Function at 0x48c250
Capabilities:
Enumerate files on windows

Disassembly:
sub esp, 0x920
push ebx
push ebp
push esi
push edi
lea eax, [esp + 0x160]
push 0x3e7
push eax
call fcn.00423a00
lea ecx, [esp + 0x550]
push 0x3e7
push ecx
call fcn.00423a00
mov eax, dword [esp + 0x948]
add esp, 0x10
lea edx, [esp + 0x20]
push edx
xor ebp, ebp
xor esi, esi
push eax
mov dword [esp + 0x18], ebp
mov dword [esp + 0x1c], esi
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp eax, 0xffffffff
mov ebx, dword [esp + 0x934]
mov dword [esp + 0x18], eax
je 0x48c539
test byte [esp + 0x20], 0x10
je 0x48c377
lea ecx, [esp + 0x4c]
push 0x5e76a8
push ecx
call fcn.005e31f5
add esp, 8
test eax, eax
je 0x48c51a
lea edx, [esp + 0x4c]
push 0x5ea970
push edx
call fcn.005e31f5
add esp, 8
test eax, eax
jne 0x48c30d
lea eax, [ebx + 0x648]
push eax
lea ecx, [ebx + 0x544]
push ecx
call fcn.005e31f5
add esp, 8
test eax, eax
je 0x48c51a
xor eax, eax
nop
mov cl, byte [esp + eax + 0x4c]
mov byte [esp + eax + 0x160], cl
inc eax
test cl, cl
jne 0x48c310
mov eax, dword [ebx + 0x86c]
test eax, eax
jne 0x48c344
lea edi, [esp + 0x160]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x48c332
mov dx, word [0x5e75fc]
mov word [edi], dx
lea eax, [esp + 0x160]
push eax
call fcn.005e3db8
push 0
lea ecx, [esp + 0x168]
push ecx
push ebp
call fcn.004e2f90
add esp, 0x10
test eax, eax
je 0x48c785
mov ebp, eax
mov dword [esp + 0x10], ebp
jmp 0x48c51a
lea edx, [esp + 0x4c]
push str.dirinfo.srv
push edx
call fcn.005e31f5
add esp, 8
test eax, eax
je 0x48c51a
xor eax, eax
mov cl, byte [esp + eax + 0x4c]
mov byte [esp + eax + 0x160], cl
inc eax
test cl, cl
jne 0x48c393
mov eax, dword [ebx + 0x86c]
test eax, eax
jne 0x48c4c5
mov eax, dword [esp + 0x40]
mov edx, dword [esp + 0x3c]
mov ecx, dword [ebx + 0x870]
sub eax, edx
test ecx, ecx
mov dword [esp + 0x1c], eax
je 0x48c3e2
push eax
lea eax, [esp + 0x54c]
push str._ld_b
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x48c406
fild dword [esp + 0x1c]
push 1
push 1
push 0
push 1
push 1
lea ecx, [esp + 0x55c]
push ecx
sub esp, 8
fstp qword [esp]
call fcn.00516dc0
add esp, 0x20
lea edi, [esp + 0x160]
dec edi
mov edi, edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x48c410
mov dx, word [0x5ea954]
mov al, byte [0x5ea956]
mov word [edi], dx
mov byte [edi + 2], al
lea eax, [esp + 0x548]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x48c434
sub eax, edx
mov esi, eax
lea eax, [esp + 0x160]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x48c450
sub eax, edx
add eax, esi
cmp eax, 0x17
jae 0x48c4a0
mov bp, word [0x5e7420]
jmp 0x48c470
lea edi, [esp + 0x160]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x48c478
lea eax, [esp + 0x160]
mov word [edi], bp
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x48c490
sub eax, edx
add eax, esi
cmp eax, 0x17
jb 0x48c470
lea ecx, [esp + 0x548]
push ecx
lea edx, [esp + 0x164]
push 0x3e7
push edx
call fcn.00423970
mov esi, dword [esp + 0x20]
mov ebp, dword [esp + 0x1c]
add esp, 0xc
lea eax, [esp + 0x160]
push eax
call fcn.005e3ca4
mov eax, dword [ebx + 0x86c]
add esp, 4
test eax, eax
jne 0x48c4f9
lea edi, [esp + 0x160]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x48c4e7
mov cx, word [0x5e75fc]
mov word [edi], cx
push 0
lea edx, [esp + 0x164]
push edx
push esi
call fcn.004e2f90
add esp, 0xc
test eax, eax
je 0x48c785
mov esi, eax
mov dword [esp + 0x14], esi
mov edi, dword [esp + 0x18]
lea eax, [esp + 0x20]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x48c2b4
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
push 0
push 0
push esi
call fcn.0054bc50
push 0
push 0
push ebp
mov esi, eax
call fcn.0054bc50
push esi
push 0
push eax
call fcn.004e31c0
mov ecx, dword [ebx + 0x86c]
add esp, 0x24
test ecx, ecx
mov dword [ebx + 0x874], eax
je 0x48c701
mov ecx, dword [esp + 0x934]
xor ebp, ebp
mov ebx, eax
cmp ebx, ebp
mov dword [ecx + 0x874], ebp
mov byte [esp + 0x548], 0
je 0x48c701
mov ecx, dword [ebx]
lea edx, [esp + 0x160]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x48c5a0
lea eax, [esp + 0x160]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x48c5b4
sub eax, edx
cmp eax, 0xf
jae 0x48c5fe
mov si, word [0x5e7420]
lea esp, [esp]
lea edi, [esp + 0x160]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x48c5d8
lea eax, [esp + 0x160]
mov word [edi], si
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x48c5f0
sub eax, edx
cmp eax, 0xf
jb 0x48c5d0
lea edx, [esp + 0x160]
push edx
lea eax, [esp + 0x54c]
push 0x3e7
push eax
call fcn.00423970
mov ecx, dword [esp + 0x940]
mov eax, dword [ecx + 0x864]
add esp, 0xc
inc ebp
lea edi, [esp + 0x548]
dec edi
cmp ebp, eax
jl 0x48c681
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x48c635
mov esi, dword [esp + 0x934]
mov ecx, dword [esi + 0x874]
mov dx, word [0x5e75fc]
push 0
lea eax, [esp + 0x54c]
push eax
push ecx
mov word [edi], dx
call fcn.004e2f90
add esp, 0xc
test eax, eax
je 0x48c785
mov dword [esi + 0x874], eax
mov byte [esp + 0x548], 0
xor ebp, ebp
jmp 0x48c69b
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x48c681
mov dx, word [0x5ea954]
mov al, byte [0x5ea956]
mov word [edi], dx
mov byte [edi + 2], al
push ebx
call fcn.004e3090
mov ebx, eax
add esp, 4
test ebx, ebx
jne 0x48c590
mov al, byte [esp + 0x548]
test al, al
je 0x48c701
lea edi, [esp + 0x548]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x48c6c1
mov esi, dword [esp + 0x934]
mov eax, dword [esi + 0x874]
mov cx, word [0x5e75fc]
push 0
lea edx, [esp + 0x54c]
push edx
push eax
mov word [edi], cx
call fcn.004e2f90
add esp, 0xc
test eax, eax
je 0x48c785
mov dword [esi + 0x874], eax
push 0
push 0
push 0xa29
call fcn.00421db0
mov esi, dword [esp + 0x940]
mov ecx, dword [esi + 0x874]
add esp, 8
push eax
push ecx
call fcn.004e2f90
add esp, 0xc
test eax, eax
je 0x48c785
mov dword [esi + 0x874], eax
lea eax, [esi + 0x544]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x48c740
sub eax, edx
mov edx, dword [esp + 0x938]
add eax, edx
push eax
lea eax, [esp + 0x54c]
push str.__s__n
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
mov edx, dword [esi + 0x874]
push 0
push 0
lea ecx, [esp + 0x55c]
push ecx
push edx
call fcn.004e3ad0
add esp, 0x1c
test eax, eax
jne 0x48c792
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x920
ret
pop edi
mov dword [esi + 0x874], eax
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x920
ret