Function at 0x5aef84
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffe88
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x174], ebx
mov dword [ebp - 0x178], ebx
mov dword [ebp - 0x16c], ebx
mov dword [ebp - 0x170], ebx
mov dword [ebp - 0x164], ebx
mov dword [ebp - 0x168], ebx
mov dword [ebp - 0x160], ebx
mov dword [ebp - 0x15c], ebx
mov dword [ebp - 0x158], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov esi, eax
mov eax, dword [ebp - 8]
call fcn.004042f8
xor eax, eax
push ebp
push 0x5af20c
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 4], eax
xor eax, eax
mov edx, 0x722fb8
mov ecx, eax
cmp cl, 7
ja 0x5af006
and ecx, 0x7f
bt dword [esi + 0x36d], ecx
jae 0x5af00d
mov ecx, dword [edx]
or dword [ebp - 4], ecx
inc eax
add edx, 4
cmp al, 4
jne 0x5aeff5
or dword [ebp - 4], 0x10
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 8]
call fcn.00403f5c
lea edx, [ebp - 0x158]
mov eax, dword [ebp - 0x10]
call fcn.005aa110
mov edx, dword [ebp - 0x158]
lea eax, [ebp - 0x10]
call fcn.00403f5c
mov eax, dword [ebp - 8]
mov al, byte [eax]
call fcn.00402ac0
mov ebx, eax
lea eax, [ebp - 0x154]
push eax
lea eax, [ebp - 0x15c]
mov ecx, 0x5af224
mov edx, dword [ebp - 0x10]
call fcn.00404190
mov eax, dword [ebp - 0x15c]
call fcn.00404308
push eax
call fcn.00407e24
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xffffffff
je 0x5af1de
xor eax, eax
push ebp
push 0x5af1d7
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
lea eax, [ebp - 0x154]
call fcn.005aed8c
pop ecx
test al, al
je 0x5af1a8
lea eax, [ebp - 0x160]
lea edx, [ebp - 0x128]
mov ecx, 0x104
call fcn.004040f4
mov ecx, dword [ebp - 0x160]
mov eax, dword [esi + 0x254]
mov edx, dword [ebp - 0xc]
call fcn.004c1764
mov edi, eax
xor eax, eax
mov al, bl
cmp byte [esi + eax + 0x2fb], 1
jne 0x5af0ec
mov dl, 1
mov eax, edi
call fcn.004c0d54
jmp 0x5af12c
push ebp
lea eax, [ebp - 0x168]
lea edx, [ebp - 0x128]
mov ecx, 0x104
call fcn.004040f4
mov ecx, dword [ebp - 0x168]
lea eax, [ebp - 0x164]
mov edx, dword [ebp - 0x10]
call fcn.00404190
mov eax, dword [ebp - 0x164]
call fcn.005aee50
pop ecx
mov edx, eax
mov eax, edi
call fcn.004c0d54
lea eax, [ebp - 0x170]
lea edx, [ebp - 0x128]
mov ecx, 0x104
call fcn.004040f4
mov ecx, dword [ebp - 0x170]
lea eax, [ebp - 0x16c]
mov edx, dword [ebp - 0x10]
call fcn.00404190
mov eax, dword [ebp - 0x16c]
call fcn.005aa458
mov edx, eax
mov eax, edi
call fcn.004c0914
lea eax, [ebp - 0x178]
lea edx, [ebp - 0x128]
mov ecx, 0x104
call fcn.004040f4
mov ecx, dword [ebp - 0x178]
lea eax, [ebp - 0x174]
mov edx, dword [ebp - 0x10]
call fcn.00404190
mov eax, dword [ebp - 0x174]
call fcn.005aa4c8
mov edx, eax
mov eax, edi
call fcn.004c0960
lea eax, [ebp - 0x154]
push eax
mov eax, dword [ebp - 0x14]
push eax
call fcn.00407e2c
test eax, eax
jne 0x5af092
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5af1de
mov eax, dword [ebp - 0x14]
push eax
call fcn.00407e1c
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5af213
lea eax, [ebp - 0x178]
mov edx, 9
call fcn.00403ee8
lea eax, [ebp - 0x10]
call fcn.00403ec4
lea eax, [ebp - 8]
call fcn.00403ec4
ret