Function at 0x1034b94
Capabilities:
Enumerate files on windows

Disassembly:
push 0x2a8
mov eax, 0x1039f39
call fcn.01037352
mov esi, ecx
lea ecx, [ebp - 0x2b4]
call fcn.01014810
xor ebx, ebx
lea ecx, [ebp - 0x2a8]
mov dword [ebp - 4], ebx
call fcn.01014810
or dword [ebp - 0x270], 0xffffffff
mov dword [ebp - 0x284], ebx
mov dword [ebp - 0x280], ebx
mov dword [ebp - 0x27c], ebx
mov dword [ebp - 0x278], ebx
mov dword [ebp - 0x274], ebx
lea ecx, [ebp - 0x298]
mov byte [ebp - 4], 2
call fcn.01014810
lea ecx, [esi + 0x38]
mov byte [ebp - 4], 3
mov dword [ebp - 0x264], ebx
mov dword [ebp - 0x29c], ecx
call fcn.01035572
push eax
lea eax, [ebp - 0x2b4]
push 0x1006bf4
push eax
call fcn.010157db
mov edi, eax
add esp, 0xc
cmp edi, ebx
jge 0x1034c58
mov eax, dword [section..data]
cmp eax, section..data
je 0x1034f04
test byte [eax + 0x1c], 1
je 0x1034f04
push 0x1006a98
push 0xc
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010078b5
jmp 0x1034f04
push ebx
push ebx
push 1
lea eax, [ebp - 0x260]
push eax
push ebx
lea ecx, [ebp - 0x2b4]
call fcn.01015d45
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x1034d57
push 4
pop esi
mov ecx, 0x1003784
lea eax, [ebp - 0x234]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x1034cb3
test dx, dx
je 0x1034caf
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x1034cb3
add eax, esi
add ecx, esi
test dx, dx
jne 0x1034c8f
xor eax, eax
jmp 0x1034cb8
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1034d3a
mov ecx, 0x100377c
lea eax, [ebp - 0x234]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x1034ceb
test dx, dx
je 0x1034ce7
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x1034ceb
add eax, esi
add ecx, esi
test dx, dx
jne 0x1034cc7
xor eax, eax
jmp 0x1034cf0
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1034d3a
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp - 0x298]
call fcn.01014c4a
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x288], eax
lea eax, [ebp - 0x298]
push eax
lea ecx, [ebp - 0x284]
call fcn.01034a86
mov edi, eax
test edi, edi
jl 0x1034eaf
lea eax, [ebp - 0x260]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x1034c84
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [ebp - 0x27c]
cmp ecx, dword [ebp + 8]
jb 0x1034d6e
mov eax, ecx
sub eax, dword [ebp + 8]
inc eax
mov dword [ebp - 0x264], eax
test ecx, ecx
jbe 0x1034f02
cmp dword [ebp - 0x264], 0
jbe 0x1034f02
lea eax, [ebp - 0x268]
push eax
push 0
lea ecx, [ebp - 0x284]
call fcn.01033fde
mov edi, eax
test edi, edi
jl 0x1034f3c
mov esi, dword [ebp - 0x268]
push esi
lea ecx, [ebp - 0x298]
call fcn.0101565e
mov edi, eax
test edi, edi
jl 0x1034f63
mov eax, dword [esi + 0xc]
and dword [ebp - 0x26c], 0
xor ebx, ebx
mov dword [ebp - 0x28c], eax
mov eax, dword [esi + 0x10]
inc ebx
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x27c], ebx
jbe 0x1034e3c
lea eax, [ebp - 0x268]
push eax
push ebx
lea ecx, [ebp - 0x284]
call fcn.01033fde
mov edi, dword [ebp - 0x268]
lea esi, [edi + 0xc]
push esi
lea eax, [ebp - 0x28c]
push eax
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
cmp eax, 1
jne 0x1034e33
push edi
lea ecx, [ebp - 0x298]
call fcn.0101565e
mov eax, dword [esi]
mov dword [ebp - 0x28c], eax
mov eax, dword [esi + 4]
mov dword [ebp - 0x288], eax
mov dword [ebp - 0x26c], ebx
inc ebx
cmp ebx, dword [ebp - 0x27c]
jb 0x1034de1
lea ecx, [ebp - 0x298]
call fcn.01015d45
mov ecx, dword [ebp - 0x29c]
push eax
call fcn.01035572
push eax
lea eax, [ebp - 0x2a8]
push 0x1003198
push eax
call fcn.010157db
mov edi, eax
add esp, 0x10
test edi, edi
jl 0x1034f81
push 0
lea ecx, [ebp - 0x2a8]
call fcn.01015d45
push eax
call fcn.01016970
test eax, eax
jge 0x1034ed4
mov eax, dword [section..data]
cmp eax, section..data
je 0x1034eda
test byte [eax + 0x1c], 2
je 0x1034eda
push 0x1006a98
push 0x11
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010078b5
jmp 0x1034eda
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [section..data]
cmp eax, section..data
je 0x1034f04
test byte [eax + 0x1c], 1
je 0x1034f04
push 0x1006a98
push 0xd
jmp 0x1034c48
dec dword [ebp - 0x264]
push dword [ebp - 0x26c]
lea ecx, [ebp - 0x284]
call fcn.01034b44
mov edi, eax
test edi, edi
jl 0x1034fa7
cmp dword [ebp - 0x27c], 0
ja 0x1034d76
xor edi, edi
lea ecx, [ebp - 0x298]
mov byte [ebp - 4], 2
call fcn.01014822
mov byte [ebp - 4], 1
cmp dword [ebp - 0x284], 0
je 0x1034fcb
push 0
push dword [ebp - 0x284]
lea ecx, [ebp - 0x284]
call fcn.01034adb
jmp 0x1034fd0
mov eax, dword [section..data]
cmp eax, section..data
je 0x1034f04
test byte [eax + 0x1c], 1
je 0x1034f04
push edi
push 0x1006a98
push 0xe
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01008600
jmp 0x1034f04
mov eax, dword [section..data]
cmp eax, section..data
je 0x1034f04
test byte [eax + 0x1c], 1
je 0x1034f04
push 0x1006a98
push 0xf
jmp 0x1034c48
mov eax, dword [section..data]
cmp eax, section..data
je 0x1034f04
test byte [eax + 0x1c], 1
je 0x1034f04
push 0x1006a98
push 0x10
jmp 0x1034c48
mov eax, dword [section..data]
cmp eax, section..data
je 0x1034f04
test byte [eax + 0x1c], 1
je 0x1034f04
push edi
push 0x1006a98
push 0x12
jmp 0x1034f56
mov eax, 0x8002000b
test eax, eax
jge 0x1034f17
lea ecx, [ebp - 0x2a8]
mov byte [ebp - 4], 0
call fcn.01014822
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2b4]
call fcn.01014822
mov eax, edi
call fcn.010373e4
ret 4