Function at 0x405ab0
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x458b19
mov eax, dword fs:[0]
push eax
sub esp, 0x760
mov eax, dword [0x4754f4]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
lea esi, [ebp - 0x4c4]
mov dword [ebp - 0x71c], eax
call fcn.004153e0
xor ebx, ebx
mov dword [ebp - 4], ebx
cmp dword [eax + 0x18], 8
jb 0x405b02
mov eax, dword [eax + 4]
jmp 0x405b05
add eax, 4
lea ecx, [ebp - 0x4a4]
push ecx
mov edi, eax
call fcn.00406610
mov esi, 8
mov byte [ebp - 4], 2
cmp dword [ebp - 0x4ac], esi
jb 0x405b33
mov edx, dword [ebp - 0x4c0]
push edx
call fcn.00425770
add esp, 4
lea ecx, [ebp - 0x4c4]
xor eax, eax
mov edi, 7
push ecx
mov dword [ebp - 0x4ac], edi
mov dword [ebp - 0x4b0], ebx
mov word [ebp - 0x4c0], ax
call fcn.00409010
mov dword [ebp - 0x484], ebx
push esi
mov byte [ebp - 4], 3
call fcn.00426610
add esp, 4
cmp eax, ebx
je 0x4062df
mov dword [ebp - 0x484], eax
xor edx, edx
xor ecx, ecx
mov dword [eax + 4], edx
mov dword [eax], ecx
mov eax, dword [ebp - 0x484]
lea edx, [ebp - 0x484]
mov dword [eax], edx
mov byte [ebp - 4], 4
push ebx
lea edx, [ebp - 0x4a4]
mov dword [ebp - 0x46c], edi
mov word [ebp - 0x480], cx
push edx
or ecx, 0xffffffff
lea edi, [ebp - 0x484]
mov dword [ebp - 0x470], ebx
call fcn.004081a0
push 6
mov eax, 0x4671a8
mov ecx, edi
mov byte [ebp - 4], 5
call fcn.004097e0
mov eax, dword [ebp - 0x480]
cmp dword [ebp - 0x46c], esi
jae 0x405be4
lea eax, [ebp - 0x480]
lea ecx, [ebp - 0x714]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x734], eax
cmp eax, 0xffffffff
je 0x406241
push 0x206
lea eax, [ebp - 0x21a]
xor edx, edx
push ebx
push eax
mov word [ebp - 0x21c], dx
call fcn.0042c300
mov eax, dword [ebp - 0x4a0]
add esp, 0xc
cmp dword [ebp - 0x48c], esi
jae 0x405c33
lea eax, [ebp - 0x4a0]
lea ecx, [ebp - 0x6e8]
push ecx
push eax
lea edx, [ebp - 0x21c]
push 0x466d00
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
mov eax, dword [ebp - 0x71c]
add esp, 0x10
push eax
lea ecx, [ebp - 0x21c]
call fcn.00406320
lea ecx, [ebp - 0x444]
push ecx
lea edi, [ebp - 0x6e8]
call fcn.00406610
lea edx, [ebp - 0x464]
push edx
lea edi, [ebp - 0x21c]
mov byte [ebp - 4], 6
call fcn.00406610
mov byte [ebp - 4], 7
mov eax, dword [0x477e20]
mov edx, dword [0x477e1c]
lea ecx, [ebp - 0x464]
cmp ecx, eax
jae 0x405dda
cmp edx, ecx
ja 0x405dda
mov esi, dword [0x477e24]
mov edi, ecx
sub edi, edx
cmp eax, esi
jne 0x405d07
mov ecx, eax
sub ecx, edx
sar ecx, 5
cmp ecx, 0x7fffffe
ja 0x4061c5
sub esi, edx
mov edx, esi
inc ecx
sar edx, 5
cmp ecx, edx
jbe 0x405d07
mov eax, edx
shr edx, 1
mov esi, 0x7ffffff
sub esi, edx
cmp esi, eax
jae 0x405cef
xor eax, eax
jmp 0x405cf1
add eax, edx
cmp eax, ecx
jae 0x405cf7
mov eax, ecx
push eax
mov ecx, 0x477e18
call fcn.00409db0
mov eax, dword [0x477e20]
push 3
lea ecx, [ebp - 0x738]
mov dword [ebp - 0x718], eax
mov esi, eax
call fcn.0044fc00
mov eax, dword [0x477e18]
cmp eax, ebx
je 0x405d55
add eax, 4
cmp eax, ebx
je 0x405d55
cmp dword [eax], ebx
je 0x405d55
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
cmp edx, esi
jb 0x405d4e
xor ebx, ebx
cmp dword [ebp - 0x718], edx
jb 0x405d4e
mov dword [ecx], ebx
mov edx, dword [eax]
mov ecx, dword [edx + 4]
mov dword [eax], ecx
jmp 0x405d51
lea eax, [ecx + 4]
cmp dword [eax], ebx
jne 0x405d30
lea ecx, [ebp - 0x738]
call fcn.0044fc40
and edi, 0xffffffe0
add edi, dword [0x477e1c]
mov esi, edi
mov edi, dword [0x477e20]
mov dword [ebp - 0x718], edi
mov dword [ebp - 0x720], edi
cmp edi, ebx
je 0x405dcc
mov dword [edi], ebx
push 8
mov byte [ebp - 4], 9
call fcn.00426610
add esp, 4
cmp eax, ebx
je 0x4061cf
mov dword [edi], eax
xor edx, edx
xor ecx, ecx
mov dword [eax], ecx
mov dword [eax + 4], edx
mov edx, dword [edi]
mov dword [edx], edi
mov byte [ebp - 4], 0xa
push ebx
xor eax, eax
mov dword [edi + 0x18], 7
mov dword [edi + 0x14], ebx
push esi
or ecx, 0xffffffff
mov word [edi + 4], ax
call fcn.004081a0
mov edi, dword [0x477e20]
add edi, 0x20
mov dword [0x477e20], edi
jmp 0x405ee3
mov esi, dword [0x477e24]
cmp eax, esi
jne 0x405e2e
mov ecx, eax
sub ecx, edx
sar ecx, 5
cmp ecx, 0x7fffffe
ja 0x4061c5
sub esi, edx
mov edx, esi
inc ecx
sar edx, 5
cmp ecx, edx
jbe 0x405e2e
mov eax, edx
shr edx, 1
mov esi, 0x7ffffff
sub esi, edx
cmp esi, eax
jae 0x405e16
xor eax, eax
jmp 0x405e18
add eax, edx
cmp eax, ecx
jae 0x405e1e
mov eax, ecx
push eax
mov ecx, 0x477e18
call fcn.00409db0
mov eax, dword [0x477e20]
push 3
lea ecx, [ebp - 0x740]
mov edi, eax
mov esi, eax
call fcn.0044fc00
mov eax, dword [0x477e18]
cmp eax, ebx
je 0x405e72
add eax, 4
cmp eax, ebx
je 0x405e72
cmp dword [eax], ebx
je 0x405e72
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
cmp edx, esi
jb 0x405e6b
cmp edi, edx
jb 0x405e6b
mov dword [ecx], ebx
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
mov dword [eax], edx
jmp 0x405e6e
lea eax, [ecx + 4]
cmp dword [eax], ebx
jne 0x405e53
lea ecx, [ebp - 0x740]
call fcn.0044fc40
mov edi, dword [0x477e20]
mov dword [ebp - 0x720], edi
mov dword [ebp - 0x718], edi
cmp edi, ebx
je 0x405edc
mov dword [edi], ebx
push 8
mov byte [ebp - 4], 0xc
call fcn.00426610
add esp, 4
cmp eax, ebx
je 0x406202
mov dword [edi], eax
xor ecx, ecx
xor edx, edx
mov dword [eax], ecx
mov dword [eax + 4], edx
mov eax, dword [edi]
mov dword [eax], edi
mov byte [ebp - 4], 0xd
mov dword [edi + 0x18], 7
mov dword [edi + 0x14], ebx
push ebx
lea edx, [ebp - 0x464]
mov word [edi + 4], cx
push edx
or ecx, 0xffffffff
call fcn.004081a0
add dword [0x477e20], 0x20
cmp dword [ebp - 0x44c], 8
jb 0x405efb
mov eax, dword [ebp - 0x460]
push eax
call fcn.00425770
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x44c], 7
mov dword [ebp - 0x450], ebx
mov word [ebp - 0x460], cx
mov byte [ebp - 4], 0xe
cmp dword [ebp - 0x464], ebx
je 0x405f5e
push 3
lea ecx, [ebp - 0x724]
call fcn.0044fc00
mov eax, dword [ebp - 0x464]
cmp dword [eax + 4], ebx
je 0x405f4a
mov edx, dword [eax + 4]
mov dword [edx], ebx
mov ecx, dword [eax + 4]
mov edx, dword [ecx + 4]
mov dword [eax + 4], edx
cmp edx, ebx
jne 0x405f38
mov eax, dword [ebp - 0x464]
lea ecx, [ebp - 0x724]
mov dword [eax + 4], ebx
call fcn.0044fc40
mov ecx, dword [ebp - 0x464]
push ecx
call fcn.00425770
add esp, 4
push 4
push str..fsv
xor eax, eax
lea ecx, [ebp - 0x444]
mov byte [ebp - 4], 6
call fcn.00408450
push eax
push ebx
lea edx, [ebp - 0x464]
push edx
lea eax, [ebp - 0x444]
push eax
call fcn.004067d0
mov esi, eax
lea ecx, [ebp - 0x444]
cmp ecx, esi
je 0x40602c
mov edi, 8
cmp dword [ebp - 0x42c], edi
jb 0x405fc6
mov edx, dword [ebp - 0x440]
push edx
call fcn.00425770
add esp, 4
xor eax, eax
mov dword [ebp - 0x42c], 7
mov dword [ebp - 0x430], ebx
mov word [ebp - 0x440], ax
cmp dword [esi + 0x18], edi
lea edi, [esi + 4]
jae 0x406001
mov eax, dword [esi + 0x14]
lea ecx, [eax + eax + 2]
push ecx
lea edx, [ebp - 0x440]
push edi
push edx
call fcn.00421450
add esp, 0xc
jmp 0x40600b
mov eax, dword [edi]
mov dword [ebp - 0x440], eax
mov dword [edi], ebx
mov ecx, dword [esi + 0x14]
mov dword [ebp - 0x430], ecx
mov edx, dword [esi + 0x18]
mov dword [ebp - 0x42c], edx
xor eax, eax
mov dword [esi + 0x18], 7
mov dword [esi + 0x14], ebx
mov word [edi], ax
mov esi, 8
cmp dword [ebp - 0x44c], esi
jb 0x406048
mov ecx, dword [ebp - 0x460]
push ecx
call fcn.00425770
add esp, 4
mov edi, 7
xor edx, edx
mov dword [ebp - 0x44c], edi
mov dword [ebp - 0x450], ebx
mov word [ebp - 0x460], dx
mov byte [ebp - 4], 0x10
cmp dword [ebp - 0x464], ebx
je 0x4060ac
push 3
lea ecx, [ebp - 0x728]
call fcn.0044fc00
mov eax, dword [ebp - 0x464]
cmp dword [eax + 4], ebx
je 0x406098
mov ecx, dword [eax + 4]
mov dword [ecx], ebx
mov edx, dword [eax + 4]
mov ecx, dword [edx + 4]
mov dword [eax + 4], ecx
cmp ecx, ebx
jne 0x406086
mov edx, dword [ebp - 0x464]
lea ecx, [ebp - 0x728]
mov dword [edx + 4], ebx
call fcn.0044fc40
mov eax, dword [ebp - 0x464]
push eax
call fcn.00425770
add esp, 4
push 0x206
lea edx, [ebp - 0x422]
xor ecx, ecx
push ebx
push edx
mov word [ebp - 0x424], cx
call fcn.0042c300
mov eax, dword [ebp - 0x440]
add esp, 0xc
cmp dword [ebp - 0x42c], esi
jae 0x4060ed
lea eax, [ebp - 0x440]
push eax
mov eax, dword [ebp - 0x71c]
call fcn.00408540
push eax
lea eax, [ebp - 0x424]
push 0x466e74
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
cmp dword [ebp - 0x42c], esi
jb 0x406126
mov ecx, dword [ebp - 0x440]
push ecx
call fcn.00425770
add esp, 4
xor edx, edx
mov dword [ebp - 0x42c], edi
mov dword [ebp - 0x430], ebx
mov word [ebp - 0x440], dx
mov byte [ebp - 4], 0x11
cmp dword [ebp - 0x444], ebx
je 0x406186
push 3
lea ecx, [ebp - 0x72c]
call fcn.0044fc00
mov eax, dword [ebp - 0x444]
cmp dword [eax + 4], ebx
je 0x406172
nop
mov ecx, dword [eax + 4]
mov dword [ecx], ebx
mov edx, dword [eax + 4]
mov ecx, dword [edx + 4]
mov dword [eax + 4], ecx
cmp ecx, ebx
jne 0x406160
mov edx, dword [ebp - 0x444]
lea ecx, [ebp - 0x72c]
mov dword [edx + 4], ebx
call fcn.0044fc40
mov eax, dword [ebp - 0x444]
push eax
call fcn.00425770
mov esi, dword [ebp - 0x734]
add esp, 4
lea ecx, [ebp - 0x714]
push ecx
push esi
mov dword [ebp - 0x444], ebx
mov byte [ebp - 4], 5
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x406235
mov esi, 8
jmp 0x405c01
push str.vector_T__too_long
call fcn.0044f9f0
lea edx, [ebp - 0x73c]
push edx
lea ecx, [ebp - 0x750]
mov dword [ebp - 0x73c], ebx
call fcn.004211a0
push 0x46ffcc
lea eax, [ebp - 0x750]
push eax
mov dword [ebp - method.std::bad_alloc.virtual_0], vtable.std::bad_alloc.0
call fcn.00432fc0
lea ecx, [ebp - 0x744]
push ecx
lea ecx, [ebp - 0x75c]
mov dword [ebp - 0x744], ebx
call fcn.004211a0
push 0x46ffcc
lea edx, [ebp - 0x75c]
push edx
mov dword [ebp - method.std::bad_alloc.virtual_0], vtable.std::bad_alloc.0
call fcn.00432fc0
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov esi, 8
mov byte [ebp - 4], 2
cmp dword [ebp - 0x46c], esi
jb 0x40625c
mov eax, dword [ebp - 0x480]
push eax
call fcn.00425770
add esp, 4
lea edx, [ebp - 0x484]
xor ecx, ecx
mov edi, 7
push edx
mov dword [ebp - 0x46c], edi
mov dword [ebp - 0x470], ebx
mov word [ebp - 0x480], cx
call fcn.00409010
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x48c], esi
jb 0x4062a0
mov eax, dword [ebp - 0x4a0]
push eax
call fcn.00425770
add esp, 4
lea edx, [ebp - 0x4a4]
xor ecx, ecx
push edx
mov dword [ebp - 0x48c], edi
mov dword [ebp - 0x490], ebx
mov word [ebp - 0x4a0], cx
call fcn.00409010
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00420d00
mov esp, ebp
pop ebp
ret 4
lea eax, [ebp - 0x730]
push eax
lea ecx, [ebp - 0x768]
mov dword [ebp - 0x730], ebx
call fcn.004211a0
push 0x46ffcc
lea ecx, [ebp - 0x768]
push ecx
mov dword [ebp - method.std::bad_alloc.virtual_0], vtable.std::bad_alloc.0
call fcn.00432fc0
int3