Function at 0x1051d35
Capabilities:
Enumerate files on windows

Disassembly:
mov eax, 0x1098c40
call fcn.01077478
sub esp, 0x2ac
mov eax, dword [0x10a64dc]
mov edx, dword [ebp + 0x10]
push ebx
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x10], eax
mov eax, dword [0x10a6184]
cmp eax, 0x10a6184
push esi
mov esi, dword [ebp + 0xc]
push edi
mov dword [ebp - 0x268], ecx
mov dword [ebp - 0x288], ebx
mov dword [ebp - 0x280], edx
je 0x1051da6
test byte [eax + 0x1c], 1
je 0x1051da6
cmp byte [eax + 0x19], 5
jb 0x1051da6
push dword [ebp + 0x1c]
mov ecx, dword [esi]
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push edx
push ecx
push ebx
push 0x100672c
push 0x117
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0104a798
and dword [ebp - 0x264], 0
mov edi, 0x10a8b2c
push edi
lea ecx, [ebp - 0x26c]
call fcn.01020db5
and dword [ebp - 4], 0
push edi
lea ecx, [ebp - 0x27c]
call fcn.01020db5
push dword [ebp - 0x264]
mov ecx, dword [ebp - 0x268]
mov byte [ebp - 4], 1
call fcn.0104a185
test eax, eax
mov dword [ebp - 0x264], eax
jl 0x1051e32
test ebx, ebx
je 0x1051df9
mov eax, dword [esi]
cmp dword [eax - 0xc], 0
je 0x1051e32
mov esi, dword [0x10a6184]
cmp esi, 0x10a6184
mov dword [ebp - 0x264], 0x80070057
je 0x1051e38
test byte [esi + 0x1c], 0x10
je 0x1051e38
cmp byte [esi + 0x19], 2
jb 0x1051e38
push 0x100672c
push 0x118
push dword [esi + 0x14]
push dword [esi + 0x10]
call fcn.01009ab7
mov esi, dword [0x10a6184]
push dword [ebp - 0x264]
mov ecx, dword [ebp - 0x268]
call fcn.0104a185
test eax, eax
mov dword [ebp - 0x264], eax
jl 0x10521c2
lea eax, [ebp - 0x26c]
push eax
mov ecx, ebx
call fcn.0104e781
xor ebx, ebx
cmp eax, ebx
mov dword [ebp - 0x264], eax
jl 0x10521bc
push edi
lea ecx, [ebp - 0x270]
call fcn.01020db5
push 0xa
lea ecx, [ebp - 0x2b8]
call fcn.01048629
push 0xa
lea ecx, [ebp - 0x2a0]
call fcn.01048629
xor esi, esi
cmp dword [ebp - 0x264], ebx
mov byte [ebp - 4], 4
jl 0x1052198
push dword [ebp - 0x26c]
lea ecx, [ebp - 0x270]
call fcn.0100a804
push 0x1006710
lea ecx, [ebp - 0x270]
call fcn.0100a88e
cmp dword [ebp - 0x264], ebx
jl 0x1052198
lea eax, [ebp - 0x260]
push eax
push dword [ebp - 0x270]
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov edi, eax
cmp edi, 0xffffffff
jne 0x1051f58
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x20
jne 0x1051f31
cmp esi, 5
je 0x1051f31
push dword [ebp - 0x264]
mov ecx, dword [ebp - 0x268]
call fcn.0104a185
push 0x12c
mov dword [ebp - 0x264], eax
call dword [sym.imp.KERNEL32.dll_Sleep]
inc esi
cmp dword [ebp - 0x264], ebx
jge 0x1051eda
jmp 0x1051f58
push eax
call fcn.01009676
mov ecx, dword [ebp - 0x268]
mov dword [ebp - 0x264], eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x26c]
push eax
push 2
call fcn.010501ee
cmp dword [ebp - 0x264], ebx
jl 0x1052198
cmp edi, 0xffffffff
mov ebx, dword [sym.imp.KERNEL32.dll_FindClose]
je 0x105218b
mov esi, dword [ebp - 0x268]
add esi, 0x100
mov eax, dword [ebp - 0x260]
shr eax, 4
and eax, 1
push eax
lea eax, [ebp - 0x234]
push eax
mov ecx, esi
call fcn.01049063
cmp eax, 1
jne 0x1051fdb
test byte [ebp - 0x260], 0x10
lea eax, [ebp - 0x234]
lea ecx, [ebp - 0x2b8]
push eax
je 0x1051fc9
call fcn.0101bc4b
push 0
lea ecx, [ebp - 0x2a0]
call fcn.0104c69e
jmp 0x1051fdb
call fcn.010515dc
push 0
lea ecx, [ebp - 0x2a0]
call fcn.0104c670
lea eax, [ebp - 0x260]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x1051ff8
cmp dword [ebp - 0x264], 0
jge 0x1051f7f
jmp 0x1052005
call dword [sym.imp.KERNEL32.dll_GetLastError]
and dword [ebp - 0x264], 0
push edi
call ebx
jmp 0x105218b
cmp dword [ebp - 0x2b0], 0
je 0x1052198
cmp dword [ebp - 0x298], 0
je 0x1052198
push dword [ebp - 0x264]
mov ecx, dword [ebp - 0x268]
call fcn.0104a185
test eax, eax
mov dword [ebp - 0x264], eax
jl 0x1052198
lea eax, [ebp - 0x274]
push eax
lea ecx, [ebp - 0x2b8]
call fcn.01049352
lea ecx, [ebp - 0x2a0]
mov byte [ebp - 4], 5
call fcn.0104d35f
mov edi, eax
push 0x10050e4
lea eax, [ebp - 0x26c]
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.01011657
lea ecx, [ebp - 0x274]
push ecx
push eax
lea eax, [ebp - 0x284]
push eax
mov byte [ebp - 4], 6
call fcn.0101adf7
mov eax, dword [eax]
lea ecx, [ebp - 0x260]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov ecx, dword [ebp - 0x284]
add ecx, 0xfffffff0
mov esi, eax
call fcn.01009cd1
mov ecx, dword [ebp - 0x278]
add ecx, 0xfffffff0
mov byte [ebp - 4], 5
call fcn.01009cd1
cmp esi, 0xffffffff
jne 0x105212e
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x20
jne 0x1052105
cmp edi, eax
je 0x1052105
push dword [ebp - 0x274]
lea ecx, [ebp - 0x2b8]
call fcn.0101bc4b
push 0x20
lea ecx, [ebp - 0x2a0]
call fcn.0104c69e
mov eax, dword [ebp - 0x264]
jmp 0x1052167
push eax
call fcn.01009676
mov ecx, dword [ebp - 0x268]
mov dword [ebp - 0x264], eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x26c]
push eax
push 2
call fcn.010501ee
jmp 0x1052165
push esi
call ebx
push dword [ebp + 0x1c]
mov ecx, dword [ebp - 0x268]
push dword [ebp + 0x18]
lea eax, [ebp - 0x260]
push 0
push dword [ebp - 0x280]
push eax
lea eax, [ebp - 0x274]
push eax
push dword [ebp - 0x288]
call fcn.01054fcd
cmp eax, 0x8007045b
je 0x1052167
xor eax, eax
mov ecx, dword [ebp - 0x268]
push eax
call fcn.0104a185
mov ecx, dword [ebp - 0x274]
add ecx, 0xfffffff0
mov dword [ebp - 0x264], eax
mov byte [ebp - 4], 4
call fcn.01009cd1
cmp dword [ebp - 0x264], 0
jge 0x105200d
lea ecx, [ebp - 0x2a0]
call fcn.0104afc6
lea ecx, [ebp - 0x2b8]
call fcn.01019e49
mov ecx, dword [ebp - 0x270]
add ecx, 0xfffffff0
call fcn.01009cd1
mov esi, dword [0x10a6184]
cmp esi, 0x10a6184
je 0x1052204
test byte [esi + 0x1c], 1
je 0x1052204
movzx eax, byte [esi + 0x19]
xor ecx, ecx
cmp dword [ebp - 0x264], ecx
setl cl
dec ecx
and ecx, 3
inc ecx
inc ecx
cmp eax, ecx
jl 0x1052204
push dword [ebp - 0x264]
push 0x100672c
push 0x119
push dword [esi + 0x14]
push dword [esi + 0x10]
call fcn.01009b3f
mov ecx, dword [ebp - 0x27c]
mov esi, dword [ebp - 0x264]
add ecx, 0xfffffff0
call fcn.01009cd1
mov ecx, dword [ebp - 0x26c]
add ecx, 0xfffffff0
call fcn.01009cd1
mov ecx, dword [ebp - 0xc]
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
pop ebx
call fcn.01076f63
leave
ret 0x18