Function at 0x45a800
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5180b0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x384
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 4], 0
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0xc4]
push ecx
call fcn.004ef520
mov esi, eax
mov byte [ebp - 4], 1
push 0x82
lea edx, [ebp - 0xa8]
push edx
call fcn.004ef520
mov byte [ebp - 4], 2
push 0x572bf4
lea ecx, [ebp - 0x11c]
push ecx
mov ecx, eax
call fcn.00413d80
mov byte [ebp - 4], 3
push 0x528e74
push eax
lea edx, [ebp - 0x100]
push edx
call fcn.004139a0
add esp, 0x24
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x70]
push ecx
mov edx, esi
mov ecx, eax
call fcn.00413a30
add esp, 4
mov byte [ebp - 4], 5
push str._P_.csv
push eax
lea edx, [ebp - 0x54]
push edx
call fcn.004139a0
add esp, 0xc
mov byte [ebp - 4], 7
lea esi, [ebp - 0x70]
call fcn.004150b0
mov byte [ebp - 4], 8
lea esi, [ebp - 0x100]
call fcn.004150b0
mov byte [ebp - 4], 9
lea esi, [ebp - 0x11c]
call fcn.004150b0
mov byte [ebp - 4], 0xa
lea esi, [ebp - 0xa8]
call fcn.004150b0
mov byte [ebp - 4], 0xb
lea esi, [ebp - 0xc4]
call fcn.004150b0
mov dword [ebp - 0x18], 0xffffffff
cmp dword [ebp - 0x40], 8
mov eax, dword [ebp - 0x54]
jae 0x45a907
lea eax, [ebp - 0x54]
lea ecx, [ebp - 0x38c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov edi, eax
mov dword [ebp - 0x1c], edi
cmp edi, 0xffffffff
jne 0x45a93e
mov byte [ebp - 4], 0
lea esi, [ebp - 0x54]
call fcn.004150b0
or eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov bl, 0xd
test byte [ebp - 0x38c], 0xa0
je 0x45aaac
lea edx, [ebp - 0x360]
push edx
push 0x572bf4
lea eax, [ebp - 0x8c]
push eax
call fcn.00413af0
add esp, 0xc
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0x78], 8
mov eax, dword [ebp - 0x8c]
jae 0x45a97e
lea eax, [ebp - 0x8c]
push eax
call fcn.00445220
add esp, 4
test eax, eax
jg 0x45a996
cmp eax, 0x15180
jg 0x45aa9d
lea eax, [ebp - 0x360]
lea ecx, [ebp - 0xa8]
call fcn.0040fae0
mov byte [ebp - 4], bl
mov eax, 0x528e74
lea ecx, [ebp - 0xc4]
call fcn.0040fae0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xc4]
push ecx
lea edx, [ebp - 0xd4]
push edx
lea ecx, [ebp - 0xa8]
call fcn.004f07a0
add esp, 8
mov byte [ebp - 4], 0x10
lea esi, [ebp - 0xc4]
call fcn.004150b0
mov ecx, dword [ebp - 0xd0]
mov esi, dword [ebp - 0xd4]
sub ecx, esi
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 4
jne 0x45aa80
lea ecx, [esi + 0x54]
lea esi, [ebp - 0x38]
call fcn.0040fab0
mov byte [ebp - 4], 0x11
mov ecx, esi
push ecx
mov edx, 0x52b458
call fcn.00446990
cmp eax, 4
jae 0x45aa71
push eax
lea edx, [ebp - 0x70]
push edx
xor ecx, ecx
mov edx, esi
call fcn.0040fbe0
mov byte [ebp - 4], 0x12
mov edi, eax
call fcn.00411aa0
mov byte [ebp - 4], 0x11
lea esi, [ebp - 0x70]
call fcn.004150b0
lea ecx, [ebp - 0x38]
call fcn.004f1130
test al, al
je 0x45aa71
lea edx, [ebp - 0x38]
call fcn.00449700
cmp dword [ebp - 0x18], eax
jge 0x45aa71
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0x10
lea esi, [ebp - 0x38]
call fcn.004150b0
mov edi, dword [ebp - 0x1c]
mov byte [ebp - 4], bl
lea esi, [ebp - 0xd4]
call fcn.0040fcb0
mov byte [ebp - 4], 0xc
lea esi, [ebp - 0xa8]
call fcn.004150b0
mov byte [ebp - 4], 0xb
lea esi, [ebp - 0x8c]
call fcn.004150b0
lea eax, [ebp - 0x38c]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x45a940
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [ebp - 0x18]
push ecx
lea edx, [ebp - 0x100]
push edx
call fcn.004ef520
mov bl, 0x13
mov byte [ebp - 4], bl
push eax
lea eax, [ebp - 0x70]
push eax
mov edx, str.Last_Split_is
call fcn.00413910
mov byte [ebp - 4], 0x14
push 0
push 0
push eax
push 0x344
push str.NetShare::FindLastSplitForReport
call fcn.0044d970
add esp, 0x24
mov byte [ebp - 4], bl
lea esi, [ebp - 0x70]
call fcn.004150b0
mov byte [ebp - 4], 0xb
lea esi, [ebp - 0x100]
call fcn.004150b0
mov byte [ebp - 4], 0
lea esi, [ebp - 0x54]
call fcn.004150b0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret