Function at 0x100de152
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x7ac
mov dword [ebp - 0x45c], 0
call fcn.100de015
mov dword [ebp - 0x7ac], eax
cmp dword [ebp - 0x7ac], 0
je 0x100de198
cmp dword [ebp - 0x7ac], 1
je 0x100de28e
cmp dword [ebp - 0x7ac], 2
je 0x100de342
jmp 0x100de441
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x664]
push ecx
call fcn.10095a66
add esp, 8
lea edx, [ebp - 0x250]
push edx
lea eax, [ebp - 0x664]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x668], eax
cmp dword [ebp - 0x668], 0xffffffff
je 0x100de289
lea ecx, [ebp - 0x224]
push ecx
lea edx, [ebp - 0x458]
push edx
call fcn.100957f3
add esp, 8
lea eax, [ebp - 0x23c]
push eax
mov ecx, dword [ebp - 0x230]
push ecx
mov edx, dword [ebp - 0x250]
push edx
lea eax, [ebp - 0x458]
push eax
mov ecx, dword [ebp + 0x14]
push ecx
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
call dword [ebp + 0x1c]
add esp, 0x20
lea edx, [ebp - 0x250]
push edx
mov eax, dword [ebp - 0x668]
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x100de27c
lea ecx, [ebp - 0x224]
push ecx
lea edx, [ebp - 0x458]
push edx
call fcn.100957f3
add esp, 8
lea eax, [ebp - 0x23c]
push eax
mov ecx, dword [ebp - 0x230]
push ecx
mov edx, dword [ebp - 0x250]
push edx
lea eax, [ebp - 0x458]
push eax
mov ecx, dword [ebp + 0x14]
push ecx
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
call dword [ebp + 0x1c]
add esp, 0x20
jmp 0x100de21a
mov edx, dword [ebp - 0x668]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
jmp 0x100de45d
lea eax, [ebp - 0x7a8]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x668], eax
cmp dword [ebp - 0x668], 0xffffffff
je 0x100de33d
lea edx, [ebp - 0x794]
push edx
mov eax, dword [ebp - 0x788]
push eax
mov ecx, dword [ebp - 0x7a8]
push ecx
lea edx, [ebp - 0x77c]
push edx
mov eax, dword [ebp + 0x14]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 0x18]
push eax
call dword [ebp + 0x1c]
add esp, 0x20
lea ecx, [ebp - 0x7a8]
push ecx
mov edx, dword [ebp - 0x668]
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
je 0x100de330
lea eax, [ebp - 0x794]
push eax
mov ecx, dword [ebp - 0x788]
push ecx
mov edx, dword [ebp - 0x7a8]
push edx
lea eax, [ebp - 0x77c]
push eax
mov ecx, dword [ebp + 0x14]
push ecx
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
call dword [ebp + 0x1c]
add esp, 0x20
jmp 0x100de2e4
mov edx, dword [ebp - 0x668]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
jmp 0x100de45d
push 3
lea eax, [ebp - 0x354]
push eax
push 0
mov ecx, dword [ebp + 8]
push ecx
call fcn.100d39f8
add esp, 0x10
lea edx, [ebp - 0x7a8]
push edx
lea eax, [ebp - 0x354]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x668], eax
cmp dword [ebp - 0x668], 0xffffffff
je 0x100de43f
push 0
lea ecx, [ebp - 0x354]
push ecx
push 3
lea edx, [ebp - 0x77c]
push edx
call fcn.100d39f8
add esp, 0x10
lea eax, [ebp - 0x794]
push eax
mov ecx, dword [ebp - 0x788]
push ecx
mov edx, dword [ebp - 0x7a8]
push edx
lea eax, [ebp - 0x354]
push eax
mov ecx, dword [ebp + 0x14]
push ecx
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
call dword [ebp + 0x1c]
add esp, 0x20
lea edx, [ebp - 0x7a8]
push edx
mov eax, dword [ebp - 0x668]
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
je 0x100de432
push 0
lea ecx, [ebp - 0x354]
push ecx
push 3
lea edx, [ebp - 0x77c]
push edx
call fcn.100d39f8
add esp, 0x10
lea eax, [ebp - 0x794]
push eax
mov ecx, dword [ebp - 0x788]
push ecx
mov edx, dword [ebp - 0x7a8]
push edx
lea eax, [ebp - 0x354]
push eax
mov ecx, dword [ebp + 0x14]
push ecx
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
call dword [ebp + 0x1c]
add esp, 0x20
jmp 0x100de3cc
mov edx, dword [ebp - 0x668]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
jmp 0x100de45d
push 0x10156940
push 0x10156950
call fcn.10081153
add esp, 8
mov dword [ebp - 0x45c], 1
mov eax, dword [ebp - 0x45c]
mov esp, ebp
pop ebp
ret