Function at 0x45cf24
Capabilities:
Enumerate files on windows

Disassembly:
push edi
push esi
push ebp
push ebx
sub esp, 0x784
mov ebx, edx
mov dword [esp + 0x77c], eax
push 0xfa0
call fcn.00403564
pop ecx
mov dword [esp + 0x774], eax
test eax, eax
je 0x45d49a
push 0x3e8
call fcn.00403564
pop ecx
mov dword [esp + 0x76c], eax
test eax, eax
je 0x45d47e
push 0x209
call fcn.00466ddc
pop ecx
mov ecx, dword [esp + 0x774]
mov dword [ecx], eax
test eax, eax
je 0x45d462
mov esi, eax
mov edi, ebx
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x45cf8b
mov eax, dword [esp + 0x76c]
mov byte [eax], 1
mov eax, 1
xor ebx, ebx
mov dword [esp + 0x778], eax
lea ebp, [ebx + 1]
mov eax, dword [esp + 0x778]
cmp eax, ebp
jl 0x45d377
lea esi, [esp + 0x41c]
mov eax, dword [esp + 0x774]
mov edi, dword [eax + ebx*4]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x45cfd0
lea edi, [esp + 0x41c]
mov edx, 0x8062ec
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x45cff0
lea esi, [esp + 4]
lea edi, [esp + 0x41c]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x45d005
lea edi, [esp + 4]
mov edx, 0x806b28
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x45d022
mov esi, dword [esp + 0x76c]
movzx esi, byte [esi + ebx]
mov ebx, ebp
lea edx, [esp + 4]
lea eax, [esp + 0x628]
push eax
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov ebp, eax
cmp ebp, 0xffffffff
je 0x45cfad
lea edx, [esi + 1]
mov dword [esp + 0x770], edx
mov dword [esp + 0x780], esi
mov dword [esp + 0x768], ebx
cmp byte [esp + 0x654], 0x2e
je 0x45d423
xor edx, edx
test edx, edx
jne 0x45d34d
mov edx, dword [esp + 0x628]
and edx, 0x10
cmp edx, 0x10
jne 0x45d175
mov ecx, dword [esp + 0x780]
mov edx, dword [esp + 0x77c]
cmp edx, ecx
jl 0x45d34d
lea edx, [esp + 0x654]
push dword [0x5b2734]
push edx
call fcn.00466f20
add esp, 8
test eax, eax
jne 0x45d34d
mov edx, dword [esp + 0x778]
cmp edx, 0x3e8
jge 0x45d407
mov edx, dword [esp + 0x780]
cmp edx, 0x20
jge 0x45d3eb
push 0x106
call fcn.00466ddc
pop ecx
mov ebx, dword [esp + 0x778]
lea ecx, [ebx + ebx]
mov edx, dword [esp + 0x774]
mov dword [edx + ebx*4], eax
test eax, eax
je 0x45d3cf
mov esi, eax
lea edi, [esp + 0x41c]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x45d121
mov ebx, dword [esp + 0x774]
mov edi, dword [ebx + ecx*2]
lea edx, [esp + 0x654]
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x45d146
mov edx, dword [esp + 0x770]
mov ecx, dword [esp + 0x76c]
mov ebx, dword [esp + 0x778]
mov byte [ebx + ecx], dl
inc ebx
mov dword [esp + 0x778], ebx
jmp 0x45d34d
lea edi, [esp + 0x654]
xor eax, eax
mov dh, byte [edi]
mov ecx, edi
test dh, dh
je 0x45d18e
inc ecx
inc eax
mov dl, byte [ecx]
test dl, dl
jne 0x45d186
cmp eax, 4
jl 0x45d34d
lea edx, [esp + eax + 0x650]
push 4
push 0x806b98
push edx
call fcn.004698b0
add esp, 0xc
test eax, eax
jne 0x45d34d
lea edx, [esp + 0x654]
push 0x806b2c
push edx
call fcn.00466f20
add esp, 8
test eax, eax
jne 0x45d1d6
mov ebx, 1
jmp 0x45d1d8
xor ebx, ebx
lea edx, [esp + 0x654]
push 0x806b38
push edx
call fcn.00466f20
add esp, 8
test eax, eax
jne 0x45d1f6
mov ebx, 2
lea edx, [esp + 0x654]
push 0x806b44
push edx
call fcn.00466f20
add esp, 8
test eax, eax
jne 0x45d214
mov ebx, 3
lea edx, [esp + 0x654]
push 0x806b50
push edx
call fcn.00466f20
add esp, 8
test eax, eax
jne 0x45d232
mov ebx, 4
lea edx, [esp + 0x654]
push 0x806b5c
push edx
call fcn.00466f20
add esp, 8
test eax, eax
jne 0x45d250
mov ebx, 5
lea edx, [esp + 0x654]
push 0x806b68
push edx
call fcn.00466f20
add esp, 8
test eax, eax
jne 0x45d26e
mov ebx, 6
lea edx, [esp + 0x654]
push 0x806b74
push edx
call fcn.00466f20
add esp, 8
test eax, eax
jne 0x45d28c
mov ebx, 7
lea edx, [esp + 0x654]
push 0x806b80
push edx
call fcn.00466f20
add esp, 8
test eax, eax
jne 0x45d2aa
mov ebx, 8
lea edx, [esp + 0x654]
push 0x806b8c
push edx
call fcn.00466f20
add esp, 8
test eax, eax
jne 0x45d2c8
mov ebx, 9
lea esi, [esp + 0x210]
lea edi, [esp + 0x41c]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x45d2d6
lea edi, [esp + 0x210]
lea edx, [esp + 0x654]
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x45d2f8
lea eax, [esp + 0x210]
call fcn.0045d4cc
test ebx, ebx
jne 0x45d328
lea eax, [esp + 0x210]
call fcn.0045cc10
test eax, eax
jne 0x45d4b6
jmp 0x45d34d
push 0x105
call fcn.00466ddc
pop ecx
mov dword [ebx*4 + 0x800920], eax
mov esi, eax
lea edi, [esp + 0x210]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x45d343
lea edx, [esp + 0x628]
push edx
push ebp
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x45d06f
mov ebx, dword [esp + 0x768]
push ebp
call dword [sym.imp.KERNEL32.dll_FindClose]
jmp 0x45cfad
mov esi, dword [esp + 0x774]
lea ebx, [esi + 0xfa0]
mov eax, dword [esi]
test eax, eax
je 0x45d391
push eax
call fcn.0046703f
pop ecx
mov dword [esi], 0
add esi, 4
cmp ebx, esi
ja 0x45d384
mov eax, dword [esp + 0x774]
test eax, eax
je 0x45d3b0
push eax
call fcn.0046703f
pop ecx
mov eax, dword [esp + 0x76c]
test eax, eax
je 0x45d3c2
push eax
call fcn.0046703f
pop ecx
xor eax, eax
add esp, 0x784
pop ebx
pop ebp
pop esi
pop edi
ret
push 1
push 0x186aa
call fcn.00463f24
mov eax, 0xffffffff
add esp, 0x78c
pop ebx
pop ebp
pop esi
pop edi
ret
push 1
push 0x196af
call fcn.00463f24
mov eax, 0xffffffff
add esp, 0x78c
pop ebx
pop ebp
pop esi
pop edi
ret
push 1
push 0x196ae
call fcn.00463f24
mov eax, 0xffffffff
add esp, 0x78c
pop ebx
pop ebp
pop esi
pop edi
ret
movsx edx, byte [esp + 0x655]
test edx, edx
jne 0x45d439
mov edx, 1
jmp 0x45d07f
cmp edx, 0x2e
je 0x45d445
xor edx, edx
jmp 0x45d07f
movsx edx, byte [esp + 0x656]
test edx, edx
jne 0x45d45b
mov edx, 1
jmp 0x45d07f
xor edx, edx
jmp 0x45d07f
push 1
push 0x186aa
call fcn.00463f24
mov eax, 0xffffffff
add esp, 0x78c
pop ebx
pop ebp
pop esi
pop edi
ret
push 1
push 0x186aa
call fcn.00463ef8
mov eax, 0xffffffff
add esp, 0x78c
pop ebx
pop ebp
pop esi
pop edi
ret
push 1
push 0x186aa
call fcn.00463ef8
mov eax, 0xffffffff
add esp, 0x78c
pop ebx
pop ebp
pop esi
pop edi
ret
mov eax, 0xffffffff
add esp, 0x784
pop ebx
pop ebp
pop esi
pop edi
ret