Function at 0x100158e0
Capabilities:
Enumerate files on windows
Set file attributes
Timestomp file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1002f646
mov eax, dword fs:[0]
push eax
mov eax, 0x21b4
call fcn.1001bac0
mov eax, dword [0x1003dd60]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
cmp byte [ebp + 8], 0
mov dword [ebp - 0x21c0], ecx
je 0x10015926
add ecx, 0x662
jmp 0x10015929
add ecx, 0x48
xor ebx, ebx
push 0x820
lea eax, [ebp - 0x1056]
push ebx
push eax
mov dword [ebp - 0x21a4], ecx
mov word [ebp - 0x1058], bx
call fcn.1001ade0
mov ecx, dword [str..cdf]
mov edx, dword [ebp - 0x21a4]
push ecx
push edx
lea eax, [ebp - 0x1058]
push str._s_s
push eax
call fcn.1001d125
push 0x24c
lea ecx, [ebp - 0x12a4]
push ebx
push ecx
mov dword [ebp - 0x12a8], ebx
call fcn.1001ade0
add esp, 0x28
lea edx, [ebp - 0x12a8]
push edx
lea eax, [ebp - 0x1058]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
xor ecx, ecx
cmp eax, 0xffffffff
setne cl
mov dword [ebp - 0x219c], eax
cmp ecx, ebx
mov dword [ebp - 0x2198], ecx
je 0x10015d21
jmp 0x100159c2
xor ebx, ebx
push 0x820
lea ecx, [ebp - 0x832]
push ebx
push ecx
mov word [ebp - 0x834], bx
call fcn.1001ade0
mov esi, dword [ebp - 0x1294]
mov edi, dword [ebp - 0x1290]
add esp, 0xc
lea edx, [ebp - 0x21ac]
push edx
mov byte [ebp - 0x2191], 1
mov dword [ebp - 0x21b8], ebx
mov dword [ebp - 0x21ac], ebx
mov dword [ebp - 0x21a8], ebx
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov ecx, dword [ebp - 0x21ac]
mov edx, dword [ebp - 0x12a4]
mov eax, dword [ebp - 0x21a8]
mov dword [ebp - 0x21b8], ebx
sub ecx, edx
mov dword [ebp - 0x21b8], ebx
mov ebx, dword [ebp - 0x12a0]
mov dword [ebp - 0x21b4], ecx
mov ecx, eax
sbb ecx, ebx
mov ebx, dword [ebp - 0x12a8]
shr ebx, 1
and bl, 1
mov dword [ebp - 0x21b0], ecx
mov byte [ebp - 0x2192], 0
je 0x10015a9d
cmp ecx, 0x1792
jl 0x10015a79
jg 0x10015a70
cmp dword [ebp - 0x21b4], 0xf8648000
jbe 0x10015a79
mov byte [ebp - 0x2192], 1
jmp 0x10015a96
cmp byte [ebp + 0xc], 0
jne 0x10015a9d
add esi, 0x61c46800
adc edi, 8
cmp eax, edi
jg 0x10015a9d
jl 0x10015a96
cmp dword [ebp - 0x21ac], esi
jae 0x10015a9d
mov byte [ebp - 0x2191], 0
mov edi, dword [ebp - 0x21c0]
cmp byte [edi + 0xed8], 0
jne 0x10015abf
mov dword [ebp - 0x2198], 0
mov byte [ebp - 0x2191], 0
jmp 0x10015ac8
cmp byte [ebp - 0x2191], 0
jne 0x10015ad5
cmp byte [ebp - 0x2192], 0
je 0x10015cf0
mov ecx, dword [ebp - 0x21a4]
lea eax, [ebp - 0x127c]
push eax
push ecx
lea edx, [ebp - 0x834]
push str._s_s
push edx
call fcn.1001d125
add esp, 0x10
lea eax, [ebp - 0x834]
push eax
mov ecx, edi
call fcn.10011a70
test eax, eax
mov dword [ebp - 0x21b8], eax
je 0x10015cf0
lea ecx, [ebp - 0x834]
push ecx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, eax
test esi, esi
mov dword [ebp - 0x21a0], esi
je 0x10015d4b
lea edx, [edi + 0xcc4]
push edx
lea ecx, [ebp - 0x2190]
mov dword [ebp - 4], 0
call fcn.100156f0
push esi
lea ecx, [ebp - 0x2190]
mov byte [ebp - 4], 1
call fcn.10014ef0
cmp byte [ebp - 0x2191], 0
je 0x10015b80
test eax, eax
jne 0x10015b88
mov eax, dword [edi + 0xed4]
mov edx, dword [edi + 0xed0]
push esi
push eax
lea ecx, [ebp - 0x2190]
push ecx
call edx
add esp, 0xc
test eax, eax
je 0x10015c76
cmp eax, 1
je 0x10015c6d
cmp eax, 0x800700a2
jne 0x10015ba7
mov dword [ebp - 0x2198], 0
jmp 0x10015c6d
cmp eax, 0x80040301
jne 0x10015bbd
mov dword [ebp - 0x2198], 0
jmp 0x10015c6d
cmp eax, 0x80004004
je 0x10015c6d
test bl, bl
je 0x10015bee
cmp dword [ebp - 0x21b0], 0x580
jg 0x10015c76
jl 0x10015bee
cmp dword [ebp - 0x21b4], 0x28e44000
ja 0x10015c76
mov eax, dword [ebp - 0x12a8]
push 0
push eax
push 3
push 0
push 3
push 0x40000000
lea ecx, [ebp - 0x834]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x10015c48
lea edx, [ebp - 0x21ac]
push edx
push 0
push 0
push esi
call dword [sym.imp.KERNEL32.dll_SetFileTime]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x12a8]
or eax, 2
push eax
lea eax, [ebp - 0x834]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
jmp 0x10015c67
cmp byte [ebp + 8], 0
jne 0x10015c67
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
jne 0x10015c67
lea ecx, [ebp - 0x834]
push ecx
mov ecx, edi
call fcn.100134a0
mov esi, dword [ebp - 0x21a0]
cmp byte [ebp - 0x2192], 0
je 0x10015cb4
lea ecx, [ebp - 0x2190]
call fcn.10012370
mov edx, dword [ebp - 0x12a8]
push 0
or edx, 0x4000000
push edx
push 3
push 0
push 7
push 0x40000000
lea eax, [ebp - 0x834]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
je 0x10015cb4
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x2190]
call fcn.100154b0
mov edi, dword [ebp - 0x21b8]
push edi
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x2190]
mov byte [ebp - 4], 0
call fcn.10011c50
push esi
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp dword [ebp - 0x2198], 0
je 0x10015d1b
mov edx, dword [ebp - 0x219c]
lea ecx, [ebp - 0x12a8]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
mov dword [ebp - 0x2198], eax
jne 0x100159c0
mov eax, dword [ebp - 0x219c]
cmp eax, 0xffffffff
je 0x10015d2d
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1001b05b
mov esp, ebp
pop ebp
ret 8
push 0x8007000e
call fcn.100010b9
int3