Function at 0x5208e0
Capabilities:
Enumerate files on windows

Disassembly:
test dword [0x664b88], 0xffffff80
jne 0x520908
test dword [0x664b88], 0xffffffff
jne 0x520908
call fcn.006123c8
jmp fcn.005208e0
push ebx
mov ebx, esp
and esp, 0xfffffff8
push edi
push esi
push ebp
push ecx
mov eax, 0x478
call fcn.006021b0
mov ecx, dword [esp + 0x478]
xor esi, esi
mov dword [esp + 0x18], esi
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], esi
mov dword [esp + 0x24], esi
lea eax, [esp + 0x28]
movsx edx, word [0x647164]
movsx ecx, word [0x647168]
movsx ebp, word [0x64716c]
movsx edi, word [0x65e74c]
push edi
push ebp
push ecx
push edx
push str.DefTDL__d._d._d._d.dat
push eax
call fcn.00602336
add esp, 0x18
lea esi, [esp + 0x12c]
mov edi, dword [0x74c150]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x520974
lea edi, [esp + 0x12c]
mov edx, str.DefTDL_.dat
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x520994
lea eax, [esp + 0x12c]
lea edx, [esp + 0x230]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov ebp, eax
cmp ebp, 0xffffffff
je 0x520b2b
lea esi, [esp + 0x370]
lea edi, [esp + 0x25c]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x5209cd
lea eax, [esp + 0x370]
push 0x2d
push eax
call fcn.00602710
add esp, 8
inc eax
lea edx, [esp + 0x18]
lea esi, [esp + 0x1c]
lea edi, [esp + 0x20]
lea ecx, [esp + 0x24]
push ecx
push edi
push esi
mov ecx, eax
call fcn.00520c1c
fldz
fstp qword [esp]
cmp eax, 1
je 0x520bda
lea eax, [esp + 0x230]
push eax
push ebp
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
je 0x520b2b
mov dword [esp + 8], ebp
lea esi, [esp + 0x370]
lea edi, [esp + 0x25c]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x520a3b
lea eax, [esp + 0x370]
push 0x2d
push eax
call fcn.00602710
add esp, 8
inc eax
mov ebp, 0
mov dword [esp + 0x24], ebp
mov dword [esp + 0x20], ebp
mov esi, 0
mov dword [esp + 0x10], esi
mov ebp, 0
mov dl, 1
mov byte [esp + 0xc], dl
je 0x520b10
push 0x634340
push eax
call fcn.0060240f
add esp, 8
test eax, eax
je 0x520bcf
push eax
call fcn.0060251a
mov ebp, eax
add esp, 4
push 0x634340
push 0
call fcn.0060240f
add esp, 8
test eax, eax
je 0x520bc4
push eax
call fcn.0060251a
mov dword [esp + 0x14], eax
add esp, 4
push 0x634340
push 0
call fcn.0060240f
add esp, 8
test eax, eax
je 0x520bb9
push eax
call fcn.0060251a
pop ecx
mov dword [esp + 0x20], eax
push 0x634340
push 0
call fcn.0060240f
add esp, 8
test eax, eax
je 0x520bae
push eax
call fcn.0060251a
pop ecx
mov dword [esp + 0x24], eax
mov al, byte [esp + 0xc]
cmp al, 1
je 0x520b46
lea eax, [esp + 0x230]
push eax
mov edx, dword [esp + 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x520a2d
mov ecx, 0x74c17c
lea edx, [esp + 0x28]
call fcn.004ee018
add esp, 0x47c
pop ebp
pop esi
pop edi
mov esp, ebx
pop ebx
ret
lea esi, [esp + 0x370]
push dword [esp + 0x24]
push dword [esp + 0x24]
push str._d._d
push esi
call fcn.00602336
push esi
call fcn.00603642
add esp, 0x14
cmp ebp, dword [esp + 0x18]
jg 0x520b85
mov eax, dword [esp + 0x10]
cmp eax, dword [esp + 0x1c]
jg 0x520b85
fcom qword [esp]
fnstsw ax
sahf
ja 0x520b85
fstp st(0)
jmp 0x520b10
lea esi, [esp + 0x28]
lea edi, [esp + 0x25c]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x520b90
mov dword [esp + 0x18], ebp
mov eax, dword [esp + 0x10]
mov dword [esp + 0x1c], eax
fstp qword [esp]
jmp 0x520b10
xor al, al
mov byte [esp + 0xc], al
jmp 0x520b08
xor al, al
mov byte [esp + 0xc], al
jmp 0x520ae6
xor al, al
mov byte [esp + 0xc], al
jmp 0x520ac4
xor al, al
mov byte [esp + 0xc], al
jmp 0x520aa0
lea esi, [esp + 0x370]
push dword [esp + 0x24]
push dword [esp + 0x24]
push str._d._d
push esi
call fcn.00602336
push esi
call fcn.00603642
fstp qword [esp + 0x14]
add esp, 0x14
lea esi, [esp + 0x28]
lea edi, [esp + 0x25c]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x520c0c
jmp 0x520a12