Function at 0x100f1417
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
sub esp, 0x8d8
lea ebp, [esp - 4]
mov eax, dword [0x101c6444]
xor eax, ebp
mov dword [ebp + 0x8d8], eax
push 0x30
mov eax, 0x1018c232
call fcn.1015d10b
mov edi, dword [ebp + 0x8e4]
mov esi, dword [ebp + 0x8e8]
push edi
lea ecx, [ebp + 0x250]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x20], esi
call fcn.100019a0
xor ebx, ebx
push ebx
lea ecx, [ebp + 0x2a4]
mov dword [ebp - 4], ebx
mov dword [ebp + 0x2bc], 7
call fcn.1002bde0
lea eax, [ebp + 0x2a4]
push eax
lea eax, [ebp + 0x250]
push eax
mov byte [ebp - 4], 1
call fcn.100f6be6
cmp dword [ebp + 0x2bc], 8
mov eax, dword [ebp + 0x2a8]
pop ecx
pop ecx
jae 0x100f14a2
lea eax, [ebp + 0x2a8]
mov ecx, esi
mov dword [ebp - 0x14], eax
call fcn.100f0ffb
push dword [ebp - 0x14]
call fcn.1015b9e5
mov esi, 0x208
push esi
mov dword [ebp - 0x1c], eax
lea eax, [ebp + 0x6d0]
push ebx
push eax
call fcn.101580b0
push esi
lea eax, [ebp + 0x6d0]
push ebx
push eax
call fcn.101580b0
mov eax, dword [ebp - 0x1c]
add esp, 0x1c
cmp byte [edi + eax - 1], 0x5c
push dword [ebp - 0x14]
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
lea eax, [ebp + 0x6d0]
jne 0x100f1506
push str._s.
push eax
call edi
push dword [ebp - 0x14]
push 0x1019ab40
jmp 0x100f1516
push 0x1019ab30
push eax
call edi
push dword [ebp - 0x14]
push 0x1019ab28
lea eax, [ebp + 0x2c0]
push eax
call edi
add esp, 0x18
lea eax, [ebp]
push eax
lea eax, [ebp + 0x6d0]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp eax, 0xffffffff
mov dword [ebp - 0x14], eax
jne 0x100f1580
mov byte [ebp - 0xd], bl
push ebx
push 1
lea ecx, [ebp + 0x2a4]
call fcn.1002be10
push ebx
push 1
lea ecx, [ebp + 0x250]
call fcn.10001b20
mov al, byte [ebp - 0xd]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x8d8]
xor ecx, ebp
call fcn.101586e7
add ebp, 0x8dc
leave
ret
lea ecx, [ebp]
push ecx
push eax
jmp 0x100f169f
lea eax, [ebp + 0x2c]
push eax
push 0x1019ab00
call fcn.1015db18
test eax, eax
pop ecx
pop ecx
je 0x100f1698
lea eax, [ebp + 0x2c]
push eax
push 0x1019aaf8
call fcn.1015db18
test eax, eax
pop ecx
pop ecx
je 0x100f1698
test byte [ebp], 0x10
je 0x100f1698
push esi
lea eax, [ebp + 0x4c8]
push ebx
push eax
call fcn.101580b0
lea eax, [ebp + 0x2c]
push eax
lea eax, [ebp + 0x2c0]
push eax
lea eax, [ebp + 0x4c8]
push str._s_s_
push eax
call edi
add esp, 0x1c
lea eax, [ebp + 0x4c8]
push eax
lea ecx, [ebp + 0x26c]
call fcn.100ef749
push ebx
lea ecx, [ebp + 0x288]
mov dword [ebp + 0x2a0], 0xf
call fcn.10001ce0
push dword [ebp - 0x18]
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 3
call fcn.100019a0
lea eax, [ebp - 0x3c]
push 1
push eax
mov byte [ebp - 4], 4
call fcn.101031c8
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x3c]
mov byte [ebp - 0xd], al
mov byte [ebp - 4], 3
call fcn.10001b20
cmp byte [ebp - 0xd], bl
lea eax, [ebp + 0x288]
push eax
lea eax, [ebp + 0x26c]
push eax
je 0x100f1662
call fcn.100f6be1
jmp 0x100f1667
call fcn.100f6a5b
pop ecx
pop ecx
mov ecx, dword [ebp - 0x20]
lea eax, [ebp + 0x288]
push eax
call fcn.1003d630
push ebx
push 1
lea ecx, [ebp + 0x288]
call fcn.10001b20
push ebx
push 1
lea ecx, [ebp + 0x26c]
mov byte [ebp - 4], 1
call fcn.1002be10
lea eax, [ebp]
push eax
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x100f158a
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_FindClose]
mov byte [ebp - 0xd], 1
jmp 0x100f153e