Function at 0x210173f1
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x474
mov dword [ebp - 0x474], ecx
mov dword [ebp - 0x264], 0
mov ecx, dword [ebp - 0x474]
call fcn.21017018
mov eax, dword [ebp + 8]
push eax
call fcn.21015343
add esp, 4
test eax, eax
je 0x2101744b
push 0x104
lea ecx, [ebp - 0x46c]
push ecx
push 0x2108beb0
mov edx, dword [ebp + 8]
push edx
call fcn.210153c3
add esp, 0x10
lea eax, [ebp - 0x46c]
mov dword [ebp + 8], eax
push 0x104
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0x474]
add edx, 8
push edx
call fcn.2105f5ea
add esp, 0xc
push 0
push 0xffffffffffffffff
push 0x5c
mov eax, dword [ebp - 0x474]
add eax, 8
push eax
call fcn.210394f0
add esp, 0x10
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0
je 0x21017498
mov ecx, dword [ebp - 0x254]
mov word [ecx], 0
lea edx, [ebp - 0x250]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0xffffffff
jne 0x210174bf
xor eax, eax
jmp 0x210176ca
mov dword [ebp - 0x25c], 1
jmp 0x210174e5
lea ecx, [ebp - 0x250]
push ecx
mov edx, dword [ebp - 0x258]
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 0
je 0x21017553
push 0x2108beb8
lea eax, [ebp - 0x224]
push eax
call fcn.2105e83a
add esp, 8
test eax, eax
je 0x2101751e
push 0x2108bebc
lea ecx, [ebp - 0x224]
push ecx
call fcn.2105e83a
add esp, 8
test eax, eax
jne 0x21017520
jmp 0x210174cb
mov edx, dword [ebp - 0x250]
and edx, 0x10
test edx, edx
je 0x21017537
cmp dword [ebp + 0x10], 0
jne 0x21017535
jmp 0x210174cb
jmp 0x2101753f
cmp dword [ebp + 0xc], 0
jne 0x2101753f
jmp 0x210174cb
mov eax, dword [ebp - 0x264]
add eax, 1
mov dword [ebp - 0x264], eax
jmp 0x210174cb
mov ecx, dword [ebp - 0x258]
push ecx
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [ebp - 0x264], 0
jne 0x21017570
xor eax, eax
jmp 0x210176ca
mov edx, dword [ebp - 0x264]
imul edx, edx, 0x250
push edx
call fcn.2106e07d
add esp, 4
mov dword [ebp - 0x470], eax
mov eax, dword [ebp - 0x474]
mov ecx, dword [ebp - 0x470]
mov dword [eax + 4], ecx
cmp dword [ebp - 0x470], 0
jne 0x210175b8
push str.could_not_allocate_WIN32_FIND_DATA_array
call fcn.2101235d
add esp, 4
or eax, 0xffffffff
jmp 0x210176ca
mov edx, dword [ebp - 0x474]
mov eax, dword [edx + 4]
mov dword [ebp - 0x260], eax
mov ecx, dword [ebp - 0x260]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0xffffffff
jne 0x210175ee
xor eax, eax
jmp 0x210176ca
mov dword [ebp - 0x25c], 1
jmp 0x21017614
mov eax, dword [ebp - 0x260]
push eax
mov ecx, dword [ebp - 0x258]
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 0
je 0x210176b5
push 0x2108bf18
mov edx, dword [ebp - 0x260]
add edx, 0x2c
push edx
call fcn.2105e83a
add esp, 8
test eax, eax
je 0x21017657
push 0x2108bf1c
mov eax, dword [ebp - 0x260]
add eax, 0x2c
push eax
call fcn.2105e83a
add esp, 8
test eax, eax
jne 0x21017659
jmp 0x210175fa
mov ecx, dword [ebp - 0x260]
mov edx, dword [ecx]
and edx, 0x10
test edx, edx
je 0x21017672
cmp dword [ebp + 0x10], 0
jne 0x21017670
jmp 0x210175fa
jmp 0x2101767a
cmp dword [ebp + 0xc], 0
jne 0x2101767a
jmp 0x210175fa
mov eax, dword [ebp - 0x474]
mov ecx, dword [eax]
add ecx, 1
mov edx, dword [ebp - 0x474]
mov dword [edx], ecx
mov eax, dword [ebp - 0x260]
add eax, 0x250
mov dword [ebp - 0x260], eax
mov ecx, dword [ebp - 0x474]
mov edx, dword [ecx]
cmp edx, dword [ebp - 0x264]
jne 0x210176b0
jmp 0x210176b5
jmp 0x210175fa
mov eax, dword [ebp - 0x258]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [ebp - 0x474]
mov eax, dword [ecx]
mov esp, ebp
pop ebp
ret 0xc