Function at 0x45a3a0
Capabilities:
Enumerate files on windows

Disassembly:
sub esp, 0x87c
mov eax, dword [0x5364d0]
xor eax, esp
mov dword [esp + 0x874], eax
push ebx
push ebp
push esi
push edi
push 0x206
xor edi, edi
lea ecx, [esp + 0x26e]
xor eax, eax
push edi
push ecx
mov word [esp + 0x274], ax
call fcn.004e8fe0
mov esi, dword [esp + 0x89c]
lea eax, [esp + 0x274]
mov ecx, eax
add esp, 0xc
mov edx, 0x104
sub esi, ecx
lea ecx, [edx + 0x7ffffefa]
test ecx, ecx
je 0x45a411
movzx ecx, word [esi + eax]
cmp cx, di
je 0x45a411
mov word [eax], cx
add eax, 2
sub edx, 1
jne 0x45a3f1
jmp 0x45a415
cmp edx, edi
jne 0x45a418
sub eax, 2
xor edx, edx
mov word [eax], dx
lea eax, [esp + 0x268]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveBackslashW]
lea ecx, [esp + 0x268]
push 0x5c
push ecx
call fcn.004e5c9d
push 0x206
mov esi, eax
lea eax, [esp + 0x47e]
xor edx, edx
push edi
push eax
mov word [esp + 0x484], dx
call fcn.004e8fe0
lea eax, [esp + 0x484]
mov ecx, eax
sub esi, ecx
add esp, 0x14
mov edx, 0x104
add esi, 2
nop
lea ecx, [edx + 0x7ffffefa]
test ecx, ecx
je 0x45a490
movzx ecx, word [esi + eax]
cmp cx, di
je 0x45a490
mov word [eax], cx
add eax, 2
sub edx, 1
jne 0x45a470
jmp 0x45a494
cmp edx, edi
jne 0x45a497
sub eax, 2
xor edx, edx
mov word [eax], dx
lea eax, [esp + 0x470]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x45a4a6
sub eax, edx
sar eax, 1
jne 0x45a4c1
mov eax, 1
jmp 0x45a61d
lea eax, [esp + 0x268]
add eax, 0xfffffffe
jmp 0x45a4d0
mov cx, word [eax + 2]
add eax, 2
cmp cx, di
jne 0x45a4d0
mov ecx, dword [0x515424]
mov dx, word [0x515428]
mov dword [eax], ecx
push 0x24c
mov word [eax + 4], dx
lea eax, [esp + 0x20]
push edi
push eax
mov dword [esp + 0x24], edi
call fcn.004e8fe0
add esp, 0xc
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x26c]
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x45a527
xor eax, eax
jmp 0x45a61d
mov ebp, dword [sym.imp.KERNEL32.dll_FindNextFileW]
lea esi, [esp + 0x44]
lea eax, [esp + 0x678]
mov dword [esp + 0x14], edi
sub esi, eax
mov edi, edi
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x682]
push edx
mov word [esp + 0x684], cx
call fcn.004e8fe0
add esp, 0xc
mov edx, 0x104
lea eax, [esp + 0x678]
lea esp, [esp]
lea ecx, [edx + 0x7ffffefa]
test ecx, ecx
je 0x45a590
movzx ecx, word [esi + eax]
test cx, cx
je 0x45a590
mov word [eax], cx
add eax, 2
sub edx, 1
jne 0x45a570
jmp 0x45a594
test edx, edx
jne 0x45a597
sub eax, 2
xor edx, edx
mov word [eax], dx
lea eax, [esp + 0x470]
push eax
lea ecx, [esp + 0x67c]
push ecx
call fcn.004e4707
add esp, 8
test eax, eax
jne 0x45a5c6
cmp dword [esp + 0x894], eax
je 0x45a5f0
lea esi, [eax + 1]
jmp 0x45a614
lea edx, [esp + 0x678]
push edx
call dword [sym.imp.SHLWAPI.dll_PathRemoveExtensionW]
lea eax, [esp + 0x470]
push eax
lea ecx, [esp + 0x67c]
push ecx
call fcn.004e4707
add esp, 8
test eax, eax
je 0x45a608
lea edx, [esp + 0x18]
push edx
push ebx
inc edi
call ebp
test eax, eax
je 0x45a610
cmp edi, 3
jl 0x45a540
jmp 0x45a610
mov dword [esp + 0x14], 1
mov esi, dword [esp + 0x14]
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, esi
mov ecx, dword [esp + 0x884]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.004e3edb
add esp, 0x87c
ret