Function at 0x10014a60
Capabilities:
Enumerate files on windows

Disassembly:
push 0xffffffffffffffff
push 0x100b59a7
mov eax, dword fs:[0]
push eax
sub esp, 0x15c
mov eax, dword [0x100d3fe0]
xor eax, esp
mov dword [esp + 0x158], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x100d3fe0]
xor eax, esp
push eax
lea eax, [esp + 0x170]
mov dword fs:[0], eax
mov edi, dword [esp + 0x180]
mov esi, ecx
push edi
lea ecx, [esp + 0x20]
call fcn.10001bc0
push edi
lea ecx, [esp + 0x1c]
mov dword [esp + 0x17c], 0
call fcn.10001bc0
cmp byte [esp + 0x188], 0
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenA]
mov byte [esp + 0x178], 1
je 0x10014af3
push str..
push str..
call ebx
push eax
lea ecx, [esp + 0x20]
call fcn.100098f0
jmp 0x10014b53
lea eax, [esi + 0x38]
push eax
push 0x100bab28
lea ecx, [esp + 0x1c]
push ecx
call fcn.10013d20
mov eax, dword [eax]
mov edx, dword [eax - 8]
push eax
push edx
lea ecx, [esp + 0x20]
mov byte [esp + 0x180], 2
call fcn.100098f0
mov eax, dword [esp + 0x14]
lea ecx, [eax - 0xc]
mov byte [esp + 0x178], 1
cmp ecx, dword [0x100d3028]
je 0x10014b53
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x10014b53
mov eax, dword [esp + 0x14]
add eax, 0xfffffff4
push eax
call fcn.1007f6d5
add esp, 4
mov ebp, dword [esp + 0x18]
lea edx, [esp + 0x2c]
push edx
push ebp
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov edi, eax
mov dword [esp + 0x20], edi
cmp edi, 0xffffffff
jne 0x10014bb2
lea eax, [ebp - 0xc]
cmp eax, dword [0x100d3028]
je 0x10014b90
lea esi, [ebp - 0xc]
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x10014b90
push esi
call fcn.1007f6d5
add esp, 4
mov eax, dword [esp + 0x1c]
lea ecx, [eax - 0xc]
cmp ecx, dword [0x100d3028]
je 0x10014e46
lea esi, [eax - 0xc]
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
jmp 0x10014e39
mov edx, dword [0x100d302c]
mov dword [esp + 0x14], edx
mov byte [esp + 0x178], 3
mov ebp, dword [esp + 0x2c]
and ebp, 0x10
cmp byte [esp + 0x58], 0x2e
je 0x10014d21
cmp byte [esp + 0x188], 0
je 0x10014c31
test ebp, ebp
je 0x10014d21
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x18]
call fcn.100097c0
push 0x100bab28
push 0x100bab28
call ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.100098f0
lea ecx, [esp + 0x58]
push ecx
mov edx, ecx
push edx
call ebx
push eax
lea ecx, [esp + 0x1c]
call fcn.100098f0
mov eax, dword [esp + 0x14]
push eax
mov ecx, esi
call fcn.100151b0
jmp 0x10014d21
push 0x14
call fcn.10080587
add esp, 4
test eax, eax
je 0x10014c4b
mov ecx, dword [0x100d302c]
mov dword [eax], ecx
mov edi, eax
jmp 0x10014c4d
xor edi, edi
cmp byte [esp + 0x184], 0
mov dword [edi + 8], ebp
mov edx, dword [esp + 0x4c]
mov dword [edi + 4], edx
mov eax, dword [esp + 0x40]
mov dword [edi + 0xc], eax
mov ecx, dword [esp + 0x44]
mov dword [edi + 0x10], ecx
je 0x10014cdc
push 0x100bab28
lea edx, [esp + 0x20]
push edx
lea eax, [esp + 0x2c]
push eax
call fcn.10013ca0
push eax
mov ecx, edi
mov byte [esp + 0x17c], 4
call fcn.100097c0
mov eax, dword [esp + 0x24]
lea ecx, [eax - 0xc]
mov byte [esp + 0x178], 3
cmp ecx, dword [0x100d3028]
je 0x10014cc8
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x10014cc8
mov edx, dword [esp + 0x24]
add edx, 0xfffffff4
push edx
call fcn.1007f6d5
add esp, 4
lea eax, [esp + 0x58]
push eax
mov ecx, eax
push ecx
call ebx
push eax
mov ecx, edi
call fcn.100098f0
jmp 0x10014d0d
lea edx, [esp + 0x58]
push edx
call ebx
mov ebp, eax
push ebp
mov ecx, edi
call fcn.100096e0
test eax, eax
je 0x10014d0d
mov ecx, dword [edi]
push ebp
lea eax, [esp + 0x5c]
push eax
push ecx
call fcn.1007f6e0
mov edx, dword [edi]
mov dword [edx - 8], ebp
mov eax, dword [edi]
add esp, 0xc
mov byte [eax + ebp], 0
lea ecx, [esp + 0x28]
push ecx
mov ecx, esi
mov dword [esp + 0x2c], edi
call fcn.100149f0
mov edi, dword [esp + 0x20]
lea edx, [esp + 0x2c]
push edx
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x10014bc4
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
xor ebp, ebp
sar eax, 2
xor edi, edi
test eax, eax
jbe 0x10014dda
cmp edi, eax
jb 0x10014d5a
call fcn.10080551
mov eax, dword [esi + 0xc]
mov ecx, dword [eax + edi*4]
cmp dword [ecx + 8], 0
je 0x10014dcc
mov edx, dword [esi + 0x10]
sub edx, eax
sar edx, 2
cmp ebp, edx
jb 0x10014d77
call fcn.10080551
mov eax, dword [esi + 0xc]
mov edx, dword [esi + 0x10]
mov ecx, dword [eax + ebp*4]
sub edx, eax
sar edx, 2
mov dword [esp + 0x20], ecx
cmp ebp, edx
jb 0x10014d92
call fcn.10080551
mov ebx, dword [esi + 0xc]
mov eax, dword [esi + 0x10]
sub eax, ebx
sar eax, 2
cmp edi, eax
jb 0x10014da6
call fcn.10080551
mov ecx, dword [esi + 0xc]
mov edx, dword [ecx + edi*4]
mov dword [ebx + ebp*4], edx
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
inc ebp
sar eax, 2
cmp edi, eax
jb 0x10014dc2
call fcn.10080551
mov ecx, dword [esi + 0xc]
mov edx, dword [esp + 0x20]
mov dword [ecx + edi*4], edx
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
inc edi
sar eax, 2
cmp edi, eax
jb 0x10014d5a
mov esi, dword [esp + 0x14]
mov edi, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
lea eax, [esi - 0xc]
cmp eax, dword [0x100d3028]
je 0x10014e02
add esi, 0xfffffff4
push esi
call edi
test eax, eax
jg 0x10014e02
push esi
call fcn.1007f6d5
add esp, 4
mov esi, dword [esp + 0x18]
lea ecx, [esi - 0xc]
cmp ecx, dword [0x100d3028]
je 0x10014e24
add esi, 0xfffffff4
push esi
call edi
test eax, eax
jg 0x10014e24
push esi
call fcn.1007f6d5
add esp, 4
mov eax, dword [esp + 0x1c]
lea edx, [eax - 0xc]
cmp edx, dword [0x100d3028]
je 0x10014e46
lea esi, [eax - 0xc]
push esi
call edi
test eax, eax
jg 0x10014e46
push esi
call fcn.1007f6d5
add esp, 4
mov ecx, dword [esp + 0x170]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x158]
xor ecx, esp
call fcn.1007fec9
add esp, 0x168
ret 0xc