Function at 0x48dc50
Capabilities:
Enumerate files on windows

Disassembly:
mov eax, 0x2224
call fcn.005d9990
push ebx
push ebp
push esi
push edi
lea eax, [esp + 0x164]
push 0x1068
push eax
call fcn.004232e0
lea ecx, [esp + 0x11d4]
push 0x1068
push ecx
call fcn.004232e0
mov eax, dword [esp + 0x224c]
add esp, 0x10
lea edx, [esp + 0x24]
push edx
xor ebp, ebp
xor esi, esi
push eax
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x18], esi
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp eax, 0xffffffff
mov ebx, dword [esp + 0x2238]
mov dword [esp + 0x20], eax
je 0x48df48
jmp 0x48dcc0
test byte [esp + 0x24], 0x10
je 0x48dd87
lea ecx, [esp + 0x50]
push 0x5f56a8
push ecx
call fcn.005f1860
add esp, 8
test eax, eax
je 0x48df29
lea edx, [esp + 0x50]
push 0x5f8a40
push edx
call fcn.005f1860
add esp, 8
test eax, eax
jne 0x48dd19
lea eax, [ebx + 0x185e]
push eax
lea ecx, [ebx + 0x142c]
push ecx
call fcn.005f1860
add esp, 8
test eax, eax
je 0x48df29
xor eax, eax
jmp 0x48dd20
mov cl, byte [esp + eax + 0x50]
mov byte [esp + eax + 0x164], cl
inc eax
test cl, cl
jne 0x48dd20
mov eax, dword [ebx + 0x20e0]
test eax, eax
jne 0x48dd54
lea edi, [esp + 0x164]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x48dd42
mov dx, word [0x5f55fc]
mov word [edi], dx
lea eax, [esp + 0x164]
push eax
call fcn.005f24a8
push 0
lea ecx, [esp + 0x16c]
push ecx
push ebp
call fcn.004e8850
add esp, 0x10
test eax, eax
je 0x48e194
mov ebp, eax
mov dword [esp + 0x14], ebp
jmp 0x48df29
lea edx, [esp + 0x50]
push str.dirinfo.srv
push edx
call fcn.005f1860
add esp, 8
test eax, eax
je 0x48df29
xor eax, eax
mov cl, byte [esp + eax + 0x50]
mov byte [esp + eax + 0x164], cl
inc eax
test cl, cl
jne 0x48dda3
mov eax, dword [ebx + 0x20e0]
test eax, eax
jne 0x48ded5
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x40]
mov ecx, dword [ebx + 0x20e4]
sub eax, edx
test ecx, ecx
mov dword [esp + 0x18], eax
je 0x48ddf1
push eax
lea eax, [esp + 0x11d0]
push str._ld_b
push eax
call fcn.005d9929
add esp, 0xc
jmp 0x48de1d
fild dword [esp + 0x18]
push 1
push 1
push 0
push 1
fstp qword [esp + 0x28]
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x28]
push 1
lea ecx, [esp + 0x11e0]
push ecx
push edx
push eax
call fcn.0051d870
add esp, 0x20
lea edi, [esp + 0x164]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x48de25
mov cx, word [0x5f8a24]
mov dl, byte [0x5f8a26]
mov word [edi], cx
lea eax, [esp + 0x11cc]
mov byte [edi + 2], dl
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x48de50
sub eax, edx
mov esi, eax
lea eax, [esp + 0x164]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x48de65
sub eax, edx
add eax, esi
cmp eax, 0x17
jae 0x48deb0
mov bp, word [0x5f4858]
lea esp, [esp]
lea edi, [esp + 0x164]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x48de88
lea eax, [esp + 0x164]
mov word [edi], bp
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x48dea0
sub eax, edx
add eax, esi
cmp eax, 0x17
jb 0x48de80
lea eax, [esp + 0x11cc]
push eax
lea ecx, [esp + 0x168]
push 0x1068
push ecx
call fcn.004255c0
mov esi, dword [esp + 0x1c]
mov ebp, dword [esp + 0x20]
add esp, 0xc
lea edx, [esp + 0x164]
push edx
call fcn.005f2394
mov eax, dword [ebx + 0x20e0]
add esp, 4
test eax, eax
jne 0x48df08
lea edi, [esp + 0x164]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x48def7
mov ax, word [0x5f55fc]
mov word [edi], ax
push 0
lea ecx, [esp + 0x168]
push ecx
push esi
call fcn.004e8850
add esp, 0xc
test eax, eax
je 0x48e194
mov esi, eax
mov dword [esp + 0x10], esi
mov edi, dword [esp + 0x20]
lea edx, [esp + 0x24]
push edx
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x48dcc0
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
push 0
push 0
push esi
call fcn.005547c0
push 0
push 0
push ebp
mov esi, eax
call fcn.005547c0
push esi
push 0
push eax
call fcn.004e8a80
mov ecx, dword [ebx + 0x20e0]
add esp, 0x24
test ecx, ecx
mov dword [ebx + 0x20e8], eax
je 0x48e111
xor ebp, ebp
mov ebx, eax
cmp ebx, ebp
mov eax, dword [esp + 0x2238]
mov dword [eax + 0x20e8], ebp
mov byte [esp + 0x11cc], 0
je 0x48e111
nop
mov ecx, dword [ebx]
lea edx, [esp + 0x164]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x48dfb0
lea eax, [esp + 0x164]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x48dfc4
sub eax, edx
cmp eax, 0xf
jae 0x48e00e
mov si, word [0x5f4858]
lea esp, [esp]
lea edi, [esp + 0x164]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x48dfe8
lea eax, [esp + 0x164]
mov word [edi], si
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x48e000
sub eax, edx
cmp eax, 0xf
jb 0x48dfe0
lea ecx, [esp + 0x164]
push ecx
lea edx, [esp + 0x11d0]
push 0x1068
push edx
call fcn.004255c0
mov eax, dword [esp + 0x2244]
mov ecx, dword [eax + 0x20d8]
add esp, 0xc
inc ebp
lea edi, [esp + 0x11cc]
dec edi
cmp ebp, ecx
jl 0x48e091
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x48e045
mov esi, dword [esp + 0x2238]
mov eax, dword [esi + 0x20e8]
mov cx, word [0x5f55fc]
push 0
lea edx, [esp + 0x11d0]
push edx
push eax
mov word [edi], cx
call fcn.004e8850
add esp, 0xc
test eax, eax
je 0x48e194
mov dword [esi + 0x20e8], eax
mov byte [esp + 0x11cc], 0
xor ebp, ebp
jmp 0x48e0ac
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x48e091
mov cx, word [0x5f8a24]
mov dl, byte [0x5f8a26]
mov word [edi], cx
mov byte [edi + 2], dl
push ebx
call fcn.004e8950
mov ebx, eax
add esp, 4
test ebx, ebx
jne 0x48dfa0
mov al, byte [esp + 0x11cc]
test al, al
je 0x48e111
lea edi, [esp + 0x11cc]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x48e0d2
mov esi, dword [esp + 0x2238]
mov edx, dword [esi + 0x20e8]
mov ax, word [0x5f55fc]
push 0
lea ecx, [esp + 0x11d0]
push ecx
push edx
mov word [edi], ax
call fcn.004e8850
add esp, 0xc
test eax, eax
je 0x48e194
mov dword [esi + 0x20e8], eax
push 0
push 0
push 0xa29
call fcn.00424130
mov esi, dword [esp + 0x2244]
add esp, 8
push eax
mov eax, dword [esi + 0x20e8]
push eax
call fcn.004e8850
add esp, 0xc
test eax, eax
je 0x48e194
mov dword [esi + 0x20e8], eax
lea eax, [esi + 0x142c]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x48e150
mov ecx, dword [esp + 0x223c]
sub eax, edx
add eax, ecx
push eax
lea edx, [esp + 0x11d0]
push str.__s__n
push edx
call fcn.005d9929
mov ecx, dword [esi + 0x20e8]
push 0
push 0
lea eax, [esp + 0x11e0]
push eax
push ecx
call fcn.004e9380
add esp, 0x1c
test eax, eax
jne 0x48e1a1
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x2224
ret
pop edi
mov dword [esi + 0x20e8], eax
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x2224
ret