Function at 0x1089f9e
Capabilities:
Enumerate files on windows

Disassembly:
push 0x8a0
mov eax, 0x10ba2c5
call fcn.010aacd7
mov edi, dword [ebp + 8]
lea eax, [ebp - 0x884]
push eax
mov dword [ebp - 0x8a4], ecx
xor esi, esi
push 0x1021824
lea ecx, [ebp - 0x8ac]
mov dword [ebp - 0x89c], edi
mov dword [ebp - 0x884], esi
call fcn.010ab86f
push 0x24c
lea eax, [ebp - 0x87c]
push esi
push eax
mov dword [ebp - 4], esi
mov dword [ebp - 0x880], esi
call sub.msvcrt.dll_memset
or dword [ebp - 0x890], 0xffffffff
add esp, 0xc
mov dword [ebp - 0x88c], esi
mov dword [ebp - 0x894], esi
mov dword [ebp - 0x8a0], esi
cmp edi, esi
jne 0x108a03c
mov eax, 0x80004003
mov esi, eax
mov dword [ebp - 0x884], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8ac]
call fcn.010ab8b6
mov eax, esi
call fcn.010aad69
ret 0xc
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
mov edi, 0x1007408
push edi
call esi
push dword [ebp - 0x89c]
mov ebx, 0x102
sub ebx, eax
call esi
cmp eax, ebx
jle 0x108a064
mov eax, 0x80010135
jmp 0x108a01b
push dword [ebp - 0x89c]
mov esi, 0x105
push esi
lea eax, [ebp - 0x21c]
push eax
call fcn.01035128
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAddBackslashW]
push edi
push esi
lea eax, [ebp - 0x21c]
push eax
call fcn.0103d8f7
xor esi, esi
cmp dword [ebp - 0x884], esi
jl 0x108a135
lea eax, [ebp - 0x880]
push eax
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x890], eax
cmp eax, 0xffffffff
jne 0x108a0f3
mov eax, dword [section..data]
cmp eax, section..data
je 0x108a0e8
test byte [eax + 0x1c], 8
je 0x108a0e8
push 0x10215f0
push 0x14
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0102fea5
mov esi, dword [ebp - 0x884]
jmp 0x108a023
cmp dword [ebp - 0x884], esi
jl 0x108a135
mov eax, dword [ebp - 0x8a4]
mov ecx, dword [eax]
lea edx, [ebp - 0x88c]
push edx
push 0x1002be0
push eax
call dword [ecx]
cmp eax, esi
mov dword [ebp - 0x884], eax
jl 0x108a135
mov eax, dword [ebp - 0x88c]
mov ecx, dword [eax]
lea edx, [ebp - 0x894]
push edx
push eax
call dword [ecx + 0x10]
mov dword [ebp - 0x884], eax
mov edi, 0x209
mov ebx, 0x80070000
cmp dword [ebp - 0x884], esi
jl 0x108a32d
xor eax, eax
push 0x410
mov word [ebp - 0x630], ax
lea eax, [ebp - 0x62e]
push esi
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
push dword [ebp - 0x89c]
lea eax, [ebp - 0x630]
push edi
push eax
call fcn.01035128
lea eax, [ebp - 0x630]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAddBackslashW]
lea eax, [ebp - 0x854]
push eax
push edi
lea eax, [ebp - 0x630]
push eax
call fcn.0103d8f7
test dword [ebp - 0x880], 0x10
jne 0x108a28d
mov ecx, dword [ebp - 0x8a4]
lea eax, [ebp - 0x630]
push eax
push dword [ebp - 0x894]
call fcn.01089a90
test eax, eax
jne 0x108a28d
lea eax, [ebp - 0x888]
push eax
mov eax, dword [ebp - 0x8a4]
push dword [eax + 0x3c]
mov dword [ebp - 0x888], esi
call fcn.0108804b
cmp eax, esi
mov dword [ebp - 0x884], eax
jl 0x108a277
mov ecx, dword [ebp - 0x888]
cmp ecx, esi
je 0x108a219
mov eax, dword [ecx]
push esi
lea edx, [ebp - 0x630]
push edx
call dword [eax + 0x34]
mov ecx, dword [ebp - 0x888]
mov dword [ebp - 0x884], eax
cmp eax, esi
jl 0x108a27d
cmp ecx, esi
je 0x108a28d
lea edx, [ebp - 0x898]
push edx
push 0x1002bd0
mov dword [ebp - 0x898], esi
mov eax, dword [ecx]
push ecx
call dword [eax]
cmp eax, esi
mov dword [ebp - 0x884], eax
jl 0x108a261
mov eax, dword [ebp - 0x88c]
cmp eax, esi
je 0x108a261
push dword [ebp - 0x898]
mov ecx, dword [eax]
push esi
push 0xfffffffffffffffe
push eax
call dword [ecx + 0x2c]
mov dword [ebp - 0x884], eax
mov eax, dword [ebp - 0x898]
cmp eax, esi
je 0x108a277
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x898], esi
mov ecx, dword [ebp - 0x888]
cmp ecx, esi
je 0x108a28d
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [ebp - 0x888], esi
cmp dword [ebp - 0x884], esi
jge 0x108a29b
mov dword [ebp - 0x884], esi
lea eax, [ebp - 0x880]
push eax
push dword [ebp - 0x890]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x108a304
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x12
jne 0x108a2c9
mov dword [ebp - 0x8a0], 1
jmp 0x108a304
cmp eax, esi
jle 0x108a2d4
and eax, 0xffff
or eax, ebx
mov dword [ebp - 0x884], eax
mov eax, dword [section..data]
cmp eax, section..data
je 0x108a304
test byte [eax + 0x1c], 4
je 0x108a304
push dword [ebp - 0x884]
push 0x10215f0
push 0x15
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0107918f
mov eax, dword [ebp + 0x10]
cmp eax, esi
je 0x108a321
test dword [ebp + 0xc], 0x200000
je 0x108a321
xor ecx, ecx
inc ecx
cmp dword [eax], ecx
jne 0x108a321
mov dword [ebp - 0x8a0], ecx
cmp dword [ebp - 0x8a0], esi
je 0x108a13f
cmp dword [ebp - 0x890], 0xffffffff
je 0x108a387
push dword [ebp - 0x890]
call dword [sym.imp.KERNEL32.dll_FindClose]
test eax, eax
jne 0x108a387
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, esi
jle 0x108a357
and eax, 0xffff
or eax, ebx
mov dword [ebp - 0x884], eax
mov eax, dword [section..data]
cmp eax, section..data
je 0x108a387
test byte [eax + 0x1c], 4
je 0x108a387
push dword [ebp - 0x884]
push 0x10215f0
push 0x16
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0107918f
mov eax, dword [ebp - 0x88c]
cmp eax, esi
je 0x108a39d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x88c], esi
mov eax, dword [ebp - 0x894]
cmp eax, esi
je 0x108a0e8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x894], esi
jmp 0x108a0e8