Function at 0x1013efd0
Capabilities:
Enumerate files on windows

Disassembly:
mov edx, dword [esp + 4]
sub esp, 0x544
test edx, edx
push ebx
push ebp
push esi
push edi
je 0x1013f267
mov eax, dword [esp + 0x55c]
test eax, eax
je 0x1013f267
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
cmp ecx, 0x400
ja 0x1013f267
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea ebx, [esp + 0x154]
mov eax, ecx
mov esi, edi
mov edi, ebx
lea edx, [esp + 0x154]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, str..
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov ebx, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
lea eax, [esp + 0x14]
and ecx, 3
push eax
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x158]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov ebp, eax
cmp ebp, 0xffffffff
je 0x1013f267
mov ebx, dword [sym.imp.KERNEL32.dll_FindNextFileA]
lea edx, [esp + 0x14]
push edx
push ebp
mov dword [esp + 0x18], 0
call ebx
test eax, eax
je 0x1013f24a
lea edi, [esp + 0x40]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
cmp ecx, 0x10
jne 0x1013f1ec
test byte [esp + 0x14], cl
je 0x1013f1ec
lea eax, [esp + 0x40]
push ecx
push eax
call fcn.100c2f70
add esp, 8
test eax, eax
jne 0x1013f0db
lea ecx, [esp + 0x14]
push ecx
jmp 0x1013f1f1
mov ecx, 0x100
xor eax, eax
lea edi, [esp + 0x154]
lea edx, [esp + 0x154]
rep stosd dword es:[edi], eax
mov edi, dword [esp + 0x558]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
shr ecx, 2
mov edi, edx
lea edx, [esp + 0x154]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
or ecx, 0xffffffff
mov edi, 0x1022722c
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
lea edx, [esp + 0x154]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0x40]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
lea edx, [esp + 0x154]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, 0x1022722c
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
lea edx, [esp + 0x154]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, str.01000000
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
lea eax, [esp + 0x154]
and ecx, 3
push eax
rep movsb byte es:[edi], byte [esi]
call fcn.1013ef70
add esp, 4
test eax, eax
jne 0x1013f1fe
lea ecx, [esp + 0x14]
push ecx
jmp 0x1013f1f1
lea edx, [esp + 0x14]
push edx
push ebp
call ebx
test eax, eax
jne 0x1013f09e
jmp 0x1013f24a
mov ecx, dword [esp + 0x560]
mov edx, dword [esp + 0x55c]
mov esi, ecx
xor eax, eax
mov edi, edx
mov dword [esp + 0x10], 1
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, esi
and ecx, 3
rep stosb byte es:[edi], al
lea edi, [esp + 0x154]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push ebp
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [esp + 0x10]
xor eax, eax
pop edi
pop esi
test ecx, ecx
pop ebp
pop ebx
setne al
add esp, 0x544
ret
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x544
ret