Function at 0x100a8f60
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1ac
mov eax, dword [0x100fc008]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x18]
push ebx
push esi
push edi
lea edx, [eax - 1]
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x168], 0xf
mov byte [ebp - 0x17c], 0
cmp eax, edx
jb 0x100a9476
sub eax, edx
mov ecx, 1
cmp eax, ecx
cmovb ecx, eax
cmp dword [ebp + 0x1c], 0x10
lea eax, [ebp + 8]
cmovae eax, dword [ebp + 8]
push ecx
add eax, edx
lea ecx, [ebp - 0x17c]
push eax
call fcn.100af160
mov edx, 0x100f72fc
lea ecx, [ebp - 0x17c]
call fcn.100af4e0
mov edx, dword [ebp - 0x168]
mov bl, al
cmp edx, 0x10
jb 0x100a9011
mov ecx, dword [ebp - 0x17c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100a9007
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100a9485
push edx
push ecx
call fcn.100baf94
add esp, 8
mov eax, dword [ebp + 0x18]
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0xc], 0
mov dword [ebp - 8], 0xf
mov byte [ebp - 0x1c], 0
test bl, bl
jne 0x100a90df
add eax, 2
push eax
call fcn.100b1a80
cmp dword [ebp + 0x1c], 0x10
lea ecx, [ebp + 8]
mov esi, dword [ebp - 8]
mov eax, esi
cmovae ecx, dword [ebp + 8]
mov edi, dword [ebp + 0x18]
mov edx, dword [ebp - 0xc]
sub eax, edx
push edi
push ecx
cmp edi, eax
ja 0x100a9079
lea eax, [edi + edx]
cmp esi, 0x10
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x1c]
cmovae eax, dword [ebp - 0x1c]
lea esi, [eax + edx]
push esi
call fcn.100be470
add esp, 0xc
mov byte [esi + edi], bl
jmp 0x100a908f
mov byte [ebp - 0x164], 0
lea ecx, [ebp - 0x1c]
push dword [ebp - 0x164]
push edi
call fcn.100b0560
push 0x100f7434
lea ecx, [ebp - 0x1c]
call fcn.100ae850
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp + 8]
call fcn.100ae910
mov edx, dword [ebp - 8]
cmp edx, 0x10
jb 0x100a9189
mov ecx, dword [ebp - 0x1c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100a917f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100a947b
jmp 0x100a917f
inc eax
push eax
call fcn.100b1a80
cmp dword [ebp + 0x1c], 0x10
lea ecx, [ebp + 8]
mov esi, dword [ebp - 8]
mov eax, esi
cmovae ecx, dword [ebp + 8]
mov edi, dword [ebp + 0x18]
mov edx, dword [ebp - 0xc]
sub eax, edx
push edi
push ecx
cmp edi, eax
ja 0x100a9126
lea eax, [edx + edi]
cmp esi, 0x10
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x1c]
cmovae eax, dword [ebp - 0x1c]
lea esi, [eax + edx]
push esi
call fcn.100be470
add esp, 0xc
mov byte [esi + edi], 0
jmp 0x100a913c
mov byte [ebp - 0x164], 0
lea ecx, [ebp - 0x1c]
push dword [ebp - 0x164]
push edi
call fcn.100b0560
push 0x100f1ba8
lea ecx, [ebp - 0x1c]
call fcn.100ae850
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp + 8]
call fcn.100ae910
mov edx, dword [ebp - 8]
cmp edx, 0x10
jb 0x100a9189
mov ecx, dword [ebp - 0x1c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100a917f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100a9480
push edx
push ecx
call fcn.100baf94
add esp, 8
cmp dword [ebp + 0x1c], 0x10
lea ecx, [ebp - 0x160]
lea eax, [ebp + 8]
cmovae eax, dword [ebp + 8]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov ebx, dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov edi, eax
nop word [eax + eax]
lea ecx, [ebp - 0x134]
mov dword [ebp - 0xc], 0
mov dword [ebp - 8], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0x1c], 0
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a91d0
sub ecx, edx
lea eax, [ebp - 0x134]
push ecx
push eax
lea ecx, [ebp - 0x1c]
call fcn.100af160
test byte [ebp - 0x160], 0x10
jne 0x100a93ec
sub esp, 0x18
lea eax, [ebp - 0x1c]
mov ecx, esp
push eax
call fcn.100ae9d0
sub esp, 0x18
mov esi, esp
sub esp, 0x18
mov ecx, esp
push 0x100fe328
call fcn.100ae9d0
mov ecx, esi
call fcn.10083b80
add esp, 0x18
call fcn.100852b0
add esp, 0x30
test eax, eax
jne 0x100a93ec
sub esp, 0x18
lea eax, [ebp - 0x1c]
mov ecx, esp
push eax
call fcn.100ae9d0
sub esp, 0x18
mov esi, esp
sub esp, 0x18
mov ecx, esp
push 0x100fe3d0
call fcn.100ae9d0
mov ecx, esi
call fcn.10083b80
add esp, 0x18
call fcn.100852b0
add esp, 0x30
test eax, eax
jne 0x100a93ec
mov dword [ebp - 0x184], eax
mov byte [ebp - 0x194], al
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x180], 0xf
lea ecx, [eax - 2]
cmp eax, ecx
cmovb ecx, eax
cmp dword [ebp + 0x1c], 0x10
lea eax, [ebp + 8]
cmovae eax, dword [ebp + 8]
push ecx
push eax
lea ecx, [ebp - 0x194]
call fcn.100af160
push 0x100f72fc
lea ecx, [ebp - 0x194]
call fcn.100ae850
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0x1ac]
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x17c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x16c], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x1c]
push eax
call fcn.100af660
add esp, 4
cmp dword [eax + 0x14], 0x10
jb 0x100a92ff
mov eax, dword [eax]
push eax
call fcn.100c4dc5
mov edx, dword [ebp - 0x198]
add esp, 4
cmp edx, 0x10
jb 0x100a9342
mov ecx, dword [ebp - 0x1ac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100a9338
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100a947b
push edx
push ecx
call fcn.100baf94
add esp, 8
mov edx, dword [ebp - 0x168]
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x198], 0xf
mov byte [ebp - 0x1ac], 0
cmp edx, 0x10
jb 0x100a9397
mov ecx, dword [ebp - 0x17c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100a938d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100a947b
push edx
push ecx
call fcn.100baf94
add esp, 8
mov edx, dword [ebp - 0x180]
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x168], 0xf
mov byte [ebp - 0x17c], 0
cmp edx, 0x10
jb 0x100a93ec
mov ecx, dword [ebp - 0x194]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100a93e2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100a947b
push edx
push ecx
call fcn.100baf94
add esp, 8
mov edx, dword [ebp - 8]
cmp edx, 0x10
jb 0x100a941c
mov ecx, dword [ebp - 0x1c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100a9412
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100a9485
push edx
push ecx
call fcn.100baf94
add esp, 8
lea eax, [ebp - 0x160]
push eax
push edi
call ebx
test eax, eax
jne 0x100a91b0
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov edx, dword [ebp + 0x1c]
cmp edx, 0x10
jb 0x100a9465
mov ecx, dword [ebp + 8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100a945b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100a9485
push edx
push ecx
call fcn.100baf94
add esp, 8
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100baa39
mov esp, ebp
pop ebp
ret
call fcn.100af3a0
call fcn.100c79a0
call fcn.100c79a0
call fcn.100c79a0
int3