Function at 0x1000127e
Capabilities:
Enumerate files on windows
Get common file path

Disassembly:
mov eax, 0x100043ff
call fcn.100040e8
sub esp, 0x278
push ebx
push edi
lea ecx, [ebp - 0x24]
xor bl, bl
call fcn.10003552
and dword [ebp - 4], 0
lea ecx, [ebp - 0x40]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_void_]
push 0x104
lea eax, [ebp - 0x284]
push eax
mov byte [ebp - 4], 1
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
lea eax, [ebp - 0x284]
push eax
lea ecx, [ebp - 0x40]
call dword [sym.imp.MSVCP90.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::append_char_const__]
push 0x100071e4
lea ecx, [ebp - 0x40]
call dword [sym.imp.MSVCP90.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::append_char_const__]
push 6
lea ecx, [ebp - 0x24]
call fcn.10002634
push eax
lea ecx, [ebp - 0x40]
call dword [sym.imp.MSVCP90.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::append_char_const__]
cmp dword [ebp - 0x28], 0x10
mov eax, dword [ebp - 0x3c]
jae 0x100012fb
lea eax, [ebp - 0x3c]
lea ecx, [ebp - 0x180]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov edi, eax
cmp edi, 0xffffffff
jne 0x1000133b
xor bl, bl
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.10003598
mov ecx, dword [ebp - 0xc]
pop edi
mov al, bl
pop ebx
mov dword fs:[0], ecx
leave
ret
push esi
mov esi, dword [sym.imp.KERNEL32.dll_FindNextFileA]
jmp 0x10001401
push 7
lea ecx, [ebp - 0x24]
call fcn.10002634
push eax
lea eax, [ebp - 0x154]
push eax
call fcn.10001138
pop ecx
pop ecx
test eax, eax
jne 0x10001366
mov bl, 1
push 8
lea ecx, [ebp - 0x24]
call fcn.10002634
push eax
lea eax, [ebp - 0x154]
push eax
call fcn.10001138
pop ecx
pop ecx
test eax, eax
jne 0x10001385
mov bl, 1
push 9
lea ecx, [ebp - 0x24]
call fcn.10002634
push eax
lea eax, [ebp - 0x154]
push eax
call fcn.10001138
pop ecx
pop ecx
test eax, eax
jne 0x100013a4
mov bl, 1
push 0xa
lea ecx, [ebp - 0x24]
call fcn.10002634
push eax
lea eax, [ebp - 0x154]
push eax
call fcn.10001138
pop ecx
pop ecx
test eax, eax
jne 0x100013c3
mov bl, 1
push 0xb
lea ecx, [ebp - 0x24]
call fcn.10002634
push eax
lea eax, [ebp - 0x154]
push eax
call fcn.10001138
pop ecx
pop ecx
test eax, eax
jne 0x100013e2
mov bl, 1
push 0xc
lea ecx, [ebp - 0x24]
call fcn.10002634
push eax
lea eax, [ebp - 0x154]
push eax
call fcn.10001138
pop ecx
pop ecx
test eax, eax
jne 0x10001401
mov bl, 1
lea eax, [ebp - 0x180]
push eax
push edi
call esi
test eax, eax
jne 0x10001347
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
pop esi
jmp 0x10001312