Function at 0x107fc5e
Capabilities:
Enumerate files on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x29c
mov eax, dword [0x111027c]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x278], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x284], eax
mov eax, dword [ebp + 0x18]
push ebx
mov ebx, dword [ebp + 0x1c]
mov dword [ebp - 0x298], eax
mov eax, dword [ebp + 0x20]
push esi
push edi
mov dword [ebp - 0x270], ebx
mov dword [ebp - 0x290], eax
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x107fcd6
test byte [eax + 0x1c], 1
je 0x107fcd6
cmp byte [eax + 0x19], 5
jb 0x107fcd6
push 0x1007770
push 0x1b
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0101894a
mov eax, dword [ebp + 0xc]
or dword [ebp - 0x280], 0xffffffff
xor esi, esi
shr eax, 1
and al, 1
push 0x250
mov byte [ebp - 0x265], al
lea eax, [ebp - 0x254]
push esi
push eax
xor edi, edi
mov dword [ebp - 0x25c], esi
mov dword [ebp - 0x26c], esi
mov dword [ebp - 0x260], esi
mov dword [ebp - 0x264], esi
mov dword [ebp - 0x274], esi
mov dword [ebp - 0x27c], esi
call sub.msvcrt.dll_memset
mov eax, dword [ebp + 0xc]
add esp, 0xc
and eax, 4
mov byte [ebx], 0
mov ebx, dword [ebp - 0x278]
mov dword [ebp - 0x29c], eax
jne 0x107fd4e
cmp dword [ebx + 8], 0x64
jbe 0x107fd4e
mov edi, 0x80070057
jmp 0x1080246
test dword [ebx], 0x400
mov byte [ebx + 0xc], 1
je 0x107fd98
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x1080246
test byte [eax + 0x1c], 1
je 0x1080246
cmp byte [eax + 0x19], 5
jb 0x1080246
push dword [ebx + 4]
push 0x1007770
push 0x1c
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019633
jmp 0x1080246
mov eax, dword [ebp - 0x28c]
mov eax, dword [eax]
push esi
lea ecx, [ebp - 0x26c]
push ecx
push eax
call fcn.0107c9fc
mov edi, eax
cmp edi, esi
jge 0x107fde2
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x1080246
test byte [eax + 0x1c], 1
je 0x1080246
cmp byte [eax + 0x19], 2
jb 0x1080246
push edi
push 0x1007770
push 0x1d
jmp 0x107fe29
lea eax, [ebp - 0x260]
push eax
push dword [ebx + 4]
push dword [ebp - 0x26c]
call fcn.0107f750
mov edi, eax
cmp edi, esi
jge 0x107fe39
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x1080246
test byte [eax + 0x1c], 1
je 0x1080246
cmp byte [eax + 0x19], 2
jb 0x1080246
push edi
push 0x1007770
push 0x1e
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019fa8
jmp 0x1080246
mov eax, dword [ebp - 0x260]
push 2
lea edx, [eax + 2]
pop ebx
mov cx, word [eax]
add eax, ebx
cmp cx, si
jne 0x107fe45
sub eax, edx
sar eax, 1
add eax, 0x106
push ebx
push eax
mov dword [ebp - 0x288], eax
lea eax, [ebp - 0x25c]
push eax
call fcn.0101ae15
mov edi, eax
cmp edi, esi
jl 0x1080246
push dword [ebp - 0x260]
push dword [ebp - 0x288]
push dword [ebp - 0x25c]
call fcn.010257dc
mov edi, eax
cmp edi, esi
jl 0x1080246
mov edi, dword [ebp - 0x25c]
mov eax, edi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, ebx
test cx, cx
jne 0x107fea2
push 0x5c
sub eax, edx
pop ecx
sar eax, 1
mov word [edi + eax*2], cx
lea eax, [edi + eax*2 + 2]
xor ecx, ecx
mov dword [ebp - 0x294], eax
mov word [eax], cx
lea eax, [ebp - 0x264]
push eax
push 0x100794c
push dword [ebp - 0x260]
call fcn.0107ca99
mov edi, eax
test edi, edi
jl 0x1080246
lea eax, [ebp - 0x254]
push eax
push dword [ebp - 0x264]
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x280], eax
cmp eax, 0xffffffff
jne 0x107ff60
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
cmp esi, ebx
je 0x107ff59
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x107ff42
test byte [eax + 0x1c], 1
je 0x107ff42
cmp byte [eax + 0x19], 2
jb 0x107ff42
push esi
push dword [ebp - 0x264]
push 0x1007770
push 0x1f
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01048c37
test esi, esi
jle 0x107ff52
and esi, 0xffff
or esi, 0x80070000
mov edi, esi
jmp 0x1080246
xor edi, edi
jmp 0x1080246
mov ebx, dword [ebp - 0x284]
xor esi, esi
mov ecx, 0x1007948
lea eax, [ebp - 0x228]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x107ff99
cmp dx, si
je 0x107ff95
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x107ff99
add eax, 4
add ecx, 4
cmp dx, si
jne 0x107ff73
xor eax, eax
jmp 0x107ff9e
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, esi
je 0x10801d2
mov ecx, 0x1007940
lea eax, [ebp - 0x228]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x107ffd7
cmp dx, si
je 0x107ffd3
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x107ffd7
add eax, 4
add ecx, 4
cmp dx, si
jne 0x107ffb1
xor eax, eax
jmp 0x107ffdc
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, esi
je 0x10801d2
mov ecx, dword [ebp - 0x294]
xor eax, eax
mov word [ecx], ax
lea eax, [ebp - 0x228]
push eax
push dword [ebp - 0x288]
push dword [ebp - 0x25c]
call fcn.01040cf0
mov edi, eax
cmp edi, esi
jl 0x108023d
test byte [ebp - 0x254], 0x10
je 0x108012f
test dword [ebp - 0x254], 0x400
jne 0x108012f
cmp dword [ebp - 0x29c], esi
jne 0x1080086
mov eax, dword [ebp - 0x278]
cmp dword [eax + 8], 0x64
jne 0x1080086
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x10801d2
test byte [eax + 0x1c], 1
je 0x10801d2
cmp byte [eax + 0x19], 3
jb 0x10801d2
push 0x64
lea ecx, [ebp - 0x228]
push ecx
push 0x1007770
push 0x20
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01048c37
jmp 0x10801d2
test byte [ebp + 0xc], 8
jne 0x10800d5
cmp dword [ebp - 0x27c], 0x64
jb 0x10800d5
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x10800c7
test byte [eax + 0x1c], 1
je 0x10800c7
cmp byte [eax + 0x19], 4
jb 0x10800c7
push dword [ebp - 0x260]
push 0x64
push 0x1007770
push 0x21
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019471
mov eax, dword [ebp - 0x298]
mov byte [eax], 1
jmp 0x10801d2
lea eax, [ebp - 0x274]
push eax
mov eax, dword [ebp - 0x278]
mov eax, dword [eax + 8]
inc eax
push eax
push dword [ebp - 0x254]
lea eax, [ebp - 0x228]
push eax
call fcn.0107f694
mov edi, eax
cmp edi, esi
jl 0x108023d
push dword [ebp - 0x274]
mov ecx, dword [ebp - 0x28c]
call fcn.0107faa7
mov edi, eax
cmp edi, esi
jl 0x108023d
inc dword [ebp - 0x27c]
mov dword [ebp - 0x274], esi
jmp 0x10801d2
lea eax, [ebp - 0x255]
push eax
lea eax, [ebp - 0x254]
push eax
push dword [ebp - 0x25c]
mov byte [ebp - 0x255], 1
call fcn.0107f40d
mov edi, eax
cmp edi, esi
jge 0x10801cc
mov bl, byte [ebp - 0x255]
mov eax, dword [ebp - 0x270]
mov byte [eax], bl
cmp dword [ebp - 0x290], esi
je 0x108017c
push dword [ebp - 0x25c]
mov ecx, dword [ebp - 0x290]
mov eax, dword [ecx]
push edi
call dword [eax]
cmp byte [ebp - 0x265], 0
je 0x10802f4
test bl, bl
je 0x10802f4
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x10801c2
test byte [eax + 0x1c], 1
je 0x10801c2
cmp byte [eax + 0x19], 4
jb 0x10801c2
push edi
push dword [ebp - 0x25c]
push 0x1007770
push 0x22
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01048c37
mov ebx, dword [ebp - 0x284]
xor edi, edi
jmp 0x10801d2
add dword [ebx], 1
adc dword [ebx + 4], esi
lea eax, [ebp - 0x254]
push eax
push dword [ebp - 0x280]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x107ff68
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
cmp esi, 0x12
je 0x1080246
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x108022b
test byte [eax + 0x1c], 1
je 0x108022b
cmp byte [eax + 0x19], 2
jb 0x108022b
push esi
push dword [ebp - 0x264]
push 0x1007770
push 0x24
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01048c37
test esi, esi
jle 0x108023b
and esi, 0xffff
or esi, 0x80070000
mov edi, esi
mov eax, dword [ebp - 0x270]
mov byte [eax], 0
push dword [ebp - 0x280]
call dword [sym.imp.KERNEL32.dll_FindClose]
mov esi, dword [sym.imp.ole32.dll_CoTaskMemFree]
xor ebx, ebx
cmp dword [ebp - 0x264], ebx
je 0x1080270
push dword [ebp - 0x264]
call esi
mov dword [ebp - 0x264], ebx
cmp dword [ebp - 0x25c], ebx
je 0x1080280
push dword [ebp - 0x25c]
call esi
cmp dword [ebp - 0x26c], ebx
je 0x1080296
push dword [ebp - 0x26c]
call esi
mov dword [ebp - 0x26c], ebx
cmp dword [ebp - 0x260], ebx
je 0x10802a6
push dword [ebp - 0x260]
call esi
mov ecx, dword [ebp - 0x274]
cmp ecx, ebx
je 0x10802b7
push 1
call fcn.0107eae4
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x10802e1
test byte [eax + 0x1c], 1
je 0x10802e1
cmp byte [eax + 0x19], 5
jb 0x10802e1
push 0x1007770
push 0x25
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0101894a
mov ecx, dword [ebp - 4]
mov eax, edi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0106f798
leave
ret 0x1c
mov eax, dword [0x111024c]
cmp eax, 0x111024c
je 0x1080246
test byte [eax + 0x1c], 1
je 0x1080246
cmp byte [eax + 0x19], 2
jb 0x1080246
push edi
push dword [ebp - 0x25c]
push 0x1007770
push 0x23
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01048c37
jmp 0x1080246