Function at 0x446c1b
Capabilities:
Enumerate files on windows
Enumerate files recursively
Set file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4b8
mov eax, dword [0x5025d0]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
push ebx
push esi
mov dword [ebp - 0x474], eax
mov eax, dword [ebp + 0xc]
push edi
mov dword [ebp - 0x468], eax
mov eax, dword [ebp + 0x10]
mov esi, 0x103
push esi
mov dword [ebp - 0x478], eax
xor ebx, ebx
lea eax, [ebp - 0x113]
push ebx
push eax
mov byte [ebp - 0x114], 0
call fcn.004a8c80
add esp, 0xc
push esi
lea eax, [ebp - 0x21b]
push ebx
push eax
mov byte [ebp - 0x21c], bl
call fcn.004a8c80
add esp, 0xc
push 0x13c
lea eax, [ebp - 0x460]
push ebx
push eax
mov dword [ebp - 0x464], ebx
call fcn.004a8c80
xor eax, eax
mov word [ebp - 0x494], bx
lea edi, [ebp - 0x492]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
xor eax, eax
mov word [ebp - 0x4a4], bx
lea edi, [ebp - 0x4a2]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
add esp, 0xc
push esi
stosw word es:[edi], ax
lea eax, [ebp - 0x323]
push ebx
push eax
mov dword [ebp - 0x47c], ebx
mov dword [ebp - 0x470], ebx
mov byte [ebp - 0x324], bl
call fcn.004a8c80
mov esi, dword [ebp - 0x474]
add esp, 0xc
cmp esi, ebx
je 0x44722d
cmp dword [ebp - 0x468], ebx
je 0x44722d
push esi
call fcn.004a7f30
test eax, eax
pop ecx
jbe 0x44722d
push esi
call fcn.004a7f30
mov edi, 0x104
cmp eax, edi
pop ecx
jae 0x44722d
push dword [ebp - 0x468]
call fcn.004a7f30
test eax, eax
pop ecx
jbe 0x44722d
push dword [ebp - 0x468]
call fcn.004a7f30
cmp eax, edi
pop ecx
jae 0x44722d
mov edi, esi
call fcn.00419e19
test eax, eax
jne 0x446d6b
mov edi, dword [ebp - 0x468]
call fcn.00419e19
test eax, eax
je 0x44722d
push esi
call fcn.00419eca
test eax, eax
pop ecx
mov edi, 0x1e61
jne 0x446d97
push edi
mov ecx, esi
call fcn.0041a1a7
test eax, eax
pop ecx
jne 0x446d97
mov eax, esi
call fcn.0041a2f5
test eax, eax
jne 0x44722d
push dword [ebp - 0x468]
call fcn.00419eca
test eax, eax
pop ecx
jne 0x446dcb
mov ecx, dword [ebp - 0x468]
push edi
call fcn.0041a1a7
test eax, eax
pop ecx
jne 0x446dcb
mov eax, dword [ebp - 0x468]
call fcn.0041a2f5
test eax, eax
jne 0x44722d
push esi
call fcn.004a7f30
cmp byte [eax + esi - 1], 0x5c
pop ecx
push esi
lea eax, [ebp - 0x114]
jne 0x446de7
push 0x4df4e0
jmp 0x446dec
push 0x4df6d0
push eax
call fcn.004a8bfe
add esp, 0xc
push 0x2828
lea eax, [ebp - 0x494]
push str..Network.c
push eax
call fcn.0049b356
add esp, 0xc
push ebx
lea edi, [ebp - 0x324]
call fcn.00442cbc
pop ecx
mov eax, edi
push eax
push dword [ebp - 0x468]
call fcn.004785e7
pop ecx
mov edi, eax
pop ecx
neg edi
lea eax, [ebp - 0x464]
push eax
sbb edi, edi
lea eax, [ebp - 0x114]
neg edi
push eax
mov dword [ebp - 0x484], edi
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp eax, 0xffffffff
mov dword [ebp - 0x480], eax
jne 0x446e83
cmp dword [ebp + 0x14], ebx
jne 0x446e65
xor eax, eax
inc eax
jmp 0x44722f
push dword [ebp + 0x18]
push ebx
push dword [ebp - 0x478]
push esi
push dword [ebp - 0x468]
call fcn.00446c1b
add esp, 0x14
jmp 0x44722f
mov ebx, dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
jmp 0x446e91
mov edi, dword [ebp - 0x484]
xor esi, esi
cmp dword [ebp - 0x470], esi
je 0x446ecd
call fcn.0049a965
sub eax, dword [ebp - 0x47c]
cmp eax, 0x1388
jbe 0x446ecd
cmp dword [ebp + 0x18], esi
je 0x446ecd
push dword [ebp + 0x18]
call fcn.004469e1
mov dword [ebp - 0x470], esi
mov dword [esp], 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [ebp - 0x474]
push esi
call fcn.004a7f30
cmp byte [eax + esi - 1], 0x5c
pop ecx
lea eax, [ebp - 0x438]
push eax
push esi
lea eax, [ebp - 0x114]
jne 0x446ef6
push 0x4c8500
jmp 0x446efb
push 0x4cddec
push eax
call fcn.004a8bfe
mov esi, dword [ebp - 0x468]
add esp, 0x10
push esi
call fcn.004a7f30
cmp byte [eax + esi - 1], 0x5c
pop ecx
lea eax, [ebp - 0x438]
push eax
push esi
lea eax, [ebp - 0x21c]
jne 0x446f2d
push 0x4c8500
jmp 0x446f32
push 0x4cddec
push eax
call fcn.004a8bfe
add esp, 0x10
test edi, edi
je 0x446ff7
lea eax, [ebp - 0x4a4]
push eax
lea ecx, [ebp - 0x450]
call fcn.0049bff3
sub esp, 0xc
mov edi, esp
lea esi, [ebp - 0x4a4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
lea esi, [ebp - 0x494]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.00499d2f
add esp, 0x20
test eax, eax
je 0x446ff7
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x494]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
lea esi, [ebp - 0x4a4]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.0049a0b2
add esp, 0x20
cmp eax, 0x927c0
jle 0x446ff7
lea esi, [ebp - 0x494]
lea edi, [ebp - 0x4b4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x450]
movsd dword es:[edi], dword [esi]
push eax
lea eax, [ebp - 0x4b4]
xor esi, esi
push eax
mov word [ebp - 0x4a8], si
mov word [ebp - 0x4aa], si
call fcn.0049c12f
lea eax, [ebp - 0x114]
push esi
push eax
lea eax, [ebp - 0x450]
xor ecx, ecx
call fcn.0041a614
add esp, 0x10
push dword [ebp - 0x478]
lea ecx, [ebp - 0x464]
push dword [ebp - 0x468]
call fcn.0044723e
test eax, eax
pop ecx
pop ecx
je 0x4471d5
lea eax, [ebp - 0x438]
push eax
push str._n__Syncing__s...
call fcn.004499ca
cmp dword [ebp - 0x470], 0
pop ecx
pop ecx
jne 0x44705a
push 0x2871
push str..Network.c
push dword [ebp + 0x18]
call fcn.00445dad
add esp, 0xc
mov dword [ebp - 0x470], eax
call fcn.0049a965
mov dword [ebp - 0x47c], eax
mov edi, 0x120
push edi
lea eax, [ebp - 0x114]
push eax
call ebx
test eax, eax
jne 0x447094
lea eax, [ebp - 0x114]
call fcn.0041a2f5
test eax, eax
jne 0x447094
mov esi, 0x1f4
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
push edi
lea eax, [ebp - 0x114]
push eax
call ebx
jmp 0x447099
mov esi, 0x1f4
push edi
lea eax, [ebp - 0x21c]
push eax
call ebx
test eax, eax
jne 0x4470d6
lea eax, [ebp - 0x21c]
call fcn.0041a2f5
test eax, eax
jne 0x4470d6
lea edi, [ebp - 0x21c]
call fcn.00419e19
test eax, eax
je 0x4470d6
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x120
mov eax, edi
push eax
call ebx
lea edi, [ebp - 0x21c]
lea ecx, [ebp - 0x114]
call fcn.004194f6
mov edi, eax
test edi, edi
mov dword [ebp - 0x46c], edi
jne 0x447113
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
lea edi, [ebp - 0x21c]
lea ecx, [ebp - 0x114]
call fcn.004194f6
mov dword [ebp - 0x46c], eax
mov edi, eax
push 0x20
lea eax, [ebp - 0x114]
push eax
call ebx
test eax, eax
jne 0x44715e
lea eax, [ebp - 0x114]
call fcn.0041a2f5
test eax, eax
jne 0x44715e
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x20
lea eax, [ebp - 0x114]
push eax
call ebx
test eax, eax
jne 0x44715e
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea edi, [ebp - 0x114]
call fcn.00419e19
mov edi, dword [ebp - 0x46c]
neg edi
sbb edi, edi
and edi, 0xfffffefe
add edi, 0x122
push edi
lea eax, [ebp - 0x21c]
push eax
mov dword [ebp - 0x46c], edi
call ebx
test eax, eax
jne 0x4471c1
lea eax, [ebp - 0x21c]
call fcn.0041a2f5
test eax, eax
jne 0x4471c1
lea edi, [ebp - 0x21c]
call fcn.00419e19
test eax, eax
je 0x4471c1
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
push dword [ebp - 0x46c]
mov eax, edi
push eax
call ebx
test eax, eax
jne 0x4471c1
call dword [sym.imp.KERNEL32.dll_GetLastError]
call fcn.00419e19
test byte [ebp - 0x46c], 2
je 0x4471d5
lea eax, [ebp - 0x21c]
call fcn.004199a1
lea eax, [ebp - 0x464]
push eax
push dword [ebp - 0x480]
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x446e8b
xor esi, esi
cmp dword [ebp - 0x470], esi
je 0x447203
push dword [ebp + 0x18]
call fcn.004469e1
pop ecx
push dword [ebp - 0x480]
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [ebp + 0x14], esi
je 0x446e5d
push dword [ebp + 0x18]
push esi
push dword [ebp - 0x478]
push dword [ebp - 0x474]
jmp 0x446e70
xor eax, eax
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004a8565
leave
ret