Function at 0x10500bd
Capabilities:
Enumerate files on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x2ec
mov eax, dword [0x1076530]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
push 1
mov dword [ebp - 0x2a8], eax
mov eax, dword [ebp + 0x10]
push 0x1b8d
push 0x1009d04
lea ecx, [ebp - 0x284]
mov dword [ebp - 0x2a4], eax
call fcn.01055826
or dword [ebp - 0x260], 0xffffffff
xor esi, esi
mov eax, 0x1010420
push 0x24c
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x2dc], eax
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x2c4], eax
mov dword [ebp - 0x2b8], eax
lea eax, [ebp - 0x250]
push esi
push eax
mov dword [ebp - 0x2e4], esi
mov dword [ebp - 0x2e0], esi
mov dword [ebp - 0x2d8], esi
mov dword [ebp - 0x2d4], esi
mov dword [ebp - 0x2cc], esi
mov dword [ebp - 0x2c8], esi
mov dword [ebp - 0x2c0], esi
mov dword [ebp - 0x2bc], esi
mov dword [ebp - 0x2b4], esi
mov dword [ebp - 0x2b0], esi
mov dword [ebp - 0x25c], esi
mov dword [ebp - 0x298], esi
mov dword [ebp - 0x294], esi
mov dword [ebp - 0x290], esi
mov dword [ebp - 0x258], esi
mov dword [ebp - 0x28c], esi
mov dword [ebp - 0x288], esi
mov dword [ebp - 0x254], esi
call sub.msvcrt.dll_memset
mov eax, dword [edi + 0xc]
mov edi, dword [eax + 4]
mov eax, dword [edi + 0x5cc]
add esp, 0xc
mov dword [ebp - 0x2ac], eax
lea eax, [ebp - 0x2e8]
push eax
push 0x17e2
mov ebx, 0x1077450
push ebx
mov dword [ebp - 0x29c], esi
call fcn.01064977
mov dword [ebp - 0x284], eax
cmp eax, esi
mov eax, 0x1ba5
jl 0x1050607
mov word [ebp - 0x280], ax
lea eax, [ebp - 0x2dc]
push eax
push 0x17e1
push ebx
call fcn.01064977
mov dword [ebp - 0x284], eax
cmp eax, esi
mov eax, 0x1ba6
jl 0x1050607
mov word [ebp - 0x280], ax
mov eax, dword [ebp - 0x2a4]
push dword [eax + 8]
push dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
push esi
push 1
push 0x1002
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x2ec], eax
cmp eax, esi
jne 0x1050263
call fcn.0105d3b8
mov dword [ebp - 0x284], eax
mov eax, 0x1bad
jmp 0x1050607
mov eax, 0x1bad
xor ebx, ebx
mov dword [ebp - 0x284], esi
mov word [ebp - 0x280], ax
cmp dword [ebp - 0x2ac], esi
jbe 0x10502cc
mov dword [ebp - 0x2a0], esi
mov ecx, dword [edi + 0x5c8]
mov edx, dword [ebp - 0x2a0]
mov eax, dword [ebp - 0x2a8]
push dword [ecx + edx + 8]
mov eax, dword [eax + 4]
push eax
call dword [sym.imp.msvcrt.dll__wcsicmp]
pop ecx
pop ecx
test eax, eax
je 0x10502bd
add dword [ebp - 0x2a0], 0x20
inc ebx
cmp ebx, dword [ebp - 0x2ac]
jb 0x1050285
jmp 0x10502cc
shl ebx, 5
add ebx, dword [edi + 0x5c8]
mov dword [ebp - 0x29c], ebx
mov eax, dword [ebp - 0x29c]
mov edx, dword [eax + 0x14]
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push 0x10098a8
lea ecx, [ebp - 0x2b8]
call fcn.01064650
mov dword [ebp - 0x284], eax
cmp eax, esi
mov eax, 0x1bbb
jl 0x1050607
mov word [ebp - 0x280], ax
lea eax, [ebp - 0x254]
push eax
push dword [ebp - 0x2b8]
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x260], eax
cmp eax, 0xffffffff
je 0x105060e
cmp eax, esi
je 0x105060e
push esi
lea eax, [ebp - 0x25c]
push eax
call fcn.0101725a
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
lea eax, [ebp - 0x228]
push eax
mov eax, dword [ebp - 0x29c]
mov edx, dword [eax + 0x14]
lea ecx, [ebp - 0x2b8]
call fcn.01064650
mov dword [ebp - 0x284], eax
cmp eax, esi
mov eax, 0x1bc4
jl 0x1050607
mov word [ebp - 0x280], ax
lea eax, [ebp - 0x25c]
push eax
push 0x1009428
push esi
push dword [ebp - 0x2b8]
call dword [sym.imp.SHELL32.dll_SHCreateItemFromParsingName]
mov dword [ebp - 0x284], eax
cmp eax, esi
mov eax, 0x1bc5
jl 0x1050607
lea edx, [ebp - 0x288]
push edx
mov word [ebp - 0x280], ax
mov eax, dword [ebp - 0x25c]
mov ecx, dword [eax]
push esi
push eax
call dword [ecx + 0x14]
mov dword [ebp - 0x284], eax
cmp eax, esi
mov eax, 0x1bc8
jl 0x1050607
push dword [ebp - 0x288]
mov word [ebp - 0x280], ax
push 0x13f1
push dword [0x1077408]
lea eax, [ebp - 0x2d0]
push eax
call fcn.01064856
add esp, 0x10
mov dword [ebp - 0x284], eax
cmp eax, esi
mov eax, 0x1bc9
jl 0x1050607
mov edi, dword [ebp - 0x2a8]
mov edx, dword [edi + 0x24]
lea ecx, [ebp - 0x298]
mov word [ebp - 0x280], ax
call fcn.010367e8
mov dword [ebp - 0x284], eax
cmp eax, esi
mov eax, 0x1bcc
jl 0x1050607
mov word [ebp - 0x280], ax
mov eax, dword [ebp - 0x258]
cmp eax, esi
je 0x105045a
push eax
mov dword [ebp - 0x258], esi
call fcn.0101ad5d
lea edx, [ebp - 0x258]
lea ecx, [ebp - 0x298]
call fcn.0101facf
cmp eax, esi
mov dword [ebp - 0x284], eax
jl 0x10505fb
mov edi, dword [edi + 0x20]
mov ecx, 0x1bcd
mov word [ebp - 0x280], cx
cmp eax, 1
je 0x10505c6
mov ebx, dword [ebp - 0x258]
mov eax, dword [ebx + 4]
lea ecx, [ebp - 0x228]
push ecx
push eax
call dword [sym.imp.msvcrt.dll__wcsicmp]
pop ecx
mov edi, eax
pop ecx
neg edi
push ebx
sbb edi, edi
mov dword [ebp - 0x258], esi
call fcn.0101ad5d
inc edi
jne 0x10505c6
lea edx, [ebp - 0x258]
lea ecx, [ebp - 0x298]
call fcn.0101facf
cmp eax, esi
mov dword [ebp - 0x284], eax
jl 0x1050602
mov ecx, 0x1bd9
mov word [ebp - 0x280], cx
cmp eax, 1
jne 0x1050491
lea eax, [ebp - 0x28c]
push eax
push dword [ebp - 0x2ec]
push dword [ebp - 0x25c]
call fcn.010467e6
test eax, eax
jge 0x1050519
mov dword [ebp - 0x28c], 5
mov edx, dword [ebp - 0x2e8]
lea ecx, [ebp - 0x2c4]
call fcn.0106470b
mov dword [ebp - 0x284], eax
cmp eax, esi
mov eax, 0x1beb
jl 0x1050607
push esi
push esi
push esi
push dword [ebp - 0x2c4]
mov word [ebp - 0x280], ax
push esi
push 1
push dword [ebp - 0x28c]
push esi
push 0xffffffffffffffff
push dword [ebp - 0x2d0]
push dword [ebp - 0x2a4]
call fcn.010660a3
mov dword [ebp - 0x284], eax
cmp eax, esi
mov eax, 0x1bf7
jl 0x1050607
mov word [ebp - 0x280], ax
cmp dword [ebp - 0x290], esi
je 0x105059d
push dword [ebp - 0x290]
call fcn.01037232
mov dword [ebp - 0x290], esi
lea eax, [ebp - 0x254]
push eax
push dword [ebp - 0x260]
mov dword [ebp - 0x294], esi
mov dword [ebp - 0x298], esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x1050331
jmp 0x105060e
cmp edi, esi
je 0x10504f3
mov edx, dword [ebp - 0x2dc]
lea ecx, [ebp - 0x2c4]
mov dword [ebp - 0x28c], 2
call fcn.0106470b
mov dword [ebp - 0x284], eax
cmp eax, esi
mov eax, 0x1be0
jmp 0x1050537
mov eax, 0x1bcd
jmp 0x1050607
mov eax, 0x1bd9
mov word [ebp - 0x27e], ax
mov edi, dword [sym.imp.ole32.dll_CoTaskMemFree]
push esi
call edi
push dword [ebp - 0x288]
call edi
cmp dword [ebp - 0x260], 0xffffffff
mov edi, dword [ebp - 0x284]
mov dword [ebp - 0x288], esi
je 0x1050648
cmp dword [ebp - 0x260], esi
je 0x1050648
push dword [ebp - 0x260]
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [ebp - 0x258], esi
je 0x105065b
push dword [ebp - 0x258]
call fcn.0101ad5d
cmp dword [ebp - 0x290], esi
je 0x105066e
push dword [ebp - 0x290]
call fcn.01037232
mov eax, dword [ebp - 0x25c]
cmp eax, esi
je 0x105067e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x2b8]
call fcn.010635b3
lea ecx, [ebp - 0x2c4]
call fcn.010635b3
lea ecx, [ebp - 0x2d0]
call fcn.010635b3
lea ecx, [ebp - 0x2dc]
call fcn.010635b3
lea ecx, [ebp - 0x2e8]
call fcn.010635b3
lea ecx, [ebp - 0x284]
call fcn.01055a3c
mov ecx, dword [ebp - 4]
mov eax, edi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.01054fa7
leave
ret 0xc