Function at 0x449d4e
Capabilities:
Copy file
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push 0x133f
sub esp, 0x70
push fcn.00449d4e
xor esi, esi
mov ecx, 0xdb
push esi
dec ecx
jne 0x449d68
lea ebx, [ebp + 8]
call fcn.0045ce8d
xor eax, eax
call fcn.00452fc5
mov eax, 1
mov edx, 0x186a9e8
call fcn.0045d0ba
xor ecx, ecx
xchg ecx, eax
call fcn.00452fc5
mov eax, ecx
call fcn.004512ed
test eax, eax
jne 0x449e07
lea ebx, [ebp + 8]
call fcn.0045ce8d
xor eax, eax
call fcn.00452fc5
mov eax, 1
mov edx, 0x186aa04
call fcn.0045d0ba
xor ecx, ecx
xchg ecx, eax
call fcn.00452fc5
mov eax, ecx
call fcn.004512ed
test eax, eax
jne 0x449e07
lea ebx, [ebp + 8]
call fcn.0045ce8d
xor eax, eax
call fcn.00452fc5
mov eax, 1
mov edx, 0x186aa20
call fcn.0045d0ba
xor ecx, ecx
xchg ecx, eax
call fcn.00452fc5
mov eax, ecx
call fcn.004512ed
test eax, eax
je 0x449e0c
jmp 0x44a300
lea ebx, [ebp + 8]
call fcn.0045ce8d
mov eax, 1
call fcn.00454296
mov edx, 0x18609d8
call fcn.0045d0ba
call fcn.0045c602
je 0x449e53
lea ebx, [ebp + 8]
call fcn.0045ce8d
mov edx, 0x18609d8
call fcn.0045d0ba
call fcn.0045c56d
lea ebx, [ebp + 8]
mov ecx, 0x104
call fcn.0045ced6
lea ebx, [ebp + 8]
call fcn.0045ce8d
mov edx, 0x186aa54
call fcn.0045d0ba
call fcn.0045c56d
lea ebx, [ebp - 0x2ec]
mov ecx, 0x104
call fcn.0045ced6
lea ebx, [ebp - 0x1e8]
push ebx
lea ebx, [ebp - 0x2ec]
push ebx
call dword [sym.imp.KERNEL32.DLL_FindFirstFileA]
fldcw word [ebp - 0x10]
mov esi, eax
fild qword [0x186cd80]
mov dword [ebp - 0x6c], esi
mov dword [ebp - 0x68], 0
fild qword [ebp - 0x6c]
fcompp
fnstsw ax
sahf
je 0x44a300
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
fild dword [0x186cd30]
fild dword [0x186cd30]
mov eax, dword [ebp - 0x1e8]
call fcn.0045c27b
call fcn.0045c106
fcompp
fnstsw ax
sahf
je 0x44a2d9
lea ebx, [ebp - 0x1bc]
call fcn.0045ce8d
xor eax, eax
call fcn.00452fc5
mov eax, 1
mov ecx, 0xb
xchg ecx, eax
call fcn.00454232
mov edx, 0x186aa60
call fcn.0045d0ba
call fcn.0045c602
jne 0x44a2d9
lea ebx, [ebp - 0x3f0]
call fcn.0045ce8d
call fcn.0045d088
test eax, eax
je 0x44a273
push 0
lea ebx, [ebp + 8]
call fcn.0045ce8d
lea ebx, [ebp - 0x3f0]
call fcn.0045ce8d
call fcn.0045c56d
lea ebx, [esp]
call fcn.0045c36b
call fcn.0042501c
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
test eax, eax
je 0x44a273
lea ebx, [ebp + 8]
call fcn.0045ce8d
lea ebx, [ebp - 0x1bc]
call fcn.0045ce8d
call fcn.0045c56d
mov eax, 0x80000104
call fcn.00454915
call fcn.0044ac10
call fcn.0045d0d1
lea ebx, [ebp - 0x3f0]
mov ecx, 0x104
call fcn.0045ced6
push 0
lea ebx, [ebp - 0x3f0]
add ebx, 0x100
mov ecx, 0x41
push dword [ebx]
sub ebx, 4
dec ecx
jne 0x449fc4
call fcn.0044ab85
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jne 0x44a208
push 0
push 0
push 0
mov ebx, 0x18604b8
call fcn.0045ce8d
mov edx, 0x186aa70
call fcn.0045d0ba
call fcn.0045c56d
lea ebx, [ebp - 0x1bc]
call fcn.0045ce8d
call fcn.0045c56d
lea ebx, [esp + 8]
call fcn.0045c36b
lea ebx, [ebp + 8]
call fcn.0045ce8d
lea ebx, [ebp - 0x1bc]
call fcn.0045ce8d
call fcn.0045c56d
lea ebx, [esp + 8]
call fcn.0045c36b
call dword [sym.imp.KERNEL32.DLL_CopyFileA]
push eax
mov ebx, esp
mov eax, dword [ebx + 8]
call fcn.00457d88
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 8
fldcw word [ebp - 0x10]
test eax, eax
je 0x44a1ac
lea ebx, [ebp + 8]
call fcn.0045ce8d
lea ebx, [ebp - 0x3f0]
call fcn.0045ce8d
call fcn.0045c56d
push 0
mov ebx, esp
call fcn.0045c2a9
mov ebx, 0x18604b8
call fcn.0045ce8d
mov edx, 0x186aa80
call fcn.0045d0ba
call fcn.0045c56d
lea ebx, [ebp - 0x3f0]
call fcn.0045ce8d
call fcn.0045c56d
mov eax, 0x80000104
call fcn.00454915
call fcn.00449485
test eax, eax
je 0x44a150
inc dword [0x18605c0]
lea ebx, [ebp - 0x3f0]
call fcn.0045ce8d
mov eax, dword [0x18605c0]
sub eax, dword [0x18607ac]
imul eax, eax, 0x104
add eax, dword [0x1860794]
mov ebx, eax
mov ecx, 0x104
call fcn.0045ced6
mov edx, 0x186aa98
call fcn.0045d0ba
lea ebx, [ebp + 8]
call fcn.0045ce8d
call fcn.0045c56d
lea ebx, [ebp - 0x3f0]
call fcn.0045ce8d
call fcn.0045c56d
push 0
mov ebx, esp
call fcn.0045c2a9
mov eax, 4
call fcn.0045a309
mov edx, 0x186a990
call fcn.0045d0ba
call fcn.0045c56d
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.0044976d
jmp 0x44a1a7
mov edx, 0x186aaa8
call fcn.0045d0ba
lea ebx, [ebp + 8]
call fcn.0045ce8d
call fcn.0045c56d
lea ebx, [ebp - 0x3f0]
call fcn.0045ce8d
call fcn.0045c56d
push 0
mov ebx, esp
call fcn.0045c2a9
mov eax, 4
call fcn.0045a309
mov edx, 0x186a990
call fcn.0045d0ba
call fcn.0045c56d
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.0044976d
jmp 0x44a203
mov edx, 0x186aabc
call fcn.0045d0ba
lea ebx, [ebp + 8]
call fcn.0045ce8d
call fcn.0045c56d
lea ebx, [ebp - 0x1bc]
call fcn.0045ce8d
call fcn.0045c56d
push 0
mov ebx, esp
call fcn.0045c2a9
mov eax, 4
call fcn.0045a309
mov edx, 0x186a990
call fcn.0045d0ba
call fcn.0045c56d
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.0044976d
jmp 0x44a26e
mov edx, 0x186aacc
call fcn.0045d0ba
lea ebx, [ebp + 8]
call fcn.0045ce8d
call fcn.0045c56d
lea ebx, [ebp - 0x3f0]
call fcn.0045ce8d
call fcn.0045c56d
mov edx, 0x186aad8
call fcn.0045d0ba
call fcn.0045c56d
push 0
mov ebx, esp
call fcn.0045c2a9
mov eax, 4
call fcn.0045a309
mov edx, 0x186a990
call fcn.0045d0ba
call fcn.0045c56d
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.0044976d
jmp 0x44a2d9
mov edx, 0x186aaec
call fcn.0045d0ba
lea ebx, [ebp + 8]
call fcn.0045ce8d
call fcn.0045c56d
lea ebx, [ebp - 0x1bc]
call fcn.0045ce8d
call fcn.0045c56d
mov edx, 0x186aaf4
call fcn.0045d0ba
call fcn.0045c56d
push 0
mov ebx, esp
call fcn.0045c2a9
mov eax, 4
call fcn.0045a309
mov edx, 0x186a990
call fcn.0045d0ba
call fcn.0045c56d
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.0044976d
lea ebx, [ebp - 0x1e8]
push ebx
mov eax, esi
push eax
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
fldcw word [ebp - 0x10]
test eax, eax
jne 0x449ec0
mov eax, esi
push eax
call dword [sym.imp.KERNEL32.DLL_FindClose]
fldcw word [ebp - 0x10]
lea esp, [ebp - 0xc]
pop edi
pop esi
pop ebx
pop ebp
ret 0x104