Function at 0x52c4f0
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x60821d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x270
mov eax, dword [0x65480c]
push ebx
push edi
mov edi, ecx
mov dword [ebp - 0x10], eax
mov eax, dword [edi + 0x2e0]
xor ebx, ebx
cmp eax, ebx
mov dword [ebp - 0x170], edi
je 0x52c82a
cmp dword [eax + 0x68], ebx
je 0x52c82a
push esi
lea eax, [ebp - 0x151]
push eax
push str._screenshots
lea ecx, [ebp - 0x17c]
call fcn.00402f20
push str._screenshots
mov dword [ebp - 4], ebx
call fcn.005f746a
add esp, 4
lea ecx, [ebp - 0x151]
push ecx
push 0x612691
push 0x612690
lea ecx, [ebp - 0x17c]
call fcn.00402c10
lea edx, [ebp - 0x151]
push edx
push str.image
lea ecx, [ebp - 0x198]
mov dword [ebp - 0x158], ebx
call fcn.00402f20
push 0x616fd0
lea eax, [ebp - 0x17c]
push eax
lea ecx, [ebp - 0x16c]
push ecx
mov byte [ebp - 4], 1
call fcn.00412be0
mov eax, dword [eax]
add esp, 0xc
lea edx, [ebp - 0x150]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov esi, eax
lea ecx, [ebp - 0x16c]
mov dword [ebp - 0x160], esi
call fcn.0041d780
cmp esi, 0xffffffff
je 0x52c6c6
jmp 0x52c5f0
xor ebx, ebx
lea esp, [esp]
push str._d.png
lea eax, [ebp - 0x198]
push eax
lea ecx, [ebp - 0x16c]
push ecx
mov dword [ebp - 0x15c], ebx
call fcn.00412be0
mov eax, dword [eax]
lea edx, [ebp - 0x15c]
push edx
push eax
lea eax, [ebp - 0x124]
push eax
call fcn.005e13ff
mov ecx, dword [ebp - 0x16c]
add esp, 0x18
mov ebx, eax
mov eax, dword [ebp - 0x164]
dec ebx
neg ebx
sbb bl, bl
inc bl
sub eax, ecx
test ecx, ecx
mov esi, ecx
je 0x52c683
cmp eax, 0x80
jbe 0x52c653
push ecx
call fcn.005e05ca
jmp 0x52c680
lea edi, [eax - 1]
shr edi, 3
push 0x655bd8
lea edi, [edi*4 + 0x655be0]
call fcn.00401450
mov ecx, dword [edi]
mov dword [esi], ecx
mov dword [edi], esi
mov edi, dword [ebp - 0x170]
mov dword [0x655bd8], 0
add esp, 4
test bl, bl
je 0x52c69b
mov eax, dword [ebp - 0x15c]
cmp eax, dword [ebp - 0x158]
jle 0x52c69b
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x160]
lea edx, [ebp - 0x150]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x52c5e7
mov ecx, dword [ebp - 0x160]
push ecx
call dword [sym.imp.KERNEL32.dll_FindClose]
xor ebx, ebx
mov edx, dword [ebp - 0x158]
inc edx
push edx
lea eax, [ebp - 0x1b0]
push str._d.png
push eax
call fcn.00515b20
mov esi, eax
lea ecx, [ebp - 0x198]
push ecx
lea edx, [ebp - 0x17c]
push edx
lea eax, [ebp - 0x16c]
push eax
mov byte [ebp - 4], 2
call fcn.00412d30
push esi
push eax
lea ecx, [ebp - 0x1a4]
push ecx
mov byte [ebp - 4], 3
call fcn.00412d30
add esp, 0x24
lea ecx, [ebp - 0x16c]
call fcn.0041d780
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 4], 5
call fcn.0041d780
mov eax, dword [edi + 0x2e0]
mov esi, dword [eax + 0x68]
mov dword [eax + 0x68], ebx
mov edx, dword [edi + 0x2e0]
push edx
lea ecx, [ebp - 0x27c]
call fcn.004f2990
push esi
lea ecx, [ebp - 0x27c]
mov byte [ebp - 4], 7
call fcn.004d7990
lea ecx, [ebp - 0x27c]
call fcn.004f99d0
lea ecx, [ebp - 0x27c]
call fcn.004d82e0
mov eax, dword [edi + 0x2e0]
mov dword [eax + 0x68], esi
cmp dword [ebp - 0x264], ebx
pop esi
je 0x52c7fa
lea ecx, [ebp - 0x18c]
call fcn.0057f090
mov ecx, dword [ebp - 0x264]
mov edx, dword [ebp - 0x278]
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x180], ecx
lea ecx, [ebp - 0x18c]
mov dword [ebp - 0x188], edx
push ecx
lea edx, [ebp - 0x1a4]
push edx
mov byte [ebp - 4], 8
mov dword [ebp - 0x184], eax
call fcn.0057ffe0
add esp, 8
mov dword [ebp - 0x180], ebx
call dword [sym.imp.WINMM.dll_timeGetTime]
fld qword [0x60d4b8]
lea ecx, [ebp - 0x18c]
fstp qword [edi + 0x380]
mov dword [edi + 0x388], eax
mov byte [ebp - 4], 7
call fcn.0057f0b0
lea ecx, [ebp - 0x27c]
mov byte [ebp - 4], 5
call fcn.004f2a50
lea ecx, [ebp - 0x1a4]
call fcn.0041d780
lea ecx, [ebp - 0x198]
call fcn.0041d780
lea ecx, [ebp - 0x17c]
call fcn.0041d780
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
pop ebx
call fcn.005e149c
mov esp, ebp
pop ebp
ret