Function at 0x547878
Capabilities:
Enumerate files on windows

Disassembly:
test dword [0x7eeab0], 0xffffff80
jne 0x5478a0
test dword [0x7eeab0], 0xffffffff
jne 0x547c0c
call fcn.006a7b4c
jmp fcn.00547878
push edi
push esi
push ebp
push ebx
push ecx
mov eax, 0x460
call fcn.00697340
mov ecx, dword [esp + 0x460]
lea ebp, [esp]
movsx ebx, word [0x6ea168]
movsx ecx, word [0x6ea16c]
movsx edx, word [0x6ea170]
movsx eax, word [0x7009a0]
push eax
push edx
push ecx
push ebx
push str.DefTDL__d._d._d._d.dat
push ebp
call fcn.006974c6
add esp, 0x18
lea esi, [esp + 0x104]
mov edi, dword [0x7008b0]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x5478f4
lea edi, [esp + 0x104]
mov edx, str.DefTDL_.dat
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x547914
lea edx, [esp + 0x104]
lea eax, [esp + 0x208]
push eax
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov ebp, eax
cmp ebp, 0xffffffff
je 0x547b18
lea esi, [esp + 0x348]
lea edi, [esp + 0x234]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x54794d
lea eax, [esp + 0x348]
push 0x2d
push eax
call fcn.006978b0
add esp, 8
inc eax
je 0x547bfc
push 0x6d09dc
push eax
call fcn.0069759f
add esp, 8
test eax, eax
je 0x547992
push eax
call fcn.006976ae
pop ecx
mov ebx, eax
mov edi, 1
jmp 0x547996
xor ebx, ebx
xor edi, edi
push 0x6d09dc
push 0
call fcn.0069759f
add esp, 8
test eax, eax
je 0x5479b9
push eax
call fcn.006976ae
pop ecx
mov dword [esp + 0x45c], eax
jmp 0x5479c4
xor eax, eax
mov dword [esp + 0x45c], eax
xor edi, edi
push 0x6d09dc
push 0
call fcn.0069759f
add esp, 8
test eax, eax
je 0x5479e2
push eax
call fcn.006976ae
pop ecx
mov esi, eax
jmp 0x5479e6
xor esi, esi
xor edi, edi
push 0x6d09dc
push 0
call fcn.0069759f
add esp, 8
test eax, eax
je 0x547a02
push eax
call fcn.006976ae
pop ecx
jmp 0x547a06
xor eax, eax
xor edi, edi
cmp edi, 1
je 0x547bb8
xorps xmm0, xmm0
movss dword [esp + 0x458], xmm0
lea eax, [esp + 0x208]
push eax
push ebp
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
je 0x547b18
mov dword [esp + 0x454], ebx
mov dword [esp + 0x460], ebp
lea esi, [esp + 0x348]
lea edi, [esp + 0x234]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x547a4e
lea eax, [esp + 0x348]
push 0x2d
push eax
call fcn.006978b0
add esp, 8
inc eax
je 0x547afa
push 0x6d09dc
push eax
call fcn.0069759f
add esp, 8
test eax, eax
je 0x547a93
push eax
call fcn.006976ae
pop ecx
mov ebx, eax
mov esi, 1
jmp 0x547a97
xor ebx, ebx
xor esi, esi
push 0x6d09dc
push 0
call fcn.0069759f
add esp, 8
test eax, eax
je 0x547ab5
push eax
call fcn.006976ae
pop ecx
mov ebp, eax
jmp 0x547ab9
xor ebp, ebp
xor esi, esi
push 0x6d09dc
push 0
call fcn.0069759f
add esp, 8
test eax, eax
je 0x547ad7
push eax
call fcn.006976ae
pop ecx
mov edi, eax
jmp 0x547adb
xor edi, edi
xor esi, esi
push 0x6d09dc
push 0
call fcn.0069759f
add esp, 8
test eax, eax
je 0x547afa
push eax
call fcn.006976ae
pop ecx
cmp esi, 1
je 0x547b30
lea eax, [esp + 0x208]
push eax
mov edx, dword [esp + 0x464]
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x547a40
mov ecx, 0x7008e8
lea edx, [esp]
call fcn.004f5c14
add esp, 0x464
pop ebx
pop ebp
pop esi
pop edi
ret
lea edx, [esp + 0x348]
push eax
push edi
push str._d._d
push edx
call fcn.006974c6
lea eax, [esp + 0x358]
push eax
call fcn.006987f2
add esp, 0x14
fstp dword [esp + 0x44c]
movss xmm0, dword [esp + 0x44c]
mov eax, dword [esp + 0x454]
cmp ebx, eax
jg 0x547b88
mov eax, dword [esp + 0x45c]
cmp ebp, eax
jg 0x547b88
comiss xmm0, dword [esp + 0x458]
jbe 0x547afa
lea esi, [esp]
lea edi, [esp + 0x234]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x547b92
mov dword [esp + 0x454], ebx
mov dword [esp + 0x45c], ebp
movss dword [esp + 0x458], xmm0
jmp 0x547afa
lea edx, [esp + 0x348]
push eax
push esi
push str._d._d
push edx
call fcn.006974c6
lea eax, [esp + 0x358]
push eax
call fcn.006987f2
add esp, 0x14
fstp dword [esp + 0x458]
lea esi, [esp]
lea edi, [esp + 0x234]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x547bed
jmp 0x547a1b
xor eax, eax
mov dword [esp + 0x45c], eax
xor ebx, ebx
jmp 0x547a0f
push edi
push esi
push ebp
push ebx
push ecx
mov eax, 0x45c
call fcn.00697340
mov ecx, dword [esp + 0x45c]
lea ebp, [esp]
movsx ebx, word [0x6ea168]
movsx ecx, word [0x6ea16c]
movsx edx, word [0x6ea170]
movsx eax, word [0x7009a0]
push eax
push edx
push ecx
push ebx
push str.DefTDL__d._d._d._d.dat
push ebp
call fcn.006974c6
add esp, 0x18
lea esi, [esp + 0x104]
mov edi, dword [0x7008b0]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x547c60
lea edi, [esp + 0x104]
mov edx, str.DefTDL_.dat
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x547c80
lea edx, [esp + 0x104]
lea eax, [esp + 0x208]
push eax
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov ebp, eax
cmp ebp, 0xffffffff
je 0x547e81
lea esi, [esp + 0x348]
lea edi, [esp + 0x234]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x547cb9
lea eax, [esp + 0x348]
push 0x2d
push eax
call fcn.006978b0
add esp, 8
inc eax
je 0x547f4e
push 0x6d09dc
push eax
call fcn.0069759f
add esp, 8
test eax, eax
je 0x547cfe
push eax
call fcn.006976ae
pop ecx
mov ebx, eax
mov edi, 1
jmp 0x547d02
xor ebx, ebx
xor edi, edi
push 0x6d09dc
push 0
call fcn.0069759f
add esp, 8
test eax, eax
je 0x547d25
push eax
call fcn.006976ae
pop ecx
mov dword [esp + 0x458], eax
jmp 0x547d30
xor eax, eax
mov dword [esp + 0x458], eax
xor edi, edi
push 0x6d09dc
push 0
call fcn.0069759f
add esp, 8
test eax, eax
je 0x547d4e
push eax
call fcn.006976ae
pop ecx
mov esi, eax
jmp 0x547d52
xor esi, esi
xor edi, edi
push 0x6d09dc
push 0
call fcn.0069759f
add esp, 8
test eax, eax
je 0x547d6e
push eax
call fcn.006976ae
pop ecx
jmp 0x547d72
xor eax, eax
xor edi, edi
cmp edi, 1
je 0x547f11
fldz
fstp qword [esp + 0x44c]
lea eax, [esp + 0x208]
push eax
push ebp
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
je 0x547e81
mov dword [esp + 0x454], ebx
mov dword [esp + 0x45c], ebp
lea esi, [esp + 0x348]
lea edi, [esp + 0x234]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x547db7
lea eax, [esp + 0x348]
push 0x2d
push eax
call fcn.006978b0
add esp, 8
inc eax
je 0x547e63
push 0x6d09dc
push eax
call fcn.0069759f
add esp, 8
test eax, eax
je 0x547dfc
push eax
call fcn.006976ae
pop ecx
mov ebx, eax
mov esi, 1
jmp 0x547e00
xor ebx, ebx
xor esi, esi
push 0x6d09dc
push 0
call fcn.0069759f
add esp, 8
test eax, eax
je 0x547e1e
push eax
call fcn.006976ae
pop ecx
mov ebp, eax
jmp 0x547e22
xor ebp, ebp
xor esi, esi
push 0x6d09dc
push 0
call fcn.0069759f
add esp, 8
test eax, eax
je 0x547e40
push eax
call fcn.006976ae
pop ecx
mov edi, eax
jmp 0x547e44
xor edi, edi
xor esi, esi
push 0x6d09dc
push 0
call fcn.0069759f
add esp, 8
test eax, eax
je 0x547e63
push eax
call fcn.006976ae
pop ecx
cmp esi, 1
je 0x547e99
lea eax, [esp + 0x208]
push eax
mov edx, dword [esp + 0x460]
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x547da9
mov ecx, 0x7008e8
lea edx, [esp]
call fcn.004f5c14
add esp, 0x460
pop ebx
pop ebp
pop esi
pop edi
ret
lea edx, [esp + 0x348]
push eax
push edi
push str._d._d
push edx
call fcn.006974c6
lea eax, [esp + 0x358]
push eax
call fcn.006987f2
add esp, 0x14
mov eax, dword [esp + 0x454]
cmp ebx, eax
jg 0x547ee3
mov eax, dword [esp + 0x458]
cmp ebp, eax
jg 0x547ee3
fcom qword [esp + 0x44c]
fnstsw ax
sahf
ja 0x547ee3
fstp st(0)
jmp 0x547e63
lea esi, [esp]
lea edi, [esp + 0x234]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x547eed
mov dword [esp + 0x454], ebx
mov dword [esp + 0x458], ebp
fstp qword [esp + 0x44c]
jmp 0x547e63
lea edi, [esp + 0x348]
push eax
push esi
push str._d._d
push edi
call fcn.006974c6
push edi
call fcn.006987f2
add esp, 0x14
fstp qword [esp + 0x44c]
lea esi, [esp]
lea edi, [esp + 0x234]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x547f3f
jmp 0x547d84
xor eax, eax
mov dword [esp + 0x458], eax
xor ebx, ebx
jmp 0x547d7b