Function at 0x10034900
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10064883
mov eax, dword fs:[0]
push eax
sub esp, 0x498
mov eax, dword [0x1007f070]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x298], edi
mov dword [ebp - 0x29c], 0
sub esp, 0x18
mov dword [ebp - 4], 0
mov ecx, esp
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
cmp dword [ecx + 0x14], 0x10
jb 0x10034964
mov eax, dword [ecx]
jmp 0x10034966
mov eax, ecx
push 0xffffffffffffffff
mov byte [eax], 0
lea eax, [ebp + 8]
push 0
push eax
call fcn.1000e1a0
lea ecx, [ebp - 0x28]
call fcn.100355f0
add esp, 0x18
xor eax, eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x18], eax
ja 0x100349fc
mov dword [edi + 0x14], 7
xor ecx, ecx
mov dword [edi + 0x10], eax
mov word [edi], ax
cmp word [0], ax
je 0x100349b6
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100349a7
sub ecx, edx
sar ecx, 1
push ecx
push 0
mov ecx, edi
call fcn.10019160
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x100349d5
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.10019260
mov ecx, dword [ebp + 0x1c]
xor eax, eax
mov dword [ebp - 0x14], 7
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], ax
cmp ecx, 0x10
jb 0x10034bfc
inc ecx
push ecx
jmp 0x10034bf1
push 0xffffffffffffffff
mov word [ebp - 0x40], ax
lea ecx, [ebp - 0x40]
push 0
lea eax, [ebp - 0x28]
mov dword [ebp - 0x2c], 7
push eax
mov dword [ebp - 0x30], 0
call fcn.10019340
push 4
push str..
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.100215d0
cmp dword [ebp - 0x14], 8
lea ebx, [ebp - 0x28]
lea eax, [ebp - 0x39c]
cmovae ebx, dword [ebp - 0x28]
mov dword [ebp - 0x3a0], eax
test ebx, ebx
jne 0x10034a56
xor eax, eax
mov dword [ebp - 0x3a0], eax
jmp 0x10034aa4
mov esi, ebx
lea ecx, [esi + 2]
nop dword [eax + eax]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x10034a60
sub esi, ecx
lea eax, [ebp - 0x39c]
sar esi, 1
push ecx
inc esi
lea ecx, [ebp - 0x3a0]
push eax
mov edx, esi
call fcn.1002b500
mov ecx, dword [ebp - 0x3a0]
lea edx, [esi + esi]
push edx
push ebx
call fcn.10013a70
push eax
call fcn.10013b30
mov eax, dword [ebp - 0x3a0]
add esp, 0x14
lea ecx, [ebp - 0x290]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov ebx, eax
lea ecx, [ebp - 0x39c]
mov eax, dword [ebp - 0x3a0]
cmp ebx, 0xffffffff
setne byte [ebp - 0x291]
cmp eax, ecx
je 0x10034ad7
push eax
call fcn.1004480c
add esp, 4
cmp byte [ebp - 0x291], 0
je 0x10034b77
mov esi, dword [sym.imp.KERNEL32.dll_lstrcmpW]
nop word [eax + eax]
push 0x100745dc
lea eax, [ebp - 0x264]
push eax
call esi
test eax, eax
je 0x10034b14
push 0x10074a6c
lea eax, [ebp - 0x264]
push eax
call esi
test eax, eax
jne 0x10034b28
lea eax, [ebp - 0x290]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x10034af0
jmp 0x10034b70
push 1
push 0x10072fb4
lea ecx, [ebp - 0x40]
call fcn.100215d0
lea eax, [ebp - 0x264]
push eax
lea ecx, [ebp - 0x4a4]
call fcn.100356d0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
push dword [eax]
call fcn.1001ee10
mov eax, dword [ebp - 0x4a4]
lea ecx, [ebp - 0x4a0]
cmp eax, ecx
je 0x10034b70
push eax
call fcn.1004480c
add esp, 4
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
xor eax, eax
mov dword [edi + 0x14], 7
mov dword [edi + 0x10], 0
mov ecx, edi
mov word [edi], ax
lea eax, [ebp - 0x40]
push eax
call fcn.100207e0
mov eax, dword [ebp - 0x2c]
cmp eax, 8
jb 0x10034baa
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.10019260
xor eax, eax
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x30], 0
cmp eax, 8
jb 0x10034bd3
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.10019260
xor eax, eax
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x18], 0
cmp eax, 0x10
jb 0x10034bfc
inc eax
push eax
push dword [ebp + 8]
lea ecx, [ebp + 8]
call fcn.1000e830
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10037fa1
mov esp, ebp
pop ebp
ret