Function at 0x1000127e
Capabilities:
Enumerate files on windows
Get common file path

Disassembly:
mov eax, 0x1000443f
call fcn.10004128
sub esp, 0x278
push ebx
push edi
lea ecx, [ebp - 0x24]
xor bl, bl
call fcn.10003592
and dword [ebp - 4], 0
lea ecx, [ebp - 0x40]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_void_]
push 0x104
lea eax, [ebp - 0x284]
push eax
mov byte [ebp - 4], 1
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
lea eax, [ebp - 0x284]
push eax
lea ecx, [ebp - 0x40]
call dword [sym.imp.MSVCP90.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::append_char_const__]
push 0x100071e4
lea ecx, [ebp - 0x40]
call dword [sym.imp.MSVCP90.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::append_char_const__]
push 6
lea ecx, [ebp - 0x24]
call fcn.10002674
push eax
lea ecx, [ebp - 0x40]
call dword [sym.imp.MSVCP90.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::append_char_const__]
cmp dword [ebp - 0x28], 0x10
mov eax, dword [ebp - 0x3c]
jae 0x100012fb
lea eax, [ebp - 0x3c]
lea ecx, [ebp - 0x180]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov edi, eax
cmp edi, 0xffffffff
jne 0x1000133b
xor bl, bl
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.100035d8
mov ecx, dword [ebp - 0xc]
pop edi
mov al, bl
pop ebx
mov dword fs:[0], ecx
leave
ret
push esi
mov esi, dword [sym.imp.KERNEL32.dll_FindNextFileA]
jmp 0x10001401
push 7
lea ecx, [ebp - 0x24]
call fcn.10002674
push eax
lea eax, [ebp - 0x154]
push eax
call fcn.10001138
pop ecx
pop ecx
test eax, eax
jne 0x10001366
mov bl, 1
push 8
lea ecx, [ebp - 0x24]
call fcn.10002674
push eax
lea eax, [ebp - 0x154]
push eax
call fcn.10001138
pop ecx
pop ecx
test eax, eax
jne 0x10001385
mov bl, 1
push 9
lea ecx, [ebp - 0x24]
call fcn.10002674
push eax
lea eax, [ebp - 0x154]
push eax
call fcn.10001138
pop ecx
pop ecx
test eax, eax
jne 0x100013a4
mov bl, 1
push 0xa
lea ecx, [ebp - 0x24]
call fcn.10002674
push eax
lea eax, [ebp - 0x154]
push eax
call fcn.10001138
pop ecx
pop ecx
test eax, eax
jne 0x100013c3
mov bl, 1
push 0xb
lea ecx, [ebp - 0x24]
call fcn.10002674
push eax
lea eax, [ebp - 0x154]
push eax
call fcn.10001138
pop ecx
pop ecx
test eax, eax
jne 0x100013e2
mov bl, 1
push 0xc
lea ecx, [ebp - 0x24]
call fcn.10002674
push eax
lea eax, [ebp - 0x154]
push eax
call fcn.10001138
pop ecx
pop ecx
test eax, eax
jne 0x10001401
mov bl, 1
lea eax, [ebp - 0x180]
push eax
push edi
call esi
test eax, eax
jne 0x10001347
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
pop esi
jmp 0x10001312