Function at 0x589240
Capabilities:
Enumerate files on windows
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x464
mov eax, dword [0x6a1da0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
lea eax, [ebp - 0x110]
push eax
push 0
push 0
push 0x20
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
test eax, eax
jne 0x5894cd
push 0x676a04
lea eax, [ebp - 0x110]
push 0x104
push eax
call fcn.005b0d34
lea eax, [ebp - 0x110]
push eax
push 0x676a08
lea eax, [ebp - 0x320]
push 0x104
push eax
call fcn.005afae1
add esp, 0x1c
lea eax, [ebp - 0x460]
push eax
lea eax, [ebp - 0x320]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x464], eax
cmp eax, 0xffffffff
je 0x5894cd
mov ebx, dword [sym.imp.KERNEL32.dll_FindClose]
mov esi, eax
mov edi, dword [sym.imp.KERNEL32.dll_FindNextFileA]
lea ebx, [ebx]
mov ecx, 0x674df0
lea eax, [ebp - 0x434]
jmp 0x5892f0
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x589310
test dl, dl
je 0x58930c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x589310
add eax, 2
add ecx, 2
test dl, dl
jne 0x5892f0
xor eax, eax
jmp 0x589315
sbb eax, eax
or eax, 1
test eax, eax
je 0x5894b8
mov ecx, 0x676a10
lea eax, [ebp - 0x434]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x589348
test dl, dl
je 0x589344
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x589348
add eax, 2
add ecx, 2
test dl, dl
jne 0x589328
xor eax, eax
jmp 0x58934d
sbb eax, eax
or eax, 1
test eax, eax
je 0x5894b8
lea eax, [ebp - 0x434]
push eax
lea eax, [ebp - 0x110]
push eax
push 0x6757cc
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.005afae1
add esp, 0x14
test byte [ebp - 0x460], 0x10
je 0x5894e0
push 0x676a14
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.005b0d34
add esp, 0xc
lea eax, [ebp - 0x460]
push eax
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x5894b2
mov edx, 0x674df0
lea ecx, [ebp - 0x434]
lea esp, [esp]
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x5893f0
test al, al
je 0x5893ec
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x5893f0
add ecx, 2
add edx, 2
test al, al
jne 0x5893d0
xor eax, eax
jmp 0x5893f5
sbb eax, eax
or eax, 1
test eax, eax
je 0x58949d
mov eax, 0x676a10
lea ecx, [ebp - 0x434]
mov dl, byte [ecx]
cmp dl, byte [eax]
jne 0x589428
test dl, dl
je 0x589424
mov dl, byte [ecx + 1]
cmp dl, byte [eax + 1]
jne 0x589428
add ecx, 2
add eax, 2
test dl, dl
jne 0x589408
xor eax, eax
jmp 0x58942d
sbb eax, eax
or eax, 1
test eax, eax
je 0x58949d
lea eax, [ebp - 0x434]
push str.HEAD
push eax
call fcn.005affe0
lea ecx, [ebp - 0x434]
add esp, 8
cmp eax, ecx
jne 0x589467
mov eax, ecx
push str..png
push eax
call fcn.005affe0
add esp, 8
test eax, eax
jne 0x589548
lea eax, [ebp - 0x434]
push str.SIAM
push eax
call fcn.005affe0
lea ecx, [ebp - 0x434]
add esp, 8
cmp eax, ecx
jne 0x58949d
mov eax, ecx
push str..png
push eax
call fcn.005affe0
add esp, 8
test eax, eax
jne 0x589548
lea eax, [ebp - 0x460]
push eax
push esi
call edi
test eax, eax
jne 0x5893c1
push esi
call ebx
mov esi, dword [ebp - 0x464]
lea eax, [ebp - 0x460]
push eax
push esi
call edi
test eax, eax
jne 0x5892e0
push esi
call ebx
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005af263
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x434]
push str.HEAD
push eax
call fcn.005affe0
lea ecx, [ebp - 0x434]
add esp, 8
cmp eax, ecx
jne 0x589512
mov eax, ecx
push str..png
push eax
call fcn.005affe0
add esp, 8
test eax, eax
jne 0x589548
lea eax, [ebp - 0x434]
push str.SIAM
push eax
call fcn.005affe0
lea ecx, [ebp - 0x434]
add esp, 8
cmp eax, ecx
jne 0x5894b8
mov eax, ecx
push str..png
push eax
call fcn.005affe0
add esp, 8
test eax, eax
je 0x5894b8
push esi
call ebx
mov ecx, dword [ebp - 4]
mov al, 1
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005af263
mov esp, ebp
pop ebp
ret