Function at 0x10003010
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1004bda4
mov eax, dword fs:[0]
push eax
sub esp, 0x314
mov eax, dword [0x10062064]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x2ac], 0
call fcn.10008cc0
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0
call fcn.10008e60
mov byte [ebp - 4], 1
cmp dword [ebp - 0x48], 0
je 0x1000332c
cmp dword [ebp - 0x30], 0
je 0x1000332c
cmp dword [ebp - 0x44], 8
lea ecx, [ebp - 0x2a8]
lea eax, [ebp - 0x58]
cmovae eax, dword [ebp - 0x58]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov ebx, eax
mov dword [ebp - 0x2bc], ebx
test ebx, ebx
je 0x1000325e
xor eax, eax
mov dword [ebp - 0x18], 0
lea ecx, [ebp - 0x27c]
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100030c0
sub ecx, edx
lea eax, [ebp - 0x27c]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.10006410
mov eax, dword [ebp - 0x18]
xor edi, edi
test eax, eax
je 0x1000311b
nop dword [eax + eax]
cmp dword [ebp - 0x14], 8
lea edx, [ebp - 0x28]
lea esi, [ebp - 0x28]
cmovae edx, dword [ebp - 0x28]
cmovae esi, dword [ebp - 0x28]
movzx eax, word [edx + edi*2]
push eax
call fcn.10035b39
mov word [esi + edi*2], ax
add esp, 4
mov eax, dword [ebp - 0x18]
inc edi
cmp edi, eax
jb 0x100030f0
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x2c0], edx
test ecx, ecx
je 0x100032f5
cmp dword [ebp - 0x2c], 8
lea ebx, [ebp - 0x40]
mov esi, dword [ebp - 0x14]
lea edi, [ebp - 0x28]
cmovae ebx, dword [ebp - 0x40]
cmp esi, 8
mov dword [ebp - 0x2ac], ebx
cmovae edi, edx
mov dword [ebp - 0x2b8], edi
cmp ecx, eax
ja 0x100031fb
sub eax, ecx
mov ecx, edi
inc eax
lea edx, [edi + eax*2]
mov dword [ebp - 0x2b4], edx
movzx eax, word [ebx]
sub edx, ecx
sar edx, 1
mov edi, 0
movzx esi, ax
je 0x10003195
movzx eax, word [ecx]
cmp ax, si
je 0x10003193
cmp edx, 1
je 0x10003195
movzx eax, word [ecx + 2]
add ecx, 2
dec edx
cmp ax, si
jne 0x10003181
mov edi, ecx
mov ecx, edi
test ecx, ecx
je 0x100031f2
movzx edx, word [ecx]
mov eax, ebx
movzx esi, word [ebx]
mov edi, dword [ebp - 0x30]
cmp dx, si
jl 0x100031d4
mov ebx, ecx
sub ebx, dword [ebp - 0x2ac]
cmp dx, si
jg 0x100031ce
cmp edi, 1
je 0x100031df
movzx edx, word [eax + ebx + 2]
add eax, 2
dec edi
movzx esi, word [eax]
cmp dx, si
jge 0x100031b6
mov ebx, dword [ebp - 0x2ac]
mov edx, dword [ebp - 0x2b4]
add ecx, 2
jmp 0x10003168
sub ecx, dword [ebp - 0x2b8]
mov edx, dword [ebp - 0x2c0]
mov esi, dword [ebp - 0x14]
sar ecx, 1
jmp 0x100031fe
mov edx, dword [ebp - 0x2c0]
mov esi, dword [ebp - 0x14]
or ecx, 0xffffffff
cmp ecx, 0xffffffff
jne 0x100032f5
cmp esi, 8
jb 0x1000323b
lea ecx, [esi*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10003231
mov edx, dword [edx - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10003aad
push ecx
push edx
call fcn.1002f104
add esp, 8
mov ebx, dword [ebp - 0x2bc]
lea eax, [ebp - 0x2a8]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x100030a0
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.10002da0
test al, al
je 0x10003a9e
mov esi, dword [ebp - 0x18]
test esi, esi
je 0x10003914
xor edi, edi
test esi, esi
je 0x100032cb
nop word [eax + eax]
cmp dword [ebp - 0x14], 8
lea edx, [ebp - 0x28]
lea esi, [ebp - 0x28]
cmovae edx, dword [ebp - 0x28]
cmovae esi, dword [ebp - 0x28]
movzx eax, byte [edx + edi*2]
push eax
call fcn.10035b39
mov word [esi + edi*2], ax
add esp, 4
mov esi, dword [ebp - 0x18]
inc edi
cmp edi, esi
jb 0x100032a0
lea ecx, [ebp - 0x2d8]
call fcn.10008f90
mov edi, dword [ebp - 0x14]
mov ebx, eax
mov dword [ebp - 0x2ac], eax
mov ecx, dword [ebx + 0x10]
mov dword [ebp - 0x2bc], ecx
test ecx, ecx
jne 0x1000335c
mov bl, 1
jmp 0x10003430
mov ecx, dword [ebp - 0x14]
cmp ecx, 8
jb 0x1000332c
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10003322
mov edx, dword [edx - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10003aad
push ecx
push edx
call fcn.1002f104
add esp, 8
xor bl, bl
lea ecx, [ebp - 0x40]
call fcn.10005df0
lea ecx, [ebp - 0x58]
call fcn.10005df0
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1002f0be
mov esp, ebp
pop ebp
ret
cmp dword [ebx + 0x14], 8
jb 0x1000336a
mov ebx, dword [ebx]
mov dword [ebp - 0x2ac], ebx
cmp edi, 8
lea edx, [ebp - 0x28]
cmovae edx, dword [ebp - 0x28]
mov dword [ebp - 0x2b4], edx
cmp ecx, esi
ja 0x10003427
mov eax, esi
sub eax, ecx
mov ecx, edx
inc eax
lea esi, [edx + eax*2]
mov dword [ebp - 0x2b8], esi
movzx eax, word [ebx]
mov edx, esi
sub edx, ecx
movzx esi, ax
sar edx, 1
mov edi, 0
je 0x100033c4
movzx eax, word [ecx]
cmp ax, si
je 0x100033c2
nop dword [eax]
cmp edx, 1
je 0x100033c4
movzx eax, word [ecx + 2]
add ecx, 2
dec edx
cmp ax, si
jne 0x100033b0
mov edi, ecx
mov ecx, edi
test ecx, ecx
je 0x10003421
movzx edx, word [ecx]
mov eax, ebx
movzx esi, word [ebx]
mov edi, dword [ebp - 0x2bc]
cmp dx, si
jl 0x10003406
mov ebx, ecx
sub ebx, dword [ebp - 0x2ac]
cmp dx, si
jg 0x10003400
cmp edi, 1
je 0x10003411
movzx edx, word [ebx + eax + 2]
add eax, 2
dec edi
movzx esi, word [eax]
cmp dx, si
jge 0x100033e8
mov ebx, dword [ebp - 0x2ac]
mov esi, dword [ebp - 0x2b8]
add ecx, 2
jmp 0x10003392
sub ecx, dword [ebp - 0x2b4]
mov esi, dword [ebp - 0x18]
mov edi, dword [ebp - 0x14]
sar ecx, 1
jmp 0x1000342a
mov esi, dword [ebp - 0x18]
mov edi, dword [ebp - 0x14]
or ecx, 0xffffffff
cmp ecx, 0xffffffff
setne bl
mov edx, dword [ebp - 0x2c4]
cmp edx, 8
jb 0x10003470
mov ecx, dword [ebp - 0x2d8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10003466
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10003ab2
push edx
push ecx
call fcn.1002f104
add esp, 8
test bl, bl
jne 0x10003a9e
lea ecx, [ebp - 0x2d8]
call fcn.100091f0
mov ebx, eax
mov dword [ebp - 0x2ac], eax
mov ecx, dword [ebx + 0x10]
mov dword [ebp - 0x2bc], ecx
test ecx, ecx
jne 0x1000349f
mov bl, 1
jmp 0x10003570
cmp dword [ebx + 0x14], 8
jb 0x100034ad
mov ebx, dword [ebx]
mov dword [ebp - 0x2ac], ebx
cmp edi, 8
lea edx, [ebp - 0x28]
cmovae edx, dword [ebp - 0x28]
mov dword [ebp - 0x2b4], edx
cmp ecx, esi
ja 0x10003567
mov eax, esi
sub eax, ecx
mov ecx, edx
inc eax
lea esi, [edx + eax*2]
mov dword [ebp - 0x2b8], esi
movzx eax, word [ebx]
mov edx, esi
sub edx, ecx
movzx esi, ax
sar edx, 1
mov edi, 0
je 0x10003504
movzx eax, word [ecx]
cmp ax, si
je 0x10003502
cmp edx, 1
je 0x10003504
movzx eax, word [ecx + 2]
add ecx, 2
dec edx
cmp ax, si
jne 0x100034f0
mov edi, ecx
mov ecx, edi
test ecx, ecx
je 0x10003561
movzx edx, word [ecx]
mov eax, ebx
movzx esi, word [ebx]
mov edi, dword [ebp - 0x2bc]
cmp dx, si
jl 0x10003546
mov ebx, ecx
sub ebx, dword [ebp - 0x2ac]
cmp dx, si
jg 0x10003540
cmp edi, 1
je 0x10003551
movzx edx, word [ebx + eax + 2]
add eax, 2
dec edi
movzx esi, word [eax]
cmp dx, si
jge 0x10003528
mov ebx, dword [ebp - 0x2ac]
mov esi, dword [ebp - 0x2b8]
add ecx, 2
jmp 0x100034d5
sub ecx, dword [ebp - 0x2b4]
mov esi, dword [ebp - 0x18]
mov edi, dword [ebp - 0x14]
sar ecx, 1
jmp 0x1000356a
mov esi, dword [ebp - 0x18]
mov edi, dword [ebp - 0x14]
or ecx, 0xffffffff
cmp ecx, 0xffffffff
setne bl
mov edx, dword [ebp - 0x2c4]
cmp edx, 8
jb 0x100035b0
mov ecx, dword [ebp - 0x2d8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100035a6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10003ab7
push edx
push ecx
call fcn.1002f104
add esp, 8
test bl, bl
jne 0x10003a9e
lea ecx, [ebp - 0x2d8]
call fcn.10008e60
mov ebx, eax
mov dword [ebp - 0x2ac], eax
mov ecx, dword [ebx + 0x10]
mov dword [ebp - 0x2bc], ecx
test ecx, ecx
jne 0x100035df
mov bl, 1
jmp 0x100036b0
cmp dword [ebx + 0x14], 8
jb 0x100035ed
mov ebx, dword [ebx]
mov dword [ebp - 0x2ac], ebx
cmp edi, 8
lea edx, [ebp - 0x28]
cmovae edx, dword [ebp - 0x28]
mov dword [ebp - 0x2b4], edx
cmp ecx, esi
ja 0x100036a7
mov eax, esi
sub eax, ecx
mov ecx, edx
inc eax
lea esi, [edx + eax*2]
mov dword [ebp - 0x2b8], esi
movzx eax, word [ebx]
mov edx, esi
sub edx, ecx
movzx esi, ax
sar edx, 1
mov edi, 0
je 0x10003644
movzx eax, word [ecx]
cmp ax, si
je 0x10003642
cmp edx, 1
je 0x10003644
movzx eax, word [ecx + 2]
add ecx, 2
dec edx
cmp ax, si
jne 0x10003630
mov edi, ecx
mov ecx, edi
test ecx, ecx
je 0x100036a1
movzx edx, word [ecx]
mov eax, ebx
movzx esi, word [ebx]
mov edi, dword [ebp - 0x2bc]
cmp dx, si
jl 0x10003686
mov ebx, ecx
sub ebx, dword [ebp - 0x2ac]
cmp dx, si
jg 0x10003680
cmp edi, 1
je 0x10003691
movzx edx, word [ebx + eax + 2]
add eax, 2
dec edi
movzx esi, word [eax]
cmp dx, si
jge 0x10003668
mov ebx, dword [ebp - 0x2ac]
mov esi, dword [ebp - 0x2b8]
add ecx, 2
jmp 0x10003615
sub ecx, dword [ebp - 0x2b4]
mov esi, dword [ebp - 0x18]
mov edi, dword [ebp - 0x14]
sar ecx, 1
jmp 0x100036aa
mov esi, dword [ebp - 0x18]
mov edi, dword [ebp - 0x14]
or ecx, 0xffffffff
cmp ecx, 0xffffffff
setne bl
mov edx, dword [ebp - 0x2c4]
cmp edx, 8
jb 0x100036f0
mov ecx, dword [ebp - 0x2d8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100036e6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10003abc
push edx
push ecx
call fcn.1002f104
add esp, 8
test bl, bl
jne 0x10003a9e
lea ecx, [ebp - 0x2d8]
call fcn.10009450
mov ebx, eax
mov dword [ebp - 0x2ac], eax
mov ecx, dword [ebx + 0x10]
mov dword [ebp - 0x2bc], ecx
test ecx, ecx
jne 0x1000371f
mov bl, 1
jmp 0x100037f0
cmp dword [ebx + 0x14], 8
jb 0x1000372d
mov ebx, dword [ebx]
mov dword [ebp - 0x2ac], ebx
cmp edi, 8
lea edx, [ebp - 0x28]
cmovae edx, dword [ebp - 0x28]
mov dword [ebp - 0x2b4], edx
cmp ecx, esi
ja 0x100037e7
mov eax, esi
sub eax, ecx
mov ecx, edx
inc eax
lea esi, [edx + eax*2]
mov dword [ebp - 0x2b8], esi
movzx eax, word [ebx]
mov edx, esi
sub edx, ecx
movzx esi, ax
sar edx, 1
mov edi, 0
je 0x10003784
movzx eax, word [ecx]
cmp ax, si
je 0x10003782
cmp edx, 1
je 0x10003784
movzx eax, word [ecx + 2]
add ecx, 2
dec edx
cmp ax, si
jne 0x10003770
mov edi, ecx
mov ecx, edi
test ecx, ecx
je 0x100037e1
movzx edx, word [ecx]
mov eax, ebx
movzx esi, word [ebx]
mov edi, dword [ebp - 0x2bc]
cmp dx, si
jl 0x100037c6
mov ebx, ecx
sub ebx, dword [ebp - 0x2ac]
cmp dx, si
jg 0x100037c0
cmp edi, 1
je 0x100037d1
movzx edx, word [eax + ebx + 2]
add eax, 2
dec edi
movzx esi, word [eax]
cmp dx, si
jge 0x100037a8
mov ebx, dword [ebp - 0x2ac]
mov esi, dword [ebp - 0x2b8]
add ecx, 2
jmp 0x10003755
sub ecx, dword [ebp - 0x2b4]
mov esi, dword [ebp - 0x18]
mov edi, dword [ebp - 0x14]
sar ecx, 1
jmp 0x100037ea
mov esi, dword [ebp - 0x18]
mov edi, dword [ebp - 0x14]
or ecx, 0xffffffff
cmp ecx, 0xffffffff
setne bl
lea ecx, [ebp - 0x2d8]
call fcn.10005df0
test bl, bl
jne 0x10003a9e
lea ecx, [ebp - 0x2d8]
call fcn.10009580
mov dword [ebp - 0x2ac], eax
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x2bc], ecx
test ecx, ecx
jne 0x10003828
mov bl, 1
jmp 0x10003901
cmp dword [eax + 0x14], 8
jb 0x10003836
mov eax, dword [eax]
mov dword [ebp - 0x2ac], eax
cmp edi, 8
lea edx, [ebp - 0x28]
cmovae edx, dword [ebp - 0x28]
mov dword [ebp - 0x2b4], edx
cmp ecx, esi
ja 0x100038f8
movzx ebx, word [eax]
sub esi, ecx
inc esi
mov dword [ebp - 0x2c0], ebx
mov ecx, edx
lea esi, [edx + esi*2]
mov dword [ebp - 0x2b8], esi
mov edx, esi
mov edi, 0
sub edx, ecx
movzx esi, bx
sar edx, 1
je 0x1000389a
movzx eax, word [ecx]
cmp ax, si
je 0x10003892
nop dword [eax]
cmp edx, 1
je 0x10003894
movzx eax, word [ecx + 2]
add ecx, 2
dec edx
cmp ax, si
jne 0x10003880
mov edi, ecx
mov eax, dword [ebp - 0x2ac]
mov ecx, edi
test ecx, ecx
je 0x100038f8
movzx edx, word [ecx]
mov edi, dword [ebp - 0x2bc]
movzx esi, bx
cmp dx, si
jl 0x100038da
mov ebx, ecx
sub ebx, dword [ebp - 0x2ac]
cmp dx, si
jg 0x100038d4
cmp edi, 1
je 0x100038ee
movzx edx, word [eax + ebx + 2]
add eax, 2
dec edi
movzx esi, word [eax]
cmp dx, si
jge 0x100038bc
mov ebx, dword [ebp - 0x2c0]
mov eax, dword [ebp - 0x2ac]
add ecx, 2
mov esi, dword [ebp - 0x2b8]
jmp 0x10003865
sub ecx, dword [ebp - 0x2b4]
sar ecx, 1
jmp 0x100038fb
or ecx, 0xffffffff
cmp ecx, 0xffffffff
setne bl
lea ecx, [ebp - 0x2d8]
call fcn.10005df0
test bl, bl
jne 0x10003a9e
lea ecx, [ebp - 0x2f0]
call fcn.10009ca0
mov byte [ebp - 4], 3
mov ebx, 1
push eax
mov dword [ebp - 0x2ac], ebx
call fcn.10003ad0
test al, al
je 0x10003966
lea ecx, [ebp - 0x2d8]
call fcn.1000a230
mov dword [ebp - 4], 4
mov ebx, 3
push eax
mov dword [ebp - 0x2ac], ebx
call fcn.10003ad0
mov byte [ebp - 0x2ad], 0
test al, al
jne 0x1000396d
mov byte [ebp - 0x2ad], 1
test bl, 2
je 0x10003980
lea ecx, [ebp - 0x2d8]
and ebx, 0xfffffffd
call fcn.10005df0
lea ecx, [ebp - 0x2f0]
mov dword [ebp - 4], 2
and ebx, 0xfffffffe
call fcn.10005df0
cmp byte [ebp - 0x2ad], 0
jne 0x10003a9e
lea ecx, [ebp - 0x320]
call fcn.1000ae00
mov byte [ebp - 4], 5
or ebx, 4
push eax
mov dword [ebp - 0x2ac], ebx
call fcn.10004580
test al, al
je 0x10003a3e
lea ecx, [ebp - 0x308]
call fcn.1000b330
mov dword [ebp - 4], 6
or ebx, 8
push eax
mov dword [ebp - 0x2ac], ebx
call fcn.10004580
test al, al
je 0x10003a3e
lea ecx, [ebp - 0x2d8]
call fcn.1000b860
mov dword [ebp - 4], 7
or ebx, 0x10
push eax
mov dword [ebp - 0x2ac], ebx
call fcn.10004580
test al, al
je 0x10003a3e
lea ecx, [ebp - 0x2f0]
call fcn.1000bd90
mov dword [ebp - 4], 8
or ebx, 0x20
push eax
mov dword [ebp - 0x2ac], ebx
call fcn.10004580
mov byte [ebp - 0x2ad], 0
test al, al
jne 0x10003a45
mov byte [ebp - 0x2ad], 1
test bl, 0x20
je 0x10003a58
lea ecx, [ebp - 0x2f0]
and ebx, 0xffffffdf
call fcn.10005df0
test bl, 0x10
je 0x10003a6b
lea ecx, [ebp - 0x2d8]
and ebx, 0xffffffef
call fcn.10005df0
test bl, 8
je 0x10003a7b
lea ecx, [ebp - 0x308]
call fcn.10005df0
lea ecx, [ebp - 0x320]
call fcn.10005df0
cmp byte [ebp - 0x2ad], 0
jne 0x10003a9e
lea ecx, [ebp - 0x28]
mov bl, 1
call fcn.10005df0
jmp 0x1000332e
lea ecx, [ebp - 0x28]
xor bl, bl
call fcn.10005df0
jmp 0x1000332e
call fcn.10035ebd
call fcn.10035ebd
call fcn.10035ebd
call fcn.10035ebd
int3