Function at 0x706660
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x360
push ebx
push esi
push edi
lea edi, [ebp - 0x360]
mov ecx, 0xd8
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov eax, dword [0x818f7c]
xor eax, ebp
mov dword [ebp - 4], eax
mov byte [ebp - 0x10c], 0
push 0x103
push 0
lea eax, [ebp - 0x10b]
push eax
call fcn.00533469
add esp, 0xc
mov dword [ebp - 0x254], 0
push 0x13c
push 0
lea eax, [ebp - 0x250]
push eax
call fcn.00533469
add esp, 0xc
mov dword [ebp - 0x260], 0
mov dword [ebp - 0x26c], 0
xor eax, eax
mov word [ebp - 0x284], ax
xor eax, eax
mov dword [ebp - 0x282], eax
mov dword [ebp - 0x27e], eax
mov dword [ebp - 0x27a], eax
mov word [ebp - 0x276], ax
xor eax, eax
mov word [ebp - 0x29c], ax
xor eax, eax
mov dword [ebp - 0x29a], eax
mov dword [ebp - 0x296], eax
mov dword [ebp - 0x292], eax
mov word [ebp - 0x28e], ax
call fcn.00533cd9
sub eax, dword [0x955b20]
cmp eax, 0x493e0
jae 0x70673a
xor eax, eax
jmp 0x70693f
call fcn.00533cd9
mov dword [0x955b20], eax
call fcn.0053609c
test eax, eax
jne 0x706754
xor eax, eax
jmp 0x70693f
push 0x104
push 0x9552e0
lea eax, [ebp - 0x10c]
push eax
call fcn.00535647
add esp, 0xc
lea eax, [ebp - 0x10c]
push eax
call fcn.00534274
add esp, 4
push str.PAULATempTimeDetectionFile
push 0x7c1108
lea eax, [ebp - 0x10c]
push eax
call fcn.005343af
add esp, 0xc
mov esi, esp
lea eax, [ebp - 0x254]
push eax
lea ecx, [ebp - 0x10c]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp esi, esp
call fcn.00535fca
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 0xffffffff
jne 0x7067c8
xor eax, eax
jmp 0x70693f
mov esi, esp
lea eax, [ebp - 0x284]
push eax
lea ecx, [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
cmp esi, esp
call fcn.00535fca
mov dword [ebp - 0x260], 0
mov esi, esp
lea eax, [ebp - 0x240]
push eax
lea ecx, [ebp - 0x250]
push ecx
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
cmp esi, esp
call fcn.00535fca
test eax, eax
jle 0x70682c
mov esi, esp
lea eax, [ebp - 0x29c]
push eax
lea ecx, [ebp - 0x250]
push ecx
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
cmp esi, esp
call fcn.00535fca
jmp 0x706849
mov esi, esp
lea eax, [ebp - 0x29c]
push eax
lea ecx, [ebp - 0x240]
push ecx
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
cmp esi, esp
call fcn.00535fca
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x29c]
mov dword [eax], ecx
mov edx, dword [ebp - 0x298]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x294]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x290]
mov dword [eax + 0xc], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x284]
mov dword [eax], ecx
mov edx, dword [ebp - 0x280]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x27c]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x278]
mov dword [eax + 0xc], edx
call fcn.005328f7
add esp, 0x20
cmp eax, 0xdbba0
jle 0x7068f4
lea eax, [ebp - 0x10c]
push eax
call fcn.00534274
add esp, 4
push 0x104
lea eax, [ebp - 0x228]
push eax
lea ecx, [ebp - 0x10c]
push ecx
call fcn.005348b9
add esp, 0xc
lea eax, [ebp - 0x10c]
push eax
call fcn.00533072
add esp, 4
test eax, eax
je 0x7068f4
mov eax, dword [ebp - 0x260]
add eax, 1
mov dword [ebp - 0x260], eax
mov esi, esp
lea eax, [ebp - 0x254]
push eax
mov ecx, dword [ebp - 0x26c]
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
cmp esi, esp
call fcn.00535fca
test eax, eax
jne 0x7067ec
mov esi, esp
mov eax, dword [ebp - 0x26c]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp esi, esp
call fcn.00535fca
mov dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x260]
push edx
mov ecx, ebp
push eax
lea edx, [0x706970]
call fcn.0053491d
pop eax
pop edx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00535561
add esp, 0x360
cmp ebp, esp
call fcn.00535fca
mov esp, ebp
pop ebp
ret