Function at 0x532f88
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffd90
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x270], ebx
mov dword [ebp - 0x26c], ebx
mov dword [ebp - 0x268], ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 8], ecx
mov dword [ebp - 4], edx
mov edi, eax
mov esi, dword [ebp + 8]
mov eax, dword [ebp - 4]
call fcn.00407568
mov eax, dword [ebp - 8]
call fcn.00407568
xor eax, eax
push ebp
push 0x533214
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0053418c
test al, al
jne 0x533083
mov edx, dword [ebp - 4]
mov eax, 0x533230
call fcn.004080c8
mov ebx, eax
test ebx, ebx
je 0x533032
mov eax, dword [ebp - 4]
test eax, eax
je 0x533011
mov edx, eax
sub edx, 0xa
cmp word [edx], 2
je 0x533011
lea eax, [ebp - 4]
mov edx, dword [ebp - 4]
call fcn.0040693c
test eax, eax
je 0x53301a
sub eax, 4
mov eax, dword [eax]
dec eax
cmp ebx, eax
jne 0x533032
lea eax, [ebp - 4]
push eax
mov ecx, ebx
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00407d58
mov edx, dword [ebp - 8]
mov eax, 0x533230
call fcn.004080c8
mov ebx, eax
test ebx, ebx
je 0x533083
mov eax, dword [ebp - 8]
test eax, eax
je 0x533062
mov edx, eax
sub edx, 0xa
cmp word [edx], 2
je 0x533062
lea eax, [ebp - 8]
mov edx, dword [ebp - 8]
call fcn.0040693c
test eax, eax
je 0x53306b
sub eax, 4
mov eax, dword [eax]
dec eax
cmp ebx, eax
jne 0x533083
lea eax, [ebp - 8]
push eax
mov ecx, ebx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00407d58
mov eax, esi
mov edx, dword [ebp - 4]
call fcn.00407580
xor eax, eax
push ebp
push 0x5331e2
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x268]
mov ecx, 0x533244
mov edx, edi
call fcn.00407a4c
mov eax, dword [ebp - 0x268]
call fcn.0040760c
push eax
call sub.KERNEL32.DLL_FindFirstFileW
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffff
je 0x5331cb
mov bl, 1
jmp 0x5331c3
lea eax, [ebp - 0xc]
lea edx, [ebp - 0x238]
mov ecx, 0x104
call fcn.00407778
test byte [ebp - 0x264], 0x10
setne byte [ebp - 0x11]
cmp word [ebp - 0x238], 0x2e
je 0x5331ad
movzx eax, byte [ebp + 0xc]
cmp al, byte [ebp - 0x11]
jne 0x5331ad
cmp dword [ebp - 8], 0
je 0x53316c
cmp byte [ebp + 0x10], 0
jne 0x53312d
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.004080c8
test eax, eax
jne 0x53316c
cmp byte [ebp + 0x10], 0
je 0x533140
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.00407cf0
je 0x53316c
cmp dword [ebp - 4], 0
je 0x5331ad
lea eax, [ebp - 0x26c]
lea edx, [ebp - 0x238]
mov ecx, 0x104
call fcn.00407778
mov edx, dword [ebp - 0x26c]
mov eax, dword [ebp - 4]
call fcn.00407cf0
jne 0x5331ad
lea eax, [ebp - 0x270]
lea edx, [ebp - 0x30]
mov ecx, 0xe
call fcn.00407778
cmp dword [ebp - 0x270], 0
je 0x533199
mov eax, esi
lea edx, [ebp - 0x30]
mov ecx, 0xe
call fcn.00407778
jmp 0x5331cb
mov eax, esi
lea edx, [ebp - 0x238]
mov ecx, 0x104
call fcn.00407778
jmp 0x5331cb
lea eax, [ebp - 0x264]
push eax
mov eax, dword [ebp - 0x10]
push eax
call sub.KERNEL32.DLL_FindNextFileW
cmp eax, 1
sbb ebx, ebx
inc ebx
test bl, bl
jne 0x5330d9
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5331e9
mov eax, dword [ebp - 0x10]
push eax
call sub.KERNEL32.DLL_FindClose
ret