Function at 0x10026e3d
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
lea ebp, [esp - 0x10c8]
mov eax, 0x1148
call fcn.10049f60
mov eax, dword [0x1008bc20]
xor eax, ebp
mov dword [ebp + 0x10c4], eax
push ebx
push esi
push edi
mov esi, ecx
jmp 0x10026f30
cmp dword [esi + 0x288], 1
jne 0x10026f3d
test byte [esi + 0x140], 0x10
je 0x10026f1d
mov edi, 0x100686f8
lea ebx, [esi + 0x16c]
push edi
push ebx
call fcn.100496e0
pop ecx
pop ecx
test eax, eax
je 0x10026f1d
push 0x1006a0b4
push ebx
call fcn.100496e0
pop ecx
pop ecx
test eax, eax
je 0x10026f1d
test byte [esi], 0x10
je 0x10026f1d
lea ebx, [esi + 0x2c]
push edi
push ebx
call fcn.100496e0
pop ecx
pop ecx
test eax, eax
je 0x10026f1d
push 0x1006a0b4
push ebx
call fcn.100496e0
pop ecx
pop ecx
test eax, eax
je 0x10026f1d
lea eax, [ebp + 0xc4]
push eax
push esi
mov ecx, esi
call fcn.10026d29
test eax, eax
je 0x10026f1d
push 0x14
call fcn.10045263
pop ecx
test eax, eax
je 0x10026f04
lea ecx, [ebp + 0xc4]
push ecx
mov ecx, eax
call fcn.1002646e
mov edi, eax
jmp 0x10026f06
xor edi, edi
cmp dword [edi], 0
jne 0x10027118
mov ecx, edi
call fcn.100264bb
push edi
call fcn.1004523d
pop ecx
push esi
push dword [esi + 0x280]
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov dword [esi + 0x288], eax
cmp dword [esi + 0x280], 0xffffffff
jne 0x10026e66
mov eax, dword [esi + 0x280]
cmp eax, 0xffffffff
je 0x10026f4f
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [esi + 0x288], 0
jne 0x100271a2
mov edi, 0x800
lea ebx, [esi + 0x140]
push ebx
push dword [esi + 0x284]
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
je 0x100271a2
test byte [ebx], 0x10
je 0x10027195
lea ebx, [esi + 0x16c]
push 0x100686f8
push ebx
call fcn.100496e0
pop ecx
pop ecx
test eax, eax
je 0x10027195
push 0x1006a0b4
push ebx
call fcn.100496e0
pop ecx
pop ecx
test eax, eax
je 0x10027195
lea eax, [esi + 0x28c]
push eax
lea eax, [ebp + 0x8c4]
push edi
push eax
call fcn.1004a640
push ebx
lea eax, [ebp + 0x8c4]
push edi
push eax
call fcn.1004a5cc
push 0x1006a0b0
lea eax, [ebp + 0x8c4]
push edi
push eax
call fcn.1004a5cc
add esp, 0x24
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp + 0x8c4]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x80], eax
cmp eax, 0xffffffff
je 0x10027195
test byte [ebp - 0x7c], 0x10
je 0x10027177
lea eax, [ebp - 0x50]
push 0x100686f8
push eax
call fcn.100496e0
pop ecx
pop ecx
test eax, eax
je 0x10027177
lea eax, [ebp - 0x50]
push 0x1006a0b4
push eax
call fcn.100496e0
pop ecx
pop ecx
test eax, eax
je 0x10027177
lea eax, [ebp - 0x50]
push eax
lea eax, [esi + 0x128c]
push eax
call fcn.10046520
pop ecx
pop ecx
test eax, eax
je 0x10027177
lea eax, [ebp + 0x8c4]
push eax
call fcn.100465b0
lea ecx, [ebp + 0x8c4]
dec ecx
mov byte [eax + ecx], 0
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp + 0x8c4]
push edi
push eax
call fcn.1004a5cc
lea eax, [esi + 0xa8c]
push eax
lea eax, [ebp + 0x8c4]
push edi
push eax
call fcn.1004a5cc
add esp, 0x1c
push esi
lea eax, [ebp + 0x8c4]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [esi + 0x280], eax
cmp eax, 0xffffffff
je 0x1002715d
test byte [esi], 0x10
je 0x10027148
lea ebx, [esi + 0x2c]
push 0x100686f8
push ebx
call fcn.100496e0
pop ecx
pop ecx
test eax, eax
je 0x10027148
push 0x1006a0b4
push ebx
call fcn.100496e0
pop ecx
pop ecx
test eax, eax
je 0x10027148
lea eax, [ebp + 0xc4]
push eax
push esi
mov ecx, esi
call fcn.10026d29
test eax, eax
je 0x10027148
push 0x14
call fcn.10045263
pop ecx
test eax, eax
je 0x1002712f
lea ecx, [ebp + 0xc4]
push ecx
mov ecx, eax
call fcn.1002646e
mov ebx, eax
jmp 0x10027131
push esi
push dword [esi + 0x280]
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov dword [esi + 0x288], eax
mov eax, edi
jmp 0x100271a4
xor ebx, ebx
cmp dword [ebx], 0
jne 0x100271bc
mov ecx, ebx
call fcn.100264bb
push ebx
call fcn.1004523d
pop ecx
push esi
push dword [esi + 0x280]
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x100270b9
push dword [esi + 0x280]
call dword [sym.imp.KERNEL32.dll_FindClose]
or dword [esi + 0x280], 0xffffffff
and dword [esi + 0x288], 0
lea eax, [ebp - 0x7c]
push eax
push dword [ebp - 0x80]
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x10027009
push dword [ebp - 0x80]
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [esi + 0x288], 0
je 0x10026f61
xor eax, eax
mov ecx, dword [ebp + 0x10c4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10045c30
add ebp, 0x10c8
leave
ret
push esi
push dword [esi + 0x280]
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
push dword [ebp - 0x80]
mov dword [esi + 0x288], eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, ebx
jmp 0x100271a4