Function at 0x5acec0
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x65ee24
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x134c
call fcn.005e1650
mov eax, dword [0x6f853c]
push ebx
push esi
push edi
xor edi, edi
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x11f8], ecx
mov dword [ebp - 4], edi
mov dword [ebp - 0x11f0], edi
mov dword [ebp - 0x11ec], edi
mov dword [ebp - 0x11e8], edi
mov dword [ebp - 0x11e4], edi
push edi
mov ebx, 0xf
push 0x666713
lea ecx, [ebp - 0x1214]
mov byte [ebp - 4], 1
mov dword [ebp - 0x11fc], ebx
mov dword [ebp - 0x1200], edi
mov byte [ebp - 0x1210], 0
call fcn.00401500
lea eax, [ebp - 0x1214]
push eax
lea ecx, [ebp - 0x11f4]
mov byte [ebp - 4], 2
call fcn.005ac570
cmp dword [ebp - 0x11fc], 0x10
jb 0x5acf6f
mov ecx, dword [ebp - 0x1210]
push ecx
call fcn.005e0f6d
add esp, 4
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x38], edi
mov byte [ebp - 0x48], 0
mov byte [ebp - 4], 3
lea ecx, [ecx]
mov eax, dword [ebp - 0x11e4]
cmp eax, edi
je 0x5ad54c
mov edx, dword [ebp - 0x11e8]
add eax, edx
lea ecx, [ebp - 0x11f4]
mov edx, dword [ecx + 8]
dec eax
cmp edx, eax
ja 0x5acfa6
sub eax, edx
mov ecx, dword [ecx + 4]
mov eax, dword [ecx + eax*4]
push 0xffffffffffffffff
push edi
push eax
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x54], edi
mov byte [ebp - 0x64], 0
call fcn.00401410
mov eax, dword [ebp - 0x11e4]
cmp eax, edi
mov byte [ebp - 4], 4
je 0x5ad019
mov edx, dword [ebp - 0x11e8]
mov ecx, dword [ebp - 0x11ec]
lea eax, [eax + edx - 1]
cmp ecx, eax
ja 0x5acfe6
sub eax, ecx
mov ecx, dword [ebp - 0x11f0]
mov esi, dword [ecx + eax*4]
cmp dword [esi + 0x18], 0x10
jb 0x5ad001
mov eax, dword [esi + 4]
push eax
call fcn.005e0f6d
add esp, 4
mov dword [esi + 0x18], ebx
mov dword [esi + 0x14], edi
mov byte [esi + 4], 0
dec dword [ebp - 0x11e4]
jne 0x5ad019
mov dword [ebp - 0x11e8], edi
mov eax, dword [ebp + 8]
lea edx, [ebp - 0x68]
push edx
push eax
lea ecx, [ebp - 0x12a4]
push ecx
call fcn.00401730
add esp, 0xc
push 0x2a
push eax
lea edx, [ebp - 0x1288]
push edx
mov byte [ebp - 4], 5
call fcn.005a9710
mov ecx, dword [eax + 0x18]
add esp, 0xc
cmp ecx, 0x10
jb 0x5ad053
mov eax, dword [eax + 4]
jmp 0x5ad056
add eax, 4
lea ecx, [ebp - 0x1e0]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov esi, eax
mov eax, dword [ebp - 0x1270]
cmp esi, 0xffffffff
setne bl
cmp eax, 0x10
mov dword [ebp - 0x1218], esi
jb 0x5ad08c
mov edx, dword [ebp - 0x1284]
push edx
call fcn.005e0f6d
add esp, 4
cmp dword [ebp - 0x128c], 0x10
mov dword [ebp - 0x1270], 0xf
mov dword [ebp - 0x1274], edi
mov byte [ebp - 0x1284], 0
mov byte [ebp - 4], 4
jb 0x5ad0bf
mov eax, dword [ebp - 0x12a0]
push eax
call fcn.005e0f6d
add esp, 4
test bl, bl
mov dword [ebp - 0x128c], 0xf
mov dword [ebp - 0x1290], edi
mov byte [ebp - 0x12a0], 0
je 0x5ad517
mov edi, edi
cmp byte [ebp - 0x1b4], 0x2e
je 0x5ad4f5
test byte [ebp - 0x1e0], 0x10
je 0x5ad285
lea ecx, [ebp - 0x1b4]
push ecx
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x126c]
push eax
call fcn.00414310
add esp, 0xc
push 0x2f
push eax
lea ecx, [ebp - 0x1250]
push ecx
mov byte [ebp - 4], 6
call fcn.005a9710
add esp, 0xc
push 0xffffffffffffffff
push edi
push eax
lea ecx, [ebp - 0x12c0]
mov byte [ebp - 4], 7
mov dword [ebp - 0x12a8], 0xf
mov dword [ebp - 0x12ac], edi
mov byte [ebp - 0x12bc], 0
call fcn.00401410
mov edx, dword [ebp - 0x11e4]
mov eax, dword [ebp - 0x11ec]
inc edx
cmp eax, edx
mov byte [ebp - 4], 8
ja 0x5ad17c
push 1
lea ecx, [ebp - 0x11f4]
call fcn.005abf70
mov eax, dword [ebp - 0x11ec]
mov ecx, dword [ebp - 0x11e8]
mov edx, dword [ebp - 0x11e4]
lea esi, [edx + ecx]
cmp eax, esi
ja 0x5ad191
sub esi, eax
mov eax, dword [ebp - 0x11f0]
cmp dword [eax + esi*4], edi
jne 0x5ad1af
push 0x1c
call fcn.005dfe81
mov ecx, dword [ebp - 0x11f0]
add esp, 4
mov dword [ecx + esi*4], eax
mov edx, dword [ebp - 0x11f0]
mov ecx, dword [edx + esi*4]
mov dword [ebp - 0x12ec], ecx
mov dword [ebp - 0x12e0], ecx
cmp ecx, edi
mov byte [ebp - 4], 9
mov esi, 0xf
je 0x5ad1ea
push 0xffffffffffffffff
push edi
lea eax, [ebp - 0x12c0]
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], edi
push eax
mov byte [ecx + 4], 0
call fcn.00401410
mov ecx, dword [ebp - 0x11e4]
mov eax, dword [ebp - 0x12a8]
inc ecx
mov ebx, 0x10
cmp eax, ebx
mov dword [ebp - 0x11e4], ecx
jb 0x5ad215
mov ecx, dword [ebp - 0x12bc]
push ecx
call fcn.005e0f6d
add esp, 4
cmp dword [ebp - 0x1238], ebx
mov dword [ebp - 0x12a8], esi
mov dword [ebp - 0x12ac], edi
mov byte [ebp - 0x12bc], 0
jb 0x5ad23f
mov edx, dword [ebp - 0x124c]
push edx
call fcn.005e0f6d
add esp, 4
cmp dword [ebp - 0x1254], ebx
mov dword [ebp - 0x1238], esi
mov dword [ebp - 0x123c], edi
mov byte [ebp - 0x124c], 0
mov byte [ebp - 4], 4
jb 0x5ad26d
mov eax, dword [ebp - 0x1268]
push eax
call fcn.005e0f6d
add esp, 4
mov dword [ebp - 0x1254], esi
mov dword [ebp - 0x1258], edi
mov byte [ebp - 0x1268], 0
jmp 0x5ad4f5
mov ebx, 0xf
lea eax, [ebp - 0x1b4]
mov dword [ebp - 0x12c4], ebx
mov dword [ebp - 0x12c8], edi
mov byte [ebp - 0x12d8], 0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5ad2a6
sub eax, edx
push eax
lea ecx, [ebp - 0x1b4]
push ecx
lea ecx, [ebp - 0x12dc]
call fcn.00401500
mov esi, dword [ebp - 0x11f8]
lea edx, [ebp - 0x12dc]
push edx
mov ecx, esi
mov byte [ebp - 4], 0xa
call fcn.005aa630
push 0xffffffffffffffff
push edi
push eax
lea ecx, [ebp - 0x4c]
call fcn.00401410
cmp dword [ebp - 0x12c4], 0x10
mov byte [ebp - 4], 4
jb 0x5ad302
mov eax, dword [ebp - 0x12d8]
push eax
call fcn.005e0f6d
add esp, 4
cmp dword [esi + 0x5c], 0x10
mov dword [ebp - 0x12c4], ebx
mov ebx, dword [esi + 0x58]
mov dword [ebp - 0x12c8], edi
mov byte [ebp - 0x12d8], 0
jb 0x5ad323
mov eax, dword [esi + 0x48]
jmp 0x5ad326
lea eax, [esi + 0x48]
mov edx, dword [ebp - 0x38]
cmp edx, edi
je 0x5ad358
cmp edx, ebx
mov ecx, edx
jb 0x5ad335
mov ecx, ebx
cmp dword [ebp - 0x34], 0x10
mov esi, dword [ebp - 0x48]
jae 0x5ad341
lea esi, [ebp - 0x48]
mov edi, eax
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
je 0x5ad34e
sbb eax, eax
sbb eax, 0xffffffff
xor esi, esi
cmp eax, esi
jne 0x5ad404
cmp edx, ebx
jb 0x5ad402
xor eax, eax
cmp edx, ebx
setne al
xor esi, esi
cmp eax, esi
jne 0x5ad404
mov edi, 0xf
lea eax, [ebp - 0x1b4]
mov dword [ebp - 0x11fc], edi
mov dword [ebp - 0x1200], esi
mov byte [ebp - 0x1210], 0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5ad392
sub eax, edx
push eax
lea ecx, [ebp - 0x1b4]
push ecx
lea ecx, [ebp - 0x1214]
call fcn.00401500
mov ecx, dword [ebp - 0x11f8]
lea edx, [ebp - 0x1214]
push edx
lea eax, [ebp - 0x12e4]
push eax
add ecx, 0x1c
mov byte [ebp - 4], 0xb
call fcn.005ac3f0
cmp dword [ebp - 0x11fc], 0x10
mov byte [ebp - 4], 4
jb 0x5ad3ea
mov ecx, dword [ebp - 0x1210]
push ecx
call fcn.005e0f6d
add esp, 4
mov dword [ebp - 0x11fc], edi
mov dword [ebp - 0x1200], esi
mov byte [ebp - 0x1210], 0
jmp 0x5ad4f3
xor esi, esi
lea edx, [ebp - 0x1b4]
push edx
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x1234]
push ecx
call fcn.00414310
add esp, 0xc
push 0xffffffffffffffff
push esi
mov edi, 0xf
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], esi
mov byte [ebp - 0x2c], 0
call fcn.00401410
cmp dword [ebp - 0x121c], 0x10
mov byte [ebp - 4], 0xe
jb 0x5ad459
mov edx, dword [ebp - 0x1230]
push edx
call fcn.005e0f6d
add esp, 4
mov ecx, dword [ebp - 0x18]
cmp ecx, 0x10
mov dword [ebp - 0x1220], esi
mov esi, dword [ebp - 0x2c]
mov dword [ebp - 0x121c], edi
mov byte [ebp - 0x1230], 0
mov edi, esi
jae 0x5ad4a6
lea edi, [ebp - 0x2c]
mov eax, edi
cmp ecx, 0x10
mov edx, dword [ebp - 0x1c]
lea ebx, [edx + eax]
jae 0x5ad490
lea esi, [ebp - 0x2c]
lea esp, [esp]
cmp esi, ebx
je 0x5ad4aa
movsx eax, byte [esi]
push eax
call fcn.005e27d3
add esp, 4
mov byte [edi], al
inc esi
inc edi
jmp 0x5ad490
mov eax, esi
jmp 0x5ad47e
lea ecx, [ebp - 0x30]
push ecx
mov ecx, dword [ebp - 0x11f8]
add ecx, 4
call fcn.00550840
mov edx, dword [ebp + 0xc]
push 0xffffffffffffffff
push 0
push edx
mov ecx, eax
call fcn.00401410
cmp dword [ebp - 0x18], 0x10
mov byte [ebp - 4], 4
jb 0x5ad4e1
mov eax, dword [ebp - 0x2c]
push eax
call fcn.005e0f6d
add esp, 4
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], 0
mov byte [ebp - 0x2c], 0
xor edi, edi
mov edx, dword [ebp - 0x1218]
lea ecx, [ebp - 0x1e0]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x5ad0e0
mov esi, dword [ebp - 0x1218]
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [ebp - 0x50], 0x10
mov byte [ebp - 4], 3
jb 0x5ad534
mov eax, dword [ebp - 0x64]
push eax
call fcn.005e0f6d
add esp, 4
mov dword [ebp - 0x50], 0xf
mov dword [ebp - 0x54], edi
mov byte [ebp - 0x64], 0
mov ebx, 0xf
jmp 0x5acf80
cmp dword [ebp - 0x34], 0x10
jb 0x5ad55e
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.005e0f6d
add esp, 4
lea ecx, [ebp - 0x11f4]
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x38], edi
mov byte [ebp - 0x48], 0
call fcn.005a9800
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x14]
call fcn.005e1637
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8