Function at 0x481ec4
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff6d8
push ebx
push esi
push edi
mov ebx, dword [ebp + 8]
mov edi, 0x565aa8
push 0x3e7
lea eax, [ebp - 0x7e4]
push eax
call fcn.0042e6b1
push 0x3e7
lea edx, [ebp - 0x3fc]
push edx
call fcn.0042e6b1
xor ecx, ecx
mov dword [ebp - 8], ecx
xor eax, eax
mov dword [ebp - 4], eax
lea edx, [ebp - 0x924]
push edx
push dword [ebp + 0xc]
call sub.KERNEL32.dll_FindFirstFileA
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffff
jne 0x481f28
mov dword [ebp - 0xc], 1
jmp 0x482180
xor ecx, ecx
mov dword [ebp - 0xc], ecx
jmp 0x482180
test byte [ebp - 0x924], 0x10
je 0x48200f
push edi
lea eax, [ebp - 0x8f8]
push eax
call fcn.0054e450
add esp, 8
test eax, eax
je 0x482166
xor esi, esi
lea eax, [edi + 3]
push eax
lea edx, [ebp - 0x8f8]
push edx
call fcn.0054e450
add esp, 8
test eax, eax
jne 0x481f8f
lea ecx, [ebx + 0x648]
push ecx
lea eax, [ebx + 0x544]
push eax
call fcn.0054e450
add esp, 8
test eax, eax
jne 0x481f8f
mov esi, 1
test esi, esi
jne 0x482166
push edi
lea esi, [ebp - 0x7e4]
lea edi, [ebp - 0x8f8]
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
cmp dword [ebx + 0x86c], 0
jne 0x481fde
lea eax, [edi + 7]
push eax
lea edx, [ebp - 0x7e4]
push edx
call fcn.0054e1b0
add esp, 8
lea ecx, [ebp - 0x7e4]
push ecx
call fcn.00556274
pop ecx
push 0
lea eax, [ebp - 0x7e4]
push eax
push dword [ebp - 8]
call fcn.004c6a18
test eax, eax
jne 0x482007
xor eax, eax
jmp 0x482388
mov dword [ebp - 8], eax
jmp 0x482166
lea edx, [edi + 0xa]
push edx
lea ecx, [ebp - 0x8f8]
push ecx
call fcn.0054e450
add esp, 8
test eax, eax
je 0x482166
push edi
lea esi, [ebp - 0x7e4]
lea edi, [ebp - 0x8f8]
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
cmp dword [ebx + 0x86c], 0
jne 0x48211e
mov eax, dword [ebp - 0x908]
mov edx, eax
neg eax
add eax, dword [ebp - 0x904]
cmp dword [ebx + 0x870], 0
je 0x482091
push eax
lea ecx, [edi + 0x17]
push ecx
lea eax, [ebp - 0x3fc]
push eax
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp 0x4820bb
push 1
push 0
push 1
push 1
push 0
push 0
lea edx, [ebp - 0x3fc]
push edx
mov dword [ebp - 0x928], eax
fild dword [ebp - 0x928]
add esp, 0xfffffff4
fstp xword [esp]
call fcn.004e6c02
lea ecx, [edi + 0x1e]
push ecx
lea eax, [ebp - 0x7e4]
push eax
call fcn.0054e1b0
add esp, 8
lea edx, [ebp - 0x3fc]
push edx
call fcn.0054e28c
pop ecx
mov esi, eax
jmp 0x4820f2
lea eax, [edi + 0x22]
push eax
lea edx, [ebp - 0x7e4]
push edx
call fcn.0054e1b0
add esp, 8
lea ecx, [ebp - 0x7e4]
push ecx
call fcn.0054e28c
pop ecx
add eax, esi
cmp eax, 0x17
jb 0x4820df
lea eax, [ebp - 0x3fc]
push eax
push 0x3e7
lea edx, [ebp - 0x7e4]
push edx
call fcn.0042e64e
lea ecx, [ebp - 0x7e4]
push ecx
call fcn.00556250
pop ecx
cmp dword [ebx + 0x86c], 0
jne 0x482147
lea eax, [edi + 0x25]
push eax
lea edx, [ebp - 0x7e4]
push edx
call fcn.0054e1b0
add esp, 8
push 0
lea ecx, [ebp - 0x7e4]
push ecx
push dword [ebp - 4]
call fcn.004c6a18
test eax, eax
jne 0x482163
xor eax, eax
jmp 0x482388
mov dword [ebp - 4], eax
lea edx, [ebp - 0x924]
push edx
push dword [ebp - 0x10]
call sub.KERNEL32.dll_FindNextFileA
test eax, eax
jne 0x482180
mov dword [ebp - 0xc], 1
cmp dword [ebp - 0xc], 0
je 0x481f32
cmp dword [ebp - 0x10], 0xffffffff
je 0x482198
push dword [ebp - 0x10]
call sub.KERNEL32.dll_FindClose
push 0
push 0
push dword [ebp - 4]
call fcn.0050cb45
mov dword [ebp - 4], eax
push 0
push 0
push dword [ebp - 8]
call fcn.0050cb45
mov dword [ebp - 8], eax
push dword [ebp - 4]
push 0
push dword [ebp - 8]
call fcn.004c6cfe
mov esi, eax
mov dword [ebx + 0x874], esi
cmp dword [ebx + 0x86c], 0
je 0x482313
xor eax, eax
mov dword [ebp - 0x14], eax
xor edx, edx
mov dword [ebx + 0x874], edx
mov byte [ebp - 0x3fc], 0
test esi, esi
je 0x4822d5
mov ecx, dword [esi]
push esi
push edi
mov edi, ecx
lea esi, [ebp - 0x7e4]
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
jmp 0x482234
lea eax, [edi + 0x28]
push eax
lea edx, [ebp - 0x7e4]
push edx
call fcn.0054e1b0
add esp, 8
lea ecx, [ebp - 0x7e4]
push ecx
call fcn.0054e28c
pop ecx
cmp eax, 0xf
jb 0x482221
lea eax, [ebp - 0x7e4]
push eax
push 0x3e7
lea edx, [ebp - 0x3fc]
push edx
call fcn.0042e64e
inc dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [ebx + 0x864]
jl 0x4822b2
lea eax, [edi + 0x2b]
push eax
lea edx, [ebp - 0x3fc]
push edx
call fcn.0054e1b0
add esp, 8
push 0
lea ecx, [ebp - 0x3fc]
push ecx
push dword [ebx + 0x874]
call fcn.004c6a18
test eax, eax
jne 0x48229e
xor eax, eax
jmp 0x482388
mov dword [ebx + 0x874], eax
mov byte [ebp - 0x3fc], 0
xor edx, edx
mov dword [ebp - 0x14], edx
jmp 0x4822c5
lea ecx, [edi + 0x2e]
push ecx
lea eax, [ebp - 0x3fc]
push eax
call fcn.0054e1b0
add esp, 8
push esi
call fcn.004c6bd3
mov esi, eax
test esi, esi
jne 0x4821f4
cmp byte [ebp - 0x3fc], 0
je 0x482313
lea edx, [edi + 0x32]
push edx
lea ecx, [ebp - 0x3fc]
push ecx
call fcn.0054e1b0
add esp, 8
push 0
lea eax, [ebp - 0x3fc]
push eax
push dword [ebx + 0x874]
call fcn.004c6a18
test eax, eax
jne 0x48230d
xor eax, eax
jmp 0x482388
mov dword [ebx + 0x874], eax
push 0
push 0
push 0xa29
call fcn.0042c771
push eax
push dword [ebx + 0x874]
call fcn.004c6a18
test eax, eax
jne 0x482335
xor eax, eax
jmp 0x482388
mov dword [ebx + 0x874], eax
lea edx, [ebx + 0x544]
push edx
call fcn.0054e28c
pop ecx
add eax, dword [ebp + 0xc]
push eax
lea ecx, [edi + 0x35]
push ecx
lea eax, [ebp - 0x3fc]
push eax
call sub.USER32.dll_wsprintfA
add esp, 0xc
push 0
push 0
lea edx, [ebp - 0x3fc]
push edx
push dword [ebx + 0x874]
call fcn.004c6b3f
test eax, eax
jne 0x48237d
xor eax, eax
jmp 0x482388
mov dword [ebx + 0x874], eax
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8