Function at 0x100012ab
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x368
push 0xffffffffffffffff
push 0x1000341c
push 0x10003010
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp dword [0x10003418], 0
je 0x100012d6
jmp 0x10001537
mov eax, dword [ebp + 8]
push eax
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x358], eax
cmp dword [ebp + 8], 0
je 0x100012f7
cmp dword [ebp - 0x358], 0
jg 0x100012fc
jmp 0x10001537
mov ecx, dword [ebp + 8]
push ecx
lea edx, [ebp - 0x350]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov eax, dword [ebp + 8]
add eax, dword [ebp - 0x358]
movsx ecx, byte [eax - 1]
cmp ecx, 0x5c
je 0x10001335
push str..
lea edx, [ebp - 0x350]
push edx
call sub.MSVCRT.dll_strcat
add esp, 8
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0x350]
push ecx
call sub.MSVCRT.dll_strcat
add esp, 8
lea edx, [ebp - 0x24c]
push edx
lea eax, [ebp - 0x350]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x35c], eax
cmp dword [ebp - 0x35c], 0xffffffff
jne 0x1000137d
mov ecx, dword [ebp - 0x35c]
push ecx
call dword [sym.imp.KERNEL32.dll_FindClose]
jmp 0x10001537
mov dword [ebp - 0x10c], 1
mov dword [ebp - 4], 0
cmp dword [ebp - 4], 0
jne 0x1000152a
mov edx, dword [ebp + 8]
push edx
lea eax, [ebp - 0x108]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 0x358]
movsx edx, byte [ecx - 1]
cmp edx, 0x5c
je 0x100013d1
push 0x10003044
lea eax, [ebp - 0x108]
push eax
call sub.MSVCRT.dll_strcat
add esp, 8
lea ecx, [ebp - 0x220]
push ecx
lea edx, [ebp - 0x108]
push edx
call sub.MSVCRT.dll_strcat
add esp, 8
mov eax, dword [ebp - 0x24c]
and eax, 0x10
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x354], 0
je 0x10001456
push 0x10003048
lea ecx, [ebp - 0x220]
push ecx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x10001435
push 0x1000304c
lea edx, [ebp - 0x220]
push edx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
jne 0x10001456
lea eax, [ebp - 0x24c]
push eax
mov ecx, dword [ebp - 0x35c]
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 4], eax
jmp 0x1000138e
cmp dword [ebp - 0x24c], 0
jne 0x10001474
mov edx, 0x20
test edx, edx
jne 0x10001474
mov dword [ebp - 0x364], 0
jmp 0x1000147e
mov dword [ebp - 0x364], 1
mov eax, dword [ebp - 0x364]
mov dword [ebp - 0x360], eax
cmp dword [ebp - 0x360], 0
je 0x100014b9
push 0x10003050
lea ecx, [ebp - 0x108]
push ecx
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
je 0x100014b9
lea edx, [ebp - 0x108]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
cmp dword [ebp - 0x24c], 0
jne 0x100014d7
mov eax, 0x10
test eax, eax
jne 0x100014d7
mov dword [ebp - 0x368], 0
jmp 0x100014e1
mov dword [ebp - 0x368], 1
mov ecx, dword [ebp - 0x368]
mov dword [ebp - 0x360], ecx
cmp dword [ebp - 0x360], 0
je 0x10001509
mov edx, dword [ebp + 0xc]
push edx
lea eax, [ebp - 0x108]
push eax
call fcn.100012ab
add esp, 8
lea ecx, [ebp - 0x24c]
push ecx
mov edx, dword [ebp - 0x35c]
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 4], eax
jmp 0x1000138e
mov eax, dword [ebp - 0x35c]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov esp, ebp
pop ebp
ret