Function at 0x1013129b
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
sub esp, 0x250
lea ebp, [esp - 4]
mov eax, dword [0x101f6410]
xor eax, ebp
mov dword [ebp + 0x250], eax
push 0x90
mov eax, 0x10198663
call fcn.10145d80
mov eax, dword [ebp + 0x25c]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp + 0x260]
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x48]
xor edi, edi
push eax
mov dword [ebp - 0x50], edi
call fcn.1005c0e2
lea ecx, [ebp - 0x90]
mov dword [ebp - 4], edi
mov dword [esp], 0x101a4288
call fcn.10007b11
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x8c]
push eax
mov byte [ebp - 4], 1
call fcn.100100f8
mov eax, dword [eax]
lea ecx, [ebp]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp eax, 0xffffffff
lea ecx, [ebp - 0x8c]
mov dword [ebp - 0x64], eax
sete bl
call fcn.10003b75
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0
call fcn.10003b75
test bl, bl
je 0x10131371
xor esi, esi
lea ecx, [ebp - 0x48]
call fcn.10003b75
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x250]
xor ecx, ebp
call fcn.10145d71
add ebp, 0x254
leave
ret 8
push 4
mov ecx, 0x101a7204
lea eax, [ebp + 0x2c]
pop esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x101313a0
cmp dx, di
je 0x1013139c
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x101313a0
add eax, esi
add ecx, esi
cmp dx, di
jne 0x1013137c
xor eax, eax
jmp 0x101313a5
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, edi
je 0x101318e0
mov ecx, 0x101a71fc
lea eax, [ebp + 0x2c]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x101313d9
cmp dx, di
je 0x101313d5
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x101313d9
add eax, esi
add ecx, esi
cmp dx, di
jne 0x101313b5
xor eax, eax
jmp 0x101313de
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, edi
je 0x101318e0
lea eax, [ebp + 0x2c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.10007b11
push esi
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 2
call fcn.10011776
mov eax, dword [eax]
push 0x101a71f0
push eax
call fcn.1014631e
pop ecx
pop ecx
test eax, eax
lea ecx, [ebp - 0x88]
setne bl
call fcn.10003b75
test bl, bl
je 0x1013143a
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0
call fcn.10003b75
jmp 0x101318e0
mov dword [ebp - 0x10], edi
lea eax, [ebp + 0x2c]
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x78]
push eax
mov byte [ebp - 4], 3
call fcn.10007b6e
mov eax, dword [eax]
or dword [ebp - 0x50], 1
lea ecx, [ebp - 0x10]
push ecx
push eax
mov byte [ebp - 4], 4
call fcn.10126d24
pop ecx
test eax, eax
mov eax, dword [ebp - 0x10]
pop ecx
jl 0x10131477
cmp eax, edi
je 0x10131477
xor bl, bl
jmp 0x10131479
mov bl, 1
test byte [ebp - 0x50], 1
mov dword [ebp - 4], 3
je 0x10131495
and dword [ebp - 0x50], 0xfffffffe
lea ecx, [ebp - 0x78]
call fcn.10003b75
mov eax, dword [ebp - 0x10]
test bl, bl
je 0x101314a9
cmp eax, edi
mov byte [ebp - 4], 2
je 0x10131429
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x10131429
mov dword [ebp - 0x14], edi
mov ecx, dword [eax]
lea edx, [ebp - 0x14]
push edx
push str.custombuttons_button_search
push eax
mov byte [ebp - 4], 5
call dword [ecx + 0x94]
mov eax, dword [ebp - 0x14]
cmp eax, edi
jne 0x101314ce
mov eax, dword [ebp - 0x10]
jmp 0x10131499
mov dword [ebp - 0x14], edi
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
lea edx, [ebp - 0x14]
push edx
push 0x101a6a40
push eax
call dword [ecx + 0x94]
cmp dword [ebp - 0x14], edi
je 0x101314c9
push dword [ebp - 0x14]
lea ecx, [ebp - 0x44]
call fcn.10056fc1
lea eax, [ebp + 0x2c]
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x6c]
push eax
mov byte [ebp - 4], 6
call fcn.10007b6e
push eax
lea eax, [ebp - 0x30]
push eax
mov byte [ebp - 4], 7
call fcn.1005bf3d
pop ecx
pop ecx
lea ecx, [ebp - 0x6c]
call fcn.10003b75
mov dword [ebp - 0x20], edi
push 0x1019f188
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xa
call fcn.10007b11
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
lea edx, [ebp - 0x20]
push edx
push str.custombuttons_button_option_default
push eax
mov byte [ebp - 4], 0xb
call dword [ecx + 0x94]
push dword [ebp - 0x20]
lea ecx, [ebp - 0x3c]
call fcn.10056fc1
cmp dword [ebp - 0x20], edi
mov byte [ebp - 4], 0xc
je 0x101315af
mov eax, dword [ebp - 0x3c]
cmp eax, edi
je 0x101315af
mov dword [ebp - 0x54], edi
mov ecx, dword [eax]
lea edx, [ebp - 0x54]
push edx
push eax
mov byte [ebp - 4], 0xd
call dword [ecx + 0x68]
push dword [ebp - 0x54]
lea ecx, [ebp - 0x80]
call fcn.10007b11
push eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xe
call fcn.10007845
lea ecx, [ebp - 0x80]
call fcn.10003b75
push dword [ebp - 0x54]
mov byte [ebp - 4], 0xc
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
lea eax, [ebp - 0x30]
push eax
push 0x101f7ee8
lea eax, [ebp - 0x40]
push eax
call fcn.100100f8
mov dword [ebp - 0x18], edi
push edi
push edi
push edi
push ecx
lea eax, [ebp - 0x28]
mov ecx, esp
mov dword [ebp - 0x54], esp
push eax
mov byte [ebp - 4], 0x10
call fcn.10007ade
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x44]
lea eax, [ebp - 0x30]
push ecx
mov ecx, esp
mov dword [ebp - 0x98], esp
push eax
mov byte [ebp - 4], 0x11
call fcn.10007ade
push ecx
lea eax, [ebp - 0x40]
mov ecx, esp
mov dword [ebp - 0x9c], esp
push eax
mov byte [ebp - 4], 0x12
call fcn.10007ade
mov byte [ebp - 4], 0x10
call fcn.10059ecc
add esp, 0x20
cmp dword [ebp - 0x18], edi
je 0x10131854
push dword [ebp - 0x18]
lea ecx, [ebp - 0x24]
call fcn.1003da00
xor edi, edi
cmp dword [ebp - 0x24], edi
mov byte [ebp - 4], 0x13
je 0x1013167e
lea eax, [ebp + 0x2c]
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x94]
push eax
call fcn.10007b6e
push dword [eax]
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x14
call fcn.10005f82
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x16
call fcn.10003b75
mov eax, dword [ebp - 0x24]
push dword [ebp - 0x68]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x40]
push dword [ebp - 0x68]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
push dword [ebp - 0x70]
lea ecx, [ebp - 0x38]
call fcn.1000d8ac
push dword [ebp - 0x18]
lea ecx, [ebp - 0x2c]
call fcn.1000d8ac
push dword [ebp - 0x74]
lea ecx, [ebp - 0x34]
call fcn.1000d8ac
mov eax, dword [ebp - 0x38]
cmp eax, edi
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
mov byte [ebp - 4], 0x19
je 0x10131906
cmp ecx, edi
je 0x10131906
cmp edx, edi
je 0x10131906
mov edx, dword [eax]
push ecx
push eax
call dword [edx + 0x14]
mov eax, dword [ebp - 0x34]
lea edx, [ebp - 0x60]
push edx
mov dword [ebp - 0x60], edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0xc]
mov eax, dword [ebp - 0x18]
push dword [ebp - 0x60]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x2c]
mov eax, dword [ebp - 0x34]
push dword [ebp - 0x2c]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x14]
push dword [ebp - 0x18]
lea ecx, [ebp - 0x58]
call fcn.10056fe0
mov dword [ebp - 0x4c], edi
mov eax, dword [ebp - 0x58]
cmp eax, edi
mov byte [ebp - 4], 0x1b
jne 0x10131737
mov eax, dword [ebp - 0x34]
cmp eax, edi
mov byte [ebp - 4], 0x18
je 0x1013171d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x2c]
cmp eax, edi
mov byte [ebp - 4], 0x17
je 0x10131928
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x10131928
mov ecx, dword [eax]
lea edx, [ebp - 0x4c]
push edx
push edi
push 0x2111
push eax
call dword [ecx + 0x24]
cmp dword [ebp - 0x4c], edi
jne 0x1013175f
mov eax, dword [ebp - 0x58]
cmp eax, edi
mov byte [ebp - 4], 0x19
je 0x1013170c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x1013170c
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x5c]
call fcn.1003da47
mov esi, dword [ebp - 0x5c]
cmp esi, edi
mov byte [ebp - 4], 0x1c
jne 0x10131788
mov eax, dword [ebp - 0x4c]
cmp eax, edi
mov byte [ebp - 4], 0x1a
je 0x1013174c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x1013174c
push 0x101b9a98
lea ecx, [ebp - 0x84]
call fcn.10005f82
mov edi, eax
push 0x101a33d8
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x1d
call fcn.10005f82
mov edi, dword [edi]
mov eax, dword [eax]
mov ecx, dword [esi]
push edi
push eax
push esi
mov byte [ebp - 4], 0x1e
call dword [ecx + 0x1c]
push dword [ebp - 0x7c]
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
call esi
push dword [ebp - 0x84]
mov byte [ebp - 4], 0x1c
call esi
mov eax, dword [ebp - 0x5c]
mov ecx, dword [eax]
push 4
push eax
call dword [ecx + 0x18]
mov eax, dword [ebp - 0x5c]
test eax, eax
mov byte [ebp - 4], 0x1b
je 0x101317ee
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x4c]
test eax, eax
mov byte [ebp - 4], 0x1a
je 0x101317ff
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x58]
test eax, eax
mov byte [ebp - 4], 0x19
je 0x10131810
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x34]
test eax, eax
mov byte [ebp - 4], 0x18
je 0x10131821
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x2c]
test eax, eax
mov byte [ebp - 4], 0x17
je 0x10131832
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x38]
test eax, eax
mov byte [ebp - 4], 0x13
je 0x10131843
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x24]
test eax, eax
mov byte [ebp - 4], 0x10
je 0x10131854
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x18]
test eax, eax
mov byte [ebp - 4], 0xf
je 0x10131865
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x40]
call fcn.10003b75
mov eax, dword [ebp - 0x3c]
test eax, eax
mov byte [ebp - 4], 0xb
je 0x1013187e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x28]
call fcn.10003b75
mov eax, dword [ebp - 0x20]
test eax, eax
mov byte [ebp - 4], 9
je 0x10131897
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x30]
call fcn.10003b75
mov eax, dword [ebp - 0x44]
test eax, eax
mov byte [ebp - 4], 5
je 0x101318b0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
test eax, eax
mov byte [ebp - 4], 3
je 0x101318c1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10]
test eax, eax
mov byte [ebp - 4], 2
je 0x101318d2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0
call fcn.10003b75
xor edi, edi
lea eax, [ebp]
push eax
push dword [ebp - 0x64]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x10131371
push dword [ebp - 0x64]
call dword [sym.imp.KERNEL32.dll_FindClose]
xor esi, esi
inc esi
jmp 0x10131342
cmp edx, edi
mov byte [ebp - 4], 0x18
je 0x1013191a
mov eax, dword [edx]
push edx
call dword [eax + 8]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x2c]
cmp ecx, edi
mov byte [ebp - 4], 0x17
je 0x1013192b
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebp - 0x38]
cmp eax, edi
mov byte [ebp - 4], 0x13
je 0x10131939
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x24]
cmp eax, edi
mov byte [ebp - 4], 0x10
je 0x1013194a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x18]
cmp eax, edi
mov byte [ebp - 4], 0xf
je 0x1013195b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x40]
call fcn.10003b75
mov eax, dword [ebp - 0x3c]
cmp eax, edi
mov byte [ebp - 4], 0xb
je 0x10131974
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x28]
call fcn.10003b75
mov eax, dword [ebp - 0x20]
cmp eax, edi
mov byte [ebp - 4], 9
je 0x1013198d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x30]
call fcn.10003b75
mov eax, dword [ebp - 0x44]
cmp eax, edi
mov byte [ebp - 4], 5
je 0x101319a6
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
cmp eax, edi
mov byte [ebp - 4], 3
je 0x101314c9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x101314c9