mov qword [rbp + 0x340], rax
cmp qword [rbp + 0x340], 0xffffffffffffffff
je 0x140001703
mov eax, dword [rbp + 0x200]
and eax, 0x10
test eax, eax
jne 0x1400016cd
lea rax, [rbp + 0x200]
lea rdx, [rax + 0x2c]
mov rax, qword [rbp + 0x360]
mov r9d, 0x40
lea r8, str.Found_File
mov rcx, rax
mov rax, qword [sym.imp.USER32.dll_MessageBoxA]
call rax
lea rdx, [rbp + 0x200]
mov rax, qword [rbp + 0x340]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_FindNextFileA]
call rax
test eax, eax
jne 0x140001695
mov rax, qword [rbp + 0x340]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_FindClose]
call rax
jmp 0x1400017a9
mov rax, qword [rbp + 0x360]
mov r9d, 0x10
lea r8, str.Error
lea rdx, str.No_files_found.
mov rcx, rax
mov rax, qword [sym.imp.USER32.dll_MessageBoxA]
call rax
jmp 0x1400017a9
mov rax, qword [rbp + 0x360]
mov r9d, 0x10
lea r8, str.Error
lea rdx, str.Failed_to_get_documents_path.
mov rcx, rax
mov rax, qword [sym.imp.USER32.dll_MessageBoxA]
call rax
jmp 0x1400017a9
mov rax, qword [rbp + 0x360]
mov rcx, rax
mov rax, qword [sym.imp.USER32.dll_DestroyWindow]
call rax
jmp 0x1400017aa
mov ecx, 0
mov rax, qword [sym.imp.USER32.dll_PostQuitMessage]
call rax
jmp 0x1400017aa
mov r8, qword [rbp + 0x378]
mov rcx, qword [rbp + 0x370]
mov edx, dword [rbp + 0x368]
mov rax, qword [rbp + 0x360]
mov r9, r8
mov r8, rcx
mov rcx, rax
mov rax, qword [sym.imp.USER32.dll_DefWindowProcA]
call rax
jmp 0x1400017af
nop
mov eax, 0
add rsp, 0x3d0
pop rbp
ret