Function at 0x10002893
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
lea ebp, [esp - 0x350]
sub esp, 0x3d0
mov eax, dword [0x1002d4a0]
mov dword [ebp + 0x34c], eax
mov eax, dword [0x1002f834]
mov eax, dword [eax + 0x38]
push ebx
push esi
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
xor ebx, ebx
cmp eax, ebx
push edi
mov edi, 0x80
je 0x100028d4
push eax
push 1
push edi
push dword [ebp + 0x358]
call esi
mov eax, dword [0x1002f834]
mov eax, dword [eax + 0x3c]
cmp eax, ebx
je 0x100028eb
push eax
push ebx
push edi
push dword [ebp + 0x358]
call esi
push dword [ebp + 0x358]
call dword [sym.imp.USER32.dll_GetParent]
push eax
push dword [ebp + 0x358]
call fcn.1001167d
pop ecx
pop ecx
push ebx
push ebx
push 0xc0c0c0
push ebx
push 0x10
push 0x89
push dword [0x1002ecc0]
call dword [sym.imp.COMCTL32.dll_ImageList_LoadImageA]
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x417
push dword [ebp + 0x358]
mov dword [0x1002e684], eax
call edi
push 0xfffffffffffffff0
push eax
mov dword [ebp - 0x40], eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
or eax, 0x94c
push eax
push 0xfffffffffffffff0
push dword [ebp - 0x40]
call dword [sym.imp.USER32.dll_SetWindowLongA]
push dword [0x1002e684]
push ebx
push 0x430
push dword [ebp - 0x40]
call esi
push 0x10026560
push 4
push 0x414
push dword [ebp - 0x40]
call esi
push 0x408
push dword [ebp + 0x358]
call edi
push 0x4020
push ebx
push 0x1036
push eax
mov dword [ebp - 0x40], eax
call esi
lea eax, [ebp - 0x50]
push eax
push dword [ebp - 0x40]
call dword [sym.imp.USER32.dll_GetClientRect]
push 0x15
call dword [sym.imp.USER32.dll_GetSystemMetrics]
sub dword [ebp - 0x48], eax
push 0x20
lea eax, [ebp - 0x70]
push ebx
push eax
call fcn.1001b590
mov edi, dword [sym.imp.USER32.dll_LoadStringA]
lea eax, [ebp + 0x30c]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x48]
cdq
sub eax, edx
add esp, 0xc
sar eax, 1
push 0x40
mov dword [ebp - 0x68], eax
lea eax, [ebp + 0x30c]
push eax
push 0x87
push dword [0x1002ecc0]
mov dword [ebp - 0x70], 6
call edi
lea eax, [ebp - 0x70]
push eax
push ebx
mov ebx, 0x101b
push ebx
push dword [ebp - 0x40]
call esi
mov eax, dword [ebp - 0x48]
push 4
pop ecx
cdq
idiv ecx
push 0x40
mov dword [ebp - 0x68], eax
lea eax, [ebp + 0x30c]
push eax
push 0x8e
push dword [0x1002ecc0]
call edi
lea eax, [ebp - 0x70]
push eax
push 1
push ebx
push dword [ebp - 0x40]
call esi
mov eax, dword [ebp - 0x48]
push 4
pop ecx
cdq
idiv ecx
push 0x40
mov dword [ebp - 0x68], eax
lea eax, [ebp + 0x30c]
push eax
push 0x8f
push dword [0x1002ecc0]
call edi
lea eax, [ebp - 0x70]
push eax
push 2
push ebx
mov ebx, dword [ebp - 0x40]
push ebx
call esi
or dword [0x1002d0c0], 0xffffffff
and dword [0x1002e674], 0
and dword [0x1002e670], 0
test byte [0x1002f81c], 1
je 0x10002af6
mov esi, dword [sym.imp.SHLWAPI.dll_PathCombineA]
push 0x100265e4
mov edi, 0x1002f610
push edi
lea eax, [ebp - 0x3c]
push eax
call esi
lea eax, [ebp + 0x1cc]
push eax
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp eax, 0xffffffff
mov dword [ebp - 0x40], eax
je 0x10002b03
test byte [ebp + 0x1cc], 0x10
jne 0x10002ad7
lea eax, [ebp + 0x1f8]
push eax
push edi
lea eax, [ebp + 0xc8]
push eax
call esi
lea eax, [ebp + 0xc8]
push eax
push ebx
call fcn.10002284
pop ecx
pop ecx
lea eax, [ebp + 0x1cc]
push eax
push dword [ebp - 0x40]
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x10002aae
push dword [ebp - 0x40]
call dword [sym.imp.KERNEL32.dll_FindClose]
jmp 0x10002b03
push 0x1002f718
push ebx
call fcn.10002284
pop ecx
pop ecx
mov edi, dword [0x1002f84c]
xor esi, esi
test edi, edi
jle 0x10002b2d
push esi
mov ecx, 0x1002f848
call fcn.100156e9
mov eax, dword [eax]
add eax, 4
push eax
push ebx
call fcn.10002284
inc esi
cmp esi, edi
pop ecx
pop ecx
jl 0x10002b0f
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x40c
push dword [ebp + 0x358]
call edi
mov esi, 0x1002e780
push eax
mov ecx, esi
call fcn.100067b9
lea eax, [ebp - 0x80]
push eax
push ebx
call dword [sym.imp.USER32.dll_GetClientRect]
push dword [ebp - 0x74]
mov ecx, esi
call fcn.10006560
push ebx
push 0
mov ecx, esi
call fcn.100064ec
push 0x409
push dword [ebp + 0x358]
call edi
push eax
push 1
mov ecx, esi
call fcn.100064ec
push 1
push 6
push 0x1002e688
push dword [ebp + 0x358]
mov ecx, 0x1002e760
call fcn.10005e7b
push ebx
mov ecx, 0x1002d0c4
call fcn.10011d41
mov ecx, dword [ebp + 0x34c]
pop edi
xor eax, eax
pop esi
inc eax
pop ebx
call fcn.1001b57a
add ebp, 0x350
leave
ret