Function at 0x4ee2b0
Capabilities:
Enumerate files on windows

Disassembly:
mov eax, 0x5204
call fcn.005d9990
push ebx
mov ebx, dword [esp + 0x520c]
push ebp
push esi
push edi
mov edi, dword [sym.imp.USER32.dll_SendDlgItemMessageA]
xor ebp, ebp
push ebp
push ebp
push 0x184
push 0x67
push ebx
call edi
push 0x67
push ebx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_UpdateWindow]
push ebp
push ebp
push 0xb
push 0x67
push ebx
call edi
mov dword [0x6743e0], ebp
mov dword [0x6743e4], ebp
mov dword [0x6743d8], ebp
mov dword [0x6743dc], ebp
mov dword [0x61a204], 0xffffffff
call dword [sym.imp.USER32.dll_GetFocus]
push ebp
push ebx
mov dword [esp + 0x2c], eax
mov dword [0x6743e8], 1
call fcn.004eda70
lea eax, [esp + 0x1b0]
push eax
push ebx
call fcn.004ed710
lea ecx, [esp + 0x1b8]
push ecx
push str._s.log
push 0x67feb8
call fcn.005d9929
add esp, 0x1c
lea edx, [esp + 0x68]
push edx
push 0x67feb8
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov esi, eax
xor eax, eax
cmp esi, 0xffffffff
sete al
mov dword [esp + 0x10], ebp
cmp eax, ebp
jne 0x4ee444
mov edi, dword [sym.imp.KERNEL32.dll_FindNextFileA]
test byte [esp + 0x68], 0x10
jne 0x4ee42e
xor eax, eax
mov cl, byte [esp + eax + 0x94]
mov byte [eax + 0x67feb8], cl
inc eax
test cl, cl
jne 0x4ee390
cmp dword [0x673f90], 6
jne 0x4ee3dd
push 0x67feb8
lea ecx, [esp + 0x1ac]
push ecx
push 0x5f4a5c
push 0x628dc0
call fcn.005d9929
lea edx, [esp + 0x54]
push edx
push 0x628dc0
call fcn.005e62d7
add esp, 0x18
test eax, eax
je 0x4ee3e1
mov dword [esp + 0x60], ebp
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x10]
push eax
push 0x67feb8
push ecx
call fcn.004e8850
add esp, 0xc
cmp eax, ebp
je 0x4ee42e
mov ecx, dword [esp + 0x88]
mov dword [esp + 0x10], eax
mov edx, dword [eax + 0x44]
mov dword [edx + 0xc], ecx
mov edx, dword [eax + 0x44]
mov eax, dword [edx + 0xc]
mov ecx, dword [0x6743d8]
cdq
add ecx, eax
mov eax, dword [0x6743dc]
adc eax, edx
mov dword [0x6743d8], ecx
mov dword [0x6743dc], eax
lea eax, [esp + 0x68]
push eax
push esi
call edi
test eax, eax
jne 0x4ee383
mov edi, dword [sym.imp.USER32.dll_SendDlgItemMessageA]
cmp esi, 0xffffffff
je 0x4ee450
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [esp + 0x10]
push ebp
push 5
push ecx
call fcn.005547c0
add esp, 0xc
push 0x67feb8
push 0x100
push 0xd
push 0x66
push ebx
mov dword [esp + 0x24], eax
mov dword [esp + 0x2c], ebp
call edi
mov al, byte [0x67feb8]
test al, al
je 0x4ee4a9
push 0x67feb8
call fcn.005f2394
push 0x5f58e4
push 0x67feb8
call fcn.005dc370
add esp, 0xc
neg eax
sbb eax, eax
add eax, 2
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x10]
cmp eax, ebp
mov esi, eax
mov dword [esp + 0x1c], esi
je 0x4ee76f
jmp 0x4ee4c1
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x18]
cmp eax, ebp
mov dword [esp + 0x14], ebp
je 0x4ee806
cmp eax, 1
jne 0x4ee4ea
mov edx, dword [esi]
push eax
push ebp
push edx
push 0x67feb8
call fcn.0058df80
add esp, 0x10
jmp 0x4ee4fa
mov eax, dword [esi]
push 0x67feb8
push eax
call fcn.00422d30
add esp, 8
test eax, eax
je 0x4ee50b
mov dword [esp + 0x14], 1
jmp 0x4ee6fa
cmp dword [0x673f94], ebp
jne 0x4ee6fa
mov ecx, dword [esi]
push ecx
lea edx, [esp + 0x1ac]
push edx
push 0x5f4a5c
push 0x628dc0
call fcn.005d9929
push 0x40
push 0x5f5744
push 0x628dc0
call fcn.005da940
mov ebp, eax
add esp, 0x1c
test ebp, ebp
je 0x4ee6f2
push 0x4000
push 0
push 0
push ebp
call fcn.005dbb35
push ebp
push 0x4000
mov edi, 1
lea eax, [esp + 0x1228]
push edi
push eax
call fcn.005db6f3
mov esi, eax
add esp, 0x20
test esi, esi
jle 0x4ee6e5
jmp 0x4ee590
lea ecx, [esp + 0x1210]
push ecx
mov byte [esp + esi + 0x1214], 0
call fcn.005f2394
mov ecx, dword [0x6743e4]
mov eax, esi
mov esi, dword [0x6743e0]
cdq
add esp, 4
add esi, eax
adc ecx, edx
mov dword [0x6743e0], esi
mov dword [0x6743e4], ecx
test byte [ebp + 0xc], 0x20
jne 0x4ee6e5
cmp dword [esp + 0x18], edi
jne 0x4ee5f1
push edi
push 0
lea edx, [esp + 0x1218]
push edx
push 0x67feb8
call fcn.0058df80
add esp, 0x10
jmp 0x4ee606
lea eax, [esp + 0x1210]
push 0x67feb8
push eax
call fcn.005da9a0
add esp, 8
test eax, eax
je 0x4ee60e
mov dword [esp + 0x14], edi
push ebx
call fcn.004ed7b0
mov al, byte [ebp + 0xc]
add esp, 4
test al, 0x10
jne 0x4ee6e5
push edi
push 0xffffffffffffffce
push ebp
call fcn.005db7ce
add esp, 0xc
test eax, eax
jne 0x4ee6e5
push ebp
call fcn.005dce9c
add esp, 4
test eax, eax
jle 0x4ee6e5
mov esi, dword [0x6743e0]
mov edx, dword [0x6743e4]
push edi
push 0
push 0
add esi, 0xffffffce
push 0
lea ecx, [esp + 0x38]
adc edx, 0xffffffff
push ecx
mov dword [0x6743e0], esi
mov dword [0x6743e4], edx
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x4ee6b6
jmp 0x4ee680
cmp dword [esp + 0x2c], 0x12
je 0x4ee6b6
sub esp, 0x1c
mov ecx, 7
lea esi, [esp + 0x44]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call fcn.004fe880
add esp, 0x1c
push 1
push 0
push 0
push 0
lea edx, [esp + 0x38]
push edx
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x4ee680
cmp dword [0x6743e8], 2
je 0x4ee6e5
push ebp
push 0x4000
mov edi, 1
lea eax, [esp + 0x1218]
push edi
push eax
call fcn.005db6f3
mov esi, eax
add esp, 0x10
test esi, esi
jg 0x4ee590
push ebp
call fcn.005da869
mov esi, dword [esp + 0x20]
add esp, 4
mov edi, dword [sym.imp.USER32.dll_SendDlgItemMessageA]
xor ebp, ebp
cmp dword [0x6743e8], 2
je 0x4ee76f
cmp dword [esp + 0x14], ebp
je 0x4ee760
fild dword [esi + 0xc]
push 1
push ebp
push ebp
push 1
fstp qword [esp + 0x2c]
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x2c]
push 1
push 0x627d58
push ecx
push edx
call fcn.0051d870
mov eax, dword [esi]
push 0x627d58
push eax
push 0x5f8558
push 0x628dc0
call fcn.005d9929
add esp, 0x30
push 0x628dc0
push ebp
push 0x180
push 0x67
push ebx
call edi
cmp eax, 0xffffffff
je 0x4ee76f
cmp eax, 0xfffffffe
je 0x4ee76f
mov eax, dword [esi + 0x40]
cmp eax, ebp
mov dword [esp + 0x1c], eax
jne 0x4ee4bd
lea ecx, [esp + 0x10]
push ecx
call fcn.004e8c50
push 1
push 0x67
push ebx
call fcn.00590500
add esp, 0x10
push ebp
push 1
push 0x185
push 0x67
push ebx
call edi
push ebp
push 1
push 0xb
push 0x67
push ebx
call edi
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
push 1
push ebp
push 0x67
push ebx
call esi
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
push 0x67
push ebx
call esi
push eax
call dword [sym.imp.USER32.dll_UpdateWindow]
push ebp
push ebx
mov dword [0x6743e0], ebp
mov dword [0x6743e4], ebp
mov dword [0x6743d8], ebp
mov dword [0x6743dc], ebp
mov dword [0x61a204], 0xffffffff
mov dword [0x6743e8], ebp
call fcn.004eda70
mov edx, dword [esp + 0x2c]
add esp, 8
push edx
call dword [sym.imp.USER32.dll_SetFocus]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x5204
ret
cmp dword [0x6743e8], 2
je 0x4ee76f
jmp 0x4ee709