Function at 0x107fbab
Capabilities:
Enumerate files on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x29c
mov eax, dword [0x111127c]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x278], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x284], eax
mov eax, dword [ebp + 0x18]
push ebx
mov ebx, dword [ebp + 0x1c]
mov dword [ebp - 0x298], eax
mov eax, dword [ebp + 0x20]
push esi
push edi
mov dword [ebp - 0x270], ebx
mov dword [ebp - 0x290], eax
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x107fc23
test byte [eax + 0x1c], 1
je 0x107fc23
cmp byte [eax + 0x19], 5
jb 0x107fc23
push 0x1007760
push 0x1b
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010189d0
mov eax, dword [ebp + 0xc]
or dword [ebp - 0x280], 0xffffffff
xor esi, esi
shr eax, 1
and al, 1
push 0x250
mov byte [ebp - 0x265], al
lea eax, [ebp - 0x254]
push esi
push eax
xor edi, edi
mov dword [ebp - 0x25c], esi
mov dword [ebp - 0x26c], esi
mov dword [ebp - 0x260], esi
mov dword [ebp - 0x264], esi
mov dword [ebp - 0x274], esi
mov dword [ebp - 0x27c], esi
call sub.msvcrt.dll_memset
mov eax, dword [ebp + 0xc]
add esp, 0xc
and eax, 4
mov byte [ebx], 0
mov ebx, dword [ebp - 0x278]
mov dword [ebp - 0x29c], eax
jne 0x107fc9b
cmp dword [ebx + 8], 0x64
jbe 0x107fc9b
mov edi, 0x80070057
jmp 0x1080193
test dword [ebx], 0x400
mov byte [ebx + 0xc], 1
je 0x107fce5
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x1080193
test byte [eax + 0x1c], 1
je 0x1080193
cmp byte [eax + 0x19], 5
jb 0x1080193
push dword [ebx + 4]
push 0x1007760
push 0x1c
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019680
jmp 0x1080193
mov eax, dword [ebp - 0x28c]
mov eax, dword [eax]
push esi
lea ecx, [ebp - 0x26c]
push ecx
push eax
call fcn.0107c871
mov edi, eax
cmp edi, esi
jge 0x107fd2f
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x1080193
test byte [eax + 0x1c], 1
je 0x1080193
cmp byte [eax + 0x19], 2
jb 0x1080193
push edi
push 0x1007760
push 0x1d
jmp 0x107fd76
lea eax, [ebp - 0x260]
push eax
push dword [ebx + 4]
push dword [ebp - 0x26c]
call fcn.0107f69d
mov edi, eax
cmp edi, esi
jge 0x107fd86
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x1080193
test byte [eax + 0x1c], 1
je 0x1080193
cmp byte [eax + 0x19], 2
jb 0x1080193
push edi
push 0x1007760
push 0x1e
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010189f6
jmp 0x1080193
mov eax, dword [ebp - 0x260]
push 2
lea edx, [eax + 2]
pop ebx
mov cx, word [eax]
add eax, ebx
cmp cx, si
jne 0x107fd92
sub eax, edx
sar eax, 1
add eax, 0x106
push ebx
push eax
mov dword [ebp - 0x288], eax
lea eax, [ebp - 0x25c]
push eax
call fcn.0101aed5
mov edi, eax
cmp edi, esi
jl 0x1080193
push dword [ebp - 0x260]
push dword [ebp - 0x288]
push dword [ebp - 0x25c]
call fcn.01025872
mov edi, eax
cmp edi, esi
jl 0x1080193
mov edi, dword [ebp - 0x25c]
mov eax, edi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, ebx
test cx, cx
jne 0x107fdef
push 0x5c
sub eax, edx
pop ecx
sar eax, 1
mov word [edi + eax*2], cx
lea eax, [edi + eax*2 + 2]
xor ecx, ecx
mov dword [ebp - 0x294], eax
mov word [eax], cx
lea eax, [ebp - 0x264]
push eax
push 0x100793c
push dword [ebp - 0x260]
call fcn.0107c90e
mov edi, eax
test edi, edi
jl 0x1080193
lea eax, [ebp - 0x254]
push eax
push dword [ebp - 0x264]
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x280], eax
cmp eax, 0xffffffff
jne 0x107fead
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
cmp esi, ebx
je 0x107fea6
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x107fe8f
test byte [eax + 0x1c], 1
je 0x107fe8f
cmp byte [eax + 0x19], 2
jb 0x107fe8f
push esi
push dword [ebp - 0x264]
push 0x1007760
push 0x1f
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010196ed
test esi, esi
jle 0x107fe9f
and esi, 0xffff
or esi, 0x80070000
mov edi, esi
jmp 0x1080193
xor edi, edi
jmp 0x1080193
mov ebx, dword [ebp - 0x284]
xor esi, esi
mov ecx, 0x1007938
lea eax, [ebp - 0x228]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x107fee6
cmp dx, si
je 0x107fee2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x107fee6
add eax, 4
add ecx, 4
cmp dx, si
jne 0x107fec0
xor eax, eax
jmp 0x107feeb
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, esi
je 0x108011f
mov ecx, 0x1007930
lea eax, [ebp - 0x228]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x107ff24
cmp dx, si
je 0x107ff20
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x107ff24
add eax, 4
add ecx, 4
cmp dx, si
jne 0x107fefe
xor eax, eax
jmp 0x107ff29
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, esi
je 0x108011f
mov ecx, dword [ebp - 0x294]
xor eax, eax
mov word [ecx], ax
lea eax, [ebp - 0x228]
push eax
push dword [ebp - 0x288]
push dword [ebp - 0x25c]
call fcn.01040bdd
mov edi, eax
cmp edi, esi
jl 0x108018a
test byte [ebp - 0x254], 0x10
je 0x108007c
test dword [ebp - 0x254], 0x400
jne 0x108007c
cmp dword [ebp - 0x29c], esi
jne 0x107ffd3
mov eax, dword [ebp - 0x278]
cmp dword [eax + 8], 0x64
jne 0x107ffd3
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x108011f
test byte [eax + 0x1c], 1
je 0x108011f
cmp byte [eax + 0x19], 3
jb 0x108011f
push 0x64
lea ecx, [ebp - 0x228]
push ecx
push 0x1007760
push 0x20
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010196ed
jmp 0x108011f
test byte [ebp + 0xc], 8
jne 0x1080022
cmp dword [ebp - 0x27c], 0x64
jb 0x1080022
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x1080014
test byte [eax + 0x1c], 1
je 0x1080014
cmp byte [eax + 0x19], 4
jb 0x1080014
push dword [ebp - 0x260]
push 0x64
push 0x1007760
push 0x21
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010194be
mov eax, dword [ebp - 0x298]
mov byte [eax], 1
jmp 0x108011f
lea eax, [ebp - 0x274]
push eax
mov eax, dword [ebp - 0x278]
mov eax, dword [eax + 8]
inc eax
push eax
push dword [ebp - 0x254]
lea eax, [ebp - 0x228]
push eax
call fcn.0107f5e1
mov edi, eax
cmp edi, esi
jl 0x108018a
push dword [ebp - 0x274]
mov ecx, dword [ebp - 0x28c]
call fcn.0107f9f4
mov edi, eax
cmp edi, esi
jl 0x108018a
inc dword [ebp - 0x27c]
mov dword [ebp - 0x274], esi
jmp 0x108011f
lea eax, [ebp - 0x255]
push eax
lea eax, [ebp - 0x254]
push eax
push dword [ebp - 0x25c]
mov byte [ebp - 0x255], 1
call fcn.0107f35a
mov edi, eax
cmp edi, esi
jge 0x1080119
mov bl, byte [ebp - 0x255]
mov eax, dword [ebp - 0x270]
mov byte [eax], bl
cmp dword [ebp - 0x290], esi
je 0x10800c9
push dword [ebp - 0x25c]
mov ecx, dword [ebp - 0x290]
mov eax, dword [ecx]
push edi
call dword [eax]
cmp byte [ebp - 0x265], 0
je 0x1080241
test bl, bl
je 0x1080241
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x108010f
test byte [eax + 0x1c], 1
je 0x108010f
cmp byte [eax + 0x19], 4
jb 0x108010f
push edi
push dword [ebp - 0x25c]
push 0x1007760
push 0x22
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010196ed
mov ebx, dword [ebp - 0x284]
xor edi, edi
jmp 0x108011f
add dword [ebx], 1
adc dword [ebx + 4], esi
lea eax, [ebp - 0x254]
push eax
push dword [ebp - 0x280]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x107feb5
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
cmp esi, 0x12
je 0x1080193
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x1080178
test byte [eax + 0x1c], 1
je 0x1080178
cmp byte [eax + 0x19], 2
jb 0x1080178
push esi
push dword [ebp - 0x264]
push 0x1007760
push 0x24
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010196ed
test esi, esi
jle 0x1080188
and esi, 0xffff
or esi, 0x80070000
mov edi, esi
mov eax, dword [ebp - 0x270]
mov byte [eax], 0
push dword [ebp - 0x280]
call dword [sym.imp.KERNEL32.dll_FindClose]
mov esi, dword [sym.imp.ole32.dll_CoTaskMemFree]
xor ebx, ebx
cmp dword [ebp - 0x264], ebx
je 0x10801bd
push dword [ebp - 0x264]
call esi
mov dword [ebp - 0x264], ebx
cmp dword [ebp - 0x25c], ebx
je 0x10801cd
push dword [ebp - 0x25c]
call esi
cmp dword [ebp - 0x26c], ebx
je 0x10801e3
push dword [ebp - 0x26c]
call esi
mov dword [ebp - 0x26c], ebx
cmp dword [ebp - 0x260], ebx
je 0x10801f3
push dword [ebp - 0x260]
call esi
mov ecx, dword [ebp - 0x274]
cmp ecx, ebx
je 0x1080204
push 1
call fcn.0107ea32
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x108022e
test byte [eax + 0x1c], 1
je 0x108022e
cmp byte [eax + 0x19], 5
jb 0x108022e
push 0x1007760
push 0x25
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010189d0
mov ecx, dword [ebp - 4]
mov eax, edi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0106f5f8
leave
ret 0x1c
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x1080193
test byte [eax + 0x1c], 1
je 0x1080193
cmp byte [eax + 0x19], 2
jb 0x1080193
push edi
push dword [ebp - 0x25c]
push 0x1007760
push 0x23
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010196ed
jmp 0x1080193