Function at 0x100239d
Capabilities:
Enumerate files on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x880
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
or dword [ebp - 0x874], 0xffffffff
push ebx
push esi
push edi
xor ecx, ecx
push ecx
mov dword [ebp - 0x870], ecx
mov dword [ebp - 0x87c], ecx
mov dword [ebp - 0x878], ecx
lea ecx, [ebp - 0x61c]
mov esi, 0x10011ec
lea edi, [ebp - 0xc]
push ecx
movsd dword es:[edi], dword [esi]
mov ebx, 0x104
push ebx
push eax
mov dword [ebp - 0x880], eax
movsw word es:[edi], word [esi]
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
mov edi, dword [sym.imp.USER32.dll_LoadStringW]
lea esi, [ebx - 5]
test eax, eax
jne 0x1002417
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x870], eax
jmp 0x1002600
lea eax, [ebp - 0x61c]
push eax
call fcn.01003139
test eax, eax
jne 0x1002436
mov dword [ebp - 0x870], 0x57
jmp 0x1002600
push esi
lea eax, [ebp - 0x20c]
push eax
push 0x3e8
push dword [0x1008268]
call edi
lea eax, [ebp - 0x20c]
push eax
call fcn.0100190f
lea eax, [ebp - 0xc]
push eax
call fcn.0100190f
lea eax, [ebp - 0x86c]
push eax
push dword [ebp - 0x880]
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x874], eax
cmp eax, 0xffffffff
jne 0x10024b0
call dword [sym.imp.KERNEL32.dll_GetLastError]
push esi
mov dword [ebp - 0x870], eax
lea eax, [ebp - 0x20c]
push eax
push 0x7d0
push dword [0x1008268]
call edi
lea eax, [ebp - 0x20c]
push eax
call fcn.0100190f
jmp 0x1002600
push esi
lea eax, [ebp - 0x20c]
push eax
push 0x1770
push dword [0x1008268]
call edi
lea eax, [ebp - 0x20c]
push eax
call fcn.0100190f
lea eax, [ebp - 0x840]
push eax
call fcn.0100190f
lea eax, [ebp - 0xc]
push eax
call fcn.0100190f
lea eax, [ebp - 0x61c]
push eax
push ebx
lea eax, [ebp - 0x414]
push eax
mov dword [ebp - 0x87c], 1
call fcn.01003194
test eax, eax
jl 0x10025d9
push 0
push ebx
lea eax, [ebp - 0x840]
push eax
lea eax, [ebp - 0x414]
push eax
call fcn.010032ba
test eax, eax
je 0x10025d9
push dword [ebp + 0xc]
lea eax, [ebp - 0x414]
push eax
call fcn.01001bc6
test eax, eax
je 0x10025d9
mov dword [ebp - 0x878], 1
jmp 0x10025e5
push esi
lea eax, [ebp - 0x20c]
push eax
push 0x1770
push dword [0x1008268]
call edi
lea eax, [ebp - 0x20c]
push eax
call fcn.0100190f
lea eax, [ebp - 0x840]
push eax
call fcn.0100190f
lea eax, [ebp - 0xc]
push eax
call fcn.0100190f
inc dword [ebp - 0x87c]
lea eax, [ebp - 0x61c]
push eax
push ebx
lea eax, [ebp - 0x414]
push eax
call fcn.01003194
test eax, eax
jl 0x10025d9
push 0
push ebx
lea eax, [ebp - 0x840]
push eax
lea eax, [ebp - 0x414]
push eax
call fcn.010032ba
test eax, eax
je 0x10025d9
push dword [ebp + 0xc]
lea eax, [ebp - 0x414]
push eax
call fcn.01001bc6
test eax, eax
je 0x10025d9
inc dword [ebp - 0x878]
jmp 0x10025e5
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x870], eax
lea eax, [ebp - 0x86c]
push eax
push dword [ebp - 0x874]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x1002550
lea eax, [ebp - 0xc]
push eax
call fcn.0100190f
push esi
lea eax, [ebp - 0x20c]
push eax
push 0x960
push dword [0x1008268]
call edi
lea eax, [ebp - 0x20c]
push eax
call fcn.0100190f
push dword [ebp - 0x87c]
mov ebx, 0x1001244
push ebx
lea eax, [ebp - 0x20c]
push esi
push eax
call fcn.01001874
add esp, 0x10
test eax, eax
jl 0x1002656
lea eax, [ebp - 0x20c]
push eax
call fcn.0100190f
push esi
lea eax, [ebp - 0x20c]
push eax
push 0x9c4
push dword [0x1008268]
call edi
lea eax, [ebp - 0x20c]
push eax
call fcn.0100190f
push dword [ebp - 0x878]
lea eax, [ebp - 0x20c]
push ebx
push esi
push eax
call fcn.01001874
add esp, 0x10
pop edi
pop esi
pop ebx
test eax, eax
jl 0x10026a1
lea eax, [ebp - 0x20c]
push eax
call fcn.0100190f
lea eax, [ebp - 0xc]
push eax
call fcn.0100190f
cmp dword [ebp - 0x874], 0xffffffff
je 0x10026bf
push dword [ebp - 0x874]
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x870]
xor ecx, ebp
call fcn.01002c39
leave
ret 8