Function at 0x101d7f10
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5d8
mov eax, dword [0x10358f40]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x5b8], 0
mov dword [ebp - 0x5bc], 0
push 0x140
push 0
lea eax, [ebp - 0x5b4]
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
cmp dword [ebp + 0x10], 0
je 0x101d81c6
lea ecx, [ebp - 0x5c4]
push ecx
lea edx, [ebp - 0x20c]
push edx
push 0x104
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetFullPathNameA]
test eax, eax
jne 0x101d7f7f
xor eax, eax
jmp 0x101d8279
mov ecx, dword [ebp - 0x5c4]
push ecx
lea edx, [ebp - 0x310]
push edx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy
add esp, 8
lea eax, [ebp - 0x42c]
push eax
lea ecx, [ebp - 0x5c5]
call fcn.101d8290
mov ecx, eax
call fcn.100737d0
mov dword [ebp - 0x5d0], eax
mov ecx, dword [ebp - 0x5c4]
mov dword [ebp - 0x5d4], ecx
mov edx, dword [ebp - 0x5d0]
push edx
mov eax, dword [ebp - 0x5d4]
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy
add esp, 8
lea ecx, [ebp - 0x42c]
call fcn.10073110
nop
mov dword [ebp - 0x5b4], 0x10
lea ecx, [ebp - 0x5b4]
push ecx
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x5bc], eax
cmp dword [ebp - 0x5bc], 0xffffffff
je 0x101d81b8
push 1
lea eax, [ebp - 0x45c]
push eax
lea ecx, [ebp - 0x5c6]
call fcn.101d82b0
or dword [ebp - 0x5b8], 1
mov ecx, eax
call fcn.100737d0
push eax
lea ecx, [ebp - 0x588]
push ecx
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
add esp, 0xc
test eax, eax
je 0x101d808d
push 2
lea edx, [ebp - 0x444]
push edx
lea ecx, [ebp - 0x5c7]
call fcn.101d82d0
or dword [ebp - 0x5b8], 2
mov ecx, eax
call fcn.100737d0
push eax
lea eax, [ebp - 0x588]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
add esp, 0xc
test eax, eax
je 0x101d808d
mov dword [ebp - 0x5cc], 0
jmp 0x101d8097
mov dword [ebp - 0x5cc], 1
mov cl, byte [ebp - 0x5cc]
mov byte [ebp - 0x5bd], cl
mov edx, dword [ebp - 0x5b8]
and edx, 2
je 0x101d80c1
and dword [ebp - 0x5b8], 0xfffffffd
lea ecx, [ebp - 0x444]
call fcn.10073110
nop
mov eax, dword [ebp - 0x5b8]
and eax, 1
je 0x101d80df
and dword [ebp - 0x5b8], 0xfffffffe
lea ecx, [ebp - 0x45c]
call fcn.10073110
nop
movzx ecx, byte [ebp - 0x5bd]
test ecx, ecx
je 0x101d80ef
jmp 0x101d819c
mov edx, dword [ebp - 0x5b4]
and edx, 0x10
je 0x101d819c
lea eax, [ebp - 0x5c4]
push eax
lea ecx, [ebp - 0x108]
push ecx
push 0x104
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_GetFullPathNameA]
test eax, eax
jne 0x101d8126
xor eax, eax
jmp 0x101d8279
lea eax, [ebp - 0x588]
push eax
mov ecx, dword [ebp - 0x5c4]
push ecx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy
add esp, 8
lea edx, [ebp - 0x474]
push edx
lea ecx, [ebp - 0x5c8]
call fcn.101d82f0
mov ecx, eax
call fcn.100737d0
push eax
lea eax, [ebp - 0x108]
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
add esp, 8
lea ecx, [ebp - 0x474]
call fcn.10073110
nop
lea ecx, [ebp - 0x310]
push ecx
lea edx, [ebp - 0x108]
push edx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
add esp, 8
push 1
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0x108]
push ecx
call fcn.101d7f10
add esp, 0xc
lea edx, [ebp - 0x5b4]
push edx
mov eax, dword [ebp - 0x5bc]
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x101d8013
mov ecx, dword [ebp - 0x5bc]
push ecx
call dword [sym.imp.KERNEL32.dll_FindClose]
nop
lea edx, [ebp - 0x5b4]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x5bc], eax
cmp dword [ebp - 0x5bc], 0xffffffff
jne 0x101d81f0
mov eax, 1
jmp 0x101d8279
mov ecx, dword [ebp - 0x5b4]
and ecx, 0x10
jne 0x101d824f
lea edx, [ebp - 0x5c4]
push edx
lea eax, [ebp - 0x414]
push eax
push 0x104
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFullPathNameA]
test eax, eax
jne 0x101d8220
xor eax, eax
jmp 0x101d8279
lea edx, [ebp - 0x588]
push edx
mov eax, dword [ebp - 0x5c4]
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy
add esp, 8
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x5d8], ecx
lea edx, [ebp - 0x588]
push edx
call dword [ebp - 0x5d8]
add esp, 4
lea eax, [ebp - 0x5b4]
push eax
mov ecx, dword [ebp - 0x5bc]
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x101d81f0
mov edx, dword [ebp - 0x5bc]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.102390e8
mov esp, ebp
pop ebp
ret