Function at 0x5402c0
Capabilities:
Enumerate files on windows
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0xa0
mov esi, ecx
mov edi, dword [ebp + 8]
mov eax, dword [0x644040]
xor eax, ebp
mov dword [esp + 0x98], eax
pcmpeqd xmm0, xmm0
lea ebx, [esp + 0x50]
movdqa xmmword [ebx + 0x20], xmm0
movdqa xmmword [ebx + 0x10], xmm0
movdqa xmmword [ebx], xmm0
lea eax, [esp + 0x40]
push 0x8b
push str.file_enumerator_win.cc
push str.Next
push eax
call fcn.0050b300
add esp, 0x10
xor eax, eax
mov ecx, ebx
push eax
push eax
call fcn.00522210
mov dword [esp + 0x88], 0xa
mov al, byte [0x649456]
test al, al
mov dword [esp + 8], esi
jne 0x540aac
lea eax, [esi + 0x258]
mov dword [esp + 4], eax
lea eax, [esi + 4]
mov dword [esp + 0x18], eax
lea eax, [esi + 0x30]
mov dword [esp + 0x30], eax
lea eax, [esi + 0x26c]
mov dword [esp + 0x2c], eax
cmp byte [esi], 0
je 0x5406f3
push dword [esp + 0x18]
push dword [esi + 0x254]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x54063e
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp dword [esi + 0x254], 0xffffffff
je 0x540879
xor eax, eax
dec eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
mov edi, dword [esp + 0x30]
push edi
call fcn.005643e2
add esp, 4
cmp eax, 0x7ffffff8
jae 0x540a6e
mov ebx, eax
cmp eax, 4
jbe 0x5405bc
mov esi, ebx
or esi, 3
inc esi
js 0x540a69
lea eax, [esi + esi]
push eax
call fcn.00562bc5
add esp, 4
mov dword [esp + 0x34], eax
or esi, 0x80000000
mov dword [esp + 0x3c], esi
mov dword [esp + 0x38], ebx
lea esi, [eax + ebx*2]
cmp eax, edi
seta cl
cmp esi, edi
setbe dl
or dl, cl
je 0x540a77
test ebx, ebx
je 0x540413
add ebx, ebx
push ebx
push edi
push eax
call fcn.005670c0
add esp, 0xc
mov word [esi], 0
movsx edx, byte [esp + 0x3f]
test edx, edx
mov eax, dword [esp + 0x34]
mov ebx, dword [esp + 0x38]
mov esi, edx
cmovs esi, ebx
lea edi, [esp + 0x34]
mov dword [esp + 0x10], eax
cmovs edi, eax
test esi, esi
je 0x540453
xor eax, eax
xor ecx, ecx
nop
cmp word [edi + eax*2], 0
je 0x540a08
add ecx, 0xfffffffe
inc eax
cmp esi, eax
jne 0x540440
xor eax, eax
dec eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], eax
lea ecx, [esp + 0x34]
lea eax, [esp + 0x8c]
push eax
call fcn.00526f00
cmp byte [esp + 0x97], 0
jns 0x5405e0
lea ebx, [esp + 0x40]
mov ecx, ebx
push dword [esp + 0x90]
push dword [esp + 0x90]
call fcn.0050b0a0
cmp byte [esp + 0x97], 0
mov edi, dword [ebp + 8]
jns 0x5404b6
push dword [esp + 0x8c]
call fcn.00562bc0
add esp, 4
movsx ecx, byte [esp + 0x4b]
test ecx, ecx
mov esi, dword [esp + 0x44]
cmovns esi, ecx
mov eax, dword [esp + 0x40]
mov edx, ebx
cmovs edx, eax
test esi, esi
js 0x540a4b
sete bl
test edx, edx
setne bh
or bh, bl
je 0x540a5a
cmp esi, 2
je 0x54069a
cmp esi, 1
je 0x540606
xor ebx, ebx
mov esi, dword [esp + 8]
test cl, cl
jns 0x54050a
push eax
call fcn.00562bc0
add esp, 4
test bl, bl
jne 0x540622
mov eax, dword [esp + 0x18]
mov ebx, dword [eax]
xor eax, eax
dec eax
mov dword [edi], eax
mov dword [edi + 4], eax
mov dword [edi + 8], eax
movsx eax, byte [esp + 0x3f]
test eax, eax
cmovs eax, dword [esp + 0x38]
mov edx, dword [esp + 0x34]
lea ecx, [esp + 0x34]
cmovns edx, ecx
test eax, eax
js 0x540a4b
sete cl
test edx, edx
setne ch
or ch, cl
je 0x540a5a
mov ecx, dword [esp + 4]
push eax
push edx
push edi
call fcn.0052c990
xor esi, esi
inc esi
test bl, 0x10
jne 0x5405c9
mov eax, dword [esp + 8]
test dword [eax + 0x268], esi
mov esi, eax
je 0x540612
mov eax, dword [esi + 0x278]
test eax, eax
jne 0x540659
cmp byte [esp + 0x3f], 0
jns 0x540599
push dword [esp + 0x34]
call fcn.00562bc0
add esp, 4
lea ecx, [esp + 0x50]
call fcn.00540b60
mov ecx, dword [esp + 0x98]
xor ecx, ebp
call fcn.00565ea5
mov eax, edi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 4
mov byte [esp + 0x3f], bl
lea eax, [esp + 0x34]
jmp 0x5403ed
mov esi, 2
mov eax, dword [esp + 8]
cmp byte [eax + 0x264], 1
jne 0x540566
jmp 0x5408c9
mov eax, dword [esp + 0x94]
mov dword [esp + 0x48], eax
movq xmm0, qword [esp + 0x8c]
movq qword [esp + 0x40], xmm0
mov edi, dword [ebp + 8]
lea ebx, [esp + 0x40]
jmp 0x5404b6
cmp word [edx], 0x2e
sete bl
jmp 0x5404f9
cmp byte [edi + 0xb], 0
jns 0x540622
push dword [edi]
call fcn.00562bc0
add esp, 4
cmp byte [esp + 0x3f], 0
jns 0x54035d
push dword [esp + 0x34]
call fcn.00562bc0
add esp, 4
jmp 0x54035d
push dword [esi + 0x254]
call dword [sym.imp.KERNEL32.dll_FindClose]
mov dword [esi + 0x254], 0xffffffff
jmp 0x54037e
cmp eax, 1
jne 0x540a9b
lea eax, [esi + 0x26c]
cmp byte [esi + 0x277], 0
js 0x540aa5
cmp byte [esp + 0x3f], 0
lea ecx, [esp + 0x34]
jns 0x540684
mov ecx, dword [esp + 0x34]
push eax
push ecx
call dword [sym.imp.SHLWAPI.dll_PathMatchSpecW]
cmp eax, 1
je 0x540586
jmp 0x540612
cmp word [edx], 0x2e
mov esi, dword [esp + 8]
lea edx, [esp + 0x40]
jne 0x540927
test cl, cl
cmovs edx, eax
cmp word [edx + 2], 0x2e
jne 0x540927
test byte [esi + 0x268], 4
sete bl
jmp 0x5404fd
pxor xmm0, xmm0
movq qword [edi], xmm0
mov dword [edi + 8], 0
jmp 0x540599
mov ecx, dword [eax + 8]
mov edx, dword [esp + 4]
mov dword [edx + 8], ecx
movq xmm0, qword [eax]
movq qword [edx], xmm0
jmp 0x54074d
mov eax, dword [esi + 0x290]
cmp dword [esi + 0x28c], eax
je 0x5406cb
mov ecx, dword [esi + 0x288]
test eax, eax
je 0x540ae0
dec eax
cmp ecx, eax
jb 0x540a86
lea eax, [eax + eax*2]
shl eax, 2
add eax, dword [esi + 0x284]
cmp dword [esp + 4], eax
je 0x54074d
cmp byte [esi + 0x263], 0
movzx edx, byte [eax + 0xb]
js 0x5408fa
test dl, dl
jns 0x5406df
mov ecx, dword [esp + 4]
push dword [eax + 4]
push dword [eax]
call fcn.0052b2c0
lea ebx, [esi + 0x290]
mov eax, dword [esi + 0x288]
mov edx, dword [esi + 0x290]
test edx, edx
je 0x540ae7
lea ecx, [edx - 1]
mov dword [ebx], ecx
cmp eax, edx
jb 0x540a89
cmp eax, ecx
jb 0x540a8c
cmp edx, 0x80000000
je 0x540a8f
lea edx, [esi + 0x284]
mov dword [esp + 0x10], edx
mov edx, dword [edx]
lea ecx, [ecx + ecx*2]
cmp byte [edx + ecx*4 + 0xb], 0
jns 0x5407b1
lea eax, [edx + ecx*4]
push dword [eax]
call fcn.00562bc0
add esp, 4
mov eax, dword [esi + 0x288]
cmp eax, 5
jae 0x54092e
xor eax, eax
dec eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], eax
mov eax, dword [esi + 0x278]
test eax, eax
jne 0x5407ea
movsx eax, byte [esi + 0x277]
test eax, eax
lea ebx, [esp + 0x40]
js 0x540804
lea edx, [esi + 0x26c]
jmp 0x540810
cmp eax, 1
lea ebx, [esp + 0x40]
jne 0x540af3
mov ecx, dword [esp + 4]
push 1
push 0x62e4be
jmp 0x54082e
mov eax, dword [esi + 0x270]
mov edx, dword [esi + 0x26c]
test eax, eax
js 0x540a4b
sete cl
test edx, edx
setne ch
or ch, cl
je 0x540a5a
mov ecx, dword [esp + 4]
push eax
push edx
push ebx
call fcn.0052c990
cmp byte [esp + 0x4b], 0
mov eax, ebx
jns 0x540841
mov eax, dword [esp + 0x40]
push 2
xor ecx, ecx
push ecx
push ecx
push dword [esp + 0x24]
push 1
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov dword [esi + 0x254], eax
mov byte [esi], 1
cmp byte [esp + 0x4b], 0
jns 0x54037e
push dword [esp + 0x40]
call fcn.00562bc0
add esp, 4
jmp 0x54037e
mov byte [esi], 0
cmp dword [esi + 0x278], 0
jne 0x54089f
cmp byte [esi + 0x277], 0
js 0x5408b7
mov byte [esi + 0x277], 1
mov ecx, dword [esp + 0x2c]
mov dword [ecx], 0x2a
cmp eax, 0x12
je 0x54035d
cmp dword [esi + 0x27c], 0
je 0x54035d
jmp 0x540913
mov dword [esi + 0x270], 1
mov ecx, dword [esi + 0x26c]
jmp 0x540899
cmp byte [edi + 0xb], 0
mov eax, edi
jns 0x5408d3
mov eax, dword [edi]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
bt eax, 0xa
jb 0x540566
mov eax, dword [esp + 8]
lea ecx, [eax + 0x284]
mov edx, edi
call fcn.00411b50
jmp 0x540566
test dl, dl
jns 0x540903
mov edx, dword [eax + 4]
mov eax, dword [eax]
mov ecx, dword [esp + 4]
push edx
push eax
call fcn.00407f70
jmp 0x54074d
push eax
call fcn.00407710
add esp, 4
mov dword [esi + 0x280], eax
jmp 0x5406cb
xor ebx, ebx
jmp 0x5404fd
lea ecx, [esi + 0x28c]
mov dword [esp + 0x28], ecx
mov edx, dword [ecx]
mov ecx, dword [ebx]
mov dword [esp + 0xc], ecx
xor ecx, ecx
cmp edx, dword [esp + 0xc]
cmova ecx, eax
mov dword [esp + 0x24], edx
sub ecx, edx
add ecx, dword [esp + 0xc]
dec eax
mov edx, eax
sub edx, ecx
cmp edx, ecx
jb 0x5407ba
mov edx, ecx
shr edx, 2
add edx, ecx
cmp edx, 4
mov ecx, 3
cmovae ecx, edx
cmp ecx, eax
jae 0x5407ba
mov eax, ecx
inc eax
mov ecx, 0xc
mov dword [esp + 0x20], eax
mul ecx
mov dword [esp + 0x14], eax
jo 0x540b39
push 0
push dword [esp + 0x18]
push 0x635600
call fcn.00520a50
add esp, 0xc
mov ecx, eax
test eax, eax
mov dword [esp + 0x1c], eax
je 0x540b0f
lea eax, [esp + 0x40]
mov dword [eax], ecx
mov edx, dword [esp + 0x20]
mov dword [eax + 4], edx
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x24]
push ebx
push dword [esp + 0x2c]
push eax
push dword [esp + 0x18]
call fcn.00411ce0
add esp, 0x10
push 0
push dword [esi + 0x284]
push 0x635600
call fcn.0050f6b0
add esp, 0xc
mov eax, dword [esp + 0x1c]
mov dword [esi + 0x284], eax
mov eax, dword [esp + 0x20]
mov dword [esi + 0x288], eax
jmp 0x5407ba
cmp edi, ecx
sete al
cmp ecx, 2
sete ah
or ah, al
jne 0x540453
neg ecx
sar ecx, 1
test dl, dl
jns 0x540a3a
cmp ebx, ecx
jb 0x540a92
mov dword [esp + 0x38], ecx
mov eax, dword [esp + 0x10]
mov word [eax + ecx*2], 0
jmp 0x540453
cmp ecx, edx
ja 0x540a92
lea eax, [esp + 0x34]
mov dword [esp + 0x10], eax
mov byte [eax + 0xb], cl
jmp 0x540a2b
push str....._third_partylibc_srcinclude_string_view:318:_assertion___len___static_cast_size_type__numeric_limits_difference_type_::max____failed:_string_view::string_view__CharT___size_t_:_length_does_not_fit_in_difference_type_n
push 0x622e92
call fcn.0058fdd0
push str....._third_partylibc_srcinclude_string_view:320:_assertion___len__0____s___nullptr_failed:_string_view::string_view__CharT___size_t_:_received_nullptr_n
push 0x622e92
call fcn.0058fdd0
call fcn.00593680
lea ecx, [esp + 0x34]
call fcn.00593660
push str....._third_partylibc_srcinclude__stringchar_traits.h:222:_assertion__std::__is_pointer_in_range___s1____s1____n____s2__failed:_char_traits::copy:_source_and_destination_ranges_overlap_n
push 0x622e92
call fcn.0058fdd0
int3
int3
int3
int3
lea ecx, [esp + 0x34]
call fcn.00593900
call fcn.00592180
jmp 0x540612
mov eax, dword [eax]
jmp 0x540675
movzx ecx, al
lea eax, [esp + 0x8c]
lea edx, [esp + 0x40]
mov dword [eax], edx
lea esi, [esp + 0x34]
mov dword [esi], str.ScopedBlockingCall
lea edx, [esp + 0x88]
push eax
push esi
mov esi, dword [esp + 0x10]
call fcn.005b5b90
add esp, 8
jmp 0x54033b
mov eax, ecx
jmp 0x54070f
lea ecx, [eax - 1]
mov dword [ebx], ecx
mov edx, eax
jmp 0x540774
call fcn.00592180
pxor xmm0, xmm0
movq qword [esp + 0x40], xmm0
mov dword [esp + 0x48], 0
jmp 0x540834
cmp byte [0x655014], 1
jne 0x5409b3
push dword [esp + 0x14]
call fcn.005c92f0
mov ecx, dword [esp + 0x20]
add esp, 4
test al, al
jne 0x540992
jmp 0x5409b3
int3