Function at 0x10173080
Capabilities:
Enumerate files on windows

Disassembly:
push 0xffffffffffffffff
push 0x101f0a3b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x680
mov al, byte [esp + 0x13]
push ebx
mov byte [esp + 0x24], al
push ebp
xor eax, eax
push esi
push edi
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
mov esi, dword [esp + 0x6a0]
xor ecx, ecx
mov dword [esp + 0x698], eax
mov ax, word [esi + 2]
mov cx, word [esi]
imul eax, ecx
mov ebp, dword [esi + 0xc]
mov dword [esp + 0x1c], eax
lea edi, [eax + eax]
push edi
call fcn.101d175d
mov ecx, edi
mov ebx, eax
mov edx, ecx
xor eax, eax
mov edi, ebx
add esp, 4
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
xor edx, edx
and ecx, 3
mov dword [esp + 0x24], ebx
rep stosb byte es:[edi], al
mov eax, dword [esi + 0x10]
xor edi, edi
cmp eax, edx
jbe 0x1017311b
mov al, 1
mov ecx, edi
shl al, cl
mov cl, byte [ebx]
or cl, al
inc edi
mov byte [ebx], cl
mov eax, dword [esi + 0x10]
cmp edi, eax
jb 0x10173107
mov eax, dword [esi + 0x18]
xor ecx, ecx
mov cx, word [esi]
sub eax, 2
imul eax, ecx
mov edi, dword [esi + 8]
mov ecx, dword [esi + 4]
add eax, edi
mov dword [esp + 0x10], edx
add eax, ecx
inc ebp
mov dword [esp + 0x2c], eax
mov dword [esp + 0x18], edx
mov ecx, dword [esp + 0x6a4]
mov eax, dword [ecx + 4]
test eax, eax
je 0x1017337f
mov ecx, dword [ecx + 8]
sub ecx, eax
mov eax, 0xfe03f81
imul ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, dword [esp + 0x10]
cmp eax, edx
jae 0x1017337f
mov ecx, 0x100
xor eax, eax
lea edi, [esp + 0x290]
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x6a4]
mov edi, dword [esp + 0x18]
mov eax, dword [ecx + 4]
lea edx, [edi + eax + 0x400]
lea eax, [esp + 0x290]
push edx
push eax
call fcn.10033da9
lea ecx, [esp + 0x298]
push 0x1028bc08
push ecx
call fcn.10033d7f
mov edx, dword [esp + 0x6b4]
lea ecx, [esp + 0x2a0]
mov eax, dword [edx + 4]
add eax, edi
push eax
push ecx
call fcn.10033d7f
mov edx, dword [esp + 0x6bc]
push 0x1028bc44
mov eax, dword [edx + 4]
add eax, edi
push eax
call fcn.100340ae
add esp, 0x20
test eax, eax
je 0x10173206
lea ecx, [esp + 0x290]
push 0x1028bc0c
push ecx
call fcn.10033d7f
add esp, 8
lea edx, [esp + 0x40]
lea eax, [esp + 0x290]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp eax, 0xffffffff
mov dword [esp + 0x28], eax
je 0x10173306
jmp 0x1017322f
mov esi, dword [esp + 0x6a0]
mov edx, dword [esp + 0x28]
lea ecx, [esp + 0x40]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x10173302
lea eax, [esp + 0x6c]
push 0x1026e6f4
push eax
call fcn.100340ae
add esp, 8
test eax, eax
je 0x1017322f
lea ecx, [esp + 0x6c]
push 0x1026e6f8
push ecx
call fcn.100340ae
add esp, 8
test eax, eax
je 0x1017322f
mov edx, dword [esp + 0x40]
and edx, 0x10
cmp dl, 0x10
jne 0x10173286
mov edi, 1
jmp 0x101732de
mov eax, dword [esp + 0x5c]
push 1
push 0
push 0
push eax
call fcn.10034a70
mov ecx, dword [esp + 0x60]
mov esi, eax
mov eax, dword [esp + 0x1c]
mov edi, edx
xor edx, edx
add esi, ecx
adc edi, edx
xor ebx, ebx
push ebx
push eax
push edi
push esi
call fcn.10034ab0
mov ecx, dword [esp + 0x1c]
push ebx
push ecx
push edi
push esi
mov dword [esp + 0x24], eax
call fcn.10034b60
or eax, edx
je 0x101732cc
inc dword [esp + 0x14]
mov eax, dword [esp + 0x14]
mov ebx, dword [esp + 0x24]
test eax, eax
jbe 0x10173228
mov edi, eax
lea esi, [ebp - 2]
mov ecx, esi
lea eax, [ebp - 2]
and ecx, 7
mov dl, 1
shr eax, 3
shl dl, cl
mov cl, byte [eax + ebx]
or cl, dl
inc ebp
inc esi
dec edi
mov byte [eax + ebx], cl
jne 0x101732e1
jmp 0x10173228
mov edi, dword [esp + 0x18]
mov eax, dword [esp + 0x6a4]
xor edx, edx
mov ecx, dword [eax + 4]
mov edi, dword [ecx + edi + 0x800]
mov ecx, dword [esp + 0x1c]
shr ecx, 5
mov eax, edi
div ecx
test eax, eax
je 0x10173364
mov dword [esp + 0x14], eax
mov eax, edi
xor edx, edx
mov edi, dword [esp + 0x14]
div ecx
test edx, edx
je 0x1017333b
inc edi
dec edi
je 0x10173364
lea esi, [ebp - 2]
mov ecx, esi
lea eax, [ebp - 2]
and ecx, 7
mov dl, 1
shr eax, 3
shl dl, cl
mov cl, byte [eax + ebx]
or cl, dl
inc ebp
inc esi
dec edi
mov byte [eax + ebx], cl
jne 0x10173341
mov esi, dword [esp + 0x6a0]
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x18]
inc ecx
add eax, 0x810
mov dword [esp + 0x10], ecx
mov dword [esp + 0x18], eax
jmp 0x10173140
mov eax, dword [esp + 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov edi, dword [esi + 0x2e]
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x1c]
add edi, ecx
xor ecx, ecx
xor edx, edx
mov cx, word [esi + 2]
mov dword [esp + 0x10], 0
div ecx
mov esi, eax
cmp esi, 0x80
jb 0x101733f9
mov ebp, ebx
mov edx, dword [esp + 0x6a8]
push edx
push ebp
push 0x80
push edi
call sym.ITEuDllvMgr.dll_VDR_WriteLUNData
add esp, 0x10
cmp eax, 1
jne 0x1017341b
mov ecx, dword [esp + 0x10]
sub esi, 0x80
add ecx, 0x10000
add ebp, 0x10000
add edi, 0x80
cmp esi, 0x80
mov dword [esp + 0x10], ecx
jae 0x101733b5
test esi, esi
je 0x10173429
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x6a8]
add ecx, ebx
push eax
push ecx
push esi
push edi
call sym.ITEuDllvMgr.dll_VDR_WriteLUNData
add esp, 0x10
cmp eax, 1
je 0x10173429
push 0
call fcn.101d1786
add esp, 4
xor eax, eax
jmp 0x1017343e
push ebx
call fcn.101d1786
push 0
call fcn.101d1786
add esp, 8
mov eax, 1
mov ecx, dword [esp + 0x690]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x68c
ret