Function at 0x589280
Capabilities:
Enumerate files on windows
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x464
mov eax, dword [0x6a1da0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
lea eax, [ebp - 0x110]
push eax
push 0
push 0
push 0x20
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
test eax, eax
jne 0x58950d
push 0x676a14
lea eax, [ebp - 0x110]
push 0x104
push eax
call fcn.005b0d94
lea eax, [ebp - 0x110]
push eax
push 0x676a18
lea eax, [ebp - 0x320]
push 0x104
push eax
call fcn.005afb41
add esp, 0x1c
lea eax, [ebp - 0x460]
push eax
lea eax, [ebp - 0x320]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x464], eax
cmp eax, 0xffffffff
je 0x58950d
mov ebx, dword [sym.imp.KERNEL32.dll_FindClose]
mov esi, eax
mov edi, dword [sym.imp.KERNEL32.dll_FindNextFileA]
lea ebx, [ebx]
mov ecx, 0x674df0
lea eax, [ebp - 0x434]
jmp 0x589330
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x589350
test dl, dl
je 0x58934c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x589350
add eax, 2
add ecx, 2
test dl, dl
jne 0x589330
xor eax, eax
jmp 0x589355
sbb eax, eax
or eax, 1
test eax, eax
je 0x5894f8
mov ecx, 0x676a20
lea eax, [ebp - 0x434]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x589388
test dl, dl
je 0x589384
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x589388
add eax, 2
add ecx, 2
test dl, dl
jne 0x589368
xor eax, eax
jmp 0x58938d
sbb eax, eax
or eax, 1
test eax, eax
je 0x5894f8
lea eax, [ebp - 0x434]
push eax
lea eax, [ebp - 0x110]
push eax
push 0x6757cc
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.005afb41
add esp, 0x14
test byte [ebp - 0x460], 0x10
je 0x589520
push 0x676a24
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.005b0d94
add esp, 0xc
lea eax, [ebp - 0x460]
push eax
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x5894f2
mov edx, 0x674df0
lea ecx, [ebp - 0x434]
lea esp, [esp]
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x589430
test al, al
je 0x58942c
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x589430
add ecx, 2
add edx, 2
test al, al
jne 0x589410
xor eax, eax
jmp 0x589435
sbb eax, eax
or eax, 1
test eax, eax
je 0x5894dd
mov eax, 0x676a20
lea ecx, [ebp - 0x434]
mov dl, byte [ecx]
cmp dl, byte [eax]
jne 0x589468
test dl, dl
je 0x589464
mov dl, byte [ecx + 1]
cmp dl, byte [eax + 1]
jne 0x589468
add ecx, 2
add eax, 2
test dl, dl
jne 0x589448
xor eax, eax
jmp 0x58946d
sbb eax, eax
or eax, 1
test eax, eax
je 0x5894dd
lea eax, [ebp - 0x434]
push str.HEAD
push eax
call fcn.005b0040
lea ecx, [ebp - 0x434]
add esp, 8
cmp eax, ecx
jne 0x5894a7
mov eax, ecx
push str..png
push eax
call fcn.005b0040
add esp, 8
test eax, eax
jne 0x589588
lea eax, [ebp - 0x434]
push str.SIAM
push eax
call fcn.005b0040
lea ecx, [ebp - 0x434]
add esp, 8
cmp eax, ecx
jne 0x5894dd
mov eax, ecx
push str..png
push eax
call fcn.005b0040
add esp, 8
test eax, eax
jne 0x589588
lea eax, [ebp - 0x460]
push eax
push esi
call edi
test eax, eax
jne 0x589401
push esi
call ebx
mov esi, dword [ebp - 0x464]
lea eax, [ebp - 0x460]
push eax
push esi
call edi
test eax, eax
jne 0x589320
push esi
call ebx
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005af2c3
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x434]
push str.HEAD
push eax
call fcn.005b0040
lea ecx, [ebp - 0x434]
add esp, 8
cmp eax, ecx
jne 0x589552
mov eax, ecx
push str..png
push eax
call fcn.005b0040
add esp, 8
test eax, eax
jne 0x589588
lea eax, [ebp - 0x434]
push str.SIAM
push eax
call fcn.005b0040
lea ecx, [ebp - 0x434]
add esp, 8
cmp eax, ecx
jne 0x5894f8
mov eax, ecx
push str..png
push eax
call fcn.005b0040
add esp, 8
test eax, eax
je 0x5894f8
push esi
call ebx
mov ecx, dword [ebp - 4]
mov al, 1
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005af2c3
mov esp, ebp
pop ebp
ret