Function at 0x1004ab30
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push 0xffffffffffffffff
push 0x1012c316
mov eax, dword fs:[0]
push eax
mov eax, 0x123c
call fcn.100ecbf0
mov eax, dword [0x101636d0]
xor eax, esp
mov dword [esp + 0x1238], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x101636d0]
xor eax, esp
push eax
lea eax, [esp + 0x1250]
mov dword fs:[0], eax
mov esi, dword [esp + 0x1264]
mov ebp, dword [esp + 0x1260]
mov ebx, esi
lea edi, [esp + 0x134]
call fcn.1004b160
mov ebx, ebp
lea edi, [esp + 0x1c]
mov dword [esp + 0x1258], 0
call fcn.1004b160
mov al, 1
push 0x10170388
push esi
mov byte [esp + 0x1260], al
mov byte [esp + 0x23], al
call fcn.100d2590
add esp, 8
test eax, eax
je 0x1004ac0e
cmp byte [esp + 0x12e], 0
jne 0x1004abe2
mov eax, dword [esp + 0x128]
lea ecx, [esp + 0x20]
cmp eax, ecx
je 0x1004abe2
push eax
call fcn.100cf89b
add esp, 4
cmp byte [esp + 0x246], 0
jne 0x1004ac07
mov eax, dword [esp + 0x240]
lea edx, [esp + 0x138]
cmp eax, edx
je 0x1004ac07
push eax
call fcn.100cf89b
add esp, 4
xor al, al
jmp 0x1004ade0
mov eax, 0x4000
test word [0x1017038e], ax
je 0x1004ad7c
lea ecx, [esp + 0x1c]
call fcn.1004a200
test al, al
jne 0x1004ac58
push 0
lea ecx, [esp + 0x20]
call fcn.1004a5a0
test al, al
jne 0x1004ac58
lea eax, [esp + 0x1c]
call fcn.100023e0
lea eax, [esp + 0x134]
call fcn.100023e0
xor al, al
jmp 0x1004ade0
push esi
push str._s.
lea edx, [esp + 0x254]
call fcn.1004b060
add esp, 8
push 0x10170138
lea ecx, [esp + 0x250]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov edi, eax
cmp edi, 0xffffffff
je 0x1004ad95
mov ebx, dword [sym.imp.KERNEL32.dll_FindNextFileW]
mov ecx, 0x1013fd6c
mov eax, 0x10170164
jmp 0x1004aca0
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x1004acc6
test dx, dx
je 0x1004acc2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x1004acc6
add eax, 4
add ecx, 4
test dx, dx
jne 0x1004aca0
xor eax, eax
jmp 0x1004accb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1004ad63
mov ecx, 0x10142b5c
mov eax, 0x10170164
lea ecx, [ecx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x1004ad06
test dx, dx
je 0x1004ad02
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x1004ad06
add eax, 4
add ecx, 4
test dx, dx
jne 0x1004ace0
xor eax, eax
jmp 0x1004ad0b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1004ad63
push 0x10170164
push esi
push 0x1013c7c8
lea edx, [esp + 0x258]
call fcn.1004b060
add esp, 0xc
push 0x10170164
push ebp
push 0x1013c7c8
lea edx, [esp + 0xa58]
call fcn.1004b060
add esp, 0xc
lea edx, [esp + 0x24c]
push edx
lea eax, [esp + 0xa50]
push eax
call fcn.1004ab30
add esp, 8
test al, al
jne 0x1004ad63
mov byte [esp + 0x1b], al
push 0x10170138
push edi
call ebx
test eax, eax
jne 0x1004ac91
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
jmp 0x1004ad95
lea ecx, [esp + 0x134]
push ecx
lea ecx, [esp + 0x20]
call fcn.1004a720
test al, al
jne 0x1004ad95
mov byte [esp + 0x1b], al
cmp byte [esp + 0x12e], 0
jne 0x1004adb7
mov eax, dword [esp + 0x128]
lea edx, [esp + 0x20]
cmp eax, edx
je 0x1004adb7
push eax
call fcn.100cf89b
add esp, 4
cmp byte [esp + 0x246], 0
jne 0x1004addc
mov eax, dword [esp + 0x240]
lea ecx, [esp + 0x138]
cmp eax, ecx
je 0x1004addc
push eax
call fcn.100cf89b
add esp, 4
mov al, byte [esp + 0x1b]
mov ecx, dword [esp + 0x1250]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x1238]
xor ecx, esp
call fcn.100cf604
add esp, 0x1248
ret