Function at 0x460af0
Capabilities:
Enumerate files on windows

Disassembly:
push edi
push esi
push ebp
push ebx
sub esp, 0x784
mov ebx, edx
mov dword [esp + 0x77c], eax
push 0xfa0
call fcn.00403564
pop ecx
mov dword [esp + 0x774], eax
test eax, eax
je 0x461066
push 0x3e8
call fcn.00403564
pop ecx
mov dword [esp + 0x76c], eax
test eax, eax
je 0x46104a
push 0x209
call fcn.0046adec
pop ecx
mov ecx, dword [esp + 0x774]
mov dword [ecx], eax
test eax, eax
je 0x46102e
mov esi, eax
mov edi, ebx
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x460b57
mov eax, dword [esp + 0x76c]
mov byte [eax], 1
mov eax, 1
xor ebx, ebx
mov dword [esp + 0x778], eax
lea ebp, [ebx + 1]
mov eax, dword [esp + 0x778]
cmp eax, ebp
jl 0x460f43
lea esi, [esp + 0x41c]
mov eax, dword [esp + 0x774]
mov edi, dword [eax + ebx*4]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x460b9c
lea edi, [esp + 0x41c]
mov edx, 0x80f2f8
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x460bbc
lea esi, [esp + 4]
lea edi, [esp + 0x41c]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x460bd1
lea edi, [esp + 4]
mov edx, 0x80fb58
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x460bee
mov esi, dword [esp + 0x76c]
movzx esi, byte [esi + ebx]
mov ebx, ebp
lea edx, [esp + 4]
lea eax, [esp + 0x628]
push eax
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov ebp, eax
cmp ebp, 0xffffffff
je 0x460b79
lea edx, [esi + 1]
mov dword [esp + 0x770], edx
mov dword [esp + 0x780], esi
mov dword [esp + 0x768], ebx
cmp byte [esp + 0x654], 0x2e
je 0x460fef
xor edx, edx
test edx, edx
jne 0x460f19
mov edx, dword [esp + 0x628]
and edx, 0x10
cmp edx, 0x10
jne 0x460d41
mov ecx, dword [esp + 0x780]
mov edx, dword [esp + 0x77c]
cmp edx, ecx
jl 0x460f19
lea edx, [esp + 0x654]
push dword [0x5b6738]
push edx
call fcn.0046af30
add esp, 8
test eax, eax
jne 0x460f19
mov edx, dword [esp + 0x778]
cmp edx, 0x3e8
jge 0x460fd3
mov edx, dword [esp + 0x780]
cmp edx, 0x20
jge 0x460fb7
push 0x106
call fcn.0046adec
pop ecx
mov ebx, dword [esp + 0x778]
lea ecx, [ebx + ebx]
mov edx, dword [esp + 0x774]
mov dword [edx + ebx*4], eax
test eax, eax
je 0x460f9b
mov esi, eax
lea edi, [esp + 0x41c]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x460ced
mov ebx, dword [esp + 0x774]
mov edi, dword [ebx + ecx*2]
lea edx, [esp + 0x654]
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x460d12
mov edx, dword [esp + 0x770]
mov ecx, dword [esp + 0x76c]
mov ebx, dword [esp + 0x778]
mov byte [ebx + ecx], dl
inc ebx
mov dword [esp + 0x778], ebx
jmp 0x460f19
lea edi, [esp + 0x654]
xor eax, eax
mov dh, byte [edi]
mov ecx, edi
test dh, dh
je 0x460d5a
inc ecx
inc eax
mov dl, byte [ecx]
test dl, dl
jne 0x460d52
cmp eax, 4
jl 0x460f19
lea edx, [esp + eax + 0x650]
push 4
push 0x80fbc8
push edx
call fcn.0046b950
add esp, 0xc
test eax, eax
jne 0x460f19
lea edx, [esp + 0x654]
push 0x80fb5c
push edx
call fcn.0046af30
add esp, 8
test eax, eax
jne 0x460da2
mov ebx, 1
jmp 0x460da4
xor ebx, ebx
lea edx, [esp + 0x654]
push 0x80fb68
push edx
call fcn.0046af30
add esp, 8
test eax, eax
jne 0x460dc2
mov ebx, 2
lea edx, [esp + 0x654]
push 0x80fb74
push edx
call fcn.0046af30
add esp, 8
test eax, eax
jne 0x460de0
mov ebx, 3
lea edx, [esp + 0x654]
push 0x80fb80
push edx
call fcn.0046af30
add esp, 8
test eax, eax
jne 0x460dfe
mov ebx, 4
lea edx, [esp + 0x654]
push 0x80fb8c
push edx
call fcn.0046af30
add esp, 8
test eax, eax
jne 0x460e1c
mov ebx, 5
lea edx, [esp + 0x654]
push 0x80fb98
push edx
call fcn.0046af30
add esp, 8
test eax, eax
jne 0x460e3a
mov ebx, 6
lea edx, [esp + 0x654]
push 0x80fba4
push edx
call fcn.0046af30
add esp, 8
test eax, eax
jne 0x460e58
mov ebx, 7
lea edx, [esp + 0x654]
push 0x80fbb0
push edx
call fcn.0046af30
add esp, 8
test eax, eax
jne 0x460e76
mov ebx, 8
lea edx, [esp + 0x654]
push 0x80fbbc
push edx
call fcn.0046af30
add esp, 8
test eax, eax
jne 0x460e94
mov ebx, 9
lea esi, [esp + 0x210]
lea edi, [esp + 0x41c]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x460ea2
lea edi, [esp + 0x210]
lea edx, [esp + 0x654]
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x460ec4
lea eax, [esp + 0x210]
call fcn.00461098
test ebx, ebx
jne 0x460ef4
lea eax, [esp + 0x210]
call fcn.004607dc
test eax, eax
jne 0x461082
jmp 0x460f19
push 0x105
call fcn.0046adec
pop ecx
mov dword [ebx*4 + 0x809618], eax
mov esi, eax
lea edi, [esp + 0x210]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x460f0f
lea edx, [esp + 0x628]
push edx
push ebp
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x460c3b
mov ebx, dword [esp + 0x768]
push ebp
call dword [sym.imp.KERNEL32.dll_FindClose]
jmp 0x460b79
mov esi, dword [esp + 0x774]
lea ebx, [esi + 0xfa0]
mov eax, dword [esi]
test eax, eax
je 0x460f5d
push eax
call fcn.0046b04f
pop ecx
mov dword [esi], 0
add esi, 4
cmp ebx, esi
ja 0x460f50
mov eax, dword [esp + 0x774]
test eax, eax
je 0x460f7c
push eax
call fcn.0046b04f
pop ecx
mov eax, dword [esp + 0x76c]
test eax, eax
je 0x460f8e
push eax
call fcn.0046b04f
pop ecx
xor eax, eax
add esp, 0x784
pop ebx
pop ebp
pop esi
pop edi
ret
push 1
push 0x186aa
call fcn.00467ed0
mov eax, 0xffffffff
add esp, 0x78c
pop ebx
pop ebp
pop esi
pop edi
ret
push 1
push 0x196af
call fcn.00467ed0
mov eax, 0xffffffff
add esp, 0x78c
pop ebx
pop ebp
pop esi
pop edi
ret
push 1
push 0x196ae
call fcn.00467ed0
mov eax, 0xffffffff
add esp, 0x78c
pop ebx
pop ebp
pop esi
pop edi
ret
movsx edx, byte [esp + 0x655]
test edx, edx
jne 0x461005
mov edx, 1
jmp 0x460c4b
cmp edx, 0x2e
je 0x461011
xor edx, edx
jmp 0x460c4b
movsx edx, byte [esp + 0x656]
test edx, edx
jne 0x461027
mov edx, 1
jmp 0x460c4b
xor edx, edx
jmp 0x460c4b
push 1
push 0x186aa
call fcn.00467ed0
mov eax, 0xffffffff
add esp, 0x78c
pop ebx
pop ebp
pop esi
pop edi
ret
push 1
push 0x186aa
call fcn.00467ea4
mov eax, 0xffffffff
add esp, 0x78c
pop ebx
pop ebp
pop esi
pop edi
ret
push 1
push 0x186aa
call fcn.00467ea4
mov eax, 0xffffffff
add esp, 0x78c
pop ebx
pop ebp
pop esi
pop edi
ret
mov eax, 0xffffffff
add esp, 0x784
pop ebx
pop ebp
pop esi
pop edi
ret