Function at 0x672c93
Capabilities:
Enumerate files on windows
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x168
push ebx
push esi
push edi
lea eax, [ebp - 0x168]
push eax
push 0x9645b0
mov ebx, ecx
call dword [sym.imp.kernel32.dll_FindFirstFileA]
xor edi, edi
push edi
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x24]
push 0x96a118
push eax
call fcn.00865f61
mov esi, dword [sym.imp.kernel32.dll_lstrcmpi]
add esp, 0xc
push eax
lea eax, [ebp - 0x13c]
push eax
call esi
test eax, eax
push edi
je 0x672f35
lea eax, [ebp - 0x24]
push 0x96a104
push eax
call fcn.00865f61
add esp, 0xc
push eax
lea eax, [ebp - 0x13c]
push eax
call esi
test eax, eax
push edi
je 0x672f4c
lea eax, [ebp - 0x24]
push 0x96a0f0
push eax
call fcn.00865f61
add esp, 0xc
push eax
lea eax, [ebp - 0x13c]
push eax
call esi
test eax, eax
push edi
je 0x672f63
lea eax, [ebp - 0x24]
push 0x96a0dc
push eax
call fcn.00865f61
add esp, 0xc
push eax
lea eax, [ebp - 0x13c]
push eax
call esi
test eax, eax
push edi
je 0x672f7a
lea eax, [ebp - 0x24]
push 0x96a0c8
push eax
call fcn.00865f61
add esp, 0xc
push eax
lea eax, [ebp - 0x13c]
push eax
call esi
test eax, eax
push edi
je 0x672f91
lea eax, [ebp - 0x24]
push 0x96a0b4
push eax
call fcn.00865f61
add esp, 0xc
push eax
lea eax, [ebp - 0x13c]
push eax
call esi
test eax, eax
push edi
je 0x672fa8
lea eax, [ebp - 0x24]
push 0x96a0a4
push eax
call fcn.00865f61
add esp, 0xc
push eax
lea eax, [ebp - 0x13c]
push eax
call esi
test eax, eax
push edi
je 0x672fbf
lea eax, [ebp - 0x24]
push 0x96a090
push eax
call fcn.00865f61
add esp, 0xc
push eax
lea eax, [ebp - 0x13c]
push eax
call esi
test eax, eax
push edi
je 0x672fd6
lea eax, [ebp - 0x24]
push 0x96a080
push eax
call fcn.00865f61
add esp, 0xc
push eax
lea eax, [ebp - 0x13c]
push eax
call esi
test eax, eax
push edi
je 0x672fed
lea eax, [ebp - 0x24]
push 0x96a070
push eax
call fcn.00865f61
add esp, 0xc
push eax
lea eax, [ebp - 0x13c]
push eax
call esi
test eax, eax
push edi
je 0x673004
lea eax, [ebp - 0x24]
push 0x96a060
push eax
call fcn.00865f61
add esp, 0xc
push eax
lea eax, [ebp - 0x13c]
push eax
call esi
test eax, eax
push edi
je 0x67301b
lea eax, [ebp - 0x24]
push 0x96a04c
push eax
call fcn.00865f61
add esp, 0xc
push eax
lea eax, [ebp - 0x13c]
push eax
call esi
test eax, eax
push edi
je 0x673032
lea eax, [ebp - 0x24]
push 0x96a038
push eax
call fcn.00865f61
add esp, 0xc
push eax
lea eax, [ebp - 0x13c]
push eax
call esi
test eax, eax
push edi
je 0x673049
lea eax, [ebp - 0x24]
push 0x96a024
push eax
call fcn.00865f61
add esp, 0xc
push eax
lea eax, [ebp - 0x13c]
push eax
call esi
test eax, eax
push edi
je 0x673060
lea eax, [ebp - 0x24]
push 0x96a010
push eax
call fcn.00865f61
add esp, 0xc
push eax
lea eax, [ebp - 0x13c]
push eax
call esi
test eax, eax
push edi
je 0x673077
lea eax, [ebp - 0x24]
push 0x96a000
push eax
call fcn.00865f61
add esp, 0xc
push eax
lea eax, [ebp - 0x13c]
push eax
call esi
test eax, eax
je 0x67308e
lea eax, [ebp - 0x168]
push eax
push dword [ebp - 0x28]
call dword [sym.imp.kernel32.dll_FindNextFileA]
test eax, eax
jmp 0x6730a6
push 0x969ff0
push 0x969fa0
push edi
call dword [sym.imp.user32.dll_MessageBoxA]
push edi
call fcn.0087c60e
push 0x969ff0
push 0x969fa0
push edi
call dword [sym.imp.user32.dll_MessageBoxA]
push edi
call fcn.0087c60e
push 0x969ff0
push 0x969fa0
push edi
call dword [sym.imp.user32.dll_MessageBoxA]
push edi
call fcn.0087c60e
push 0x969ff0
push 0x969fa0
push edi
call dword [sym.imp.user32.dll_MessageBoxA]
push edi
call fcn.0087c60e
push 0x969ff0
push 0x969fa0
push edi
call dword [sym.imp.user32.dll_MessageBoxA]
push edi
call fcn.0087c60e
push 0x969ff0
push 0x969fa0
push edi
call dword [sym.imp.user32.dll_MessageBoxA]
push edi
call fcn.0087c60e
push 0x969ff0
push 0x969fa0
push edi
call dword [sym.imp.user32.dll_MessageBoxA]
push edi
call fcn.0087c60e
push 0x969ff0
push 0x969fa0
push edi
call dword [sym.imp.user32.dll_MessageBoxA]
push edi
call fcn.0087c60e
push 0x969ff0
push 0x969fa0
push edi
call dword [sym.imp.user32.dll_MessageBoxA]
push edi
call fcn.0087c60e
push 0x969ff0
push 0x969fa0
push edi
call dword [sym.imp.user32.dll_MessageBoxA]
push edi
call fcn.0087c60e
push 0x969ff0
push 0x969fa0
push edi
call dword [sym.imp.user32.dll_MessageBoxA]
push edi
call fcn.0087c60e
push 0x969ff0
push 0x969fa0
push edi
call dword [sym.imp.user32.dll_MessageBoxA]
push edi
call fcn.0087c60e
push 0x969ff0
push 0x969fa0
push edi
call dword [sym.imp.user32.dll_MessageBoxA]
push edi
call fcn.0087c60e
push 0x969ff0
push 0x969fa0
push edi
call dword [sym.imp.user32.dll_MessageBoxA]
push edi
call fcn.0087c60e
push 0x969ff0
push 0x969fa0
push edi
call dword [sym.imp.user32.dll_MessageBoxA]
push edi
call fcn.0087c60e
push edi
push 0x969ff0
push 0x969fa0
push edi
call dword [sym.imp.user32.dll_MessageBoxA]
push edi
call fcn.0087c60e
lea eax, [ebx + 0x24]
push eax
mov eax, 0xbaadf00d
push eax
push eax
mov ecx, ebx
call fcn.00673257
push 1
pop eax
mov dword [ebx + 0xa8], edi
mov ecx, ebx
mov dword [ebx + 0xac], edi
mov dword [ebx + 0xb8], edi
mov dword [ebx + 0xbc], eax
mov dword [ebx + 0xc0], eax
call fcn.006730ee
mov ecx, ebx
call fcn.00673112
pop edi
pop esi
mov eax, ebx
pop ebx
leave
ret