Function at 0x4824d4
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff6d8
push ebx
push esi
push edi
mov ebx, dword [ebp + 8]
mov edi, 0x563a4c
push 0x3e7
lea eax, [ebp - 0x7e4]
push eax
call fcn.0042e3f0
push 0x3e7
lea edx, [ebp - 0x3fc]
push edx
call fcn.0042e3f0
xor ecx, ecx
mov dword [ebp - 8], ecx
xor eax, eax
mov dword [ebp - 4], eax
lea edx, [ebp - 0x924]
push edx
push dword [ebp + 0xc]
call sub.KERNEL32.dll_FindFirstFileA
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffff
jne 0x482538
mov dword [ebp - 0xc], 1
jmp 0x482790
xor ecx, ecx
mov dword [ebp - 0xc], ecx
jmp 0x482790
test byte [ebp - 0x924], 0x10
je 0x48261f
push edi
lea eax, [ebp - 0x8f8]
push eax
call fcn.0054c494
add esp, 8
test eax, eax
je 0x482776
xor esi, esi
lea eax, [edi + 3]
push eax
lea edx, [ebp - 0x8f8]
push edx
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x48259f
lea ecx, [ebx + 0x648]
push ecx
lea eax, [ebx + 0x544]
push eax
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x48259f
mov esi, 1
test esi, esi
jne 0x482776
push edi
lea esi, [ebp - 0x7e4]
lea edi, [ebp - 0x8f8]
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
cmp dword [ebx + 0x86c], 0
jne 0x4825ee
lea eax, [edi + 7]
push eax
lea edx, [ebp - 0x7e4]
push edx
call fcn.0054c1f4
add esp, 8
lea ecx, [ebp - 0x7e4]
push ecx
call fcn.005542b8
pop ecx
push 0
lea eax, [ebp - 0x7e4]
push eax
push dword [ebp - 8]
call fcn.004c6a50
test eax, eax
jne 0x482617
xor eax, eax
jmp 0x482998
mov dword [ebp - 8], eax
jmp 0x482776
lea edx, [edi + 0xa]
push edx
lea ecx, [ebp - 0x8f8]
push ecx
call fcn.0054c494
add esp, 8
test eax, eax
je 0x482776
push edi
lea esi, [ebp - 0x7e4]
lea edi, [ebp - 0x8f8]
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
cmp dword [ebx + 0x86c], 0
jne 0x48272e
mov eax, dword [ebp - 0x908]
mov edx, eax
neg eax
add eax, dword [ebp - 0x904]
cmp dword [ebx + 0x870], 0
je 0x4826a1
push eax
lea ecx, [edi + 0x17]
push ecx
lea eax, [ebp - 0x3fc]
push eax
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp 0x4826cb
push 1
push 0
push 1
push 1
push 0
push 0
lea edx, [ebp - 0x3fc]
push edx
mov dword [ebp - 0x928], eax
fild dword [ebp - 0x928]
add esp, 0xfffffff4
fstp xword [esp]
call fcn.004e5ac5
lea ecx, [edi + 0x1e]
push ecx
lea eax, [ebp - 0x7e4]
push eax
call fcn.0054c1f4
add esp, 8
lea edx, [ebp - 0x3fc]
push edx
call fcn.0054c2d0
pop ecx
mov esi, eax
jmp 0x482702
lea eax, [edi + 0x22]
push eax
lea edx, [ebp - 0x7e4]
push edx
call fcn.0054c1f4
add esp, 8
lea ecx, [ebp - 0x7e4]
push ecx
call fcn.0054c2d0
pop ecx
add eax, esi
cmp eax, 0x17
jb 0x4826ef
lea eax, [ebp - 0x3fc]
push eax
push 0x3e7
lea edx, [ebp - 0x7e4]
push edx
call fcn.0042e38d
lea ecx, [ebp - 0x7e4]
push ecx
call fcn.00554294
pop ecx
cmp dword [ebx + 0x86c], 0
jne 0x482757
lea eax, [edi + 0x25]
push eax
lea edx, [ebp - 0x7e4]
push edx
call fcn.0054c1f4
add esp, 8
push 0
lea ecx, [ebp - 0x7e4]
push ecx
push dword [ebp - 4]
call fcn.004c6a50
test eax, eax
jne 0x482773
xor eax, eax
jmp 0x482998
mov dword [ebp - 4], eax
lea edx, [ebp - 0x924]
push edx
push dword [ebp - 0x10]
call sub.KERNEL32.dll_FindNextFileA
test eax, eax
jne 0x482790
mov dword [ebp - 0xc], 1
cmp dword [ebp - 0xc], 0
je 0x482542
cmp dword [ebp - 0x10], 0xffffffff
je 0x4827a8
push dword [ebp - 0x10]
call sub.KERNEL32.dll_FindClose
push 0
push 0
push dword [ebp - 4]
call fcn.0050afb3
mov dword [ebp - 4], eax
push 0
push 0
push dword [ebp - 8]
call fcn.0050afb3
mov dword [ebp - 8], eax
push dword [ebp - 4]
push 0
push dword [ebp - 8]
call fcn.004c6d36
mov esi, eax
mov dword [ebx + 0x874], esi
cmp dword [ebx + 0x86c], 0
je 0x482923
xor eax, eax
mov dword [ebp - 0x14], eax
xor edx, edx
mov dword [ebx + 0x874], edx
mov byte [ebp - 0x3fc], 0
test esi, esi
je 0x4828e5
mov ecx, dword [esi]
push esi
push edi
mov edi, ecx
lea esi, [ebp - 0x7e4]
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
jmp 0x482844
lea eax, [edi + 0x28]
push eax
lea edx, [ebp - 0x7e4]
push edx
call fcn.0054c1f4
add esp, 8
lea ecx, [ebp - 0x7e4]
push ecx
call fcn.0054c2d0
pop ecx
cmp eax, 0xf
jb 0x482831
lea eax, [ebp - 0x7e4]
push eax
push 0x3e7
lea edx, [ebp - 0x3fc]
push edx
call fcn.0042e38d
inc dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [ebx + 0x864]
jl 0x4828c2
lea eax, [edi + 0x2b]
push eax
lea edx, [ebp - 0x3fc]
push edx
call fcn.0054c1f4
add esp, 8
push 0
lea ecx, [ebp - 0x3fc]
push ecx
push dword [ebx + 0x874]
call fcn.004c6a50
test eax, eax
jne 0x4828ae
xor eax, eax
jmp 0x482998
mov dword [ebx + 0x874], eax
mov byte [ebp - 0x3fc], 0
xor edx, edx
mov dword [ebp - 0x14], edx
jmp 0x4828d5
lea ecx, [edi + 0x2e]
push ecx
lea eax, [ebp - 0x3fc]
push eax
call fcn.0054c1f4
add esp, 8
push esi
call fcn.004c6c0b
mov esi, eax
test esi, esi
jne 0x482804
cmp byte [ebp - 0x3fc], 0
je 0x482923
lea edx, [edi + 0x32]
push edx
lea ecx, [ebp - 0x3fc]
push ecx
call fcn.0054c1f4
add esp, 8
push 0
lea eax, [ebp - 0x3fc]
push eax
push dword [ebx + 0x874]
call fcn.004c6a50
test eax, eax
jne 0x48291d
xor eax, eax
jmp 0x482998
mov dword [ebx + 0x874], eax
push 0
push 0
push 0xa29
call fcn.0042c564
push eax
push dword [ebx + 0x874]
call fcn.004c6a50
test eax, eax
jne 0x482945
xor eax, eax
jmp 0x482998
mov dword [ebx + 0x874], eax
lea edx, [ebx + 0x544]
push edx
call fcn.0054c2d0
pop ecx
add eax, dword [ebp + 0xc]
push eax
lea ecx, [edi + 0x35]
push ecx
lea eax, [ebp - 0x3fc]
push eax
call sub.USER32.dll_wsprintfA
add esp, 0xc
push 0
push 0
lea edx, [ebp - 0x3fc]
push edx
push dword [ebx + 0x874]
call fcn.004c6b77
test eax, eax
jne 0x48298d
xor eax, eax
jmp 0x482998
mov dword [ebx + 0x874], eax
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8