Function at 0x10118ab
Capabilities:
Check if file exists
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x348
and byte [ebp - 0x108], 0
and byte [ebp - 0x208], 0
push ebx
push esi
push edi
push 0x3f
xor eax, eax
pop ecx
and dword [ebp - 4], 0
and dword [ebp - 8], 0
lea edi, [ebp - 0x107]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
push 0x3f
pop ecx
push dword [ebp + 8]
xor eax, eax
lea edi, [ebp - 0x207]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x208]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
lea eax, [ebp - 0x208]
push eax
lea eax, [ebp - 0x108]
push 0x1007454
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push 6
push 0x4000
call fcn.0100e994
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
lea eax, [ebp - 0x208]
push eax
call edi
push eax
mov dword [ebp + 8], eax
lea eax, [ebp - 0x108]
push 0x1007438
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push 6
mov ebx, 0x8000
push ebx
call fcn.0100e994
mov eax, dword [ebp + 8]
test eax, eax
jne 0x101198a
push 0x10073f8
push 6
push 0x1000000
call fcn.0100e994
mov dword [ebp - 4], 1
jmp 0x1011d43
lea eax, [ebp + eax - 0x209]
cmp byte [eax], 0x5c
mov dword [ebp + 8], eax
jne 0x10119d3
push 0x10073ec
push 6
push ebx
call fcn.0100e994
mov eax, dword [ebp + 8]
and byte [eax], 0
lea eax, [ebp - 0x208]
push eax
lea eax, [ebp - 0x108]
push 0x10073c4
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push 6
push ebx
call fcn.0100e994
push 0x10073b0
push 6
push ebx
call fcn.0100e994
push 0x10073a8
call edi
mov ebx, eax
lea eax, [ebp - 0x208]
push eax
call edi
lea eax, [ebx + eax + 1]
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov ebx, eax
test ebx, ebx
jne 0x1011a22
push 0x1007394
push 6
push 0x4000000
mov dword [ebp - 4], 1
call fcn.0100e994
jmp 0x1011d23
lea eax, [ebp - 0x208]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x10073a8
push ebx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push ebx
lea eax, [ebp - 0x108]
push 0x1007374
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push 6
push 0x8000
call fcn.0100e994
lea eax, [ebp - 0x348]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp eax, 0xffffffff
mov dword [ebp - 8], eax
jne 0x1011b69
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 4], eax
call fcn.0100dece
push eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push ebx
lea eax, [ebp - 0x108]
push 0x1007338
push eax
call esi
add esp, 0x14
lea eax, [ebp - 0x108]
push eax
push 6
push 0x2000
call fcn.0100e994
cmp dword [ebp - 4], 2
jne 0x1011b2d
call fcn.010117e2
test eax, eax
mov dword [ebp - 4], eax
jne 0x1011d23
lea eax, [ebp - 0x348]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp eax, 0xffffffff
mov dword [ebp - 8], eax
jne 0x1011b2d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 4], eax
call fcn.0100dece
push eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x108]
push 0x1007318
push eax
call esi
add esp, 0x10
lea eax, [ebp - 0x108]
push eax
push 6
push 0x8000
call fcn.0100e994
push 0x10072f8
push 6
push 0x8000
call fcn.0100e994
call fcn.0100dece
push eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push ebx
lea eax, [ebp - 0x108]
push 0x1007338
push eax
call esi
add esp, 0x14
lea eax, [ebp - 0x108]
push eax
push 6
push 0x4000
call fcn.0100e994
cmp dword [ebp - 4], 0
jne 0x1011d23
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
push 0x1003a24
call edi
mov ebx, eax
lea eax, [ebp - 0x31c]
push eax
call edi
add ebx, eax
lea eax, [ebp - 0x208]
push eax
call edi
lea eax, [ebx + eax + 1]
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov ebx, eax
test ebx, ebx
je 0x1011d1c
lea eax, [ebp - 0x208]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x1003a24
push ebx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea eax, [ebp - 0x31c]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea eax, [ebp - 0x108]
push 0x10072d8
push eax
call esi
pop ecx
pop ecx
lea eax, [ebp - 0x108]
push eax
push 6
push 0x8000000
call fcn.0100e994
lea eax, [ebp - 0x31c]
push eax
lea eax, [ebp - 0x108]
push 0x10072c4
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push 6
push 0x8000000
call fcn.0100e994
test byte [ebp - 0x348], 0x10
je 0x1011c4e
lea eax, [ebp - 0x208]
push eax
push 0x10072a0
lea eax, [ebp - 0x108]
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push 6
push 0x8000
call fcn.0100e994
lea eax, [ebp - 0x348]
push eax
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
je 0x1011d0c
test byte [ebp - 0x348], 0x10
je 0x1011c7d
lea eax, [ebp - 0x208]
push eax
push 0x100726c
jmp 0x1011c2f
lea eax, [ebp - 0x31c]
push eax
lea eax, [ebp - 0x108]
push 0x1007264
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push 6
push 0x8000
call fcn.0100e994
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
push 0x1003a24
call edi
mov ebx, eax
lea eax, [ebp - 0x31c]
push eax
call edi
add ebx, eax
lea eax, [ebp - 0x208]
push eax
call edi
lea eax, [ebx + eax + 1]
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov ebx, eax
test ebx, ebx
je 0x1011d1c
lea eax, [ebp - 0x208]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x1003a24
push ebx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea eax, [ebp - 0x31c]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
jmp 0x1011c4e
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x12
je 0x1011d23
mov dword [ebp - 4], eax
jmp 0x1011d23
mov dword [ebp - 4], 1
test ebx, ebx
je 0x1011d2e
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
cmp dword [ebp - 8], 0
je 0x1011d43
cmp dword [ebp - 8], 0xffffffff
je 0x1011d43
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [ebp - 4]
pop edi
pop esi
pop ebx
leave
ret 4