Function at 0x457e80
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x16bc
call fcn.00471f10
mov eax, dword [0x541280]
xor eax, esp
mov dword [esp + 0x16b8], eax
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
mov dword [esp + 0xc], eax
push ebx
mov ebx, ecx
mov ecx, dword [ebp + 0xc]
mov dword [esp + 0xc], ecx
mov ecx, dword [ebp + 0x18]
mov dword [esp + 0x14], ecx
push esi
push edi
test edx, edx
je 0x4582f0
test eax, eax
je 0x4582f0
mov ecx, edx
xor edi, edi
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x457ed2
sub ecx, esi
sar ecx, 1
je 0x4582f0
push edx
lea ecx, [esp + 0xa94]
call fcn.00458e50
mov eax, dword [esp + 0xe98]
test eax, eax
je 0x457f25
cmp word [esp + eax*2 + 0xa92], 0x5c
je 0x457f25
push 1
lea eax, [esp + 0x14]
mov dword [esp + 0x14], 0x5c
push eax
lea ecx, [esp + 0xa98]
call fcn.00459de0
push dword [ebp + 0x14]
lea ecx, [esp + 0xea4]
call fcn.00458e50
mov eax, dword [esp + 0x12a8]
test eax, eax
je 0x457f65
cmp word [esp + eax*2 + 0xea2], 0x5c
je 0x457f65
push 1
lea eax, [esp + 0x14]
mov dword [esp + 0x14], 0x5c
push eax
lea ecx, [esp + 0xea8]
call fcn.00459de0
push dword [esp + 0xe98]
lea eax, [esp + 0x12b8]
mov dword [esp + 0x16bc], edi
mov dword [esp + 0x12b4], eax
lea ecx, [esp + 0x12b4]
xor eax, eax
mov word [esp + 0x12b8], ax
lea eax, [esp + 0xa98]
push eax
call fcn.00447200
push 1
push 0x53ab14
lea ecx, [esp + 0x12b8]
call fcn.00459de0
lea eax, [esp + 0x20]
push eax
lea eax, [esp + 0x12b8]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x4582d0
test byte [esp + 0x20], 0x10
je 0x45814b
mov ecx, 0x534b18
lea eax, [esp + 0x4c]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x45800a
test dx, dx
je 0x458006
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x45800a
add eax, 4
add ecx, 4
test dx, dx
jne 0x457fe4
xor eax, eax
jmp 0x45800f
sbb eax, eax
or eax, 1
test eax, eax
je 0x45814b
mov ecx, 0x53ab18
lea eax, [esp + 0x4c]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x458046
test dx, dx
je 0x458042
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x458046
add eax, 4
add ecx, 4
test dx, dx
jne 0x458020
xor eax, eax
jmp 0x45804b
sbb eax, eax
or eax, 1
test eax, eax
je 0x45814b
push dword [esp + 0xe98]
lea eax, [esp + 0x278]
mov dword [esp + 0x67c], 0
mov dword [esp + 0x274], eax
lea ecx, [esp + 0x274]
xor eax, eax
mov word [esp + 0x278], ax
lea eax, [esp + 0xa98]
push eax
call fcn.00447200
push dword [esp + 0x12a8]
lea eax, [esp + 0x688]
mov dword [esp + 0xa8c], 0
mov dword [esp + 0x684], eax
lea ecx, [esp + 0x684]
xor eax, eax
mov word [esp + 0x688], ax
lea eax, [esp + 0xea8]
push eax
call fcn.00447200
lea ecx, [esp + 0x4c]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4580d6
sub ecx, edx
lea eax, [esp + 0x4c]
sar ecx, 1
push ecx
push eax
lea ecx, [esp + 0x278]
call fcn.00459de0
lea ecx, [esp + 0x4c]
lea edx, [ecx + 2]
mov edi, edi
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x458100
sub ecx, edx
lea eax, [esp + 0x4c]
sar ecx, 1
push ecx
push eax
lea ecx, [esp + 0x688]
call fcn.00459de0
push dword [esp + 0x1c]
mov eax, dword [ebx]
lea ecx, [esp + 0x688]
push ecx
lea ecx, [esp + 0x27c]
push ecx
push dword [esp + 0x20]
mov ecx, ebx
push dword [esp + 0x28]
call dword [eax + 0x64]
add edi, eax
jmp 0x4582bc
mov ecx, 0x534b18
lea eax, [esp + 0x4c]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x45817a
test dx, dx
je 0x458176
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x45817a
add eax, 4
add ecx, 4
test dx, dx
jne 0x458154
xor eax, eax
jmp 0x45817f
sbb eax, eax
or eax, 1
test eax, eax
je 0x4582bc
mov eax, 0x53ab18
lea ecx, [esp + 0x4c]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x4581b6
test dx, dx
je 0x4581b2
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x4581b6
add ecx, 4
add eax, 4
test dx, dx
jne 0x458190
xor eax, eax
jmp 0x4581bb
sbb eax, eax
or eax, 1
test eax, eax
je 0x4582bc
push dword [esp + 0xe98]
lea eax, [esp + 0x688]
mov dword [esp + 0xa8c], 0
mov dword [esp + 0x684], eax
lea ecx, [esp + 0x684]
xor eax, eax
mov word [esp + 0x688], ax
lea eax, [esp + 0xa98]
push eax
call fcn.00447200
push dword [esp + 0x12a8]
lea eax, [esp + 0x278]
mov dword [esp + 0x67c], 0
mov dword [esp + 0x274], eax
lea ecx, [esp + 0x274]
xor eax, eax
mov word [esp + 0x278], ax
lea eax, [esp + 0xea8]
push eax
call fcn.00447200
lea ecx, [esp + 0x4c]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x458246
sub ecx, edx
lea eax, [esp + 0x4c]
sar ecx, 1
push ecx
push eax
lea ecx, [esp + 0x688]
call fcn.00459de0
lea ecx, [esp + 0x4c]
lea edx, [ecx + 2]
mov edi, edi
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x458270
sub ecx, edx
lea eax, [esp + 0x4c]
sar ecx, 1
push ecx
push eax
lea ecx, [esp + 0x278]
call fcn.00459de0
push dword [esp + 0x1c]
mov eax, dword [ebx]
lea ecx, [esp + 0x278]
push 0
push ecx
lea ecx, [esp + 0x690]
push ecx
push dword [esp + 0x24]
mov ecx, ebx
push dword [esp + 0x2c]
call dword [eax + 0x68]
cmp eax, 0xffffffff
je 0x4582bc
inc edi
lea eax, [esp + 0x20]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x457fd0
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x16b8]
xor ecx, esp
call fcn.0045e339
mov esp, ebp
pop ebp
ret 0x14
mov ecx, dword [esp + 0x16c4]
xor eax, eax
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0045e339
mov esp, ebp
pop ebp
ret 0x14