Function at 0x6a02de
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push ebx
sub esp, 0x4b0
mov eax, dword [ebp + 8]
mov dword [ebp - 0x48c], eax
mov eax, dword [sym.imp.libssp_0.dll___stack_chk_guard]
mov dword [ebp - 0xc], eax
xor eax, eax
mov dword [ebp - 0x47c], 0
mov dword [ebp - 0x319], 0
lea eax, [ebp - 0x315]
mov ecx, 0x100
mov ebx, 0
mov dword [eax], ebx
mov dword [eax + ecx - 4], ebx
lea edx, [eax + 4]
and edx, 0xfffffffc
sub eax, edx
add ecx, eax
and ecx, 0xfffffffc
shr ecx, 2
mov edi, edx
mov eax, ebx
rep stosd dword es:[edi], eax
mov dword [ebp - 0x215], 0
lea eax, [ebp - 0x211]
mov ecx, 0x205
mov ebx, 0
mov dword [eax], ebx
mov dword [eax + ecx - 4], ebx
lea edx, [eax + 4]
and edx, 0xfffffffc
sub eax, edx
add ecx, eax
and ecx, 0xfffffffc
shr ecx, 2
mov edi, edx
mov eax, ebx
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x48c]
mov dword [esp + 8], eax
mov dword [esp + 4], str._s
lea eax, [ebp - 0x47c]
mov dword [esp], eax
call fcn.006c33ae
mov eax, dword [ebp - 0x47c]
mov dword [esp + 8], 0x104
mov dword [esp + 4], eax
lea eax, [ebp - 0x319]
mov dword [esp], eax
call fcn.006c1a88
lea eax, [ebp - 0x45c]
mov dword [esp + 4], eax
lea eax, [ebp - 0x319]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_FindFirstFileA]
call eax
sub esp, 8
mov dword [ebp - 0x474], eax
cmp dword [ebp - 0x474], 0xffffffff
jne 0x6a0410
lea eax, [ebp - 0x47c]
mov dword [ebp - 0x460], eax
mov eax, dword [ebp - 0x460]
mov eax, dword [eax]
mov dword [esp], eax
call sub.msvcrt.dll_free
mov eax, dword [ebp - 0x460]
mov dword [eax], 0
mov eax, 0
jmp 0x6a0583
call fcn.006c42f4
mov dword [ebp - 0x470], eax
mov dword [esp + 8], 0x209
lea eax, [ebp - 0x45c]
add eax, 0x2c
mov dword [esp + 4], eax
lea eax, [ebp - 0x215]
mov dword [esp], eax
call fcn.006c1a88
mov dword [esp + 4], 0x78f9e8
lea eax, [ebp - 0x215]
mov dword [esp], eax
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x6a048a
mov dword [esp + 4], 0x78f9ea
lea eax, [ebp - 0x215]
mov dword [esp], eax
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x6a048a
lea eax, [ebp - 0x215]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x470]
mov dword [esp], eax
call fcn.006c470c
lea eax, [ebp - 0x45c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x474]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_FindNextFileA]
call eax
sub esp, 8
test eax, eax
jne 0x6a041b
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov dword [ebp - 0x46c], eax
cmp dword [ebp - 0x46c], 0x12
je 0x6a0541
mov eax, dword [ebp - 0x46c]
mov dword [esp], eax
call fcn.006c1578
mov dword [ebp - 0x478], eax
mov eax, dword [ebp - 0x478]
mov dword [esp + 0x18], eax
mov eax, dword [ebp - 0x48c]
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], str.Error_reading_directory__s:__s
mov dword [esp + 0xc], str.tor_listdir
mov dword [esp + 4], 0x10
mov dword [esp + 8], 0
mov dword [esp], 4
call fcn.006bf072
lea eax, [ebp - 0x478]
mov dword [ebp - 0x468], eax
mov eax, dword [ebp - 0x468]
mov eax, dword [eax]
mov dword [esp], eax
call sub.msvcrt.dll_free
mov eax, dword [ebp - 0x468]
mov dword [eax], 0
nop
mov eax, dword [ebp - 0x474]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_FindClose]
call eax
sub esp, 4
lea eax, [ebp - 0x47c]
mov dword [ebp - 0x464], eax
mov eax, dword [ebp - 0x464]
mov eax, dword [eax]
mov dword [esp], eax
call sub.msvcrt.dll_free
mov eax, dword [ebp - 0x464]
mov dword [eax], 0
mov eax, dword [ebp - 0x470]
mov edi, dword [ebp - 0xc]
xor edi, dword [sym.imp.libssp_0.dll___stack_chk_guard]
je 0x6a0593
call sub.libssp_0.dll___stack_chk_fail
lea esp, [ebp - 8]
pop ebx
pop edi
pop ebp
ret