Function at 0x4fb92c
Capabilities:
Enumerate files on windows

Disassembly:
test dword [0x7eeab0], 0xffffff80
jne 0x4fb954
test dword [0x7eeab0], 0xffffffff
jne 0x4fbb5c
call fcn.006a7b4c
jmp fcn.004fb92c
push edi
push esi
push ebp
push ebx
sub esp, 0xc
mov dword [esp + 4], edx
test ecx, ecx
je 0x4fb99e
mov esi, 0x700ee0
mov edi, ecx
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x4fb96a
xor eax, eax
movzx edx, byte [ecx + eax]
test edx, edx
je 0x4fb98b
movzx edx, byte [ecx + eax + 1]
add eax, 2
test edx, edx
jne 0x4fb976
dec eax
cmp byte [eax + 0x700edf], 0x5c
je 0x4fb9a0
mov byte [eax + 0x700ee0], 0x5c
inc eax
jmp 0x4fb9a0
xor eax, eax
lea edx, [eax + 0x700ee0]
mov byte [eax + 0x700ee0], 0
push 0x6d0a98
push 0x6c4a54
push edx
call fcn.006974c6
add esp, 0xc
mov ecx, 0x13e
call fcn.004dbdb8
mov ebp, eax
push ebp
push 0x700ee0
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x4fbb42
mov eax, dword [ebp]
xor ecx, ecx
and eax, 0x10
mov edx, 1
cmovne ecx, edx
mov dword [esp], ecx
lea edi, [ebp + 0x2c]
mov dword [esp + 8], edi
mov esi, 0x6d09dc
mov dl, byte [edi]
cmp dl, byte [esi]
jne 0x4fba22
test dl, dl
je 0x4fba1e
mov dl, byte [edi + 1]
cmp dl, byte [esi + 1]
jne 0x4fba22
add edi, 2
add esi, 2
test dl, dl
jne 0x4fba02
xor eax, eax
jmp 0x4fba27
sbb eax, eax
or eax, 1
test eax, eax
je 0x4fba61
mov edi, dword [esp + 8]
mov esi, 0x6d0a9c
mov dl, byte [edi]
cmp dl, byte [esi]
jne 0x4fba54
test dl, dl
je 0x4fba50
mov dl, byte [edi + 1]
cmp dl, byte [esi + 1]
jne 0x4fba54
add edi, 2
add esi, 2
test dl, dl
jne 0x4fba34
xor eax, eax
jmp 0x4fba59
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4fbb0c
push ebp
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
cmp eax, 1
jne 0x4fbb28
mov edi, dword [esp + 8]
mov esi, 0x6d09dc
mov dl, byte [edi]
cmp dl, byte [esi]
jne 0x4fba9b
test dl, dl
je 0x4fba97
mov dl, byte [edi + 1]
cmp dl, byte [esi + 1]
jne 0x4fba9b
add edi, 2
add esi, 2
test dl, dl
jne 0x4fba7b
xor eax, eax
jmp 0x4fbaa0
sbb eax, eax
or eax, 1
test eax, eax
je 0x4fbaf9
mov edi, dword [esp + 8]
mov esi, 0x6d0a9c
mov dl, byte [edi]
cmp dl, byte [esi]
jne 0x4fbacd
test dl, dl
je 0x4fbac9
mov dl, byte [edi + 1]
cmp dl, byte [esi + 1]
jne 0x4fbacd
add edi, 2
add esi, 2
test dl, dl
jne 0x4fbaad
xor eax, eax
jmp 0x4fbad2
sbb eax, eax
or eax, 1
test eax, eax
je 0x4fbaf9
mov eax, dword [ebp]
xor edx, edx
and eax, 0x10
mov esi, 1
cmovne edx, esi
mov edi, dword [esp + 0x20]
push edi
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 8]
call eax
test eax, eax
je 0x4fbb28
push ebp
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
cmp eax, 1
je 0x4fba72
jmp 0x4fbb28
mov eax, dword [esp + 0x20]
push eax
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 4]
mov esi, dword [esp + 8]
call esi
cmp eax, 1
je 0x4fba61
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, ebp
call fcn.004db4f8
xor eax, eax
add esp, 0xc
pop ebx
pop ebp
pop esi
pop edi
ret 4
mov ecx, ebp
call fcn.004db4f8
call dword [sym.imp.KERNEL32.dll_GetLastError]
add esp, 0xc
pop ebx
pop ebp
pop esi
pop edi
ret 4
push edi
push esi
push ebp
push ebx
sub esp, 0xc
mov dword [esp + 4], edx
test ecx, ecx
je 0x4fbba6
mov esi, 0x700ee0
mov edi, ecx
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x4fbb72
xor eax, eax
movzx edx, byte [ecx + eax]
test edx, edx
je 0x4fbb93
movzx edx, byte [ecx + eax + 1]
add eax, 2
test edx, edx
jne 0x4fbb7e
dec eax
cmp byte [eax + 0x700edf], 0x5c
je 0x4fbba8
mov byte [eax + 0x700ee0], 0x5c
inc eax
jmp 0x4fbba8
xor eax, eax
lea edx, [eax + 0x700ee0]
mov byte [eax + 0x700ee0], 0
push 0x6d0a98
push 0x6c4a54
push edx
call fcn.006974c6
add esp, 0xc
mov ecx, 0x13e
call fcn.004dbdb8
mov ebp, eax
push ebp
push 0x700ee0
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x4fbd44
mov eax, dword [ebp]
and eax, 0x10
xor edx, edx
test eax, eax
setne dl
mov dword [esp], edx
lea edi, [ebp + 0x2c]
mov dword [esp + 8], edi
mov esi, 0x6d09dc
mov dl, byte [edi]
cmp dl, byte [esi]
jne 0x4fbc27
test dl, dl
je 0x4fbc23
mov dl, byte [edi + 1]
cmp dl, byte [esi + 1]
jne 0x4fbc27
add edi, 2
add esi, 2
test dl, dl
jne 0x4fbc07
xor eax, eax
jmp 0x4fbc2c
sbb eax, eax
or eax, 1
test eax, eax
je 0x4fbc66
mov edi, dword [esp + 8]
mov esi, 0x6d0a9c
mov dl, byte [edi]
cmp dl, byte [esi]
jne 0x4fbc59
test dl, dl
je 0x4fbc55
mov dl, byte [edi + 1]
cmp dl, byte [esi + 1]
jne 0x4fbc59
add edi, 2
add esi, 2
test dl, dl
jne 0x4fbc39
xor eax, eax
jmp 0x4fbc5e
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4fbd0e
push ebp
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
cmp eax, 1
jne 0x4fbd2a
mov edi, dword [esp + 8]
mov esi, 0x6d09dc
mov dl, byte [edi]
cmp dl, byte [esi]
jne 0x4fbca0
test dl, dl
je 0x4fbc9c
mov dl, byte [edi + 1]
cmp dl, byte [esi + 1]
jne 0x4fbca0
add edi, 2
add esi, 2
test dl, dl
jne 0x4fbc80
xor eax, eax
jmp 0x4fbca5
sbb eax, eax
or eax, 1
test eax, eax
je 0x4fbcfb
mov edi, dword [esp + 8]
mov esi, 0x6d0a9c
mov dl, byte [edi]
cmp dl, byte [esi]
jne 0x4fbcd2
test dl, dl
je 0x4fbcce
mov dl, byte [edi + 1]
cmp dl, byte [esi + 1]
jne 0x4fbcd2
add edi, 2
add esi, 2
test dl, dl
jne 0x4fbcb2
xor eax, eax
jmp 0x4fbcd7
sbb eax, eax
or eax, 1
test eax, eax
je 0x4fbcfb
mov eax, dword [ebp]
and eax, 0x10
xor edx, edx
test eax, eax
setne dl
mov esi, dword [esp + 0x20]
push esi
mov ecx, dword [esp + 0xc]
mov edi, dword [esp + 8]
call edi
test eax, eax
je 0x4fbd2a
push ebp
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
cmp eax, 1
je 0x4fbc77
jmp 0x4fbd2a
mov esi, dword [esp + 0x20]
push esi
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 4]
mov eax, dword [esp + 8]
call eax
cmp eax, 1
je 0x4fbc66
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, ebp
call fcn.004db4f8
xor eax, eax
add esp, 0xc
pop ebx
pop ebp
pop esi
pop edi
ret 4
mov ecx, ebp
call fcn.004db4f8
call dword [sym.imp.KERNEL32.dll_GetLastError]
add esp, 0xc
pop ebx
pop ebp
pop esi
pop edi
ret 4