Function at 0x100bc3b0
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100c93a7
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x2e8
mov eax, dword [0x102a000c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x2f0], ecx
mov ecx, dword [ebx + 0xc]
mov edx, ecx
mov dword [ebp - 0x2e8], ecx
cmp dword [ecx + 0x14], 8
jb 0x100bc40a
mov edx, dword [ecx]
mov eax, dword [ecx + 0x10]
mov esi, ecx
lea eax, [edx + eax*2]
mov dword [ebp - 0x2e4], eax
jb 0x100bc41c
mov esi, dword [ecx]
sub eax, esi
mov dword [ebp - 0x8c], 0
sar eax, 1
lea ecx, [ebp - 0x8c]
push eax
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
call fcn.1000de80
mov byte [ebp - 0x2ec], 0
lea ecx, [ebp - 0x8c]
push dword [ebp - 0x2ec]
push dword [ebp - 0x2e4]
push esi
call fcn.1001cd80
mov esi, dword [ebp - 0x2e8]
mov eax, esi
mov dword [ebp - 4], 0
cmp dword [esi + 0x14], 8
jb 0x100bc481
mov eax, dword [esi]
lea ecx, [ebp - 0x2e0]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x2ec], eax
cmp eax, 0xffffffff
je 0x100bc9d5
mov edi, dword [ebx + 8]
mov ecx, 0x102932b8
lea eax, [ebp - 0x2b4]
nop dword [eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100bc4d6
test dx, dx
je 0x100bc4d2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100bc4d6
add eax, 4
add ecx, 4
test dx, dx
jne 0x100bc4b0
xor eax, eax
jmp 0x100bc4db
sbb eax, eax
or eax, 1
test eax, eax
je 0x100bc9ae
mov ecx, 0x102932bc
lea eax, [ebp - 0x2b4]
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100bc516
test dx, dx
je 0x100bc512
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100bc516
add eax, 4
add ecx, 4
test dx, dx
jne 0x100bc4f0
xor eax, eax
jmp 0x100bc51b
sbb eax, eax
or eax, 1
test eax, eax
je 0x100bc9ae
test byte [ebp - 0x2e0], 0x10
je 0x100bc5f6
cmp dword [esi + 0x14], 8
mov edx, esi
jb 0x100bc53a
mov edx, dword [esi]
mov ecx, edx
mov dword [ebp - 0x5c], 0
xor eax, eax
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 7
mov word [ebp - 0x5c], ax
lea esi, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100bc560
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x5c]
call fcn.1000e550
mov byte [ebp - 4], 1
lea eax, [ebp - 0x5c]
mov ecx, dword [ebp - 0x4c]
dec ecx
cmp dword [ebp - 0x48], 8
mov dword [ebp - 0x4c], ecx
cmovae eax, dword [ebp - 0x5c]
xor edx, edx
mov word [eax + ecx*2], dx
lea ecx, [ebp - 0x2b4]
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100bc5a0
sub ecx, edx
lea eax, [ebp - 0x2b4]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x5c]
call fcn.1000f210
push 2
push 0x10293218
lea ecx, [ebp - 0x5c]
call fcn.1000f210
mov ecx, dword [ebp - 0x2f0]
lea eax, [ebp - 0x5c]
push eax
push edi
call fcn.100bc3b0
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x48]
cmp edx, 8
jb 0x100bc9a8
mov ecx, dword [ebp - 0x5c]
jmp 0x100bc979
xor eax, eax
mov dword [ebp - 0x74], 0
lea ecx, [ebp - 0x2b4]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 7
lea edx, [ecx + 2]
mov word [ebp - 0x74], ax
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100bc620
sub ecx, edx
lea eax, [ebp - 0x2b4]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x74]
call fcn.1000e550
mov byte [ebp - 4], 2
lea edx, [ebp - 0x74]
cmp dword [ebp - 0x60], 8
lea edi, [ebp - 0x74]
mov eax, dword [ebp - 0x64]
lea ecx, [ebp - 0x2c]
cmovae edx, dword [ebp - 0x74]
cmovae edi, dword [ebp - 0x74]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x1c], 0
lea eax, [edx + eax*2]
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x2e4], eax
sub eax, edi
sar eax, 1
push eax
mov byte [ebp - 0x2c], 0
call fcn.1000de80
mov byte [ebp - 0x2f4], 0
lea ecx, [ebp - 0x2c]
push dword [ebp - 0x2f4]
push dword [ebp - 0x2e4]
push edi
call fcn.1001cd80
mov byte [ebp - 4], 3
lea eax, [ebp - 0x8c]
cmp dword [ebp - 0x78], 0x10
mov edi, dword [ebp - 0x7c]
cmovae eax, dword [ebp - 0x8c]
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2e4], eax
cmp edi, 0x10
jae 0x100bc6e9
movups xmm0, xmmword [eax]
mov esi, 0xf
movups xmmword [ebp - 0x44], xmm0
jmp 0x100bc71e
mov esi, edi
lea ecx, [ebp - 0x44]
or esi, 0xf
mov eax, 0x7fffffff
cmp esi, 0x7fffffff
cmova esi, eax
lea eax, [esi + 1]
push eax
call fcn.10008010
lea ecx, [edi + 1]
mov dword [ebp - 0x44], eax
push ecx
push dword [ebp - 0x2e4]
push eax
call fcn.10022500
add esp, 0xc
mov dword [ebp - 0x30], esi
mov byte [ebp - 4], 4
lea eax, [ebp - 0x44]
cmp esi, 0x10
lea ecx, [edi - 1]
mov dword [ebp - 0x34], ecx
cmovae eax, dword [ebp - 0x44]
mov byte [eax + ecx], 0
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], 0x10
lea ecx, [ebp - 0x44]
push dword [ebp - 0x1c]
cmovae eax, dword [ebp - 0x2c]
push eax
call fcn.1000bc50
cmp dword [ebp - 0x18], 0x10
lea ecx, [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
cmovae ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x2e4], ecx
cmp eax, 5
jb 0x100bc804
add eax, 0xfffffffc
add eax, ecx
sub eax, ecx
push eax
push 0x2e
push ecx
call fcn.100239a0
mov esi, eax
add esp, 0xc
test esi, esi
je 0x100bc804
nop word [eax + eax]
mov ecx, esi
mov edx, str..cfpl
mov edi, 1
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x100bc7ad
add ecx, 4
mov edi, 0xfffffffd
add edx, 4
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x100bc7d4
cmp edi, 0xfffffffd
je 0x100bc7d0
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x100bc7d4
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x100bc7d4
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
jne 0x100bc7d4
xor eax, eax
jmp 0x100bc7d9
sbb eax, eax
or eax, 1
test eax, eax
je 0x100bc861
mov edx, dword [ebp - 0x1c]
inc esi
mov eax, dword [ebp - 0x2e4]
add edx, 0xfffffffc
add eax, edx
sub eax, esi
push eax
push 0x2e
push esi
call fcn.100239a0
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x100bc790
cmp dword [ebp - 0x18], 0x10
lea edi, [ebp - 0x2c]
mov ecx, dword [ebp - 0x1c]
cmovae edi, dword [ebp - 0x2c]
cmp ecx, 4
jb 0x100bc8af
lea eax, [ecx - 3]
add eax, edi
sub eax, edi
push eax
push 0x2e
push edi
call fcn.100239a0
mov esi, eax
add esp, 0xc
test esi, esi
je 0x100bc8af
mov edx, esi
mov ecx, str..hpl
mov eax, dword [edx]
cmp eax, dword [ecx]
je 0x100bc85d
cmp al, byte [ecx]
jne 0x100bc885
mov al, byte [edx + 1]
cmp al, byte [ecx + 1]
jne 0x100bc885
mov al, byte [edx + 2]
cmp al, byte [ecx + 2]
jne 0x100bc885
mov al, byte [edx + 3]
cmp al, byte [ecx + 3]
jne 0x100bc885
xor eax, eax
jmp 0x100bc88a
sub esi, dword [ebp - 0x2e4]
cmp esi, 0xffffffff
je 0x100bc804
mov edi, dword [ebx + 8]
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x2f0]
push edi
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.100bc130
jmp 0x100bc8d6
sbb eax, eax
or eax, 1
test eax, eax
je 0x100bca00
mov eax, dword [ebp - 0x1c]
inc esi
add eax, 0xfffffffd
add eax, edi
sub eax, esi
push eax
push 0x2e
push esi
call fcn.100239a0
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x100bc834
cmp dword [ebp - 0x18], 0x10
lea edx, [ebp - 0x2c]
mov eax, dword [0x102b34c0]
cmovae edx, dword [ebp - 0x2c]
push str..cfpl
push edx
mov ecx, dword [eax]
push str._error__Unable_to_open__s_:_not_an__s_file_n
push eax
call dword [ecx + 4]
mov edi, dword [ebx + 8]
add esp, 0x10
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x30]
cmp edx, 0x10
jb 0x100bc90e
mov ecx, dword [ebp - 0x44]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100bc904
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100bca51
push edx
push ecx
call fcn.1001f369
add esp, 8
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
cmp edx, 0x10
jb 0x100bc958
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100bc94e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100bca51
push edx
push ecx
call fcn.1001f369
add esp, 8
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
cmp edx, 8
jb 0x100bc9a8
mov ecx, dword [ebp - 0x74]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100bc99e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100bca51
push edx
push ecx
call fcn.1001f369
add esp, 8
mov esi, dword [ebp - 0x2e8]
lea eax, [ebp - 0x2e0]
push eax
push dword [ebp - 0x2ec]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x100bc4a1
push dword [ebp - 0x2ec]
call dword [sym.imp.KERNEL32.dll_FindClose]
mov edx, dword [ebp - 0x78]
cmp edx, 0x10
jb 0x100bca31
mov ecx, dword [ebp - 0x8c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100bca27
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100bca51
jmp 0x100bca27
sub esi, edi
cmp esi, 0xffffffff
je 0x100bc8af
mov edi, dword [ebx + 8]
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x2f0]
push edi
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.100bbba0
jmp 0x100bc8d6
push edx
push ecx
call fcn.1001f369
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1001ed23
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 8
call fcn.1002d924
int3