Function at 0x11dc65e0
Capabilities:
Enumerate files on windows

Disassembly:
sub esp, 0xf00
push ebx
push ebp
mov ebp, dword [esp + 0xf0c]
xor ebx, ebx
cmp ebp, ebx
push esi
je 0x11dc68aa
push ebp
call fcn.11e67d05
mov esi, eax
add esp, 4
cmp esi, ebx
je 0x11dc68aa
cmp esi, 0x104
jae 0x11dc68aa
push edi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x692]
mov word [esp + 0x690], bx
push esi
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x694]
push ebp
push eax
call fcn.11e674bf
lea eax, [esp + esi*2 + 0x69c]
add esp, 0xc
cmp word [eax - 2], 0x5c
je 0x11dc6659
mov word [eax], 0x5c
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x48a]
mov word [esp + 0x488], bx
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x690]
push 0x104
lea edx, [esp + 0x48c]
push ecx
push edx
stosw word es:[edi], ax
call fcn.11e674bf
lea eax, [esp + 0x494]
push 0x120afe18
push eax
call fcn.11e67470
mov ecx, 0x93
xor eax, eax
lea edi, [esp + 0x8b0]
mov dword [esp + 0x8ac], ebx
rep stosd dword es:[edi], eax
add esp, 0x14
lea ecx, [esp + 0x898]
lea edx, [esp + 0x488]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp eax, 0xffffffff
mov dword [esp + 0x10], eax
je 0x11dc6898
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x7a]
mov word [esp + 0x78], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x282]
mov word [esp + 0x280], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x82
xor eax, eax
lea edi, [esp + 0x78]
push 0x104
rep stosd dword es:[edi], eax
lea eax, [esp + 0x7c]
push ebp
push eax
call fcn.11e674bf
lea ecx, [esp + 0x8d0]
lea edx, [esp + 0x84]
push ecx
push edx
call fcn.11e67470
mov ecx, 0x82
xor eax, eax
lea edi, [esp + 0x294]
rep stosd dword es:[edi], eax
lea eax, [esp + 0x8c]
push eax
call fcn.11e67d05
sub eax, 4
lea ecx, [esp + 0x90]
push eax
lea edx, [esp + 0x29c]
push ecx
push edx
call fcn.11e674bf
lea eax, [esp + 0x2a4]
push 0x120afe0c
push eax
call fcn.11e67470
mov ecx, 8
xor eax, eax
lea edi, [esp + 0x44]
mov dword [esp + 0x40], ebx
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x40]
lea edx, [esp + 0x2ac]
push ecx
push ebx
push edx
call fcn.11dbbeb0
add esp, 0x38
test eax, eax
je 0x11dc6876
cmp dword [esp + 0x14], 0xffffffff
je 0x11dc6876
cmp dword [esp + 0x34], ebx
je 0x11dc6876
mov ecx, 0x109
xor eax, eax
lea edi, [esp + 0xaec]
mov dword [esp + 0xae8], ebx
rep stosd dword es:[edi], eax
mov ecx, 0xf
lea edi, [esp + 0x3c]
mov dword [esp + 0x38], ebx
lea edx, [esp + 0xae8]
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0xf18]
lea ecx, [esp + 0x38]
push eax
push ecx
lea eax, [esp + 0x80]
push edx
push eax
call fcn.11def400
add esp, 0x10
test eax, eax
je 0x11dc6876
lea ecx, [esp + 0xd08]
push ecx
mov ecx, 0x1212b5c0
call fcn.11d72380
test eax, eax
je 0x11dc6876
mov eax, dword [esp + 0x3c]
xor edx, edx
cmp eax, 1
lea eax, [esp + 0xd08]
sete dl
push eax
mov esi, edx
call fcn.11ee56b0
add esp, 4
cmp eax, ebx
jne 0x11dc6853
cmp esi, ebx
je 0x11dc6876
mov ecx, dword [esp + 0xf1c]
lea edx, [esp + 0x78]
push ecx
push edx
push eax
lea eax, [esp + 0xd14]
lea ecx, [esp + 0x28c]
push eax
push ecx
call fcn.11dc6230
mov esi, dword [esp + 0x10]
lea edx, [esp + 0x898]
push edx
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x11dc670a
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0xf00
ret 0xc
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0xf00
ret 0xc