Function at 0x73ef8f69
Capabilities:
Enumerate files on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xca4
mov eax, dword [0x73f3e530]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x10]
push ebx
mov ebx, dword [ebp + 0x1c]
push esi
push edi
mov edi, ecx
mov dword [ebp - 0xc9c], eax
mov eax, dword [ebp + 0x14]
xor esi, esi
mov dword [ebp - 0xc98], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0xca0], edx
mov dword [ebp - 0xc94], eax
cmp word [edi], si
je 0x73ef9214
mov ecx, 0x101
lea eax, [ebp - 0x428]
push ecx
push eax
push ecx
lea eax, [ebp - 0xa40]
push eax
push ecx
lea eax, [ebp - 0x838]
push eax
push 4
lea eax, [ebp - 0xc]
push eax
push edi
call dword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o__wsplitpath_s]
add esp, 0x20
lea edx, [ebp - 0x630]
lea ecx, [ebp - 0xa40]
call fcn.73f18dd7
lea eax, [ebp - 0x428]
push eax
lea eax, [ebp - 0x630]
push eax
lea eax, [ebp - 0x838]
push eax
lea eax, [ebp - 0xc]
push eax
push 0x73dbb6f0
lea eax, [ebp - 0x220]
push 0x105
push eax
call fcn.73de12a2
add esp, 0x1c
lea eax, [ebp - 0xc90]
push 0x250
push esi
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
add esp, 0xc
lea eax, [ebp - 0xc90]
push eax
lea eax, [ebp - 0x220]
push eax
call dword [sym.imp.api_ms_win_core_file_l1_1_0.dll_FindFirstFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x73ef9214
mov ecx, 0x73dbb708
lea eax, [ebp - 0xc64]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x73ef9087
test dx, dx
je 0x73ef9083
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x73ef9087
add eax, 4
add ecx, 4
test dx, dx
jne 0x73ef9061
xor eax, eax
jmp 0x73ef908c
sbb eax, eax
or eax, 1
test eax, eax
je 0x73ef9196
mov ecx, 0x73dbb70c
lea eax, [ebp - 0xc64]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x73ef90c5
test dx, dx
je 0x73ef90c1
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x73ef90c5
add eax, 4
add ecx, 4
test dx, dx
jne 0x73ef909f
xor eax, eax
jmp 0x73ef90ca
sbb eax, eax
or eax, 1
test eax, eax
je 0x73ef9196
lea eax, [ebp - 0xc64]
push eax
lea eax, [ebp - 0x428]
push eax
lea eax, [ebp - 0x630]
push eax
lea eax, [ebp - 0x838]
push eax
lea eax, [ebp - 0xc]
push eax
push 0x73dbb714
lea eax, [ebp - 0x220]
push 0x105
push eax
call fcn.73de12a2
add esp, 0x20
lea ecx, [ebp - 0x220]
call fcn.73f01c94
lea ecx, [ebp - 0x220]
test eax, eax
je 0x73ef9155
mov edx, 0x105
call fcn.73f08e6e
test eax, eax
je 0x73ef9196
lea eax, [ebp - 0x630]
push eax
call fcn.73ee45ae
pop ecx
lea eax, [ebp - 0x428]
mov edx, 0x105
push eax
lea ecx, [ebp - 0x220]
call fcn.73ee45ae
pop ecx
jmp 0x73ef9163
mov edx, 0x73dbb69c
call fcn.73ddf4f9
test eax, eax
je 0x73ef9196
mov edx, dword [ebp - 0xca0]
push ebx
push dword [ebp - 0xc94]
push dword [ebp - 0xc98]
push dword [ebp - 0xc9c]
push ecx
push dword [ebp + 0xc]
lea ecx, [ebp - 0x220]
push dword [ebp + 8]
call fcn.73ef928d
test eax, eax
je 0x73ef922a
lea eax, [ebp - 0xc90]
push eax
push esi
call dword [sym.imp.api_ms_win_core_file_l1_1_0.dll_FindNextFileW]
test eax, eax
jne 0x73ef9056
push esi
call dword [sym.imp.api_ms_win_core_file_l1_1_0.dll_FindClose]
lea eax, [ebp - 0x428]
mov esi, 0x105
push eax
lea eax, [ebp - 0x630]
push eax
lea eax, [ebp - 0x428]
push eax
lea eax, [ebp - 0x630]
push eax
lea eax, [ebp - 0x838]
push eax
lea eax, [ebp - 0xc]
push eax
push 0x73dbb72c
lea eax, [ebp - 0x220]
push esi
push eax
call fcn.73de12a2
add esp, 0x24
lea ecx, [ebp - 0x220]
call fcn.73f01c78
test eax, eax
je 0x73ef9214
lea eax, [ebp - 0x220]
mov edx, esi
push eax
mov ecx, ebx
call fcn.73ee45dd
pop ecx
mov eax, 0x806d0005
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.73ddffa0
leave
ret 0x18
lea eax, [ebp - 0x220]
mov edx, 0x105
push eax
mov ecx, edi
call fcn.73ee45dd
pop ecx
push esi
call dword [sym.imp.api_ms_win_core_file_l1_1_0.dll_FindClose]
xor eax, eax
jmp 0x73ef9219