Function at 0x507cfd
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x55d3db
mov eax, dword fs:[0]
push eax
sub esp, 0x410
mov eax, dword [0x5b93d4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
and dword [ebp - 0x3d8], 0
lea ecx, [ebp - 0x3e0]
call fcn.004f3ec9
and dword [ebp - 4], 0
push dword [ebp + 0xc]
lea ecx, [ebp - 0x40]
call fcn.004fbbed
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x40]
call fcn.004fc429
dec eax
push eax
lea ecx, [ebp - 0x40]
call fcn.004fc3dc
cmp dword [eax], 0x2f
je 0x507d7b
lea ecx, [ebp - 0x40]
call fcn.004fc429
dec eax
push eax
lea ecx, [ebp - 0x40]
call fcn.004fc3dc
cmp dword [eax], 0x5c
jne 0x507da6
push 0x583d6c
lea ecx, [ebp - 0x70]
call fcn.004fbb52
mov byte [ebp - 4], 2
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x40]
call fcn.004fc389
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x70]
call fcn.004f7c74
jmp 0x507dd8
push 0x583d70
lea ecx, [ebp - 0x88]
call fcn.004fbb52
mov byte [ebp - 4], 3
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x40]
call fcn.004fc389
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x88]
call fcn.004f7c74
lea eax, [ebp - 0x3d0]
push eax
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x40]
call fcn.004fc16d
mov dword [ebp - 0x3e4], eax
mov ecx, dword [ebp - 0x3e4]
call fcn.0041c138
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x3d4], eax
lea ecx, [ebp - 0xa0]
call fcn.00410a3c
cmp dword [ebp - 0x3d4], 0xffffffff
je 0x50808e
lea eax, [ebp - 0x3a4]
push eax
lea ecx, [ebp - 0xb8]
call fcn.004fbe0a
mov dword [ebp - 0x3e8], eax
mov eax, dword [ebp - 0x3e8]
mov dword [ebp - 0x3ec], eax
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x3ec]
mov dword [ebp - 0x3f0], eax
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x3f0]
call fcn.004fc262
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xb8]
call fcn.004f7c74
lea eax, [ebp - 0x28]
push eax
push dword [ebp + 0xc]
lea eax, [ebp - 0x58]
push eax
call fcn.004403b2
add esp, 0xc
mov byte [ebp - 4], 7
push 0x583d74
lea eax, [ebp - 0x28]
push eax
call fcn.0045595e
pop ecx
pop ecx
movzx eax, al
test eax, eax
je 0x507f17
push 0x583d78
lea eax, [ebp - 0x28]
push eax
call fcn.0045595e
pop ecx
pop ecx
movzx eax, al
test eax, eax
je 0x507f17
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x140]
call fcn.004f751a
mov dword [ebp - 0x3f4], eax
mov eax, dword [ebp - 0x3f4]
mov dword [ebp - 0x3f8], eax
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x3f8]
mov dword [ebp - 0x3fc], eax
push dword [ebp - 0x3fc]
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x3e0]
call fcn.004f46ea
mov ecx, eax
call fcn.004f7733
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x140]
call fcn.004745a6
lea eax, [ebp - 0x3d0]
push eax
push dword [ebp - 0x3d4]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x50806a
lea eax, [ebp - 0x3a4]
push eax
lea ecx, [ebp - 0xe8]
call fcn.004fbe0a
mov dword [ebp - 0x400], eax
mov eax, dword [ebp - 0x400]
mov dword [ebp - 0x404], eax
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0x408], eax
lea eax, [ebp - 0xd0]
push eax
mov ecx, dword [ebp - 0x408]
call fcn.004fc262
mov dword [ebp - 0x40c], eax
push dword [ebp - 0x40c]
lea ecx, [ebp - 0x28]
call fcn.00411492
lea ecx, [ebp - 0xd0]
call fcn.00410a23
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xe8]
call fcn.004f7c74
lea eax, [ebp - 0x28]
push eax
push dword [ebp + 0xc]
lea eax, [ebp - 0x100]
push eax
call fcn.004403b2
add esp, 0xc
mov dword [ebp - 0x410], eax
push dword [ebp - 0x410]
lea ecx, [ebp - 0x58]
call fcn.00411492
lea ecx, [ebp - 0x100]
call fcn.00410a23
push 0x583d7c
lea eax, [ebp - 0x28]
push eax
call fcn.0045595e
pop ecx
pop ecx
movzx eax, al
test eax, eax
je 0x508065
push 0x583d80
lea eax, [ebp - 0x28]
push eax
call fcn.0045595e
pop ecx
pop ecx
movzx eax, al
test eax, eax
je 0x508065
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x180]
call fcn.004f751a
mov dword [ebp - 0x414], eax
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x418], eax
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x418]
mov dword [ebp - 0x41c], eax
push dword [ebp - 0x41c]
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x3e0]
call fcn.004f46ea
mov ecx, eax
call fcn.004f7733
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x180]
call fcn.004745a6
jmp 0x507f17
push dword [ebp - 0x3d4]
call dword [sym.imp.KERNEL32.dll_FindClose]
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x58]
call fcn.00410a23
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x28]
call fcn.00410a23
lea eax, [ebp - 0x3e0]
push eax
mov ecx, dword [ebp + 8]
call fcn.00508518
mov eax, dword [ebp - 0x3d8]
or eax, 1
mov dword [ebp - 0x3d8], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x40]
call fcn.004f7c74
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3e0]
call fcn.004f45c6
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0051dfa2
leave
ret