Function at 0x100ac2a
Capabilities:
Enumerate files on windows
Get common file path

Disassembly:
mov eax, 0x101b328
call fcn.0101a4c8
sub esp, 0x690
mov eax, dword [0x1020e7c]
push ebx
mov dword [ebp - 0x10], eax
mov eax, 0x80000002
xor ebx, ebx
push esi
mov dword [ebp - 0x68c], eax
mov dword [ebp - 0x688], 0x80000001
mov dword [ebp - 0x684], ebx
lea esi, [ebp - 0x68c]
push 0x20019
push 0x1002340
push eax
lea ecx, [ebp - 0x674]
mov dword [ebp - 0x674], ebx
call fcn.01009076
test eax, eax
jne 0x100acbf
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x678]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push dword [ebp - 0x674]
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
test eax, eax
jne 0x100acb4
cmp dword [ebp - 0x678], ebx
ja 0x100ae69
lea ecx, [ebp - 0x674]
call fcn.01005d1a
lea ecx, [ebp - 0x674]
call fcn.01005d1a
add esi, 4
mov eax, dword [esi]
cmp eax, ebx
jne 0x100ac67
lea eax, [ebp - 0x68c]
mov dword [ebp - 0x68c], 7
mov dword [ebp - 0x688], 0x18
mov dword [ebp - 0x684], ebx
mov dword [ebp - 0x678], ebx
mov dword [ebp - 0x680], eax
push edi
mov eax, dword [ebp - 0x680]
mov eax, dword [eax]
cmp eax, ebx
je 0x100aec5
push ebx
push eax
lea eax, [ebp - 0x420]
push eax
push ebx
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
jl 0x100aeb2
lea eax, [ebp - 0x420]
push eax
lea ecx, [ebp - 0x674]
call sub.MFC42u.DLL_CString::CString_2
push 0x5c
lea ecx, [ebp - 0x674]
mov dword [ebp - 4], ebx
call sub.MFC42u.DLL_CString::ReverseFind
mov edi, eax
cmp edi, 0xffffffff
je 0x100aea3
push 0x1002318
lea ecx, [ebp - 0x694]
call sub.MFC42u.DLL_CString::CString_2
mov esi, eax
push edi
lea eax, [ebp - 0x690]
push eax
lea ecx, [ebp - 0x674]
mov byte [ebp - 4], 1
call sub.MFC42u.DLL_CString::Left
push esi
push eax
lea eax, [ebp - 0x698]
push eax
mov byte [ebp - 4], 2
call sub.MFC42u.DLL_operator
push eax
lea ecx, [ebp - 0x674]
mov byte [ebp - 4], 3
call sub.MFC42u.DLL_CString::operator
lea ecx, [ebp - 0x698]
mov byte [ebp - 4], 2
call sub.MFC42u.DLL_CString::CString
lea ecx, [ebp - 0x690]
mov byte [ebp - 4], 1
call sub.MFC42u.DLL_CString::CString
lea ecx, [ebp - 0x694]
mov byte [ebp - 4], bl
call sub.MFC42u.DLL_CString::CString
lea eax, [ebp - 0x674]
push eax
lea ecx, [ebp - 0x67c]
call fcn.01019c28
push 0x100230c
lea ecx, [ebp - 0x69c]
mov byte [ebp - 4], 4
call sub.MFC42u.DLL_CString::CString_2
push eax
lea ecx, [ebp - 0x67c]
mov byte [ebp - 4], 5
call fcn.01019dcc
lea ecx, [ebp - 0x69c]
mov byte [ebp - 4], 4
call sub.MFC42u.DLL_CString::CString
lea eax, [ebp - 0x670]
push eax
push dword [ebp - 0x67c]
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x100ae95
test byte [ebp - 0x670], 2
je 0x100ae4c
lea eax, [ebp - 0x644]
push 0x10022f4
push eax
call dword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
pop ecx
pop ecx
je 0x100ae55
test byte [ebp - 0x670], 0x10
je 0x100ae84
lea eax, [ebp - 0x670]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x100ae2b
jmp 0x100ae8e
lea ecx, [ebp - 0x674]
call fcn.01005d1a
lea ecx, [ebp - 0x674]
call fcn.01005d1a
xor eax, eax
inc eax
jmp 0x100aecc
mov dword [ebp - 0x678], 1
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
lea ecx, [ebp - 0x67c]
mov byte [ebp - 4], bl
call sub.MFC42u.DLL_CString::CString
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x674]
call sub.MFC42u.DLL_CString::CString
add dword [ebp - 0x680], 4
cmp dword [ebp - 0x678], ebx
je 0x100ad00
mov eax, dword [ebp - 0x678]
pop edi
mov ecx, dword [ebp - 0xc]
pop esi
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
pop ebx
call fcn.010197bb
leave
ret