Function at 0x1089e49
Capabilities:
Enumerate files on windows

Disassembly:
push 0x8a0
mov eax, 0x10ba32c
call fcn.010aac9f
mov edi, dword [ebp + 8]
lea eax, [ebp - 0x884]
push eax
mov dword [ebp - 0x8a4], ecx
xor esi, esi
push 0x1021824
lea ecx, [ebp - 0x8ac]
mov dword [ebp - 0x89c], edi
mov dword [ebp - 0x884], esi
call fcn.010ab83f
push 0x24c
lea eax, [ebp - 0x87c]
push esi
push eax
mov dword [ebp - 4], esi
mov dword [ebp - 0x880], esi
call sub.msvcrt.dll_memset
or dword [ebp - 0x890], 0xffffffff
add esp, 0xc
mov dword [ebp - 0x88c], esi
mov dword [ebp - 0x894], esi
mov dword [ebp - 0x8a0], esi
cmp edi, esi
jne 0x1089ee7
mov eax, 0x80004003
mov esi, eax
mov dword [ebp - 0x884], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8ac]
call fcn.010ab886
mov eax, esi
call fcn.010aad31
ret 0xc
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
mov edi, 0x1007408
push edi
call esi
push dword [ebp - 0x89c]
mov ebx, 0x102
sub ebx, eax
call esi
cmp eax, ebx
jle 0x1089f0f
mov eax, 0x80010135
jmp 0x1089ec6
push dword [ebp - 0x89c]
mov esi, 0x105
push esi
lea eax, [ebp - 0x21c]
push eax
call fcn.01035132
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAddBackslashW]
push edi
push esi
lea eax, [ebp - 0x21c]
push eax
call fcn.0103d8f7
xor esi, esi
cmp dword [ebp - 0x884], esi
jl 0x1089fe0
lea eax, [ebp - 0x880]
push eax
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x890], eax
cmp eax, 0xffffffff
jne 0x1089f9e
mov eax, dword [section..data]
cmp eax, section..data
je 0x1089f93
test byte [eax + 0x1c], 8
je 0x1089f93
push 0x10215f0
push 0x14
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0102fea5
mov esi, dword [ebp - 0x884]
jmp 0x1089ece
cmp dword [ebp - 0x884], esi
jl 0x1089fe0
mov eax, dword [ebp - 0x8a4]
mov ecx, dword [eax]
lea edx, [ebp - 0x88c]
push edx
push 0x1002be0
push eax
call dword [ecx]
cmp eax, esi
mov dword [ebp - 0x884], eax
jl 0x1089fe0
mov eax, dword [ebp - 0x88c]
mov ecx, dword [eax]
lea edx, [ebp - 0x894]
push edx
push eax
call dword [ecx + 0x10]
mov dword [ebp - 0x884], eax
mov edi, 0x209
mov ebx, 0x80070000
cmp dword [ebp - 0x884], esi
jl 0x108a1d8
xor eax, eax
push 0x410
mov word [ebp - 0x630], ax
lea eax, [ebp - 0x62e]
push esi
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
push dword [ebp - 0x89c]
lea eax, [ebp - 0x630]
push edi
push eax
call fcn.01035132
lea eax, [ebp - 0x630]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAddBackslashW]
lea eax, [ebp - 0x854]
push eax
push edi
lea eax, [ebp - 0x630]
push eax
call fcn.0103d8f7
test dword [ebp - 0x880], 0x10
jne 0x108a138
mov ecx, dword [ebp - 0x8a4]
lea eax, [ebp - 0x630]
push eax
push dword [ebp - 0x894]
call fcn.0108993b
test eax, eax
jne 0x108a138
lea eax, [ebp - 0x888]
push eax
mov eax, dword [ebp - 0x8a4]
push dword [eax + 0x3c]
mov dword [ebp - 0x888], esi
call fcn.01087ef6
cmp eax, esi
mov dword [ebp - 0x884], eax
jl 0x108a122
mov ecx, dword [ebp - 0x888]
cmp ecx, esi
je 0x108a0c4
mov eax, dword [ecx]
push esi
lea edx, [ebp - 0x630]
push edx
call dword [eax + 0x34]
mov ecx, dword [ebp - 0x888]
mov dword [ebp - 0x884], eax
cmp eax, esi
jl 0x108a128
cmp ecx, esi
je 0x108a138
lea edx, [ebp - 0x898]
push edx
push 0x1002bd0
mov dword [ebp - 0x898], esi
mov eax, dword [ecx]
push ecx
call dword [eax]
cmp eax, esi
mov dword [ebp - 0x884], eax
jl 0x108a10c
mov eax, dword [ebp - 0x88c]
cmp eax, esi
je 0x108a10c
push dword [ebp - 0x898]
mov ecx, dword [eax]
push esi
push 0xfffffffffffffffe
push eax
call dword [ecx + 0x2c]
mov dword [ebp - 0x884], eax
mov eax, dword [ebp - 0x898]
cmp eax, esi
je 0x108a122
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x898], esi
mov ecx, dword [ebp - 0x888]
cmp ecx, esi
je 0x108a138
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [ebp - 0x888], esi
cmp dword [ebp - 0x884], esi
jge 0x108a146
mov dword [ebp - 0x884], esi
lea eax, [ebp - 0x880]
push eax
push dword [ebp - 0x890]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x108a1af
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x12
jne 0x108a174
mov dword [ebp - 0x8a0], 1
jmp 0x108a1af
cmp eax, esi
jle 0x108a17f
and eax, 0xffff
or eax, ebx
mov dword [ebp - 0x884], eax
mov eax, dword [section..data]
cmp eax, section..data
je 0x108a1af
test byte [eax + 0x1c], 4
je 0x108a1af
push dword [ebp - 0x884]
push 0x10215f0
push 0x15
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01079051
mov eax, dword [ebp + 0x10]
cmp eax, esi
je 0x108a1cc
test dword [ebp + 0xc], 0x200000
je 0x108a1cc
xor ecx, ecx
inc ecx
cmp dword [eax], ecx
jne 0x108a1cc
mov dword [ebp - 0x8a0], ecx
cmp dword [ebp - 0x8a0], esi
je 0x1089fea
cmp dword [ebp - 0x890], 0xffffffff
je 0x108a232
push dword [ebp - 0x890]
call dword [sym.imp.KERNEL32.dll_FindClose]
test eax, eax
jne 0x108a232
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, esi
jle 0x108a202
and eax, 0xffff
or eax, ebx
mov dword [ebp - 0x884], eax
mov eax, dword [section..data]
cmp eax, section..data
je 0x108a232
test byte [eax + 0x1c], 4
je 0x108a232
push dword [ebp - 0x884]
push 0x10215f0
push 0x16
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01079051
mov eax, dword [ebp - 0x88c]
cmp eax, esi
je 0x108a248
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x88c], esi
mov eax, dword [ebp - 0x894]
cmp eax, esi
je 0x1089f93
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x894], esi
jmp 0x1089f93