Function at 0x100efcfd
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
sub esp, 0x250
lea ebp, [esp - 4]
mov eax, dword [0x1019c8c8]
xor eax, ebp
mov dword [ebp + 0x250], eax
push 0x90
mov eax, 0x1014e014
call fcn.101018b2
mov eax, dword [ebp + 0x25c]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp + 0x260]
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x48]
xor edi, edi
push eax
mov dword [ebp - 0x50], edi
call fcn.10040a9f
lea ecx, [ebp - 0x90]
mov dword [ebp - 4], edi
mov dword [esp], 0x10156f70
call fcn.1000587e
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x8c]
push eax
mov byte [ebp - 4], 1
call fcn.1000c751
mov eax, dword [eax]
lea ecx, [ebp]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp eax, 0xffffffff
lea ecx, [ebp - 0x8c]
mov dword [ebp - 0x64], eax
sete bl
call fcn.100015d9
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0
call fcn.100015d9
test bl, bl
je 0x100efdd3
xor esi, esi
lea ecx, [ebp - 0x48]
call fcn.100015d9
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x250]
xor ecx, ebp
call fcn.101018a3
add ebp, 0x254
leave
ret 8
push 4
mov ecx, 0x101594f0
lea eax, [ebp + 0x2c]
pop esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100efe02
cmp dx, di
je 0x100efdfe
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100efe02
add eax, esi
add ecx, esi
cmp dx, di
jne 0x100efdde
xor eax, eax
jmp 0x100efe07
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, edi
je 0x100f034c
mov ecx, 0x101594e8
lea eax, [ebp + 0x2c]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100efe3b
cmp dx, di
je 0x100efe37
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100efe3b
add eax, esi
add ecx, esi
cmp dx, di
jne 0x100efe17
xor eax, eax
jmp 0x100efe40
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, edi
je 0x100f034c
lea eax, [ebp + 0x2c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.1000587e
push esi
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 2
call fcn.1000e753
mov eax, dword [eax]
push 0x101594dc
push eax
call fcn.10101e50
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x88]
setne bl
call fcn.100015d9
test bl, bl
je 0x100efe9c
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0
call fcn.100015d9
jmp 0x100f034c
mov dword [ebp - 0x10], edi
lea eax, [ebp + 0x2c]
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x78]
push eax
mov byte [ebp - 4], 3
call fcn.100058db
mov eax, dword [eax]
or dword [ebp - 0x50], 1
lea ecx, [ebp - 0x10]
push ecx
push eax
mov byte [ebp - 4], 4
call fcn.100e70df
pop ecx
test eax, eax
mov eax, dword [ebp - 0x10]
pop ecx
jl 0x100efed9
cmp eax, edi
je 0x100efed9
xor bl, bl
jmp 0x100efedb
mov bl, 1
test byte [ebp - 0x50], 1
mov dword [ebp - 4], 3
je 0x100efef7
and dword [ebp - 0x50], 0xfffffffe
lea ecx, [ebp - 0x78]
call fcn.100015d9
mov eax, dword [ebp - 0x10]
test bl, bl
je 0x100eff0b
cmp eax, edi
mov byte [ebp - 4], 2
je 0x100efe8b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x100efe8b
mov dword [ebp - 0x14], edi
mov ecx, dword [eax]
lea edx, [ebp - 0x14]
push edx
push str.custombuttons_button_search
push eax
mov byte [ebp - 4], 5
call dword [ecx + 0x94]
mov eax, dword [ebp - 0x14]
cmp eax, edi
jne 0x100eff30
mov eax, dword [ebp - 0x10]
jmp 0x100efefb
mov dword [ebp - 0x14], edi
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
lea edx, [ebp - 0x14]
push edx
push 0x10158d3c
push eax
call dword [ecx + 0x94]
cmp dword [ebp - 0x14], edi
je 0x100eff2b
push dword [ebp - 0x14]
lea ecx, [ebp - 0x44]
call fcn.1003bd40
lea eax, [ebp + 0x2c]
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x6c]
push eax
mov byte [ebp - 4], 6
call fcn.100058db
push eax
lea eax, [ebp - 0x30]
push eax
mov byte [ebp - 4], 7
call fcn.100408fa
pop ecx
pop ecx
lea ecx, [ebp - 0x6c]
call fcn.100015d9
mov dword [ebp - 0x20], edi
push 0x10152f84
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xa
call fcn.1000587e
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
lea edx, [ebp - 0x20]
push edx
push str.custombuttons_button_option_default
push eax
mov byte [ebp - 4], 0xb
call dword [ecx + 0x94]
push dword [ebp - 0x20]
lea ecx, [ebp - 0x3c]
call fcn.1003bd40
cmp dword [ebp - 0x20], edi
mov byte [ebp - 4], 0xc
je 0x100f0011
mov eax, dword [ebp - 0x3c]
cmp eax, edi
je 0x100f0011
mov dword [ebp - 0x54], edi
mov ecx, dword [eax]
lea edx, [ebp - 0x54]
push edx
push eax
mov byte [ebp - 4], 0xd
call dword [ecx + 0x68]
push dword [ebp - 0x54]
lea ecx, [ebp - 0x80]
call fcn.1000587e
push eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xe
call fcn.10005459
lea ecx, [ebp - 0x80]
call fcn.100015d9
push dword [ebp - 0x54]
mov byte [ebp - 4], 0xc
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
lea eax, [ebp - 0x30]
push eax
push 0x1019e10c
lea eax, [ebp - 0x40]
push eax
call fcn.1000c751
mov dword [ebp - 0x18], edi
mov ecx, 0x1019e718
mov byte [ebp - 4], 0x10
call fcn.10037303
push edi
push edi
push edi
push ecx
lea eax, [ebp - 0x28]
mov ecx, esp
mov dword [ebp - 0x54], esp
push eax
call fcn.1000584b
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x44]
lea eax, [ebp - 0x30]
push ecx
mov ecx, esp
mov dword [ebp - 0x98], esp
push eax
mov byte [ebp - 4], 0x11
call fcn.1000584b
push ecx
lea eax, [ebp - 0x40]
mov ecx, esp
mov dword [ebp - 0x9c], esp
push eax
mov byte [ebp - 4], 0x12
call fcn.1000584b
mov byte [ebp - 4], 0x10
call fcn.1003e889
add esp, 0x20
cmp dword [ebp - 0x18], edi
je 0x100f02c0
push dword [ebp - 0x18]
lea ecx, [ebp - 0x24]
call fcn.1002bc2b
xor edi, edi
cmp dword [ebp - 0x24], edi
mov byte [ebp - 4], 0x13
je 0x100f00ea
lea eax, [ebp + 0x2c]
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x94]
push eax
call fcn.100058db
push dword [eax]
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x14
call fcn.10003abd
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x16
call fcn.100015d9
mov eax, dword [ebp - 0x24]
push dword [ebp - 0x68]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x40]
push dword [ebp - 0x68]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
push dword [ebp - 0x70]
lea ecx, [ebp - 0x38]
call fcn.1000b131
push dword [ebp - 0x18]
lea ecx, [ebp - 0x2c]
call fcn.1000b131
push dword [ebp - 0x74]
lea ecx, [ebp - 0x34]
call fcn.1000b131
mov eax, dword [ebp - 0x38]
cmp eax, edi
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
mov byte [ebp - 4], 0x19
je 0x100f0372
cmp ecx, edi
je 0x100f0372
cmp edx, edi
je 0x100f0372
mov edx, dword [eax]
push ecx
push eax
call dword [edx + 0x14]
mov eax, dword [ebp - 0x34]
lea edx, [ebp - 0x60]
push edx
mov dword [ebp - 0x60], edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0xc]
mov eax, dword [ebp - 0x18]
push dword [ebp - 0x60]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x2c]
mov eax, dword [ebp - 0x34]
push dword [ebp - 0x2c]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x14]
push dword [ebp - 0x18]
lea ecx, [ebp - 0x58]
call fcn.1003bd5f
mov dword [ebp - 0x4c], edi
mov eax, dword [ebp - 0x58]
cmp eax, edi
mov byte [ebp - 4], 0x1b
jne 0x100f01a3
mov eax, dword [ebp - 0x34]
cmp eax, edi
mov byte [ebp - 4], 0x18
je 0x100f0189
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x2c]
cmp eax, edi
mov byte [ebp - 4], 0x17
je 0x100f0394
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x100f0394
mov ecx, dword [eax]
lea edx, [ebp - 0x4c]
push edx
push edi
push 0x2111
push eax
call dword [ecx + 0x24]
cmp dword [ebp - 0x4c], edi
jne 0x100f01cb
mov eax, dword [ebp - 0x58]
cmp eax, edi
mov byte [ebp - 4], 0x19
je 0x100f0178
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x100f0178
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x5c]
call fcn.1002bc60
mov esi, dword [ebp - 0x5c]
cmp esi, edi
mov byte [ebp - 4], 0x1c
jne 0x100f01f4
mov eax, dword [ebp - 0x4c]
cmp eax, edi
mov byte [ebp - 4], 0x1a
je 0x100f01b8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x100f01b8
push 0x10168440
lea ecx, [ebp - 0x84]
call fcn.10003abd
mov edi, eax
push 0x1015923c
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x1d
call fcn.10003abd
mov edi, dword [edi]
mov eax, dword [eax]
mov ecx, dword [esi]
push edi
push eax
push esi
mov byte [ebp - 4], 0x1e
call dword [ecx + 0x1c]
push dword [ebp - 0x7c]
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
call esi
push dword [ebp - 0x84]
mov byte [ebp - 4], 0x1c
call esi
mov eax, dword [ebp - 0x5c]
mov ecx, dword [eax]
push 4
push eax
call dword [ecx + 0x18]
mov eax, dword [ebp - 0x5c]
test eax, eax
mov byte [ebp - 4], 0x1b
je 0x100f025a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x4c]
test eax, eax
mov byte [ebp - 4], 0x1a
je 0x100f026b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x58]
test eax, eax
mov byte [ebp - 4], 0x19
je 0x100f027c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x34]
test eax, eax
mov byte [ebp - 4], 0x18
je 0x100f028d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x2c]
test eax, eax
mov byte [ebp - 4], 0x17
je 0x100f029e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x38]
test eax, eax
mov byte [ebp - 4], 0x13
je 0x100f02af
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x24]
test eax, eax
mov byte [ebp - 4], 0x10
je 0x100f02c0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x18]
test eax, eax
mov byte [ebp - 4], 0xf
je 0x100f02d1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x40]
call fcn.100015d9
mov eax, dword [ebp - 0x3c]
test eax, eax
mov byte [ebp - 4], 0xb
je 0x100f02ea
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x28]
call fcn.100015d9
mov eax, dword [ebp - 0x20]
test eax, eax
mov byte [ebp - 4], 9
je 0x100f0303
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x30]
call fcn.100015d9
mov eax, dword [ebp - 0x44]
test eax, eax
mov byte [ebp - 4], 5
je 0x100f031c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
test eax, eax
mov byte [ebp - 4], 3
je 0x100f032d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10]
test eax, eax
mov byte [ebp - 4], 2
je 0x100f033e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0
call fcn.100015d9
xor edi, edi
lea eax, [ebp]
push eax
push dword [ebp - 0x64]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x100efdd3
push dword [ebp - 0x64]
call dword [sym.imp.KERNEL32.dll_FindClose]
xor esi, esi
inc esi
jmp 0x100efda4
cmp edx, edi
mov byte [ebp - 4], 0x18
je 0x100f0386
mov eax, dword [edx]
push edx
call dword [eax + 8]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x2c]
cmp ecx, edi
mov byte [ebp - 4], 0x17
je 0x100f0397
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebp - 0x38]
cmp eax, edi
mov byte [ebp - 4], 0x13
je 0x100f03a5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x24]
cmp eax, edi
mov byte [ebp - 4], 0x10
je 0x100f03b6
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x18]
cmp eax, edi
mov byte [ebp - 4], 0xf
je 0x100f03c7
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x40]
call fcn.100015d9
mov eax, dword [ebp - 0x3c]
cmp eax, edi
mov byte [ebp - 4], 0xb
je 0x100f03e0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x28]
call fcn.100015d9
mov eax, dword [ebp - 0x20]
cmp eax, edi
mov byte [ebp - 4], 9
je 0x100f03f9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x30]
call fcn.100015d9
mov eax, dword [ebp - 0x44]
cmp eax, edi
mov byte [ebp - 4], 5
je 0x100f0412
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
cmp eax, edi
mov byte [ebp - 4], 3
je 0x100eff2b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x100eff2b