Function at 0x1089e39
Capabilities:
Enumerate files on windows

Disassembly:
push 0x8a0
mov eax, 0x10ba31b
call fcn.010aac8f
mov edi, dword [ebp + 8]
lea eax, [ebp - 0x884]
push eax
mov dword [ebp - 0x8a4], ecx
xor esi, esi
push 0x1021824
lea ecx, [ebp - 0x8ac]
mov dword [ebp - 0x89c], edi
mov dword [ebp - 0x884], esi
call fcn.010ab82f
push 0x24c
lea eax, [ebp - 0x87c]
push esi
push eax
mov dword [ebp - 4], esi
mov dword [ebp - 0x880], esi
call sub.msvcrt.dll_memset
or dword [ebp - 0x890], 0xffffffff
add esp, 0xc
mov dword [ebp - 0x88c], esi
mov dword [ebp - 0x894], esi
mov dword [ebp - 0x8a0], esi
cmp edi, esi
jne 0x1089ed7
mov eax, 0x80004003
mov esi, eax
mov dword [ebp - 0x884], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8ac]
call fcn.010ab876
mov eax, esi
call fcn.010aad21
ret 0xc
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
mov edi, 0x1007408
push edi
call esi
push dword [ebp - 0x89c]
mov ebx, 0x102
sub ebx, eax
call esi
cmp eax, ebx
jle 0x1089eff
mov eax, 0x80010135
jmp 0x1089eb6
push dword [ebp - 0x89c]
mov esi, 0x105
push esi
lea eax, [ebp - 0x21c]
push eax
call fcn.01035122
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAddBackslashW]
push edi
push esi
lea eax, [ebp - 0x21c]
push eax
call fcn.0103d8e6
xor esi, esi
cmp dword [ebp - 0x884], esi
jl 0x1089fd0
lea eax, [ebp - 0x880]
push eax
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x890], eax
cmp eax, 0xffffffff
jne 0x1089f8e
mov eax, dword [section..data]
cmp eax, section..data
je 0x1089f83
test byte [eax + 0x1c], 8
je 0x1089f83
push 0x10215f0
push 0x14
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0102fe95
mov esi, dword [ebp - 0x884]
jmp 0x1089ebe
cmp dword [ebp - 0x884], esi
jl 0x1089fd0
mov eax, dword [ebp - 0x8a4]
mov ecx, dword [eax]
lea edx, [ebp - 0x88c]
push edx
push 0x1002be0
push eax
call dword [ecx]
cmp eax, esi
mov dword [ebp - 0x884], eax
jl 0x1089fd0
mov eax, dword [ebp - 0x88c]
mov ecx, dword [eax]
lea edx, [ebp - 0x894]
push edx
push eax
call dword [ecx + 0x10]
mov dword [ebp - 0x884], eax
mov edi, 0x209
mov ebx, 0x80070000
cmp dword [ebp - 0x884], esi
jl 0x108a1c8
xor eax, eax
push 0x410
mov word [ebp - 0x630], ax
lea eax, [ebp - 0x62e]
push esi
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
push dword [ebp - 0x89c]
lea eax, [ebp - 0x630]
push edi
push eax
call fcn.01035122
lea eax, [ebp - 0x630]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAddBackslashW]
lea eax, [ebp - 0x854]
push eax
push edi
lea eax, [ebp - 0x630]
push eax
call fcn.0103d8e6
test dword [ebp - 0x880], 0x10
jne 0x108a128
mov ecx, dword [ebp - 0x8a4]
lea eax, [ebp - 0x630]
push eax
push dword [ebp - 0x894]
call fcn.0108992b
test eax, eax
jne 0x108a128
lea eax, [ebp - 0x888]
push eax
mov eax, dword [ebp - 0x8a4]
push dword [eax + 0x3c]
mov dword [ebp - 0x888], esi
call fcn.01087ee6
cmp eax, esi
mov dword [ebp - 0x884], eax
jl 0x108a112
mov ecx, dword [ebp - 0x888]
cmp ecx, esi
je 0x108a0b4
mov eax, dword [ecx]
push esi
lea edx, [ebp - 0x630]
push edx
call dword [eax + 0x34]
mov ecx, dword [ebp - 0x888]
mov dword [ebp - 0x884], eax
cmp eax, esi
jl 0x108a118
cmp ecx, esi
je 0x108a128
lea edx, [ebp - 0x898]
push edx
push 0x1002bd0
mov dword [ebp - 0x898], esi
mov eax, dword [ecx]
push ecx
call dword [eax]
cmp eax, esi
mov dword [ebp - 0x884], eax
jl 0x108a0fc
mov eax, dword [ebp - 0x88c]
cmp eax, esi
je 0x108a0fc
push dword [ebp - 0x898]
mov ecx, dword [eax]
push esi
push 0xfffffffffffffffe
push eax
call dword [ecx + 0x2c]
mov dword [ebp - 0x884], eax
mov eax, dword [ebp - 0x898]
cmp eax, esi
je 0x108a112
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x898], esi
mov ecx, dword [ebp - 0x888]
cmp ecx, esi
je 0x108a128
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [ebp - 0x888], esi
cmp dword [ebp - 0x884], esi
jge 0x108a136
mov dword [ebp - 0x884], esi
lea eax, [ebp - 0x880]
push eax
push dword [ebp - 0x890]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x108a19f
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x12
jne 0x108a164
mov dword [ebp - 0x8a0], 1
jmp 0x108a19f
cmp eax, esi
jle 0x108a16f
and eax, 0xffff
or eax, ebx
mov dword [ebp - 0x884], eax
mov eax, dword [section..data]
cmp eax, section..data
je 0x108a19f
test byte [eax + 0x1c], 4
je 0x108a19f
push dword [ebp - 0x884]
push 0x10215f0
push 0x15
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01079041
mov eax, dword [ebp + 0x10]
cmp eax, esi
je 0x108a1bc
test dword [ebp + 0xc], 0x200000
je 0x108a1bc
xor ecx, ecx
inc ecx
cmp dword [eax], ecx
jne 0x108a1bc
mov dword [ebp - 0x8a0], ecx
cmp dword [ebp - 0x8a0], esi
je 0x1089fda
cmp dword [ebp - 0x890], 0xffffffff
je 0x108a222
push dword [ebp - 0x890]
call dword [sym.imp.KERNEL32.dll_FindClose]
test eax, eax
jne 0x108a222
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, esi
jle 0x108a1f2
and eax, 0xffff
or eax, ebx
mov dword [ebp - 0x884], eax
mov eax, dword [section..data]
cmp eax, section..data
je 0x108a222
test byte [eax + 0x1c], 4
je 0x108a222
push dword [ebp - 0x884]
push 0x10215f0
push 0x16
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01079041
mov eax, dword [ebp - 0x88c]
cmp eax, esi
je 0x108a238
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x88c], esi
mov eax, dword [ebp - 0x894]
cmp eax, esi
je 0x1089f83
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x894], esi
jmp 0x1089f83