Function at 0x73f11cdf
Capabilities:
Enumerate files on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xa8c
mov eax, dword [0x73f3e530]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
push esi
push edi
push 0x202
mov dword [ebp - 0xa8c], eax
mov edi, edx
lea eax, [ebp - 0x630]
mov ebx, ecx
push 0
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
pop ecx
pop ecx
lea edx, [ebp - 0x428]
mov ecx, ebx
call fcn.73f18d1f
mov edx, 0x105
lea ecx, [ebp - 0x428]
call fcn.73f08e6e
test eax, eax
je 0x73f11f80
push 0x73dbb9d8
call fcn.73ee45ae
mov dword [esp], 0x250
lea eax, [ebp - 0xa88]
push 0
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
add esp, 0xc
lea eax, [ebp - 0xa88]
push eax
lea eax, [ebp - 0x428]
push eax
call dword [sym.imp.api_ms_win_core_file_l1_1_0.dll_FindFirstFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x73f11f80
push ecx
lea edx, [ebp - 0x428]
mov ecx, ebx
call fcn.73f18d1f
mov ecx, 0x101
lea eax, [ebp - 0x838]
push ecx
push eax
push ecx
lea eax, [ebp - 0x630]
push eax
xor eax, eax
push eax
push eax
push eax
push eax
lea eax, [ebp - 0x428]
push eax
call dword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o__wsplitpath_s]
add esp, 0x24
mov ecx, 0x73dbb708
lea eax, [ebp - 0xa5c]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x73f11de9
test dx, dx
je 0x73f11de5
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x73f11de9
add eax, 4
add ecx, 4
test dx, dx
jne 0x73f11dc3
xor eax, eax
jmp 0x73f11dee
sbb eax, eax
or eax, 1
test eax, eax
je 0x73f11efc
mov ecx, 0x73dbb70c
lea eax, [ebp - 0xa5c]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x73f11e27
test dx, dx
je 0x73f11e23
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x73f11e27
add eax, 4
add ecx, 4
test dx, dx
jne 0x73f11e01
xor eax, eax
jmp 0x73f11e2c
sbb eax, eax
or eax, 1
test eax, eax
je 0x73f11efc
lea eax, [ebp - 0x428]
mov edx, 0x105
push eax
lea ecx, [ebp - 0x218]
call fcn.73ee45dd
pop ecx
mov edx, 0x105
lea ecx, [ebp - 0x218]
call fcn.73f08e6e
test eax, eax
je 0x73f11efc
lea eax, [ebp - 0xa5c]
push eax
call fcn.73ee45ae
pop ecx
lea ecx, [ebp - 0x218]
call fcn.73f01c94
test eax, eax
je 0x73f11ec8
mov edx, 0x105
lea ecx, [ebp - 0x218]
call fcn.73f08e6e
test eax, eax
je 0x73f11efc
lea eax, [ebp - 0x630]
push eax
call fcn.73ee45ae
lea eax, [ebp - 0x838]
mov edx, 0x105
push eax
lea ecx, [ebp - 0x218]
call fcn.73ee45ae
pop ecx
pop ecx
lea ecx, [ebp - 0x218]
call fcn.73f01c78
test eax, eax
je 0x73f11efc
lea eax, [ebp - 0x218]
mov edx, 0x105
push eax
mov ecx, edi
call fcn.73ee45dd
mov eax, dword [ebp - 0xa8c]
pop ecx
test eax, eax
je 0x73f11f12
mov edx, edi
mov ecx, eax
call fcn.73f131ce
test eax, eax
je 0x73f11f93
xor eax, eax
mov word [edi], ax
lea eax, [ebp - 0xa88]
push eax
push esi
call dword [sym.imp.api_ms_win_core_file_l1_1_0.dll_FindNextFileW]
test eax, eax
jne 0x73f11db8
push esi
call dword [sym.imp.api_ms_win_core_file_l1_1_0.dll_FindClose]
push ebx
mov ebx, 0x105
lea ecx, [ebp - 0x218]
mov edx, ebx
call fcn.73ee45dd
pop ecx
mov edx, ebx
lea ecx, [ebp - 0x218]
call fcn.73f08e6e
test eax, eax
je 0x73f11f80
lea eax, [ebp - 0x630]
push eax
call fcn.73ee45ae
lea eax, [ebp - 0x838]
mov edx, ebx
push eax
lea ecx, [ebp - 0x218]
call fcn.73ee45ae
pop ecx
pop ecx
lea ecx, [ebp - 0x218]
call fcn.73f01c78
test eax, eax
je 0x73f11f80
lea eax, [ebp - 0x218]
mov edx, ebx
push eax
mov ecx, edi
call fcn.73ee45dd
pop ecx
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.73ddffa0
leave
ret 8
push esi
call dword [sym.imp.api_ms_win_core_file_l1_1_0.dll_FindClose]
xor eax, eax
inc eax
jmp 0x73f11f82