Function at 0x531520
Capabilities:
Delete file
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6087f6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x17c
mov eax, dword [0x65480c]
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
push 0x6174a0
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x17c]
push edi
push eax
call fcn.00412be0
mov eax, dword [eax]
add esp, 0xc
lea ecx, [ebp - 0x150]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov ecx, dword [ebp - 0x17c]
mov dword [ebp - 0x164], eax
mov eax, dword [ebp - 0x174]
xor ebx, ebx
sub eax, ecx
cmp ecx, ebx
mov esi, ecx
je 0x5315cc
cmp eax, 0x80
jbe 0x53159c
push ecx
call fcn.005e05ca
jmp 0x5315c9
dec eax
shr eax, 3
lea edx, [eax*4 + 0x655be0]
push 0x655bd8
mov dword [ebp - 0x154], edx
call fcn.00401450
mov eax, dword [ebp - 0x154]
mov ecx, dword [eax]
mov dword [esi], ecx
mov dword [eax], esi
mov dword [0x655bd8], ebx
add esp, 4
cmp dword [ebp - 0x164], 0xffffffff
je 0x531775
push 0x14
mov dword [ebp - 0x160], ebx
call fcn.00401cc0
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x15c], ebx
mov byte [eax], 0
mov edx, dword [ebp - 0x160]
mov dword [edx + 4], ebx
mov eax, dword [ebp - 0x160]
mov dword [eax + 8], eax
mov eax, dword [ebp - 0x160]
add esp, 4
mov dword [eax + 0xc], eax
mov dword [ebp - 4], ebx
jmp 0x531620
xor ebx, ebx
lea ebx, [ebx]
push str._d.dmo
lea eax, [ebp - 0x170]
push edi
push eax
mov dword [ebp - 0x154], ebx
call fcn.00412be0
mov eax, dword [eax]
lea ecx, [ebp - 0x154]
push ecx
push eax
lea edx, [ebp - 0x124]
push edx
call fcn.005e13ff
mov ecx, dword [ebp - 0x170]
add esp, 0x18
mov ebx, eax
mov eax, dword [ebp - 0x168]
dec ebx
neg ebx
sbb bl, bl
inc bl
sub eax, ecx
test ecx, ecx
mov esi, ecx
je 0x5316aa
cmp eax, 0x80
jbe 0x53167d
push ecx
call fcn.005e05ca
jmp 0x5316a7
lea edi, [eax - 1]
shr edi, 3
push 0x655bd8
lea edi, [edi*4 + 0x655be0]
call fcn.00401450
mov eax, dword [edi]
mov dword [esi], eax
mov dword [edi], esi
mov edi, dword [ebp + 8]
mov dword [0x655bd8], 0
add esp, 4
test bl, bl
je 0x5316c7
lea ecx, [ebp - 0x154]
push ecx
lea edx, [ebp - 0x178]
push edx
lea ecx, [ebp - 0x160]
call fcn.0045e110
mov ecx, dword [ebp - 0x164]
lea eax, [ebp - 0x150]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x531618
mov edx, dword [ebp - 0x164]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp + 0xc]
mov esi, dword [eax + 8]
mov eax, dword [ebp - 0x15c]
dec ecx
cmp eax, ecx
jle 0x531759
mov al, byte [ebp + 0x10]
test al, al
je 0x531759
push str._d.dmo
lea edx, [ebp - 0x188]
push edi
push edx
call fcn.00412be0
mov ecx, dword [esi + 0x10]
mov eax, dword [eax]
push ecx
push eax
lea edx, [ebp - 0x170]
push edx
mov byte [ebp - 4], 1
call fcn.00515b20
mov eax, dword [eax]
add esp, 0x18
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea ecx, [ebp - 0x170]
call fcn.0041d780
lea ecx, [ebp - 0x188]
call fcn.0041d780
mov eax, dword [ebp - 0x15c]
test eax, eax
jne 0x531779
lea ecx, [ebp - 0x160]
mov dword [ebp - 4], 0xffffffff
call fcn.00422c10
xor eax, eax
jmp 0x53179f
mov eax, dword [ebp - 0x160]
push eax
call fcn.00401160
mov esi, dword [eax + 0x10]
add esp, 4
lea ecx, [ebp - 0x160]
mov dword [ebp - 4], 0xffffffff
call fcn.00422c10
mov eax, esi
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
pop ebx
call fcn.005e149c
mov esp, ebp
pop ebp
ret