Function at 0x10005f50
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10031c55
mov eax, dword fs:[0]
push eax
sub esp, 0x290
mov eax, dword [0x1003a008]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
movsd xmm0, qword [0x10037db8]
movsd qword [0x1003a920], xmm0
movsd xmm0, qword [0x10037dd8]
movsd qword [0x1003a910], xmm0
movsd xmm0, qword [0x10037dc0]
movsd qword [0x1003a928], xmm0
movsd xmm0, qword [0x10037db0]
push str._Program_Files___
movsd qword [0x1003a918], xmm0
call fcn.1000a150
lea eax, [ebp - 0x290]
push eax
push str.C:Program_Files
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
movsd xmm5, qword [0x1003a918]
mov ebx, eax
movsd xmm0, qword [0x1003a920]
movaps xmm4, xmm5
mulsd xmm4, qword [0x1003a928]
mov edi, dword [sym.imp.KERNEL32.dll_FindNextFileW]
movsd xmm1, qword [0x1003a910]
movsd xmm3, qword [0x10037da8]
movaps xmm6, xmm1
mulsd xmm5, xmm0
mov dword [ebp - 0x298], ebx
mulsd xmm6, xmm0
subsd xmm4, xmm0
subsd xmm5, xmm1
movsd qword [0x1003a928], xmm4
movaps xmm0, xmm4
mulsd xmm0, xmm1
subsd xmm6, xmm4
movsd qword [0x1003a918], xmm5
movsd qword [0x1003a920], xmm6
subsd xmm0, xmm5
movsd qword [0x1003a910], xmm0
cmp ebx, 0xffffffff
je 0x100063e4
xor eax, eax
mov dword [ebp - 0x28], 0
push eax
push 0x10037c8c
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
call fcn.1000a3a0
mov dword [ebp - 4], 0
lea eax, [ebp - 0x290]
movsd xmm3, qword [0x1003a918]
movsd xmm1, qword [0x1003a910]
movaps xmm4, xmm3
mulsd xmm4, qword [0x1003a928]
movaps xmm0, xmm1
push eax
movsd xmm2, qword [0x1003a920]
mulsd xmm0, xmm2
push ebx
subsd xmm4, xmm2
mulsd xmm3, xmm2
subsd xmm0, xmm4
movsd qword [0x1003a928], xmm4
subsd xmm3, xmm1
mulsd xmm4, xmm1
movsd qword [0x1003a920], xmm0
subsd xmm4, xmm3
movsd qword [0x1003a918], xmm3
movsd qword [0x1003a910], xmm4
call edi
test eax, eax
je 0x100062e6
lea eax, [ebp - 0x264]
push eax
lea ecx, [ebp - 0x28]
call fcn.1000a150
movsd xmm2, qword [0x1003a928]
lea ecx, [ebp - 0x28]
movsd xmm1, qword [0x1003a918]
movaps xmm3, xmm2
mulsd xmm3, qword [0x1003a910]
movaps xmm4, xmm1
push 0x10037c90
mulsd xmm4, xmm2
addsd xmm3, qword [0x1003a920]
addsd xmm4, qword [0x1003a910]
movaps xmm5, xmm3
movsd qword [0x1003a920], xmm3
mulsd xmm5, xmm1
movsd qword [0x1003a910], xmm4
addsd xmm5, xmm2
movaps xmm2, xmm4
mulsd xmm2, xmm3
movsd qword [0x1003a928], xmm5
addsd xmm2, xmm1
movsd qword [0x1003a918], xmm2
call fcn.1000a0d0
test eax, eax
je 0x1000625c
push 0x10037c94
lea ecx, [ebp - 0x28]
call fcn.1000a0d0
test eax, eax
je 0x1000625c
cmp dword [ebp - 0x290], 0x10
jne 0x1000625c
push 0x10037c9c
mov ecx, esi
call fcn.1000a150
cmp dword [ebp - 0x14], 8
lea edi, [ebp - 0x28]
mov eax, dword [esi + 0x14]
cmovae edi, dword [ebp - 0x28]
mov ecx, dword [esi + 0x10]
sub eax, ecx
mov edx, dword [ebp - 0x18]
cmp edx, eax
ja 0x10006213
cmp dword [esi + 0x14], 8
lea eax, [edx + ecx]
mov dword [ebp - 0x294], eax
mov ebx, esi
mov dword [esi + 0x10], eax
jb 0x100061ee
mov ebx, dword [esi]
lea eax, [edx + edx]
push eax
lea ecx, [ebx + ecx*2]
push edi
push ecx
call fcn.10021000
mov eax, dword [ebp - 0x294]
add esp, 0xc
xor ecx, ecx
mov word [ebx + eax*2], cx
mov ebx, dword [ebp - 0x298]
jmp 0x1000622a
push edx
push edi
mov byte [ebp - 0x29c], 0
mov ecx, esi
push dword [ebp - 0x29c]
push edx
call fcn.1000a6d0
push 0x10037ca0
mov ecx, esi
call fcn.1000a150
movsd xmm3, qword [0x1003a920]
movsd xmm4, qword [0x1003a910]
movsd xmm5, qword [0x1003a928]
movsd xmm2, qword [0x1003a918]
mov edi, dword [sym.imp.KERNEL32.dll_FindNextFileW]
movsd xmm1, qword [0x10037da8]
lea eax, [ebp - 0x28]
movaps xmm0, xmm3
cmp dword [ebp - 0x14], 8
addsd xmm0, xmm1
mov dword [ebp - 0x18], 0
cmovae eax, dword [ebp - 0x28]
xor ecx, ecx
divsd xmm2, xmm0
mov word [eax], cx
lea eax, [ebp - 0x290]
push eax
push ebx
movaps xmm0, xmm4
addsd xmm0, xmm1
addsd xmm2, xmm4
divsd xmm3, xmm0
movaps xmm0, xmm5
movsd qword [0x1003a918], xmm2
addsd xmm0, xmm1
addsd xmm3, xmm5
divsd xmm4, xmm0
movsd qword [0x1003a920], xmm3
addsd xmm4, xmm2
addsd xmm2, xmm1
movsd qword [0x1003a910], xmm4
divsd xmm5, xmm2
addsd xmm5, xmm3
movsd qword [0x1003a928], xmm5
call edi
test eax, eax
jne 0x10006104
push 0x10037ca4
mov ecx, esi
call fcn.1000a150
movsd xmm3, qword [0x1003a918]
movsd xmm6, qword [0x10037da8]
movaps xmm1, xmm3
movsd xmm5, qword [0x1003a928]
addsd xmm1, xmm6
movaps xmm0, xmm5
movsd xmm4, qword [0x1003a910]
movsd xmm2, qword [0x1003a920]
push ebx
divsd xmm0, xmm1
movaps xmm1, xmm3
subsd xmm4, xmm0
movaps xmm0, xmm2
addsd xmm0, xmm6
movsd qword [0x1003a910], xmm4
divsd xmm1, xmm0
movaps xmm0, xmm4
subsd xmm5, xmm1
movaps xmm1, xmm2
addsd xmm0, xmm6
movsd qword [0x1003a928], xmm5
addsd xmm5, xmm6
divsd xmm1, xmm0
divsd xmm4, xmm5
subsd xmm3, xmm1
subsd xmm2, xmm4
movsd qword [0x1003a918], xmm3
movsd qword [0x1003a920], xmm2
call dword [sym.imp.KERNEL32.dll_FindClose]
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x100063c4
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100063ba
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100068d8
push edx
push ecx
call fcn.1001e35c
add esp, 8
movsd xmm3, qword [0x10037da8]
movsd xmm5, qword [0x1003a918]
movsd xmm4, qword [0x1003a928]
movsd xmm6, qword [0x1003a920]
movaps xmm0, xmm5
movsd xmm2, qword [0x1003a910]
addsd xmm0, xmm3
movaps xmm1, xmm4
push 0x10037ca8
mov ecx, esi
divsd xmm1, xmm0
movaps xmm0, xmm6
subsd xmm2, xmm1
movaps xmm1, xmm5
addsd xmm0, xmm3
movsd qword [0x1003a910], xmm2
divsd xmm1, xmm0
movaps xmm0, xmm2
subsd xmm4, xmm1
movaps xmm1, xmm6
addsd xmm0, xmm3
movsd qword [0x1003a928], xmm4
addsd xmm4, xmm3
divsd xmm1, xmm0
divsd xmm2, xmm4
subsd xmm5, xmm1
subsd xmm6, xmm2
movsd qword [0x1003a918], xmm5
movsd qword [0x1003a920], xmm6
call fcn.1000a150
lea eax, [ebp - 0x290]
push eax
push str.C:Program_Files__x86_
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
movsd xmm2, qword [0x1003a918]
mov edi, eax
movsd xmm0, qword [0x1003a910]
movaps xmm3, xmm2
mulsd xmm3, qword [0x1003a928]
movaps xmm4, xmm0
mov dword [ebp - 0x298], edi
movsd xmm1, qword [0x1003a920]
mulsd xmm4, xmm1
mulsd xmm2, xmm1
subsd xmm3, xmm1
movsd qword [0x1003a928], xmm3
subsd xmm4, xmm3
mulsd xmm3, xmm0
subsd xmm2, xmm0
movsd qword [0x1003a920], xmm4
movsd qword [0x1003a918], xmm2
subsd xmm3, xmm2
movsd qword [0x1003a910], xmm3
cmp edi, 0xffffffff
je 0x10006870
xor eax, eax
mov dword [ebp - 0x40], 0
push eax
push 0x10037c8c
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
call fcn.1000a3a0
mov dword [ebp - 4], 1
lea eax, [ebp - 0x290]
movsd xmm4, qword [0x1003a920]
movsd xmm6, qword [0x10037da8]
movaps xmm0, xmm4
movsd xmm3, qword [0x1003a918]
addsd xmm0, xmm6
movsd xmm2, qword [0x1003a910]
movsd xmm1, qword [0x1003a928]
push eax
push edi
divsd xmm3, xmm0
movaps xmm0, xmm2
addsd xmm0, xmm6
addsd xmm3, xmm2
divsd xmm4, xmm0
movaps xmm0, xmm1
movsd qword [0x1003a918], xmm3
addsd xmm0, xmm6
addsd xmm4, xmm1
divsd xmm2, xmm0
movsd qword [0x1003a920], xmm4
addsd xmm2, xmm3
addsd xmm3, xmm6
movsd qword [0x1003a910], xmm2
divsd xmm1, xmm3
addsd xmm1, xmm4
movsd qword [0x1003a928], xmm1
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x10006796
lea eax, [ebp - 0x264]
push eax
lea ecx, [ebp - 0x40]
call fcn.1000a150
movsd xmm4, qword [0x1003a918]
lea ecx, [ebp - 0x40]
movsd xmm2, qword [0x10037da8]
movaps xmm1, xmm4
movsd xmm3, qword [0x1003a928]
addsd xmm1, xmm2
movaps xmm0, xmm3
movsd xmm5, qword [0x1003a910]
movsd xmm6, qword [0x1003a920]
push 0x10037c90
divsd xmm0, xmm1
movaps xmm1, xmm4
subsd xmm5, xmm0
movaps xmm0, xmm6
addsd xmm0, xmm2
movsd qword [0x1003a910], xmm5
divsd xmm1, xmm0
movaps xmm0, xmm5
subsd xmm3, xmm1
movaps xmm1, xmm6
addsd xmm0, xmm2
movsd qword [0x1003a928], xmm3
divsd xmm1, xmm0
movaps xmm0, xmm3
addsd xmm0, xmm2
subsd xmm4, xmm1
movaps xmm1, xmm5
divsd xmm1, xmm0
movsd qword [0x1003a918], xmm4
subsd xmm6, xmm1
movsd qword [0x1003a920], xmm6
call fcn.1000a0d0
test eax, eax
je 0x10006720
push 0x10037c94
lea ecx, [ebp - 0x40]
call fcn.1000a0d0
test eax, eax
je 0x10006720
cmp dword [ebp - 0x290], 0x10
jne 0x10006720
push 0x10037c9c
mov ecx, esi
call fcn.1000a150
cmp dword [ebp - 0x2c], 8
lea edx, [ebp - 0x40]
mov eax, dword [esi + 0x14]
cmovae edx, dword [ebp - 0x40]
mov ebx, dword [esi + 0x10]
sub eax, ebx
mov ecx, dword [ebp - 0x30]
cmp ecx, eax
ja 0x100066dd
cmp dword [esi + 0x14], 8
lea eax, [ecx + ebx]
mov dword [ebp - 0x29c], eax
mov edi, esi
mov dword [esi + 0x10], eax
jb 0x100066b8
mov edi, dword [esi]
lea eax, [ecx + ecx]
push eax
push edx
lea eax, [edi + ebx*2]
push eax
call fcn.10021000
mov eax, dword [ebp - 0x29c]
add esp, 0xc
xor ecx, ecx
mov word [edi + eax*2], cx
mov edi, dword [ebp - 0x298]
jmp 0x100066f4
push ecx
push edx
mov byte [ebp - 0x294], 0
push dword [ebp - 0x294]
push ecx
mov ecx, esi
call fcn.1000a6d0
push 0x10037ca0
mov ecx, esi
call fcn.1000a150
movsd xmm6, qword [0x1003a920]
movsd xmm5, qword [0x1003a910]
movsd xmm3, qword [0x1003a928]
movsd xmm4, qword [0x1003a918]
cmp dword [ebp - 0x2c], 8
lea eax, [ebp - 0x40]
movaps xmm2, xmm3
mov dword [ebp - 0x30], 0
cmovae eax, dword [ebp - 0x40]
movaps xmm1, xmm4
mulsd xmm2, xmm5
xor ecx, ecx
mulsd xmm1, xmm3
mov word [eax], cx
lea eax, [ebp - 0x290]
push eax
addsd xmm2, xmm6
push edi
addsd xmm1, xmm5
movaps xmm0, xmm2
movsd qword [0x1003a920], xmm2
mulsd xmm0, xmm4
movsd qword [0x1003a910], xmm1
mulsd xmm1, xmm2
addsd xmm0, xmm3
addsd xmm1, xmm4
movsd qword [0x1003a928], xmm0
movsd qword [0x1003a918], xmm1
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x100065a6
movsd xmm4, qword [0x1003a920]
movsd xmm5, qword [0x10037da8]
movaps xmm0, xmm4
movsd xmm3, qword [0x1003a918]
addsd xmm0, xmm5
movsd xmm2, qword [0x1003a910]
movsd xmm1, qword [0x1003a928]
push edi
divsd xmm3, xmm0
movaps xmm0, xmm2
addsd xmm0, xmm5
addsd xmm3, xmm2
divsd xmm4, xmm0
movaps xmm0, xmm1
movsd qword [0x1003a918], xmm3
addsd xmm0, xmm5
addsd xmm4, xmm1
divsd xmm2, xmm0
movsd qword [0x1003a920], xmm4
addsd xmm2, xmm3
addsd xmm3, xmm5
movsd qword [0x1003a910], xmm2
divsd xmm1, xmm3
addsd xmm1, xmm4
movsd qword [0x1003a928], xmm1
call dword [sym.imp.KERNEL32.dll_FindClose]
mov edx, dword [ebp - 0x2c]
cmp edx, 8
jb 0x10006858
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1000684e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100068dd
push edx
push ecx
call fcn.1001e35c
add esp, 8
movsd xmm2, qword [0x1003a918]
movsd xmm3, qword [0x1003a910]
movsd xmm4, qword [0x1003a920]
movaps xmm1, xmm2
movaps xmm0, xmm3
mulsd xmm1, qword [0x1003a928]
xor eax, eax
mulsd xmm0, xmm4
mulsd xmm2, xmm4
subsd xmm1, xmm4
subsd xmm2, xmm3
subsd xmm0, xmm1
movsd qword [0x1003a928], xmm1
mulsd xmm1, xmm3
movsd qword [0x1003a918], xmm2
movsd qword [0x1003a920], xmm0
subsd xmm1, xmm2
movsd qword [0x1003a910], xmm1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1001e319
mov esp, ebp
pop ebp
ret
call fcn.10023c5c
call fcn.10023c5c
int3