Function at 0x10007b20
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x224
push ebx
push esi
push edi
call fcn.10001b70
mov eax, 0x17458ae9
xor esi, esi
push esi
lea ecx, [ebp - 0x44]
mov byte [ebp - 0x44], al
call fcn.100113e0
cmp dword [ebp + 0x10], 1
jb 0x10007b57
cmp dword [ebp + 0xc], esi
je 0x10007b57
lea ecx, [ebp + 8]
call fcn.10011360
mov cl, byte [ebp + 0x17]
mov dl, byte [ebp + 0x17]
mov al, byte [ebp + 0x17]
mov byte [ebp - 0x30], cl
mov cl, byte [ebp + 0x17]
push esi
mov byte [ebp - 0x64], cl
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x24], esi
mov byte [ebp - 0x20], dl
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x14], esi
mov byte [ebp - 0x10], al
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], esi
mov dword [ebp - 4], esi
call fcn.100113e0
mov dl, byte [ebp + 0x17]
push esi
lea ecx, [ebp - 0x54]
mov byte [ebp - 0x54], dl
call fcn.100113e0
mov al, byte [ebp + 8]
push esi
lea ecx, [ebp - 0x74]
mov byte [ebp - 0x74], al
call fcn.100113e0
mov ecx, dword [0x1001e224]
lea edx, [ebp + 8]
push ecx
push esi
push edx
lea ecx, [ebp - 0x74]
call fcn.100110d0
mov edi, 0x10020264
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x10020264
lea ecx, [ebp - 0x74]
call fcn.10011880
mov eax, dword [ebp - 0x70]
cmp eax, esi
jne 0x10007bee
mov eax, 0x1001e220
lea ecx, [ebp - 0x224]
push ecx
push eax
call dword [sym.imp.KERNEL32.DLL_FindFirstFileA]
cmp eax, 0xffffffff
mov dword [ebp - 0x34], eax
je 0x10007ead
lea edi, [ebp - 0x1f8]
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x1f8]
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
lea ecx, [ebp - 0x44]
call fcn.10011940
push 0x10020260
lea ecx, [ebp - 0x44]
call fcn.100131b0
test eax, eax
je 0x10007e8d
push 0x1002025c
lea ecx, [ebp - 0x44]
call fcn.100131b0
test eax, eax
je 0x10007e8d
lea eax, [ebp + 8]
lea ecx, [ebp - 0xc4]
push eax
call fcn.10010c90
mov ecx, dword [0x1001e224]
lea edx, [ebp - 0x44]
push ecx
push esi
push edx
mov ecx, eax
call fcn.100117a0
push eax
lea ecx, [ebp - 0x84]
call fcn.10010c90
push 1
lea ecx, [ebp - 0xc4]
call fcn.100113e0
mov eax, dword [0x1001e224]
lea ecx, [ebp - 0x84]
push eax
push esi
push ecx
lea ecx, [ebp - 0x64]
call fcn.100110d0
push 1
lea ecx, [ebp - 0x84]
call fcn.100113e0
mov edx, dword [0x1001e224]
lea eax, [ebp - 0x64]
push edx
push esi
push eax
lea ecx, [ebp - 0x54]
call fcn.100110d0
lea ecx, [ebp - 0x44]
push ecx
call fcn.10002140
lea edx, [ebp - 0x64]
push edx
call fcn.10002140
mov eax, dword [0x100235e4]
mov ecx, dword [0x100235e8]
add esp, 8
cmp eax, esi
jne 0x10007ced
mov eax, 0x1001e220
push ecx
push esi
push eax
lea ecx, [ebp - 0x64]
call fcn.100112d0
test eax, eax
je 0x10007e8d
test byte [ebp - 0x224], 0x10
je 0x10007d74
lea eax, [ebp - 0x54]
lea ecx, [ebp - 0xa4]
push eax
call fcn.10010c90
mov edx, eax
mov edi, 0x10020258
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x10020258
mov ecx, edx
call fcn.10011880
push eax
lea ecx, [ebp - 0x94]
call fcn.10010c90
push 1
lea ecx, [ebp - 0xa4]
call fcn.100113e0
mov edx, dword [ebp - 0x28]
lea ecx, [ebp - 0x94]
push ecx
push edx
lea ecx, [ebp - 0x30]
call fcn.10011540
push 1
lea ecx, [ebp - 0x94]
call fcn.100113e0
jmp 0x10007e8d
cmp dword [ebp - 0x3c], 4
jbe 0x10007e8d
push 0x10020094
call fcn.10001c00
add esp, 4
mov edi, eax
lea eax, [ebp - 0x44]
push 4
sub esp, 0x10
mov ecx, esp
push eax
call fcn.10010c90
lea ecx, [ebp - 0xb4]
push ecx
call fcn.10002050
add esp, 0x18
mov ecx, eax
push edi
call fcn.100131b0
test eax, eax
je 0x10007e0a
push 0x100200a0
call fcn.10001c00
add esp, 4
lea edx, [ebp - 0x44]
mov esi, eax
push 4
sub esp, 0x10
mov ecx, esp
push edx
call fcn.10010c90
lea eax, [ebp - 0xe4]
push eax
call fcn.10002050
add esp, 0x18
mov ecx, eax
push esi
call fcn.100131b0
test eax, eax
push 1
lea ecx, [ebp - 0xe4]
sete bl
call fcn.100113e0
test bl, bl
jne 0x10007e08
xor esi, esi
jmp 0x10007e0c
xor esi, esi
mov bl, 1
push 1
lea ecx, [ebp - 0xb4]
call fcn.100113e0
test bl, bl
je 0x10007e2f
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x54]
push ecx
push edx
lea ecx, [ebp - 0x20]
call fcn.10011540
jmp 0x10007e8d
push 0x100200ac
call fcn.10001c00
add esp, 4
mov esi, eax
lea eax, [ebp - 0x44]
push 4
sub esp, 0x10
mov ecx, esp
push eax
call fcn.10010c90
lea ecx, [ebp - 0xd4]
push ecx
call fcn.10002050
add esp, 0x18
mov ecx, eax
push esi
call fcn.100131b0
test eax, eax
push 1
lea ecx, [ebp - 0xd4]
sete bl
call fcn.100113e0
test bl, bl
je 0x10007e8b
mov eax, dword [ebp - 8]
lea edx, [ebp - 0x54]
push edx
push eax
lea ecx, [ebp - 0x10]
call fcn.10011540
xor esi, esi
mov edi, dword [ebp - 0x34]
lea ecx, [ebp - 0x224]
push ecx
push edi
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
test eax, eax
jne 0x10007c08
push edi
call dword [sym.imp.KERNEL32.DLL_FindClose]
call fcn.10001b70
call 0x45e0ab6
cmp ebx, esi
je 0x10008076
mov edi, dword [ebp - 8]
mov edx, edi
sub edx, ebx
sar edx, 4
je 0x10008076
xor edx, edx
mov dword [ebp - 0x34], edx
mov ecx, dword [ebp - 0x1c]
cmp ecx, esi
je 0x10007ffc
mov eax, dword [ebp - 0x18]
mov esi, eax
sub esi, ecx
sar esi, 4
cmp edx, esi
jae 0x10007ff6
push edx
lea ecx, [ebp - 0x20]
call fcn.10010ef0
mov ecx, eax
call fcn.10010e70
sub esp, 0x10
mov ebx, eax
mov al, byte [ebp + 0x17]
mov esi, esp
push 0
mov ecx, esi
mov byte [esi], al
call fcn.100113e0
mov edi, ebx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push ebx
mov ecx, esi
call fcn.10011940
call fcn.10007960
add esp, 0x10
cmp al, 1
je 0x10007f4a
mov eax, dword [ebp - 0x34]
mov edi, dword [ebp - 8]
mov ebx, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0x34], eax
mov edx, eax
xor esi, esi
jmp 0x10007ed4
push 1
lea ecx, [ebp - 0x74]
call fcn.100113e0
push 1
lea ecx, [ebp - 0x54]
call fcn.100113e0
push 1
lea ecx, [ebp - 0x64]
call fcn.100113e0
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0xc]
push ecx
push edx
lea ecx, [ebp - 0x10]
call fcn.100116f0
mov eax, dword [ebp - 0xc]
push eax
call fcn.1001348e
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x1c]
add esp, 4
xor esi, esi
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], esi
push ecx
push edx
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], esi
call fcn.100116f0
mov eax, dword [ebp - 0x1c]
push eax
call fcn.1001348e
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x2c]
add esp, 4
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x14], esi
push ecx
push edx
lea ecx, [ebp - 0x30]
call fcn.100116f0
mov eax, dword [ebp - 0x2c]
push eax
call fcn.1001348e
add esp, 4
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x28], esi
push 1
mov dword [ebp - 0x24], esi
call fcn.100113e0
push 1
lea ecx, [ebp + 8]
call fcn.100113e0
mov al, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
xor esi, esi
cmp ecx, esi
jne 0x10008000
xor eax, eax
jmp 0x10008005
sub eax, ecx
sar eax, 4
cmp edx, eax
jne 0x10008076
xor eax, eax
mov dword [ebp - 0x34], eax
cmp ebx, esi
je 0x10008076
sub edi, ebx
sar edi, 4
cmp eax, edi
jae 0x10008076
push eax
lea ecx, [ebp - 0x10]
call fcn.10010ef0
mov ecx, eax
call fcn.10010e70
mov cl, byte [ebp + 0x17]
sub esp, 0x10
mov esi, esp
mov ebx, eax
push 0
mov byte [esi], cl
mov ecx, esi
call fcn.100113e0
mov edi, ebx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push ebx
mov ecx, esi
call fcn.10011940
call fcn.10007960
add esp, 0x10
cmp al, 1
je 0x100081b8
mov eax, dword [ebp - 0x34]
mov edi, dword [ebp - 8]
mov ebx, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0x34], eax
xor esi, esi
jmp 0x1000800e
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
sub eax, dword [0x10023540]
cmp eax, 0x4b0
jbe 0x1000811f
push 1
lea ecx, [ebp - 0x74]
call fcn.100113e0
push 1
lea ecx, [ebp - 0x54]
call fcn.100113e0
push 1
lea ecx, [ebp - 0x64]
call fcn.100113e0
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0xc]
push edx
push eax
lea ecx, [ebp - 0x10]
call fcn.100116f0
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.1001348e
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
add esp, 4
lea ecx, [ebp - 0x20]
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], esi
push edx
push eax
mov dword [ebp - 4], esi
call fcn.100116f0
mov ecx, dword [ebp - 0x1c]
push ecx
call fcn.1001348e
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
add esp, 4
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], esi
push edx
push eax
mov dword [ebp - 0x14], esi
call fcn.100116f0
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.1001348e
add esp, 4
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x24], esi
jmp 0x10008306
mov ecx, dword [ebp - 0x2c]
cmp ecx, esi
je 0x100082d0
mov eax, dword [ebp - 0x28]
mov edx, eax
sub edx, ecx
sar edx, 4
je 0x100082d0
cmp ecx, eax
je 0x1000814f
push esi
push eax
push ecx
call fcn.10013280
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
add esp, 0xc
xor ebx, ebx
cmp ecx, esi
je 0x100082d0
sub eax, ecx
sar eax, 4
cmp ebx, eax
jae 0x100082d0
push ebx
lea ecx, [ebp - 0x30]
call fcn.10010ef0
mov edi, eax
sub esp, 0x10
mov esi, esp
mov al, byte [edi]
push 0
mov ecx, esi
mov byte [esi], al
call fcn.100113e0
mov ecx, dword [0x1001e224]
push ecx
push 0
push edi
mov ecx, esi
call fcn.100110d0
call fcn.10007b20
add esp, 0x10
test al, al
jne 0x100081b8
mov al, byte [0x100271bd]
test al, al
je 0x10008264
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
inc ebx
xor esi, esi
jmp 0x10008151
push 1
lea ecx, [ebp - 0x74]
call fcn.100113e0
push 1
lea ecx, [ebp - 0x54]
call fcn.100113e0
push 1
lea ecx, [ebp - 0x64]
call fcn.100113e0
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0xc]
push edx
push eax
lea ecx, [ebp - 0x10]
call fcn.100116f0
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.1001348e
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
add esp, 4
xor esi, esi
lea ecx, [ebp - 0x20]
mov dword [ebp - 0xc], esi
push edx
push eax
mov dword [ebp - 8], esi
mov dword [ebp - 4], esi
call fcn.100116f0
mov ecx, dword [ebp - 0x1c]
push ecx
call fcn.1001348e
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
add esp, 4
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], esi
push edx
push eax
mov dword [ebp - 0x14], esi
call fcn.100116f0
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.1001348e
add esp, 4
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x28], esi
push 1
mov dword [ebp - 0x24], esi
call fcn.100113e0
push 1
lea ecx, [ebp + 8]
call fcn.100113e0
mov al, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 1
lea ecx, [ebp - 0x74]
call fcn.100113e0
push 1
lea ecx, [ebp - 0x54]
call fcn.100113e0
push 1
lea ecx, [ebp - 0x64]
call fcn.100113e0
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0xc]
push edx
push eax
lea ecx, [ebp - 0x10]
call fcn.100116f0
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.1001348e
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
add esp, 4
xor esi, esi
lea ecx, [ebp - 0x20]
mov dword [ebp - 0xc], esi
push edx
push eax
mov dword [ebp - 8], esi
mov dword [ebp - 4], esi
call fcn.100116f0
mov ecx, dword [ebp - 0x1c]
push ecx
call fcn.1001348e
add esp, 4
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x14], esi
jmp 0x100082fe
push 1
lea ecx, [ebp - 0x74]
call fcn.100113e0
push 1
lea ecx, [ebp - 0x54]
call fcn.100113e0
push 1
lea ecx, [ebp - 0x64]
call fcn.100113e0
lea ecx, [ebp - 0x10]
call fcn.10010e90
lea ecx, [ebp - 0x20]
call fcn.10010e90
lea ecx, [ebp - 0x30]
call fcn.10010e90
push 1
lea ecx, [ebp - 0x44]
call fcn.100113e0
push 1
lea ecx, [ebp + 8]
call fcn.100113e0
pop edi
pop esi
xor al, al
pop ebx
mov esp, ebp
pop ebp
ret