Function at 0x1001bd20
Capabilities:
Enumerate files on windows
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1003d666
mov eax, dword fs:[0]
push eax
sub esp, 0x384
mov eax, dword [0x10075988]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
cmp byte [0x100774cd], 0
je 0x1001bfd8
lea eax, [ebp - 0x218]
push eax
push 0
push 0
push 5
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
push 0x1003f5c8
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x114]
push 0x1003f3d0
push eax
call fcn.1001b1e0
add esp, 0x10
lea eax, [ebp - 0x388]
push eax
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x390], eax
cmp eax, 0xffffffff
je 0x1001bfd8
cmp byte [ebp - 0x35c], 0
mov dword [ebp - 0x21c], 0xf
mov dword [ebp - 0x220], 0
mov byte [ebp - 0x230], 0
jne 0x1001bddd
xor eax, eax
jmp 0x1001bdef
lea eax, [ebp - 0x35c]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1001bde6
sub eax, edx
push eax
lea eax, [ebp - 0x35c]
push eax
lea ecx, [ebp - 0x230]
call fcn.10002550
mov eax, dword [ebp - 0x388]
push 1
shr eax, 4
push 0xffffffffffffffff
and eax, 0xffffff01
push 0x1003f5c4
lea ecx, [ebp - 0x230]
mov dword [ebp - 4], 0
mov dword [ebp - 0x38c], eax
call fcn.1001b990
push 0xffffffffffffffff
inc eax
push eax
lea eax, [ebp - 0x248]
push eax
lea ecx, [ebp - 0x230]
call fcn.10019aa0
mov ecx, eax
cmp dword [ecx + 0x14], 0x10
mov esi, dword [ecx + 0x10]
jb 0x1001be54
mov ecx, dword [ecx]
mov eax, 3
cmp esi, eax
cmovb eax, esi
push eax
push 0x1003f5dc
push ecx
call fcn.10009ae0
add esp, 0xc
test eax, eax
jne 0x1001be85
cmp esi, 3
jae 0x1001be7b
or eax, 0xffffffff
jmp 0x1001be83
xor eax, eax
cmp esi, 3
setne al
test eax, eax
sete bl
cmp dword [ebp - 0x234], 0x10
mov byte [ebp - 4], 0
jb 0x1001bea3
push dword [ebp - 0x248]
call fcn.1001f75f
add esp, 4
cmp dword [ebp - 0x220], 2
jbe 0x1001beb9
cmp byte [ebp - 0x38c], 0
jne 0x1001bf19
test bl, bl
jne 0x1001bef7
cmp dword [ebp - 0x21c], 0x10
mov dword [ebp - 4], 0xffffffff
jb 0x1001bed7
push dword [ebp - 0x230]
call fcn.1001f75f
add esp, 4
lea eax, [ebp - 0x388]
push eax
push dword [ebp - 0x390]
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x1001bdb5
jmp 0x1001bfd8
push str.NBGIDarkSouls
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x114]
push 0x1003f3d0
push eax
call fcn.1001b1e0
add esp, 0x10
jmp 0x1001bf40
lea eax, [ebp - 0x35c]
push eax
push str.NBGIDarkSouls_
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x114]
push str._s_s_s
push eax
call fcn.1001b1e0
add esp, 0x14
lea eax, [ebp - 0x114]
push eax
lea ecx, [ebp - 0x248]
call fcn.10002190
mov esi, eax
cmp edi, esi
je 0x1001bf81
cmp dword [edi + 0x14], 0x10
jb 0x1001bf68
push dword [edi]
call fcn.1001f75f
add esp, 4
mov dword [edi + 0x14], 0xf
mov dword [edi + 0x10], 0
push esi
mov ecx, edi
mov byte [edi], 0
call fcn.10004840
cmp dword [ebp - 0x234], 0x10
jb 0x1001bf98
push dword [ebp - 0x248]
call fcn.1001f75f
add esp, 4
cmp dword [ebp - 0x21c], 0x10
mov dword [ebp - 4], 0xffffffff
jb 0x1001bfb6
push dword [ebp - 0x230]
call fcn.1001f75f
add esp, 4
mov ecx, edi
mov dword [ebp - 0x21c], 0xf
mov dword [ebp - 0x220], 0
mov byte [ebp - 0x230], 0
call fcn.1001c080
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1001fee4
mov esp, ebp
pop ebp
ret