Function at 0x101734a0
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x101f0a5b
push eax
mov eax, 0x1284
mov dword fs:[0], esp
call fcn.10033d10
mov al, byte [esp + 0xb]
push esi
mov byte [esp + 0x14], al
xor eax, eax
push edi
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov ecx, 0x100
lea edi, [esp + 0x27c]
rep stosd dword es:[edi], eax
mov edi, dword [esp + 0x12a0]
lea ecx, [esp + 0x27c]
push edi
push ecx
mov dword [esp + 0x129c], eax
call fcn.10033da9
lea edx, [esp + 0x284]
push 0x1028bc0c
push edx
call fcn.10033d7f
add esp, 0x10
lea eax, [esp + 0x2c]
lea ecx, [esp + 0x27c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, eax
cmp esi, 0xffffffff
mov dword [esp + 0x28], esi
je 0x10173864
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_FindNextFileW]
push ebp
lea edx, [esp + 0x34]
push edx
push esi
call ebx
test eax, eax
je 0x101735c0
mov eax, dword [esp + 0x34]
and eax, 0x10
cmp al, 0x10
jne 0x10173540
lea ecx, [esp + 0x60]
push 0x1026e6f4
push ecx
call fcn.100340ae
add esp, 8
test eax, eax
je 0x10173540
lea edx, [esp + 0x60]
push 0x1026e6f8
push edx
call fcn.100340ae
add esp, 8
test eax, eax
je 0x10173540
lea eax, [esp + 0xe84]
push edi
push eax
call fcn.10033da9
lea ecx, [esp + 0x68]
lea edx, [esp + 0xa8c]
push ecx
push edx
call fcn.10033da9
mov ecx, dword [esp + 0x38]
add esp, 0x10
lea eax, [esp + 0xa84]
push eax
push 1
push ecx
lea ecx, [esp + 0x2c]
call fcn.10173e40
jmp 0x10173540
mov edi, dword [esp + 0x28]
mov eax, dword [esp + 0x24]
mov edx, edi
mov dword [esp + 0x10], eax
sub edx, eax
mov eax, 0xfe03f81
imul edx
mov ebx, dword [esp + 0x12ac]
mov dword [esp + 0x14], edi
sar edx, 7
mov ecx, dword [ebx + 8]
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 0xfe03f81
mov esi, edx
mov edx, dword [ebx + 0xc]
sub edx, ecx
mov ebp, ecx
imul edx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
cmp edx, esi
jae 0x101736dc
mov eax, dword [ebx + 4]
test eax, eax
je 0x1017363a
sub ecx, eax
mov eax, 0xfe03f81
imul ecx
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
cmp esi, edx
jae 0x1017363a
mov ecx, ebx
call fcn.10173d70
mov edi, eax
jmp 0x1017363c
mov edi, esi
mov ecx, ebx
call fcn.10173d70
add eax, edi
mov dword [esp + 0x1c], eax
jns 0x1017364d
xor eax, eax
mov edx, eax
shl edx, 7
add edx, eax
shl edx, 4
push edx
call fcn.101d175d
add esp, 4
mov edi, eax
mov eax, dword [ebx + 4]
mov ecx, ebx
push edi
push ebp
push eax
call fcn.10173e00
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
push eax
push ecx
push edx
mov ecx, ebx
call fcn.10173e00
push eax
mov eax, dword [ebx + 8]
push eax
push ebp
mov ecx, ebx
call fcn.10173e00
mov ecx, dword [ebx + 8]
mov edx, dword [ebx + 4]
push ecx
push edx
mov ecx, ebx
call fcn.10173df0
mov eax, dword [ebx + 4]
push eax
call fcn.101d1786
mov eax, dword [esp + 0x20]
add esp, 4
mov ecx, eax
shl ecx, 7
add ecx, eax
shl ecx, 4
add ecx, edi
mov dword [ebx + 0xc], ecx
mov ecx, ebx
call fcn.10173d70
add eax, esi
mov dword [ebx + 4], edi
mov edx, eax
shl edx, 7
add edx, eax
shl edx, 4
add edx, edi
mov dword [ebx + 8], edx
jmp 0x101737cb
mov edx, ecx
mov eax, 0xfe03f81
sub edx, ebp
imul edx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
cmp edx, esi
jae 0x10173769
mov edi, esi
shl edi, 7
add edi, esi
shl edi, 4
lea edx, [edi + ebp]
push edx
push ecx
push ebp
mov ecx, ebx
call fcn.10173e00
mov eax, dword [ebx + 8]
mov ecx, dword [esp + 0x14]
push eax
sub eax, ebp
push ecx
mov ecx, eax
mov eax, 0xfe03f81
mov esi, dword [esp + 0x18]
imul ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov ecx, edx
shl ecx, 7
add ecx, edx
shl ecx, 4
add ecx, esi
push ecx
mov ecx, ebx
call fcn.10173e00
mov ecx, dword [ebx + 8]
mov eax, 0xfe03f81
sub ecx, ebp
push ebp
imul ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov ecx, edx
shl ecx, 7
add ecx, edx
shl ecx, 4
add ecx, esi
push ecx
push esi
jmp 0x101737bb
test esi, esi
jbe 0x101737cf
mov edi, esi
push ecx
shl edi, 7
add edi, esi
push ecx
shl edi, 4
sub ecx, edi
mov dword [esp + 0x24], edi
push ecx
mov ecx, ebx
call fcn.10173e00
mov edx, dword [ebx + 8]
mov eax, edx
sub eax, edi
cmp ebp, eax
je 0x101737b0
sub eax, 0x810
sub edx, 0x810
mov ecx, 0x204
mov esi, eax
mov edi, edx
cmp eax, ebp
rep movsd dword es:[edi], dword [esi]
jne 0x10173792
mov edi, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
push ebp
push edx
push eax
call fcn.10174190
mov eax, dword [ebx + 8]
add esp, 0xc
add eax, edi
mov dword [ebx + 8], eax
mov edi, dword [esp + 0x28]
xor ebp, ebp
xor esi, esi
mov ecx, dword [esp + 0x24]
test ecx, ecx
je 0x10173857
sub edi, ecx
mov eax, 0xfe03f81
imul edi
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
cmp ebp, edx
jae 0x10173857
lea ecx, [esi + ecx + 0x400]
lea edx, [esp + 0x684]
push ecx
push edx
call fcn.10033da9
lea eax, [esp + 0x68c]
push 0x1028bc08
push eax
call fcn.10033d7f
mov ecx, dword [esp + 0x34]
lea eax, [esp + 0x694]
lea edx, [esi + ecx]
push edx
push eax
call fcn.10033d7f
mov edx, dword [esp + 0x12bc]
lea ecx, [esp + 0x69c]
push ebx
push ecx
push edx
call fcn.101734a0
mov edi, dword [esp + 0x4c]
add esp, 0x24
inc ebp
add esi, 0x810
jmp 0x101737d3
mov eax, dword [esp + 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
pop ebp
pop ebx
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.101d1786
mov ecx, dword [esp + 0x1290]
add esp, 4
mov eax, 1
mov dword fs:[0], ecx
pop edi
pop esi
add esp, 0x1290
ret