Function at 0x547710
Capabilities:
Enumerate files on windows

Disassembly:
test dword [0x7eda90], 0xffffff80
jne 0x547738
test dword [0x7eda90], 0xffffffff
jne 0x547aa4
call fcn.006a6b5c
jmp fcn.00547710
push edi
push esi
push ebp
push ebx
push ecx
mov eax, 0x460
call fcn.00696350
mov ecx, dword [esp + 0x460]
lea ebp, [esp]
movsx ebx, word [0x6e9168]
movsx ecx, word [0x6e916c]
movsx edx, word [0x6e9170]
movsx eax, word [0x6ff994]
push eax
push edx
push ecx
push ebx
push str.DefTDL__d._d._d._d.dat
push ebp
call fcn.006964d6
add esp, 0x18
lea esi, [esp + 0x104]
mov edi, dword [0x6ff8b0]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x54778c
lea edi, [esp + 0x104]
mov edx, str.DefTDL_.dat
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x5477ac
lea edx, [esp + 0x104]
lea eax, [esp + 0x208]
push eax
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov ebp, eax
cmp ebp, 0xffffffff
je 0x5479b0
lea esi, [esp + 0x348]
lea edi, [esp + 0x234]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x5477e5
lea eax, [esp + 0x348]
push 0x2d
push eax
call fcn.006968c0
add esp, 8
inc eax
je 0x547a94
push 0x6cf9dc
push eax
call fcn.006965af
add esp, 8
test eax, eax
je 0x54782a
push eax
call fcn.006966be
pop ecx
mov ebx, eax
mov edi, 1
jmp 0x54782e
xor ebx, ebx
xor edi, edi
push 0x6cf9dc
push 0
call fcn.006965af
add esp, 8
test eax, eax
je 0x547851
push eax
call fcn.006966be
pop ecx
mov dword [esp + 0x45c], eax
jmp 0x54785c
xor eax, eax
mov dword [esp + 0x45c], eax
xor edi, edi
push 0x6cf9dc
push 0
call fcn.006965af
add esp, 8
test eax, eax
je 0x54787a
push eax
call fcn.006966be
pop ecx
mov esi, eax
jmp 0x54787e
xor esi, esi
xor edi, edi
push 0x6cf9dc
push 0
call fcn.006965af
add esp, 8
test eax, eax
je 0x54789a
push eax
call fcn.006966be
pop ecx
jmp 0x54789e
xor eax, eax
xor edi, edi
cmp edi, 1
je 0x547a50
xorps xmm0, xmm0
movss dword [esp + 0x458], xmm0
lea eax, [esp + 0x208]
push eax
push ebp
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
je 0x5479b0
mov dword [esp + 0x454], ebx
mov dword [esp + 0x460], ebp
lea esi, [esp + 0x348]
lea edi, [esp + 0x234]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x5478e6
lea eax, [esp + 0x348]
push 0x2d
push eax
call fcn.006968c0
add esp, 8
inc eax
je 0x547992
push 0x6cf9dc
push eax
call fcn.006965af
add esp, 8
test eax, eax
je 0x54792b
push eax
call fcn.006966be
pop ecx
mov ebx, eax
mov esi, 1
jmp 0x54792f
xor ebx, ebx
xor esi, esi
push 0x6cf9dc
push 0
call fcn.006965af
add esp, 8
test eax, eax
je 0x54794d
push eax
call fcn.006966be
pop ecx
mov ebp, eax
jmp 0x547951
xor ebp, ebp
xor esi, esi
push 0x6cf9dc
push 0
call fcn.006965af
add esp, 8
test eax, eax
je 0x54796f
push eax
call fcn.006966be
pop ecx
mov edi, eax
jmp 0x547973
xor edi, edi
xor esi, esi
push 0x6cf9dc
push 0
call fcn.006965af
add esp, 8
test eax, eax
je 0x547992
push eax
call fcn.006966be
pop ecx
cmp esi, 1
je 0x5479c8
lea eax, [esp + 0x208]
push eax
mov edx, dword [esp + 0x464]
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x5478d8
mov ecx, 0x6ff8dc
lea edx, [esp]
call fcn.004f5acc
add esp, 0x464
pop ebx
pop ebp
pop esi
pop edi
ret
lea edx, [esp + 0x348]
push eax
push edi
push str._d._d
push edx
call fcn.006964d6
lea eax, [esp + 0x358]
push eax
call fcn.00697802
add esp, 0x14
fstp dword [esp + 0x44c]
movss xmm0, dword [esp + 0x44c]
mov eax, dword [esp + 0x454]
cmp ebx, eax
jg 0x547a20
mov eax, dword [esp + 0x45c]
cmp ebp, eax
jg 0x547a20
comiss xmm0, dword [esp + 0x458]
jbe 0x547992
lea esi, [esp]
lea edi, [esp + 0x234]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x547a2a
mov dword [esp + 0x454], ebx
mov dword [esp + 0x45c], ebp
movss dword [esp + 0x458], xmm0
jmp 0x547992
lea edx, [esp + 0x348]
push eax
push esi
push str._d._d
push edx
call fcn.006964d6
lea eax, [esp + 0x358]
push eax
call fcn.00697802
add esp, 0x14
fstp dword [esp + 0x458]
lea esi, [esp]
lea edi, [esp + 0x234]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x547a85
jmp 0x5478b3
xor eax, eax
mov dword [esp + 0x45c], eax
xor ebx, ebx
jmp 0x5478a7
push edi
push esi
push ebp
push ebx
push ecx
mov eax, 0x45c
call fcn.00696350
mov ecx, dword [esp + 0x45c]
lea ebp, [esp]
movsx ebx, word [0x6e9168]
movsx ecx, word [0x6e916c]
movsx edx, word [0x6e9170]
movsx eax, word [0x6ff994]
push eax
push edx
push ecx
push ebx
push str.DefTDL__d._d._d._d.dat
push ebp
call fcn.006964d6
add esp, 0x18
lea esi, [esp + 0x104]
mov edi, dword [0x6ff8b0]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x547af8
lea edi, [esp + 0x104]
mov edx, str.DefTDL_.dat
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x547b18
lea edx, [esp + 0x104]
lea eax, [esp + 0x208]
push eax
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov ebp, eax
cmp ebp, 0xffffffff
je 0x547d19
lea esi, [esp + 0x348]
lea edi, [esp + 0x234]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x547b51
lea eax, [esp + 0x348]
push 0x2d
push eax
call fcn.006968c0
add esp, 8
inc eax
je 0x547de6
push 0x6cf9dc
push eax
call fcn.006965af
add esp, 8
test eax, eax
je 0x547b96
push eax
call fcn.006966be
pop ecx
mov ebx, eax
mov edi, 1
jmp 0x547b9a
xor ebx, ebx
xor edi, edi
push 0x6cf9dc
push 0
call fcn.006965af
add esp, 8
test eax, eax
je 0x547bbd
push eax
call fcn.006966be
pop ecx
mov dword [esp + 0x458], eax
jmp 0x547bc8
xor eax, eax
mov dword [esp + 0x458], eax
xor edi, edi
push 0x6cf9dc
push 0
call fcn.006965af
add esp, 8
test eax, eax
je 0x547be6
push eax
call fcn.006966be
pop ecx
mov esi, eax
jmp 0x547bea
xor esi, esi
xor edi, edi
push 0x6cf9dc
push 0
call fcn.006965af
add esp, 8
test eax, eax
je 0x547c06
push eax
call fcn.006966be
pop ecx
jmp 0x547c0a
xor eax, eax
xor edi, edi
cmp edi, 1
je 0x547da9
fldz
fstp qword [esp + 0x44c]
lea eax, [esp + 0x208]
push eax
push ebp
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
je 0x547d19
mov dword [esp + 0x454], ebx
mov dword [esp + 0x45c], ebp
lea esi, [esp + 0x348]
lea edi, [esp + 0x234]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x547c4f
lea eax, [esp + 0x348]
push 0x2d
push eax
call fcn.006968c0
add esp, 8
inc eax
je 0x547cfb
push 0x6cf9dc
push eax
call fcn.006965af
add esp, 8
test eax, eax
je 0x547c94
push eax
call fcn.006966be
pop ecx
mov ebx, eax
mov esi, 1
jmp 0x547c98
xor ebx, ebx
xor esi, esi
push 0x6cf9dc
push 0
call fcn.006965af
add esp, 8
test eax, eax
je 0x547cb6
push eax
call fcn.006966be
pop ecx
mov ebp, eax
jmp 0x547cba
xor ebp, ebp
xor esi, esi
push 0x6cf9dc
push 0
call fcn.006965af
add esp, 8
test eax, eax
je 0x547cd8
push eax
call fcn.006966be
pop ecx
mov edi, eax
jmp 0x547cdc
xor edi, edi
xor esi, esi
push 0x6cf9dc
push 0
call fcn.006965af
add esp, 8
test eax, eax
je 0x547cfb
push eax
call fcn.006966be
pop ecx
cmp esi, 1
je 0x547d31
lea eax, [esp + 0x208]
push eax
mov edx, dword [esp + 0x460]
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x547c41
mov ecx, 0x6ff8dc
lea edx, [esp]
call fcn.004f5acc
add esp, 0x460
pop ebx
pop ebp
pop esi
pop edi
ret
lea edx, [esp + 0x348]
push eax
push edi
push str._d._d
push edx
call fcn.006964d6
lea eax, [esp + 0x358]
push eax
call fcn.00697802
add esp, 0x14
mov eax, dword [esp + 0x454]
cmp ebx, eax
jg 0x547d7b
mov eax, dword [esp + 0x458]
cmp ebp, eax
jg 0x547d7b
fcom qword [esp + 0x44c]
fnstsw ax
sahf
ja 0x547d7b
fstp st(0)
jmp 0x547cfb
lea esi, [esp]
lea edi, [esp + 0x234]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x547d85
mov dword [esp + 0x454], ebx
mov dword [esp + 0x458], ebp
fstp qword [esp + 0x44c]
jmp 0x547cfb
lea edi, [esp + 0x348]
push eax
push esi
push str._d._d
push edi
call fcn.006964d6
push edi
call fcn.00697802
add esp, 0x14
fstp qword [esp + 0x44c]
lea esi, [esp]
lea edi, [esp + 0x234]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x547dd7
jmp 0x547c1c
xor eax, eax
mov dword [esp + 0x458], eax
xor ebx, ebx
jmp 0x547c13