Function at 0x100071f0
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x224
push ebx
push esi
push edi
call fcn.10001b70
mov eax, 0x17458ae9
xor ebx, ebx
push ebx
lea ecx, [ebp - 0x44]
mov byte [ebp - 0x44], al
call fcn.100113e0
cmp dword [ebp + 0x10], 1
jb 0x1000722f
cmp dword [ebp + 0xc], ebx
je 0x1000722f
lea ecx, [ebp + 8]
call fcn.10011360
mov ecx, dword [ebp + 0xc]
lea eax, [ecx + 1]
jmp 0x10007234
mov eax, 0x1001e220
cmp byte [eax], 0x3a
jne 0x1000793f
mov dl, byte [ebp + 0x17]
mov cl, byte [ebp + 0x17]
mov al, byte [ebp + 0x17]
mov byte [ebp - 0x20], dl
mov dl, byte [ebp + 0x17]
mov byte [ebp - 0x10], cl
push ebx
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], ebx
mov byte [ebp - 0x30], al
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 4], ebx
mov byte [ebp - 0x64], dl
call fcn.100113e0
mov al, byte [ebp + 0x17]
push ebx
lea ecx, [ebp - 0x54]
mov byte [ebp - 0x54], al
call fcn.100113e0
mov cl, byte [ebp + 8]
push ebx
mov byte [ebp - 0x74], cl
lea ecx, [ebp - 0x74]
call fcn.100113e0
mov edx, dword [0x1001e224]
lea eax, [ebp + 8]
push edx
push ebx
push eax
lea ecx, [ebp - 0x74]
call fcn.100110d0
mov edi, 0x10020264
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x10020264
lea ecx, [ebp - 0x74]
call fcn.10011880
mov eax, dword [ebp - 0x70]
cmp eax, ebx
jne 0x100072d4
mov eax, 0x1001e220
lea ecx, [ebp - 0x224]
push ecx
push eax
call dword [sym.imp.KERNEL32.DLL_FindFirstFileA]
cmp eax, 0xffffffff
mov dword [ebp - 0x34], eax
je 0x1000758f
lea edi, [ebp - 0x1f8]
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x1f8]
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
lea ecx, [ebp - 0x44]
call fcn.10011940
push 0x10020260
lea ecx, [ebp - 0x44]
call fcn.100131b0
test eax, eax
je 0x1000756a
push 0x1002025c
lea ecx, [ebp - 0x44]
call fcn.100131b0
test eax, eax
je 0x1000756a
lea eax, [ebp + 8]
lea ecx, [ebp - 0xc4]
push eax
call fcn.10010c90
mov ecx, dword [0x1001e224]
lea edx, [ebp - 0x44]
push ecx
push 0
push edx
mov ecx, eax
call fcn.100117a0
push eax
lea ecx, [ebp - 0x84]
call fcn.10010c90
push 1
lea ecx, [ebp - 0xc4]
call fcn.100113e0
mov eax, dword [0x1001e224]
lea ecx, [ebp - 0x84]
push eax
push 0
push ecx
lea ecx, [ebp - 0x64]
call fcn.100110d0
push 1
lea ecx, [ebp - 0x84]
call fcn.100113e0
mov edx, dword [0x1001e224]
lea eax, [ebp - 0x64]
push edx
push 0
push eax
lea ecx, [ebp - 0x54]
call fcn.100110d0
lea ecx, [ebp - 0x44]
push ecx
call fcn.10002140
lea edx, [ebp - 0x64]
push edx
call fcn.10002140
mov eax, dword [0x100235e4]
mov ecx, dword [0x100235e8]
add esp, 8
test eax, eax
jne 0x100073d6
mov eax, 0x1001e220
push ecx
push 0
push eax
lea ecx, [ebp - 0x64]
call fcn.100112d0
test eax, eax
je 0x1000756a
test byte [ebp - 0x224], 0x10
je 0x1000745e
lea eax, [ebp - 0x54]
lea ecx, [ebp - 0xa4]
push eax
call fcn.10010c90
mov edx, eax
mov edi, 0x10020258
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x10020258
mov ecx, edx
call fcn.10011880
push eax
lea ecx, [ebp - 0x94]
call fcn.10010c90
push 1
lea ecx, [ebp - 0xa4]
call fcn.100113e0
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x94]
push ecx
push edx
lea ecx, [ebp - 0x20]
call fcn.10011540
push 1
lea ecx, [ebp - 0x94]
call fcn.100113e0
jmp 0x1000756a
cmp dword [ebp - 0x3c], 4
jbe 0x1000756a
push 0x10020094
call fcn.10001c00
add esp, 4
mov esi, eax
lea eax, [ebp - 0x44]
push 4
sub esp, 0x10
mov ecx, esp
push eax
call fcn.10010c90
lea ecx, [ebp - 0xb4]
push ecx
call fcn.10002050
add esp, 0x18
mov ecx, eax
push esi
call fcn.100131b0
test eax, eax
je 0x100074ee
push 0x100200a0
call fcn.10001c00
add esp, 4
lea edx, [ebp - 0x44]
mov esi, eax
push 4
sub esp, 0x10
mov ecx, esp
push edx
call fcn.10010c90
lea eax, [ebp - 0xe4]
push eax
call fcn.10002050
add esp, 0x18
mov ecx, eax
push esi
call fcn.100131b0
test eax, eax
push 1
lea ecx, [ebp - 0xe4]
sete bl
call fcn.100113e0
test bl, bl
je 0x100074f0
mov bl, 1
push 1
lea ecx, [ebp - 0xb4]
call fcn.100113e0
test bl, bl
je 0x1000750e
mov edx, dword [ebp - 0x28]
lea ecx, [ebp - 0x54]
push ecx
push edx
lea ecx, [ebp - 0x30]
jmp 0x10007565
push 0x100200ac
call fcn.10001c00
add esp, 4
mov esi, eax
lea eax, [ebp - 0x44]
push 4
sub esp, 0x10
mov ecx, esp
push eax
call fcn.10010c90
lea ecx, [ebp - 0xd4]
push ecx
call fcn.10002050
add esp, 0x18
mov ecx, eax
push esi
call fcn.100131b0
test eax, eax
push 1
lea ecx, [ebp - 0xd4]
sete bl
call fcn.100113e0
test bl, bl
je 0x1000756a
mov eax, dword [ebp - 8]
lea edx, [ebp - 0x54]
push edx
push eax
lea ecx, [ebp - 0x10]
call fcn.10011540
mov edx, dword [ebp - 0x34]
lea ecx, [ebp - 0x224]
push ecx
push edx
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
test eax, eax
jne 0x100072ee
mov eax, dword [ebp - 0x34]
push eax
call dword [sym.imp.KERNEL32.DLL_FindClose]
xor ebx, ebx
call fcn.10001b70
call 0x4560198
cmp edx, ebx
je 0x100076a6
mov eax, dword [ebp - 8]
mov ecx, eax
sub ecx, edx
sar ecx, 4
je 0x100076a6
mov ecx, dword [ebp - 0x2c]
cmp ecx, ebx
je 0x100075c7
mov esi, dword [ebp - 0x28]
mov edi, esi
sub edi, ecx
test edi, 0xfffffff0
jne 0x10007604
xor edi, edi
xor esi, esi
cmp edx, ebx
je 0x100076a6
sub eax, edx
sar eax, 4
cmp edi, eax
jae 0x100076a6
mov edx, dword [edx + esi + 4]
mov eax, 0x1001e220
cmp edx, ebx
je 0x100075ef
mov eax, edx
push eax
call fcn.10006e70
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0xc]
add esp, 4
inc edi
add esi, 0x10
jmp 0x100075cb
mov dword [ebp - 0x34], ebx
xor edi, edi
cmp ecx, ebx
je 0x10007661
mov ebx, esi
sub ebx, ecx
sar ebx, 4
cmp dword [ebp - 0x34], ebx
jae 0x1000765b
mov ecx, dword [ecx + edi + 4]
xor ebx, ebx
cmp ecx, ebx
jne 0x10007628
mov ecx, 0x1001e220
push ecx
call fcn.10006e70
add esp, 4
cmp al, 1
je 0x1000764d
mov ecx, dword [ebp - 0x34]
mov esi, dword [ebp - 0x28]
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0xc]
inc ecx
add edi, 0x10
mov dword [ebp - 0x34], ecx
mov ecx, dword [ebp - 0x2c]
jmp 0x10007609
mov esi, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0xc]
jmp 0x1000765d
xor ebx, ebx
cmp ecx, ebx
jne 0x10007665
xor esi, esi
jmp 0x1000766a
sub esi, ecx
sar esi, 4
cmp dword [ebp - 0x34], esi
jne 0x100076a6
xor edi, edi
xor esi, esi
cmp edx, ebx
je 0x100076a6
sub eax, edx
sar eax, 4
cmp edi, eax
jae 0x100076a6
mov edx, dword [edx + esi + 4]
cmp edx, ebx
jne 0x1000768d
mov edx, 0x1001e220
push edx
call fcn.10006e70
add esp, 4
cmp al, 1
je 0x100076a6
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0xc]
inc edi
add esi, 0x10
jmp 0x10007673
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
sub eax, dword [0x10023544]
cmp eax, 0x1388
jbe 0x1000775f
push 1
lea ecx, [ebp - 0x74]
mov byte [0x100271bc], 0
call fcn.100113e0
push 1
lea ecx, [ebp - 0x54]
call fcn.100113e0
push 1
lea ecx, [ebp - 0x64]
call fcn.100113e0
mov edi, dword [ebp - 8]
mov esi, dword [ebp - 0xc]
cmp esi, edi
je 0x100076fe
push ebx
mov ecx, esi
call fcn.10013040
add esi, 0x10
cmp esi, edi
jne 0x100076ec
mov esi, dword [ebp - 0xc]
push esi
call fcn.1001348e
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
add esp, 4
lea ecx, [ebp - 0x30]
mov dword [ebp - 0xc], ebx
mov dword [ebp - 8], ebx
push edx
push eax
mov dword [ebp - 4], ebx
call fcn.100116f0
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.1001348e
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
add esp, 4
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], ebx
push edx
push eax
mov dword [ebp - 0x24], ebx
call fcn.100116f0
mov ecx, dword [ebp - 0x1c]
push ecx
call fcn.1001348e
add esp, 4
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], ebx
jmp 0x1000793f
mov ecx, dword [ebp - 0x1c]
cmp ecx, ebx
je 0x10007891
mov eax, dword [ebp - 0x18]
mov edx, eax
sub edx, ecx
sar edx, 4
je 0x10007891
cmp ecx, eax
je 0x10007790
push 0
push eax
push ecx
call fcn.10013280
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
add esp, 0xc
xor ebx, ebx
test ecx, ecx
je 0x10007891
sub eax, ecx
sar eax, 4
cmp ebx, eax
jae 0x10007891
push ebx
lea ecx, [ebp - 0x20]
call fcn.10010ef0
mov edi, eax
sub esp, 0x10
mov esi, esp
mov al, byte [edi]
push 0
mov ecx, esi
mov byte [esi], al
call fcn.100113e0
mov ecx, dword [0x1001e224]
push ecx
push 0
push edi
mov ecx, esi
call fcn.100110d0
call fcn.100071f0
mov al, byte [0x100271bc]
add esp, 0x10
test al, al
je 0x100077ef
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
inc ebx
jmp 0x10007792
push 1
lea ecx, [ebp - 0x74]
call fcn.100113e0
push 1
lea ecx, [ebp - 0x54]
call fcn.100113e0
push 1
lea ecx, [ebp - 0x64]
call fcn.100113e0
mov ebx, dword [ebp - 8]
mov esi, dword [ebp - 0xc]
cmp esi, ebx
je 0x1000782d
xor edi, edi
push edi
mov ecx, esi
call fcn.10013040
add esi, 0x10
cmp esi, ebx
jne 0x10007819
mov esi, dword [ebp - 0xc]
jmp 0x1000782f
xor edi, edi
push esi
call fcn.1001348e
mov ebx, dword [ebp - 0x28]
mov esi, dword [ebp - 0x2c]
add esp, 4
cmp esi, ebx
mov dword [ebp - 0xc], edi
mov dword [ebp - 8], edi
mov dword [ebp - 4], edi
je 0x1000785d
push edi
mov ecx, esi
call fcn.10013040
add esi, 0x10
cmp esi, ebx
jne 0x1000784b
mov esi, dword [ebp - 0x2c]
push esi
call fcn.1001348e
mov ebx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x1c]
add esp, 4
cmp esi, ebx
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], edi
je 0x1000792d
push edi
mov ecx, esi
call fcn.10013040
add esi, 0x10
cmp esi, ebx
jne 0x1000787d
jmp 0x1000792a
push 1
lea ecx, [ebp - 0x74]
call fcn.100113e0
push 1
lea ecx, [ebp - 0x54]
call fcn.100113e0
push 1
lea ecx, [ebp - 0x64]
call fcn.100113e0
mov ebx, dword [ebp - 8]
mov esi, dword [ebp - 0xc]
cmp esi, ebx
je 0x100078cf
xor edi, edi
push edi
mov ecx, esi
call fcn.10013040
add esi, 0x10
cmp esi, ebx
jne 0x100078bb
mov esi, dword [ebp - 0xc]
jmp 0x100078d1
xor edi, edi
push esi
call fcn.1001348e
mov ebx, dword [ebp - 0x28]
mov esi, dword [ebp - 0x2c]
add esp, 4
cmp esi, ebx
mov dword [ebp - 0xc], edi
mov dword [ebp - 8], edi
mov dword [ebp - 4], edi
je 0x100078ff
push edi
mov ecx, esi
call fcn.10013040
add esi, 0x10
cmp esi, ebx
jne 0x100078ed
mov esi, dword [ebp - 0x2c]
push esi
call fcn.1001348e
mov ebx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x1c]
add esp, 4
cmp esi, ebx
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], edi
je 0x1000792d
push edi
mov ecx, esi
call fcn.10013040
add esi, 0x10
cmp esi, ebx
jne 0x1000791b
mov esi, dword [ebp - 0x1c]
push esi
call fcn.1001348e
add esp, 4
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x14], edi
push 1
lea ecx, [ebp - 0x44]
call fcn.100113e0
push 1
lea ecx, [ebp + 8]
call fcn.100113e0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret