Function at 0x100452b0
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10213e00
mov eax, dword fs:[0]
push eax
sub esp, 0x6ec
mov eax, dword [0x10250150]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov al, byte [ebp + 8]
mov byte [ebp - 0x6dc], al
mov ebx, dword [ebp + 0xc]
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x6d0], eax
mov ecx, dword [ebp + 0x14]
mov dword [ebp - 0x6d4], ecx
cmp dword [eax + 0x10], 0
je 0x1004576b
push ebx
call fcn.10045f60
add esp, 4
test eax, eax
je 0x1004576b
mov dword [ebp - 0x6c4], 0
push 0x20
call fcn.10213511
add esp, 4
mov edi, eax
mov dword [edi], edi
mov dword [edi + 4], edi
mov dword [ebp - 0x6c8], edi
cmp byte [ebp + 0x18], 0
je 0x10045353
lea eax, [ebp - 0x6c8]
push eax
push ebx
call fcn.10044da0
add esp, 8
jmp 0x1004538b
cmp dword [ebp - 0x6c4], 0x7ffffff
je 0x10045789
push 0x20
call fcn.10213511
add esp, 4
mov esi, eax
lea ecx, [esi + 8]
push ebx
call fcn.10006aa0
mov ecx, dword [edi + 4]
mov dword [esi], edi
mov dword [esi + 4], ecx
mov dword [edi + 4], esi
mov dword [ecx], esi
inc dword [ebp - 0x6c4]
mov byte [ebp - 0x6bd], 0
mov edi, dword [ebp - 0x6c8]
mov esi, dword [edi]
mov dword [ebp - 0x6d8], esi
cmp esi, edi
je 0x1004571f
lea eax, [esi + 8]
cmp dword [eax + 0x14], 8
jb 0x100453b3
mov eax, dword [eax]
push eax
push 0x104
lea eax, [ebp - 0x21c]
push eax
call fcn.1020eeb0
add esp, 0xc
push 0x1021d000
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
mov eax, dword [0x10255438]
test eax, eax
jne 0x100453ed
call fcn.1003be40
mov dword [0x10255438], eax
cmp dword [eax + 0x140], 2
jne 0x10045437
mov eax, dword [0x10255438]
test eax, eax
jne 0x10045409
call fcn.1003be40
mov dword [0x10255438], eax
cmp dword [eax + 0x140], 2
jne 0x10045417
mov eax, dword [eax + 0x64]
jmp 0x10045419
xor eax, eax
test eax, eax
je 0x10045437
lea ecx, [ebp - 0x6bc]
push ecx
lea ecx, [ebp - 0x21c]
push ecx
call eax
mov ebx, eax
mov dword [ebp - 0x6cc], ebx
jmp 0x10045453
lea eax, [ebp - 0x6bc]
push eax
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov ebx, eax
mov dword [ebp - 0x6cc], eax
cmp ebx, 0xffffffff
je 0x10045712
lea esp, [esp]
test byte [ebp - 0x6bc], 0x10
jne 0x10045653
mov dword [ebp - 0x42c], 0
mov dword [ebp - 0x428], 7
xor eax, eax
mov word [ebp - 0x43c], ax
lea eax, [ebp - 0x690]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10045493
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0x690]
push eax
lea ecx, [ebp - 0x43c]
call fcn.10008240
mov dword [ebp - 4], 0
push 0x100
push dword [ebp - 0x6d0]
lea ecx, [ebp - 0x6f4]
call fcn.1002f100
lea edx, [ebp - 0x43c]
mov ecx, dword [ebp - 0x43c]
cmp dword [ebp - 0x428], 8
jb 0x100454e9
mov edx, ecx
mov eax, dword [ebp - 0x42c]
lea edx, [edx + eax*2]
mov dword [ebp - 0x6e0], edx
lea eax, [ebp - 0x43c]
jb 0x10045502
mov eax, ecx
mov dword [ebp - 0x6e0], eax
push 0
lea ecx, [ebp - 0x6f4]
push ecx
push edx
push eax
call fcn.10032a30
add esp, 0x10
test al, al
je 0x100455e6
lea eax, [esi + 8]
cmp dword [eax + 0x14], 8
jb 0x1004552e
mov eax, dword [eax]
push eax
push 0x104
lea eax, [ebp - 0x424]
push eax
call fcn.1020eeb0
add esp, 0xc
lea eax, [ebp - 0x690]
push eax
lea eax, [ebp - 0x424]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [ebp - 0x424]
push eax
lea ecx, [ebp - 0x454]
call fcn.10006b40
push dword [ebp + 0x20]
push dword [ebp + 0x1c]
lea eax, [ebp - 0x454]
push eax
call fcn.10043260
add esp, 0xc
mov bl, al
lea ecx, [ebp - 0x454]
call fcn.1001d6d0
test bl, bl
je 0x100455e6
lea eax, [ebp - 0x424]
push eax
lea ecx, [ebp - 0x454]
call fcn.10006b40
lea eax, [ebp - 0x454]
push eax
push dword [ebp - 0x6dc]
lea eax, [ebp - 0x46c]
push eax
call fcn.10041220
add esp, 0xc
push eax
mov ecx, dword [ebp - 0x6d4]
call fcn.10054840
lea ecx, [ebp - 0x46c]
call fcn.1001d6d0
lea ecx, [ebp - 0x454]
call fcn.1001d6d0
mov byte [ebp - 0x6bd], 1
lea ecx, [ebp - 0x6f4]
call fcn.10033570
mov dword [ebp - 4], 0xffffffff
jmp 0x1004560d
mov edx, dword [ebp - 0x428]
cmp edx, 8
jb 0x1004564d
lea edx, [edx*2 + 2]
mov ecx, dword [ebp - 0x43c]
mov eax, ecx
cmp edx, 0x1000
jb 0x10045643
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10045793
push edx
push ecx
call fcn.102134ff
add esp, 8
mov ebx, dword [ebp - 0x6cc]
mov eax, dword [0x10255438]
test eax, eax
jne 0x10045666
call fcn.1003be40
mov dword [0x10255438], eax
cmp dword [eax + 0x140], 2
jne 0x100456a2
mov eax, dword [0x10255438]
test eax, eax
jne 0x10045682
call fcn.1003be40
mov dword [0x10255438], eax
cmp dword [eax + 0x140], 2
jne 0x10045690
mov eax, dword [eax + 0x6c]
jmp 0x10045692
xor eax, eax
test eax, eax
je 0x100456a2
lea ecx, [ebp - 0x6bc]
push ecx
push ebx
call eax
jmp 0x100456b0
lea eax, [ebp - 0x6bc]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x10045460
mov eax, dword [0x10255438]
test eax, eax
jne 0x100456cb
call fcn.1003be40
mov dword [0x10255438], eax
cmp dword [eax + 0x140], 2
jne 0x1004570b
mov eax, dword [0x10255438]
test eax, eax
jne 0x100456e7
call fcn.1003be40
mov dword [0x10255438], eax
cmp dword [eax + 0x140], 2
jne 0x100456f5
mov eax, dword [eax + 0x70]
jmp 0x100456f7
xor eax, eax
test eax, eax
je 0x1004570b
push ebx
call eax
mov esi, dword [esi]
mov edi, dword [ebp - 0x6c8]
jmp 0x1004539a
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov esi, dword [esi]
mov edi, dword [ebp - 0x6c8]
jmp 0x1004539a
mov eax, dword [edi + 4]
mov dword [eax], 0
mov edi, dword [edi]
test edi, edi
je 0x10045753
mov edi, edi
mov esi, dword [edi]
lea eax, [edi + 8]
push eax
lea eax, [ebp - 0x6c8]
push eax
call fcn.100218c0
push 0x20
push edi
call fcn.102134ff
add esp, 0x10
mov edi, esi
test esi, esi
jne 0x10045730
push 0x20
push dword [ebp - 0x6c8]
call fcn.102134ff
add esp, 8
mov al, byte [ebp - 0x6bd]
jmp 0x1004576d
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.10212f74
mov esp, ebp
pop ebp
ret
push str.list_T__too_long
call fcn.101d9a10
call fcn.10200ab0
int3