Function at 0x449c6d
Capabilities:
Copy file
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push 0x133f
sub esp, 0x70
push fcn.00449c6d
xor esi, esi
mov ecx, 0xdb
push esi
dec ecx
jne 0x449c87
lea ebx, [ebp + 8]
call fcn.0045b45a
xor eax, eax
call fcn.00451592
mov eax, 1
mov edx, 0x1868830
call fcn.0045b687
xor ecx, ecx
xchg ecx, eax
call fcn.00451592
mov eax, ecx
call fcn.0045020d
test eax, eax
jne 0x449d26
lea ebx, [ebp + 8]
call fcn.0045b45a
xor eax, eax
call fcn.00451592
mov eax, 1
mov edx, 0x186884c
call fcn.0045b687
xor ecx, ecx
xchg ecx, eax
call fcn.00451592
mov eax, ecx
call fcn.0045020d
test eax, eax
jne 0x449d26
lea ebx, [ebp + 8]
call fcn.0045b45a
xor eax, eax
call fcn.00451592
mov eax, 1
mov edx, 0x1868868
call fcn.0045b687
xor ecx, ecx
xchg ecx, eax
call fcn.00451592
mov eax, ecx
call fcn.0045020d
test eax, eax
je 0x449d2b
jmp 0x44a22e
lea ebx, [ebp + 8]
call fcn.0045b45a
mov eax, 1
call fcn.00452863
mov edx, 0x185e9b0
call fcn.0045b687
call fcn.0045abcf
je 0x449d72
lea ebx, [ebp + 8]
call fcn.0045b45a
mov edx, 0x185e9b0
call fcn.0045b687
call fcn.0045ab3a
lea ebx, [ebp + 8]
mov ecx, 0x104
call fcn.0045b4a3
lea ebx, [ebp + 8]
call fcn.0045b45a
mov edx, 0x186889c
call fcn.0045b687
call fcn.0045ab3a
lea ebx, [ebp - 0x2ec]
mov ecx, 0x104
call fcn.0045b4a3
lea ebx, [ebp - 0x1e8]
push ebx
lea ebx, [ebp - 0x2ec]
push ebx
call dword [sym.imp.KERNEL32.DLL_FindFirstFileA]
fldcw word [ebp - 0x10]
mov esi, eax
fild qword [0x186aa78]
mov dword [ebp - 0x6c], esi
mov dword [ebp - 0x68], 0
fild qword [ebp - 0x6c]
fcompp
fnstsw ax
sahf
je 0x44a22e
fild dword [0x186aa28]
fild dword [0x186aa28]
mov eax, dword [ebp - 0x1e8]
call fcn.0045a848
call fcn.0045a6d3
fcompp
fnstsw ax
sahf
je 0x44a207
lea ebx, [ebp - 0x1bc]
call fcn.0045b45a
xor eax, eax
call fcn.00451592
mov eax, 1
mov ecx, 0xb
xchg ecx, eax
call fcn.004527ff
mov edx, 0x18688a8
call fcn.0045b687
call fcn.0045abcf
jne 0x44a207
lea ebx, [ebp + 8]
call fcn.0045b45a
lea ebx, [ebp - 0x1bc]
call fcn.0045b45a
call fcn.0045ab3a
mov eax, 0x80000104
call fcn.00452ee2
call fcn.0044a2d0
call fcn.0045b69e
lea ebx, [ebp - 0x3f0]
mov ecx, 0x104
call fcn.0045b4a3
lea ebx, [ebp - 0x3f0]
call fcn.0045b45a
call fcn.0045b655
test eax, eax
je 0x44a1a1
push 0
lea ebx, [ebp + 8]
call fcn.0045b45a
mov edx, 0x1868950
call fcn.0045b687
call fcn.0045ab3a
lea ebx, [ebp - 0x3f0]
call fcn.0045b45a
call fcn.0045ab3a
lea ebx, [esp]
call fcn.0045a938
call fcn.0042583c
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00456355
pop eax
add esp, 4
test eax, eax
je 0x44a1a1
push 0
lea ebx, [ebp - 0x3f0]
add ebx, 0x100
mov ecx, 0x41
push dword [ebx]
sub ebx, 4
dec ecx
jne 0x449ee3
call fcn.0044a245
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jne 0x44a136
push 0
push 0
push 0
mov ebx, 0x185e490
call fcn.0045b45a
mov edx, 0x18688b8
call fcn.0045b687
call fcn.0045ab3a
lea ebx, [ebp - 0x1bc]
call fcn.0045b45a
call fcn.0045ab3a
lea ebx, [esp + 8]
call fcn.0045a938
lea ebx, [ebp + 8]
call fcn.0045b45a
lea ebx, [ebp - 0x1bc]
call fcn.0045b45a
call fcn.0045ab3a
lea ebx, [esp + 8]
call fcn.0045a938
call dword [sym.imp.KERNEL32.DLL_CopyFileA]
push eax
mov ebx, esp
mov eax, dword [ebx + 8]
call fcn.00456355
mov eax, dword [ebx + 4]
call fcn.00456355
pop eax
add esp, 8
fldcw word [ebp - 0x10]
test eax, eax
je 0x44a0da
lea ebx, [ebp + 8]
call fcn.0045b45a
mov edx, 0x1868950
call fcn.0045b687
call fcn.0045ab3a
lea ebx, [ebp - 0x3f0]
call fcn.0045b45a
call fcn.0045ab3a
push 0
mov ebx, esp
call fcn.0045a876
mov ebx, 0x185e490
call fcn.0045b45a
mov edx, 0x18688c8
call fcn.0045b687
call fcn.0045ab3a
lea ebx, [ebp - 0x3f0]
call fcn.0045b45a
call fcn.0045ab3a
mov eax, 0x80000104
call fcn.00452ee2
call fcn.00448b45
test eax, eax
je 0x44a07e
inc dword [0x185e598]
lea ebx, [ebp - 0x3f0]
call fcn.0045b45a
mov eax, dword [0x185e598]
sub eax, dword [0x185e784]
imul eax, eax, 0x104
add eax, dword [0x185e76c]
mov ebx, eax
mov ecx, 0x104
call fcn.0045b4a3
mov edx, 0x18688e0
call fcn.0045b687
lea ebx, [ebp + 8]
call fcn.0045b45a
call fcn.0045ab3a
lea ebx, [ebp - 0x3f0]
call fcn.0045b45a
call fcn.0045ab3a
push 0
mov ebx, esp
call fcn.0045a876
mov eax, 4
call fcn.004588d6
mov edx, 0x18687d8
call fcn.0045b687
call fcn.0045ab3a
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00448e2d
jmp 0x44a0d5
mov edx, 0x18688f0
call fcn.0045b687
lea ebx, [ebp + 8]
call fcn.0045b45a
call fcn.0045ab3a
lea ebx, [ebp - 0x3f0]
call fcn.0045b45a
call fcn.0045ab3a
push 0
mov ebx, esp
call fcn.0045a876
mov eax, 4
call fcn.004588d6
mov edx, 0x18687d8
call fcn.0045b687
call fcn.0045ab3a
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00448e2d
jmp 0x44a131
mov edx, 0x1868904
call fcn.0045b687
lea ebx, [ebp + 8]
call fcn.0045b45a
call fcn.0045ab3a
lea ebx, [ebp - 0x1bc]
call fcn.0045b45a
call fcn.0045ab3a
push 0
mov ebx, esp
call fcn.0045a876
mov eax, 4
call fcn.004588d6
mov edx, 0x18687d8
call fcn.0045b687
call fcn.0045ab3a
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00448e2d
jmp 0x44a19c
mov edx, 0x1868914
call fcn.0045b687
lea ebx, [ebp + 8]
call fcn.0045b45a
call fcn.0045ab3a
lea ebx, [ebp - 0x3f0]
call fcn.0045b45a
call fcn.0045ab3a
mov edx, 0x1868920
call fcn.0045b687
call fcn.0045ab3a
push 0
mov ebx, esp
call fcn.0045a876
mov eax, 4
call fcn.004588d6
mov edx, 0x18687d8
call fcn.0045b687
call fcn.0045ab3a
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00448e2d
jmp 0x44a207
mov edx, 0x1868934
call fcn.0045b687
lea ebx, [ebp + 8]
call fcn.0045b45a
call fcn.0045ab3a
lea ebx, [ebp - 0x1bc]
call fcn.0045b45a
call fcn.0045ab3a
mov edx, 0x186893c
call fcn.0045b687
call fcn.0045ab3a
push 0
mov ebx, esp
call fcn.0045a876
mov eax, 4
call fcn.004588d6
mov edx, 0x18687d8
call fcn.0045b687
call fcn.0045ab3a
push 0
mov ebx, esp
call fcn.0045a876
call fcn.00448e2d
lea ebx, [ebp - 0x1e8]
push ebx
mov eax, esi
push eax
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
fldcw word [ebp - 0x10]
test eax, eax
jne 0x449dd0
mov eax, esi
push eax
call dword [sym.imp.KERNEL32.DLL_FindClose]
fldcw word [ebp - 0x10]
lea esp, [ebp - 0xc]
pop edi
pop esi
pop ebx
pop ebp
ret 0x104