Function at 0x100bbd20
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100c8ce7
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x2e8
mov eax, dword [0x102a100c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x2f0], ecx
mov ecx, dword [ebx + 0xc]
mov edx, ecx
mov dword [ebp - 0x2e8], ecx
cmp dword [ecx + 0x14], 8
jb 0x100bbd7a
mov edx, dword [ecx]
mov eax, dword [ecx + 0x10]
mov esi, ecx
lea eax, [edx + eax*2]
mov dword [ebp - 0x2e4], eax
jb 0x100bbd8c
mov esi, dword [ecx]
sub eax, esi
mov dword [ebp - 0x8c], 0
sar eax, 1
lea ecx, [ebp - 0x8c]
push eax
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
call fcn.1000de80
mov byte [ebp - 0x2ec], 0
lea ecx, [ebp - 0x8c]
push dword [ebp - 0x2ec]
push dword [ebp - 0x2e4]
push esi
call fcn.1001c790
mov esi, dword [ebp - 0x2e8]
mov eax, esi
mov dword [ebp - 4], 0
cmp dword [esi + 0x14], 8
jb 0x100bbdf1
mov eax, dword [esi]
lea ecx, [ebp - 0x2e0]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x2ec], eax
cmp eax, 0xffffffff
je 0x100bc345
mov edi, dword [ebx + 8]
mov ecx, 0x102938b8
lea eax, [ebp - 0x2b4]
nop dword [eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100bbe46
test dx, dx
je 0x100bbe42
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100bbe46
add eax, 4
add ecx, 4
test dx, dx
jne 0x100bbe20
xor eax, eax
jmp 0x100bbe4b
sbb eax, eax
or eax, 1
test eax, eax
je 0x100bc31e
mov ecx, 0x102938bc
lea eax, [ebp - 0x2b4]
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100bbe86
test dx, dx
je 0x100bbe82
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100bbe86
add eax, 4
add ecx, 4
test dx, dx
jne 0x100bbe60
xor eax, eax
jmp 0x100bbe8b
sbb eax, eax
or eax, 1
test eax, eax
je 0x100bc31e
test byte [ebp - 0x2e0], 0x10
je 0x100bbf66
cmp dword [esi + 0x14], 8
mov edx, esi
jb 0x100bbeaa
mov edx, dword [esi]
mov ecx, edx
mov dword [ebp - 0x5c], 0
xor eax, eax
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 7
mov word [ebp - 0x5c], ax
lea esi, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100bbed0
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x5c]
call fcn.1000e550
mov byte [ebp - 4], 1
lea eax, [ebp - 0x5c]
mov ecx, dword [ebp - 0x4c]
dec ecx
cmp dword [ebp - 0x48], 8
mov dword [ebp - 0x4c], ecx
cmovae eax, dword [ebp - 0x5c]
xor edx, edx
mov word [eax + ecx*2], dx
lea ecx, [ebp - 0x2b4]
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100bbf10
sub ecx, edx
lea eax, [ebp - 0x2b4]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x5c]
call fcn.1000f210
push 2
push 0x10293818
lea ecx, [ebp - 0x5c]
call fcn.1000f210
mov ecx, dword [ebp - 0x2f0]
lea eax, [ebp - 0x5c]
push eax
push edi
call fcn.100bbd20
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x48]
cmp edx, 8
jb 0x100bc318
mov ecx, dword [ebp - 0x5c]
jmp 0x100bc2e9
xor eax, eax
mov dword [ebp - 0x74], 0
lea ecx, [ebp - 0x2b4]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 7
lea edx, [ecx + 2]
mov word [ebp - 0x74], ax
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100bbf90
sub ecx, edx
lea eax, [ebp - 0x2b4]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x74]
call fcn.1000e550
mov byte [ebp - 4], 2
lea edx, [ebp - 0x74]
cmp dword [ebp - 0x60], 8
lea edi, [ebp - 0x74]
mov eax, dword [ebp - 0x64]
lea ecx, [ebp - 0x2c]
cmovae edx, dword [ebp - 0x74]
cmovae edi, dword [ebp - 0x74]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x1c], 0
lea eax, [edx + eax*2]
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x2e4], eax
sub eax, edi
sar eax, 1
push eax
mov byte [ebp - 0x2c], 0
call fcn.1000de80
mov byte [ebp - 0x2f4], 0
lea ecx, [ebp - 0x2c]
push dword [ebp - 0x2f4]
push dword [ebp - 0x2e4]
push edi
call fcn.1001c790
mov byte [ebp - 4], 3
lea eax, [ebp - 0x8c]
cmp dword [ebp - 0x78], 0x10
mov edi, dword [ebp - 0x7c]
cmovae eax, dword [ebp - 0x8c]
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2e4], eax
cmp edi, 0x10
jae 0x100bc059
movups xmm0, xmmword [eax]
mov esi, 0xf
movups xmmword [ebp - 0x44], xmm0
jmp 0x100bc08e
mov esi, edi
lea ecx, [ebp - 0x44]
or esi, 0xf
mov eax, 0x7fffffff
cmp esi, 0x7fffffff
cmova esi, eax
lea eax, [esi + 1]
push eax
call fcn.10008010
lea ecx, [edi + 1]
mov dword [ebp - 0x44], eax
push ecx
push dword [ebp - 0x2e4]
push eax
call fcn.10022000
add esp, 0xc
mov dword [ebp - 0x30], esi
mov byte [ebp - 4], 4
lea eax, [ebp - 0x44]
cmp esi, 0x10
lea ecx, [edi - 1]
mov dword [ebp - 0x34], ecx
cmovae eax, dword [ebp - 0x44]
mov byte [eax + ecx], 0
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], 0x10
lea ecx, [ebp - 0x44]
push dword [ebp - 0x1c]
cmovae eax, dword [ebp - 0x2c]
push eax
call fcn.1000bc50
cmp dword [ebp - 0x18], 0x10
lea ecx, [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
cmovae ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x2e4], ecx
cmp eax, 5
jb 0x100bc174
add eax, 0xfffffffc
add eax, ecx
sub eax, ecx
push eax
push 0x2e
push ecx
call fcn.100234a0
mov esi, eax
add esp, 0xc
test esi, esi
je 0x100bc174
nop word [eax + eax]
mov ecx, esi
mov edx, str..cfpl
mov edi, 1
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x100bc11d
add ecx, 4
mov edi, 0xfffffffd
add edx, 4
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x100bc144
cmp edi, 0xfffffffd
je 0x100bc140
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x100bc144
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x100bc144
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
jne 0x100bc144
xor eax, eax
jmp 0x100bc149
sbb eax, eax
or eax, 1
test eax, eax
je 0x100bc1d1
mov edx, dword [ebp - 0x1c]
inc esi
mov eax, dword [ebp - 0x2e4]
add edx, 0xfffffffc
add eax, edx
sub eax, esi
push eax
push 0x2e
push esi
call fcn.100234a0
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x100bc100
cmp dword [ebp - 0x18], 0x10
lea edi, [ebp - 0x2c]
mov ecx, dword [ebp - 0x1c]
cmovae edi, dword [ebp - 0x2c]
cmp ecx, 4
jb 0x100bc21f
lea eax, [ecx - 3]
add eax, edi
sub eax, edi
push eax
push 0x2e
push edi
call fcn.100234a0
mov esi, eax
add esp, 0xc
test esi, esi
je 0x100bc21f
mov edx, esi
mov ecx, str..hpl
mov eax, dword [edx]
cmp eax, dword [ecx]
je 0x100bc1cd
cmp al, byte [ecx]
jne 0x100bc1f5
mov al, byte [edx + 1]
cmp al, byte [ecx + 1]
jne 0x100bc1f5
mov al, byte [edx + 2]
cmp al, byte [ecx + 2]
jne 0x100bc1f5
mov al, byte [edx + 3]
cmp al, byte [ecx + 3]
jne 0x100bc1f5
xor eax, eax
jmp 0x100bc1fa
sub esi, dword [ebp - 0x2e4]
cmp esi, 0xffffffff
je 0x100bc174
mov edi, dword [ebx + 8]
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x2f0]
push edi
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.100bbaa0
jmp 0x100bc246
sbb eax, eax
or eax, 1
test eax, eax
je 0x100bc370
mov eax, dword [ebp - 0x1c]
inc esi
add eax, 0xfffffffd
add eax, edi
sub eax, esi
push eax
push 0x2e
push esi
call fcn.100234a0
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x100bc1a4
cmp dword [ebp - 0x18], 0x10
lea edx, [ebp - 0x2c]
mov eax, dword [0x102a89bc]
cmovae edx, dword [ebp - 0x2c]
push str..cfpl
push edx
mov ecx, dword [eax]
push str._error__Unable_to_open__s_:_not_an__s_file_n
push eax
call dword [ecx + 4]
mov edi, dword [ebx + 8]
add esp, 0x10
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x30]
cmp edx, 0x10
jb 0x100bc27e
mov ecx, dword [ebp - 0x44]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100bc274
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100bc3c1
push edx
push ecx
call fcn.1001ee69
add esp, 8
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
cmp edx, 0x10
jb 0x100bc2c8
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100bc2be
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100bc3c1
push edx
push ecx
call fcn.1001ee69
add esp, 8
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
cmp edx, 8
jb 0x100bc318
mov ecx, dword [ebp - 0x74]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100bc30e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100bc3c1
push edx
push ecx
call fcn.1001ee69
add esp, 8
mov esi, dword [ebp - 0x2e8]
lea eax, [ebp - 0x2e0]
push eax
push dword [ebp - 0x2ec]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x100bbe11
push dword [ebp - 0x2ec]
call dword [sym.imp.KERNEL32.dll_FindClose]
mov edx, dword [ebp - 0x78]
cmp edx, 0x10
jb 0x100bc3a1
mov ecx, dword [ebp - 0x8c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100bc397
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100bc3c1
jmp 0x100bc397
sub esi, edi
cmp esi, 0xffffffff
je 0x100bc21f
mov edi, dword [ebx + 8]
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x2f0]
push edi
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.100bb510
jmp 0x100bc246
push edx
push ecx
call fcn.1001ee69
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1001e823
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 8
call fcn.1002d424
int3