Function at 0x44a5ad
Capabilities:
Copy file
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push 0x133f
sub esp, 0x70
push fcn.0044a5ad
xor esi, esi
mov ecx, 0xdb
push esi
dec ecx
jne 0x44a5c7
lea ebx, [ebp + 8]
call fcn.0045ce8d
xor eax, eax
call fcn.00452fc5
mov eax, 1
mov edx, 0x186a9e8
call fcn.0045d0ba
xor ecx, ecx
xchg ecx, eax
call fcn.00452fc5
mov eax, ecx
call fcn.004512ed
test eax, eax
jne 0x44a666
lea ebx, [ebp + 8]
call fcn.0045ce8d
xor eax, eax
call fcn.00452fc5
mov eax, 1
mov edx, 0x186aa04
call fcn.0045d0ba
xor ecx, ecx
xchg ecx, eax
call fcn.00452fc5
mov eax, ecx
call fcn.004512ed
test eax, eax
jne 0x44a666
lea ebx, [ebp + 8]
call fcn.0045ce8d
xor eax, eax
call fcn.00452fc5
mov eax, 1
mov edx, 0x186aa20
call fcn.0045d0ba
xor ecx, ecx
xchg ecx, eax
call fcn.00452fc5
mov eax, ecx
call fcn.004512ed
test eax, eax
je 0x44a66b
jmp 0x44ab6e
lea ebx, [ebp + 8]
call fcn.0045ce8d
mov eax, 1
call fcn.00454296
mov edx, 0x18609d8
call fcn.0045d0ba
call fcn.0045c602
je 0x44a6b2
lea ebx, [ebp + 8]
call fcn.0045ce8d
mov edx, 0x18609d8
call fcn.0045d0ba
call fcn.0045c56d
lea ebx, [ebp + 8]
mov ecx, 0x104
call fcn.0045ced6
lea ebx, [ebp + 8]
call fcn.0045ce8d
mov edx, 0x186aa54
call fcn.0045d0ba
call fcn.0045c56d
lea ebx, [ebp - 0x2ec]
mov ecx, 0x104
call fcn.0045ced6
lea ebx, [ebp - 0x1e8]
push ebx
lea ebx, [ebp - 0x2ec]
push ebx
call dword [sym.imp.KERNEL32.DLL_FindFirstFileA]
fldcw word [ebp - 0x10]
mov esi, eax
fild qword [0x186cd80]
mov dword [ebp - 0x6c], esi
mov dword [ebp - 0x68], 0
fild qword [ebp - 0x6c]
fcompp
fnstsw ax
sahf
je 0x44ab6e
fild dword [0x186cd30]
fild dword [0x186cd30]
mov eax, dword [ebp - 0x1e8]
call fcn.0045c27b
call fcn.0045c106
fcompp
fnstsw ax
sahf
je 0x44ab47
lea ebx, [ebp - 0x1bc]
call fcn.0045ce8d
xor eax, eax
call fcn.00452fc5
mov eax, 1
mov ecx, 0xb
xchg ecx, eax
call fcn.00454232
mov edx, 0x186aa60
call fcn.0045d0ba
call fcn.0045c602
jne 0x44ab47
lea ebx, [ebp + 8]
call fcn.0045ce8d
lea ebx, [ebp - 0x1bc]
call fcn.0045ce8d
call fcn.0045c56d
mov eax, 0x80000104
call fcn.00454915
call fcn.0044ac10
call fcn.0045d0d1
lea ebx, [ebp - 0x3f0]
mov ecx, 0x104
call fcn.0045ced6
lea ebx, [ebp - 0x3f0]
call fcn.0045ce8d
call fcn.0045d088
test eax, eax
je 0x44aae1
push 0
lea ebx, [ebp + 8]
call fcn.0045ce8d
mov edx, 0x186ab08
call fcn.0045d0ba
call fcn.0045c56d
lea ebx, [ebp - 0x3f0]
call fcn.0045ce8d
call fcn.0045c56d
lea ebx, [esp]
call fcn.0045c36b
call fcn.0042501c
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
test eax, eax
je 0x44aae1
push 0
lea ebx, [ebp - 0x3f0]
add ebx, 0x100
mov ecx, 0x41
push dword [ebx]
sub ebx, 4
dec ecx
jne 0x44a823
call fcn.0044ab85
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jne 0x44aa76
push 0
push 0
push 0
mov ebx, 0x18604b8
call fcn.0045ce8d
mov edx, 0x186aa70
call fcn.0045d0ba
call fcn.0045c56d
lea ebx, [ebp - 0x1bc]
call fcn.0045ce8d
call fcn.0045c56d
lea ebx, [esp + 8]
call fcn.0045c36b
lea ebx, [ebp + 8]
call fcn.0045ce8d
lea ebx, [ebp - 0x1bc]
call fcn.0045ce8d
call fcn.0045c56d
lea ebx, [esp + 8]
call fcn.0045c36b
call dword [sym.imp.KERNEL32.DLL_CopyFileA]
push eax
mov ebx, esp
mov eax, dword [ebx + 8]
call fcn.00457d88
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 8
fldcw word [ebp - 0x10]
test eax, eax
je 0x44aa1a
lea ebx, [ebp + 8]
call fcn.0045ce8d
mov edx, 0x186ab08
call fcn.0045d0ba
call fcn.0045c56d
lea ebx, [ebp - 0x3f0]
call fcn.0045ce8d
call fcn.0045c56d
push 0
mov ebx, esp
call fcn.0045c2a9
mov ebx, 0x18604b8
call fcn.0045ce8d
mov edx, 0x186aa80
call fcn.0045d0ba
call fcn.0045c56d
lea ebx, [ebp - 0x3f0]
call fcn.0045ce8d
call fcn.0045c56d
mov eax, 0x80000104
call fcn.00454915
call fcn.00449485
test eax, eax
je 0x44a9be
inc dword [0x18605c0]
lea ebx, [ebp - 0x3f0]
call fcn.0045ce8d
mov eax, dword [0x18605c0]
sub eax, dword [0x18607ac]
imul eax, eax, 0x104
add eax, dword [0x1860794]
mov ebx, eax
mov ecx, 0x104
call fcn.0045ced6
mov edx, 0x186aa98
call fcn.0045d0ba
lea ebx, [ebp + 8]
call fcn.0045ce8d
call fcn.0045c56d
lea ebx, [ebp - 0x3f0]
call fcn.0045ce8d
call fcn.0045c56d
push 0
mov ebx, esp
call fcn.0045c2a9
mov eax, 4
call fcn.0045a309
mov edx, 0x186a990
call fcn.0045d0ba
call fcn.0045c56d
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.0044976d
jmp 0x44aa15
mov edx, 0x186aaa8
call fcn.0045d0ba
lea ebx, [ebp + 8]
call fcn.0045ce8d
call fcn.0045c56d
lea ebx, [ebp - 0x3f0]
call fcn.0045ce8d
call fcn.0045c56d
push 0
mov ebx, esp
call fcn.0045c2a9
mov eax, 4
call fcn.0045a309
mov edx, 0x186a990
call fcn.0045d0ba
call fcn.0045c56d
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.0044976d
jmp 0x44aa71
mov edx, 0x186aabc
call fcn.0045d0ba
lea ebx, [ebp + 8]
call fcn.0045ce8d
call fcn.0045c56d
lea ebx, [ebp - 0x1bc]
call fcn.0045ce8d
call fcn.0045c56d
push 0
mov ebx, esp
call fcn.0045c2a9
mov eax, 4
call fcn.0045a309
mov edx, 0x186a990
call fcn.0045d0ba
call fcn.0045c56d
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.0044976d
jmp 0x44aadc
mov edx, 0x186aacc
call fcn.0045d0ba
lea ebx, [ebp + 8]
call fcn.0045ce8d
call fcn.0045c56d
lea ebx, [ebp - 0x3f0]
call fcn.0045ce8d
call fcn.0045c56d
mov edx, 0x186aad8
call fcn.0045d0ba
call fcn.0045c56d
push 0
mov ebx, esp
call fcn.0045c2a9
mov eax, 4
call fcn.0045a309
mov edx, 0x186a990
call fcn.0045d0ba
call fcn.0045c56d
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.0044976d
jmp 0x44ab47
mov edx, 0x186aaec
call fcn.0045d0ba
lea ebx, [ebp + 8]
call fcn.0045ce8d
call fcn.0045c56d
lea ebx, [ebp - 0x1bc]
call fcn.0045ce8d
call fcn.0045c56d
mov edx, 0x186aaf4
call fcn.0045d0ba
call fcn.0045c56d
push 0
mov ebx, esp
call fcn.0045c2a9
mov eax, 4
call fcn.0045a309
mov edx, 0x186a990
call fcn.0045d0ba
call fcn.0045c56d
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.0044976d
lea ebx, [ebp - 0x1e8]
push ebx
mov eax, esi
push eax
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
fldcw word [ebp - 0x10]
test eax, eax
jne 0x44a710
mov eax, esi
push eax
call dword [sym.imp.KERNEL32.DLL_FindClose]
fldcw word [ebp - 0x10]
lea esp, [ebp - 0xc]
pop edi
pop esi
pop ebx
pop ebp
ret 0x104