Function at 0x10012330
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008cd60
mov eax, dword fs:[0]
push eax
sub esp, 0x1d0
mov eax, dword [0x100a4040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x1c0], esi
mov edx, dword [esi + 4]
mov ecx, dword [esi]
cmp ecx, edx
je 0x1001237c
push ecx
call fcn.1000bdb0
mov eax, dword [esi]
add esp, 4
mov dword [esi + 4], eax
mov edx, dword [esi + 0x10]
lea edi, [esi + 0xc]
mov ecx, dword [edi]
mov dword [ebp - 0x1bc], edi
cmp ecx, edx
je 0x1001239c
push ecx
call fcn.1000bdb0
mov eax, dword [edi]
add esp, 4
mov dword [edi + 4], eax
push 4
xorps xmm0, xmm0
mov dword [ebp - 0x38], 0
push str..ss
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x34], 0
movups xmmword [ebp - 0x48], xmm0
call fcn.1000bcd0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x188]
cmp dword [ebp - 0x34], 0xf
lea eax, [ebp - 0x48]
push ecx
cmova eax, dword [ebp - 0x48]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
mov edi, eax
mov ecx, 0xf
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x1c4], edi
mov dword [ebp - 0x14], ecx
mov byte [ebp - 0x28], 0
mov byte [ebp - 4], 1
cmp edi, 0xffffffff
je 0x10012751
nop
test byte [ebp - 0x188], 0x10
jne 0x10012731
xorps xmm0, xmm0
mov dword [ebp - 0x1cc], 0
lea eax, [ebp - 0x15c]
mov dword [ebp - 0x1c8], 0
movups xmmword [ebp - 0x1dc], xmm0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x10012444
sub eax, edx
lea ecx, [ebp - 0x1dc]
push eax
lea eax, [ebp - 0x15c]
push eax
call fcn.1000bcd0
mov byte [ebp - 4], 2
mov eax, dword [esi + 4]
cmp eax, dword [esi + 8]
je 0x10012495
movups xmm0, xmmword [ebp - 0x1dc]
mov ecx, 0xf
mov byte [ebp - 0x1dc], 0
movups xmmword [eax], xmm0
movq xmm0, qword [ebp - 0x1cc]
movq qword [eax + 0x10], xmm0
add dword [esi + 4], 0x18
jmp 0x100124aa
lea ecx, [ebp - 0x1dc]
push ecx
push eax
mov ecx, esi
call fcn.10027940
mov ecx, dword [ebp - 0x1c8]
mov byte [ebp - 4], 1
cmp ecx, 0xf
jbe 0x100124e2
mov edx, dword [ebp - 0x1dc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100124d8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100127b6
push ecx
push edx
call fcn.1008a5c0
add esp, 8
mov eax, dword [ebp - 0x174]
mov edx, 0xe57a42bd
mul edx
mov eax, dword [ebp - 0x174]
mov edi, 0xd6bf94d5
mov esi, edx
mov ecx, 0xe57a42bd
mul edi
mov dword [ebp - 0x1a8], edx
mov edi, eax
mov eax, dword [ebp - 0x170]
mul ecx
mov dword [ebp - 0x1a4], edx
mov ecx, eax
mov eax, dword [ebp - 0x170]
mov edx, 0xd6bf94d5
mul edx
add ecx, esi
mov dword [ebp - 0x1a0], edx
mov edx, dword [ebp - 0x1a4]
adc edx, 0
mov dword [ebp - 0x19c], eax
add edi, ecx
mov ecx, dword [ebp - 0x1a8]
mov edi, 0xd6bf94d5
adc ecx, 0
xor eax, eax
add edx, ecx
mov ecx, dword [ebp - 0x19c]
adc eax, eax
add ecx, edx
mov edx, dword [ebp - 0x1a0]
adc edx, eax
mov eax, dword [ebp - 0x184]
shrd ecx, edx, 0x17
shr edx, 0x17
sub ecx, 0xb6109100
mov dword [ebp - 0x19c], ecx
sbb edx, 2
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x1a0], edx
mov ecx, 0xe57a42bd
mov dword [ebp - 0x2c], edx
mov edx, 0xe57a42bd
mul edx
mov eax, dword [ebp - 0x184]
mov esi, edx
mul edi
mov edi, eax
mov dword [ebp - 0x1a4], edx
mov eax, dword [ebp - 0x180]
mul ecx
mov ecx, eax
mov dword [ebp - 0x1a8], edx
mov eax, dword [ebp - 0x180]
mov edx, 0xd6bf94d5
mul edx
add ecx, esi
mov dword [ebp - 0x1b0], edx
mov edx, dword [ebp - 0x1a8]
mov esi, dword [ebp - 0x1b0]
adc edx, 0
add edi, ecx
mov dword [ebp - 0x1b8], eax
mov ecx, dword [ebp - 0x1a4]
adc ecx, 0
xor eax, eax
add edx, ecx
mov ecx, dword [ebp - 0x1b8]
adc eax, eax
add ecx, edx
adc esi, eax
shrd ecx, esi, 0x17
shr esi, 0x17
sub ecx, 0xb6109100
sbb esi, 2
cmp dword [ebp - 0x19c], ecx
jne 0x10012629
cmp dword [ebp - 0x1a0], esi
jne 0x10012629
push 5
push str.empty
jmp 0x1001264d
lea eax, [ebp - 0x30]
push eax
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64]
push eax
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_asctime]
mov edx, eax
add esp, 8
lea esi, [edx + 1]
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x10012642
sub edx, esi
push edx
push eax
lea ecx, [ebp - 0x28]
call fcn.10026180
mov edi, dword [ebp - 0x1bc]
lea ecx, [ebp - 0x28]
push ecx
mov eax, dword [edi + 4]
cmp eax, dword [edi + 8]
je 0x10012674
mov ecx, eax
call fcn.1000b8c0
add dword [edi + 4], 0x18
jmp 0x1001267c
push eax
mov ecx, edi
call fcn.100271a0
cmp dword [ebp - 0x14], 0xf
lea esi, [ebp - 0x28]
mov byte [ebp - 0x198], 0x44
mov al, 0x22
cmova esi, dword [ebp - 0x28]
mov cl, 0x2a
xor al, byte [ebp - 0x198]
mov ah, 0x61
xor cl, byte [ebp - 0x198]
mov ch, 0x37
mov byte [ebp - 0x197], al
mov dl, 0x64
mov byte [ebp - 0x189], ah
mov dh, dl
mov al, byte [ebp - 0x189]
mov byte [ebp - 0x196], cl
mov cl, byte [ebp - 0x198]
xor al, cl
mov byte [ebp - 0x18a], ch
mov byte [ebp - 0x191], al
xor ah, cl
mov al, byte [ebp - 0x18a]
xor dl, cl
xor al, cl
mov byte [ebp - 0x194], ah
mov byte [ebp - 0x190], al
xor ch, cl
push esi
lea eax, [ebp - 0x15c]
mov byte [ebp - 0x18f], 0
push eax
lea eax, [ebp - 0x197]
mov byte [ebp - 0x195], dl
xor dh, cl
mov byte [ebp - 0x193], ch
push eax
mov byte [ebp - 0x192], dh
mov byte [ebp - 0x18f], 0
call fcn.10002690
mov esi, dword [ebp - 0x1c0]
add esp, 0xc
mov edi, dword [ebp - 0x1c4]
lea eax, [ebp - 0x188]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x10012410
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x1001277e
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10012774
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100127b6
push ecx
push edx
call fcn.1008a5c0
add esp, 8
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
cmp ecx, 0xf
jbe 0x100127c6
mov edx, dword [ebp - 0x48]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100127bc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100127bc
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1008a5c0
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1008a073
mov esp, ebp
pop ebp
ret