Function at 0x10002fa0
Capabilities:
Enumerate files on windows
Get common file path

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
lea edi, [ebp - 0x66c]
push ebx
lea ebx, [ebp - 0x464]
sub esp, 0x7b0
mov dword [esp + 4], 0x104
mov dword [esp], edi
call dword [sym.imp.kernel32.dll_GetWindowsDirectoryW]
xor eax, eax
sub esp, 8
nop
movzx edx, word [edi + eax]
mov word [ebx + eax], dx
add eax, 2
test dx, dx
jne 0x10002fd0
cmp word [ebp - 0x464], 0
mov edx, ebx
je 0x10002ff9
lea esi, [esi]
add edx, 2
cmp word [edx], 0
jne 0x10002ff0
xor eax, eax
nop
lea esi, [esi]
movzx ecx, word [eax + 0x100137a8]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x10003000
cmp word [ebp - 0x464], 0
mov edx, ebx
je 0x10003029
nop
add edx, 2
cmp word [edx], 0
jne 0x10003020
xor eax, eax
nop
lea esi, [esi]
movzx ecx, word [eax + 0x100137a4]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x10003030
lea eax, [ebp - 0x25c]
mov dword [esp], ebx
mov dword [esp + 4], eax
call dword [sym.imp.kernel32.dll_FindFirstFileW]
mov dword [ebp - 0x79c], eax
sub esp, 8
cmp eax, 0xffffffff
je 0x1000328a
lea eax, [ebp - 0x230]
shr eax, 0x10
mov dword [ebp - 0x7a8], eax
jmp 0x100030a4
lea eax, [ebp - 0x25c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x79c]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_FindNextFileW]
sub esp, 8
test eax, eax
je 0x10003278
mov edx, dword [ebp - 0x25c]
and edx, 0x10
jne 0x10003080
xor eax, eax
lea esi, [esi]
movzx ecx, word [edi + eax]
mov word [ebx + eax], cx
add eax, 2
test cx, cx
jne 0x100030b8
cmp word [ebp - 0x464], 0
mov ecx, ebx
je 0x100030e1
lea esi, [esi]
add ecx, 2
cmp word [ecx], 0
jne 0x100030d8
xor eax, eax
nop
lea esi, [esi]
movzx esi, word [eax + 0x100137a8]
mov word [ecx + eax], si
add eax, 2
test si, si
jne 0x100030e8
movzx ecx, word [ebp - 0x230]
movzx esi, word [ebp - 0x464]
mov word [ebp - 0x7a0], cx
test si, si
je 0x10003338
mov eax, ebx
nop
lea esi, [esi]
add eax, 2
cmp word [eax], 0
jne 0x10003120
sub eax, ebx
mov word [ebp - 0x7a0], cx
mov ecx, eax
sar ecx, 1
cmp word [ebp - 0x7a0], 0
mov dword [ebp - 0x7a4], ecx
je 0x100033f8
lea eax, [ebp - 0x230]
add eax, 2
cmp word [eax], 0
jne 0x10003150
lea ecx, [ebp - 0x230]
sub eax, ecx
sar eax, 1
add eax, dword [ebp - 0x7a4]
cmp eax, 0x103
jle 0x100032f8
test byte [0x100110ac], 1
je 0x10003080
mov edx, dword [ebp - 0x7a8]
test edx, edx
je 0x1000340a
lea eax, [ebp - 0x230]
mov dword [esp + 4], 0xffffffff
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, 0x10013007
sub esp, 8
test eax, eax
jne 0x100032c6
cmp word [ebp - 0x230], 0
je 0x1000343e
lea esi, [esi]
mov edx, eax
lea eax, [eax + 1]
cmp word [ebp + edx*2 - 0x22e], 0
jne 0x100031c8
mov ecx, 0x224c
mov dword [ebp - 0x7a0], edx
lea esi, [ebp - 0x230]
mov word [ebp - 0x798], cx
lea ecx, [ebp - 0x796]
jmp 0x1000323d
cmp ax, 9
je 0x10003370
cmp ax, 0xa
jne 0x1000338e
mov eax, 0x6e5c
add ecx, 2
mov word [ecx - 2], ax
mov edx, dword [ebp - 0x7a0]
lea eax, [edx - 1]
test edx, edx
jle 0x10003298
lea edx, [ebp - 0x676]
cmp ecx, edx
ja 0x10003298
mov dword [ebp - 0x7a0], eax
movzx eax, word [esi]
add esi, 2
cmp ax, 0xd
je 0x10003358
jbe 0x10003200
cmp ax, 0x22
je 0x100033e0
cmp ax, 0x5c
jne 0x10003381
mov eax, 0x5c5c
add ecx, 2
mov word [ecx - 2], ax
jmp 0x10003220
mov eax, dword [ebp - 0x79c]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_FindClose]
sub esp, 4
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov byte [ecx], 0x22
test eax, eax
jle 0x10003457
mov esi, 0x2e2e
mov byte [ecx + 3], 0x2e
lea eax, [ecx + 4]
mov word [ecx + 1], si
mov byte [eax], 0
lea eax, [ebp - 0x798]
mov dword [esp], eax
call sym.___wine_dbg_strdup
mov edx, eax
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], str.too_long_file_name__s_n
mov dword [esp + 8], str.load_at_tasks
mov dword [esp + 4], 0x100110ac
mov dword [esp], 0
call sym._wine_dbg_log.constprop.0
jmp 0x10003080
mov eax, ebx
test si, si
je 0x10003310
nop
add eax, 2
cmp word [eax], 0
jne 0x10003300
lea esi, [esi]
movzx ecx, word [ebp + edx - 0x230]
mov word [eax + edx], cx
add edx, 2
test cx, cx
jne 0x10003310
mov dword [esp], ebx
call sym._add_job
jmp 0x10003080
cmp word [ebp - 0x7a0], 0
mov eax, ebx
mov dword [ebp - 0x7a4], 0
jne 0x1000314a
jmp 0x10003310
mov eax, 0x725c
add ecx, 2
mov word [ecx - 2], ax
jmp 0x10003220
mov eax, 0x745c
add ecx, 2
mov word [ecx - 2], ax
jmp 0x10003220
lea edx, [eax - 0x20]
cmp dx, 0x5e
jbe 0x10003434
mov edx, eax
mov byte [ecx], 0x5c
add ecx, 5
shr dx, 0xc
movzx edx, dx
movzx edx, byte [edx + str.0123456789abcdefload_job]
mov byte [ecx - 4], dl
mov edx, eax
shr dx, 8
and edx, 0xf
movzx edx, byte [edx + str.0123456789abcdefload_job]
mov byte [ecx - 3], dl
mov edx, eax
and eax, 0xf
shr dx, 4
movzx eax, byte [eax + str.0123456789abcdefload_job]
and edx, 0xf
movzx edx, byte [edx + str.0123456789abcdefload_job]
mov byte [ecx - 1], al
mov byte [ecx - 2], dl
jmp 0x10003220
mov eax, 0x225c
add ecx, 2
mov word [ecx - 2], ax
jmp 0x10003220
cmp eax, 0x206
jg 0x10003174
mov eax, ebx
jmp 0x10003300
lea eax, [ebp - 0x230]
mov dword [esp], 0x10013011
mov dword [ebp - 0x7a0], eax
movzx eax, word [ebp - 0x7a0]
mov dword [esp + 4], eax
call sym._wine_dbg_sprintf
mov edx, eax
jmp 0x100032c6
mov byte [ecx], al
add ecx, 1
jmp 0x10003220
mov eax, 0x224c
mov byte [ebp - 0x796], 0x22
lea ecx, [ebp - 0x796]
mov word [ebp - 0x798], ax
lea eax, [ecx + 1]
jmp 0x100032b3