Function at 0x1300d650
Capabilities:
Enumerate files on windows
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x13030576
mov eax, dword fs:[0]
push eax
sub esp, 0x828
mov eax, dword [0x13043610]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x784], 0
push 0x208
push 0
lea eax, [ebp - 0x440]
push eax
call fcn.13014d90
add esp, 0xc
lea ecx, [ebp - 0x440]
push ecx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
push str..
lea edx, [ebp - 0x440]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea eax, [ebp - 0x764]
push eax
lea ecx, [ebp - 0x440]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x774], eax
cmp dword [ebp - 0x774], 0xffffffff
je 0x1300d98a
mov edx, dword [ebp - 0x764]
and edx, 0x10
jne 0x1300d961
lea ecx, [ebp - 0x4a8]
call fcn.13005050
mov dword [ebp - 4], 0
mov dword [ebp - 4], 1
push 1
lea ecx, [ebp - 0x834]
call fcn.13005070
mov byte [ebp - 4], 2
lea eax, [ebp - 0x738]
push eax
lea ecx, [ebp - 0x824]
push ecx
call fcn.13003d30
add esp, 8
lea edx, [ebp - 0x458]
push edx
lea ecx, [ebp - 0x834]
call fcn.1300a2d0
mov byte [ebp - 4], 3
push 0x208
push 0
lea eax, [ebp - 0x238]
push eax
call fcn.13014d90
add esp, 0xc
lea ecx, [ebp - 0x238]
push ecx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
push 0x130332b4
lea edx, [ebp - 0x238]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea ecx, [ebp - 0x458]
call fcn.13002b90
push eax
lea eax, [ebp - 0x238]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
xor ecx, ecx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x76c], 0
lea edx, [ebp - 0x76c]
push edx
lea eax, [ebp - 0x238]
push eax
call fcn.1300dc80
add esp, 8
mov dword [ebp - 0x77c], eax
cmp dword [ebp - 0x76c], 0
je 0x1300d89f
mov ecx, dword [ebp - 0x77c]
push ecx
mov edx, dword [ebp - 0x76c]
push edx
lea ecx, [ebp - 0x514]
call fcn.1300a710
lea eax, [ebp - 0x470]
push eax
lea ecx, [ebp - 0x514]
call fcn.1300a910
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x470]
call fcn.1300a1e0
cmp eax, 0x20
jne 0x1300d875
mov dword [ebp - 0x768], 0
jmp 0x1300d845
mov ecx, dword [ebp - 0x768]
add ecx, 1
mov dword [ebp - 0x768], ecx
cmp dword [ebp - 0x768], 0x20
jae 0x1300d875
mov edx, dword [ebp - 0x768]
push edx
lea ecx, [ebp - 0x470]
call fcn.13006890
movsx eax, byte [eax]
xor eax, 7
mov ecx, dword [ebp - 0x768]
mov byte [ebp + ecx - 0x490], al
jmp 0x1300d836
mov edx, dword [ebp - 0x76c]
mov dword [ebp - 0x780], edx
mov eax, dword [ebp - 0x780]
push eax
call fcn.130137e1
add esp, 4
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x470]
call fcn.13005c30
mov dword [ebp - 0x770], 0
jmp 0x1300d8ba
mov ecx, dword [ebp - 0x770]
add ecx, 1
mov dword [ebp - 0x770], ecx
lea ecx, [ebp - 0x458]
call fcn.1300a1e0
cmp dword [ebp - 0x770], eax
jae 0x1300d8fc
mov edx, dword [ebp - 0x770]
push edx
lea ecx, [ebp - 0x458]
call fcn.130068b0
mov dword [ebp - 0x778], eax
mov eax, dword [ebp - 0x778]
movzx ecx, word [eax]
xor ecx, 5
mov edx, dword [ebp - 0x778]
mov word [edx], cx
jmp 0x1300d8ab
lea eax, [ebp - 0x458]
push eax
lea ecx, [ebp - 0x4a8]
call fcn.1300f410
lea ecx, [ebp - 0x4a8]
push ecx
mov ecx, 0x13044ee0
call fcn.130116d0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x458]
call fcn.130025c0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x7cc]
call fcn.13005dd0
lea ecx, [ebp - 0x7cc]
call fcn.13005ab0
mov dword [ebp - 4], 5
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4a8]
call fcn.130025c0
lea edx, [ebp - 0x764]
push edx
mov eax, dword [ebp - 0x774]
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x1300d6e6
mov ecx, dword [ebp - 0x774]
push ecx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.130133df
mov esp, ebp
pop ebp
ret