Function at 0x4894a0
Capabilities:
Enumerate files on windows
Get disk size
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x510ccf
mov eax, dword fs:[0]
push eax
sub esp, 0x2bc
mov eax, dword [0x567680]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x2b0], esi
xor ebx, ebx
mov dword [ebp - 0x26c], ebx
mov dword [ebp - 0x268], ebx
call fcn.0047a3c0
mov dword [ebp - 0x2a0], ebx
mov dword [ebp - 0x29c], ebx
mov dword [ebp - 0x298], ebx
mov dword [ebp - 4], ebx
cmp byte [esi + 0x94], bl
je 0x48951d
lea eax, [ebp - 0x2a0]
push eax
call fcn.00413510
add esp, 4
test al, al
jne 0x4895a9
lea eax, [ebp - 0x270]
push eax
call fcn.00410e20
add esp, 4
mov eax, dword [ebp - 0x270]
mov byte [ebp - 4], 1
cmp dword [eax - 0xc], 0
jne 0x489573
lea edx, [eax - 0x10]
mov byte [ebp - 4], 0
lea ecx, [edx + 0xc]
or eax, 0xffffffff
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x48955a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edi, dword [ebp - 0x29c]
mov esi, dword [ebp - 0x2a0]
xor cl, cl
mov byte [ebp - 0x261], cl
jmp 0x489e49
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0x2a0]
call fcn.00414870
mov edx, dword [ebp - 0x270]
add edx, 0xfffffff0
mov byte [ebp - 4], 0
lea eax, [edx + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4895a9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edi, dword [ebp - 0x29c]
mov esi, dword [ebp - 0x2a0]
mov eax, edi
xor cl, cl
xor edx, edx
sub eax, esi
mov byte [ebp - 0x261], cl
mov dword [ebp - 0x2ac], edx
test eax, 0xfffffffc
jle 0x489e49
lea eax, [esi + edx*4]
push str.Maxthon3Users
push eax
lea eax, [ebp - 0x270]
push eax
call fcn.00402b60
lea eax, [ebp - 0x270]
push eax
mov byte [ebp - 4], 2
call fcn.004108b0
add esp, 0x10
test al, al
je 0x489df7
push 0x524800
lea eax, [ebp - 0x270]
push eax
lea eax, [ebp - 0x2c8]
push eax
call fcn.00402b60
add esp, 0xc
lea ecx, [ebp - 0x260]
push ecx
push dword [eax]
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, dword [ebp - 0x2c8]
add esi, 0xfffffff0
mov edi, eax
mov dword [ebp - 0x2c4], edi
lea ecx, [esi + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x489656
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
cmp edi, 0xffffffff
je 0x489df7
nop
test byte [ebp - 0x260], 0x10
je 0x4897b8
mov eax, dword [0x5671f0]
mov ecx, 0x5671f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x284], eax
lea edi, [ebp - 0x234]
shr edi, 0x10
mov byte [ebp - 4], 3
test edi, edi
jne 0x4896ba
lea eax, [ebp - 0x234]
movzx esi, ax
push edi
push esi
call fcn.00403090
add esp, 8
test eax, eax
je 0x4896e5
push esi
push eax
lea ecx, [ebp - 0x284]
call fcn.004082e0
jmp 0x4896e5
lea ecx, [ebp - 0x234]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4896c3
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp - 0x284]
call fcn.0040b9d0
lea eax, [ebp - 0x284]
or ebx, 1
push 0x51b238
push eax
mov byte [ebp - 4], 4
mov dword [ebp - 0x26c], ebx
mov dword [ebp - 0x268], ebx
call fcn.004753d0
add esp, 8
test al, al
je 0x4897b8
mov eax, dword [0x5671f0]
mov ecx, 0x5671f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x288], eax
mov dword [ebp - 4], 5
test edi, edi
jne 0x48975b
lea eax, [ebp - 0x234]
movzx esi, ax
push edi
push esi
call fcn.00403090
add esp, 8
test eax, eax
je 0x489786
push esi
push eax
lea ecx, [ebp - 0x288]
call fcn.004082e0
jmp 0x489786
lea ecx, [ebp - 0x234]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x489764
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp - 0x288]
call fcn.0040b9d0
lea eax, [ebp - 0x288]
or ebx, 2
push 0x524808
push eax
mov dword [ebp - 4], 6
mov dword [ebp - 0x26c], ebx
mov dword [ebp - 0x268], ebx
call fcn.004753d0
add esp, 8
test al, al
je 0x4897b8
mov bl, 1
jmp 0x4897ba
xor bl, bl
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 4], 4
test al, 2
je 0x489800
mov edx, dword [ebp - 0x288]
and eax, 0xfffffffd
add edx, 0xfffffff0
mov dword [ebp - 0x26c], eax
mov dword [ebp - 0x268], eax
lea eax, [edx + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4897fa
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 4], 2
test al, 1
je 0x489834
mov edx, dword [ebp - 0x284]
and eax, 0xfffffffe
add edx, 0xfffffff0
mov dword [ebp - 0x26c], eax
lea eax, [edx + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x489834
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test bl, bl
je 0x489da1
mov eax, dword [0x5671f0]
mov ecx, 0x5671f0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x268], eax
lea eax, [ebp - 0x234]
mov byte [ebp - 4], 7
test eax, 0xffff0000
jne 0x489884
movzx esi, ax
push 0
push esi
call fcn.00403090
add esp, 8
test eax, eax
je 0x4898b2
push esi
push eax
lea ecx, [ebp - 0x268]
call fcn.004082e0
jmp 0x4898b2
lea ecx, [ebp - 0x234]
lea edx, [ecx + 2]
lea ecx, [ecx]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x489890
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp - 0x268]
call fcn.0040b9d0
push 0x51a434
lea eax, [ebp - 0x270]
push eax
lea eax, [ebp - 0x2bc]
push eax
mov byte [ebp - 4], 8
call fcn.00402b60
lea ecx, [ebp - 0x268]
push ecx
push eax
lea eax, [ebp - 0x290]
push eax
mov byte [ebp - 4], 9
call fcn.00402aa0
add esp, 0x18
mov edx, dword [ebp - 0x2bc]
add edx, 0xfffffff0
mov byte [ebp - 4], 0xb
lea eax, [edx + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x48990d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x268]
add edx, 0xfffffff0
mov byte [ebp - 4], 0xc
lea eax, [edx + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x489931
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.Addons
lea eax, [ebp - 0x290]
push eax
lea eax, [ebp - 0x28c]
push eax
call fcn.00402b60
push str.AddonsDataMxAddonMiscconfig.ini
lea eax, [ebp - 0x290]
push eax
lea eax, [ebp - 0x280]
push eax
mov byte [ebp - 4], 0xd
call fcn.00402b60
lea eax, [ebp - 0x28c]
push eax
mov byte [ebp - 4], 0xe
call fcn.004108b0
add esp, 0x1c
test al, al
je 0x489d35
lea eax, [ebp - 0x280]
push eax
call fcn.004108d0
add esp, 4
test al, al
je 0x489d35
push 0x51a434
lea eax, [ebp - 0x28c]
push eax
lea eax, [ebp - 0x2b8]
push eax
call fcn.00402b60
mov ecx, dword [ebp - 0x2b0]
add ecx, 0xe8
push ecx
push eax
lea eax, [ebp - 0x2a4]
push eax
mov byte [ebp - 4], 0xf
call fcn.00402aa0
add esp, 0x18
mov edx, dword [ebp - 0x2b8]
add edx, 0xfffffff0
mov byte [ebp - 4], 0x11
lea eax, [edx + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4899f4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x2a4]
push ecx
add eax, 0xfffffff0
mov esi, esp
push eax
call fcn.00405030
add eax, 0x10
add esp, 4
mov dword [esi], eax
call fcn.00410d30
movzx eax, al
add esp, 4
test eax, eax
je 0x489d11
mov dword [ebp - 0x27c], 0
mov dword [ebp - 0x278], 0
mov dword [ebp - 0x274], 0
push 0x7fff
lea ecx, [ebp - 0x27c]
mov byte [ebp - 4], 0x12
call fcn.0048cc10
mov edi, dword [ebp - 0x27c]
mov eax, dword [ebp - 0x278]
push dword [ebp - 0x280]
sub eax, edi
sar eax, 1
push eax
push edi
push str.addonsmgr4
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileSectionW]
mov esi, eax
cmp esi, 0x7ffd
ja 0x489ce6
push dword [ebp - 0x280]
mov byte [ebp - 0x261], 1
push 0x51707c
push str.addonsmgr4
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileSectionW]
push esi
lea ecx, [ebp - 0x27c]
call fcn.0048cc10
mov ebx, dword [ebp - 0x278]
mov edi, dword [ebp - 0x27c]
mov dword [ebp - 0x294], ebx
cmp edi, ebx
je 0x489ce6
mov esi, edi
cmp edi, ebx
je 0x489add
lea ecx, [ecx]
cmp word [esi], 0
je 0x489add
add esi, 2
cmp esi, ebx
jne 0x489ad0
mov eax, dword [0x5671f0]
mov ecx, 0x5671f0
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [ebp - 0x268], edi
mov edx, dword [ebp - 0x27c]
mov byte [ebp - 4], 0x13
test edx, edx
je 0x489b51
test edx, 0xffff0000
jne 0x489b35
movzx eax, dx
push 0
push eax
mov dword [ebp - 0x2a8], eax
call fcn.00403090
add esp, 8
test eax, eax
je 0x489b66
push dword [ebp - 0x2a8]
lea ecx, [ebp - 0x268]
push eax
call fcn.004082e0
jmp 0x489b60
mov ecx, edx
lea edi, [ecx + 2]
lea ebx, [ebx]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x489b40
sub ecx, edi
sar ecx, 1
jmp 0x489b53
xor ecx, ecx
push ecx
push edx
lea ecx, [ebp - 0x268]
call fcn.0040b9d0
mov edi, dword [ebp - 0x268]
lea eax, [esi + 2]
mov byte [ebp - 4], 0x14
cmp eax, ebx
jne 0x489b79
mov eax, dword [ebp - 0x27c]
jmp 0x489b9d
mov ecx, dword [ebp - 0x27c]
cmp ecx, eax
je 0x489ba9
sub ebx, eax
sar ebx, 1
lea esi, [ebx + ebx]
push esi
push eax
push ecx
call fcn.004e8ed0
mov eax, dword [ebp - 0x27c]
add esp, 0xc
add eax, esi
mov dword [ebp - 0x278], eax
mov dword [ebp - 0x294], eax
mov eax, dword [edi - 0xc]
test eax, eax
je 0x489cb4
mov ecx, dword [ebp - 0x2b0]
mov ecx, dword [ecx + 0xe0]
test ecx, ecx
je 0x489be3
test eax, eax
js 0x489be3
push ecx
push edi
call fcn.004ea1ea
add esp, 8
test eax, eax
je 0x489be3
sub eax, edi
sar eax, 1
cmp eax, 0xffffffff
jne 0x489cb4
cmp dword [edi - 0xc], 0
jge 0x489bee
or eax, 0xffffffff
jmp 0x489c09
push 0x518994
push edi
call fcn.004ea1ea
add esp, 8
test eax, eax
jne 0x489c05
or eax, 0xffffffff
jmp 0x489c09
sub eax, edi
sar eax, 1
push eax
lea eax, [ebp - 0x2b4]
push eax
lea ecx, [ebp - 0x268]
call fcn.00407f10
mov esi, dword [edi - 0xc]
mov byte [ebp - 4], 0x15
test esi, esi
jns 0x489c2c
or eax, 0xffffffff
jmp 0x489c47
push 0x518994
push edi
call fcn.004ea1ea
add esp, 8
test eax, eax
jne 0x489c43
or eax, 0xffffffff
jmp 0x489c47
sub eax, edi
sar eax, 1
sub esi, eax
dec esi
push esi
lea eax, [ebp - 0x2c0]
push eax
lea ecx, [ebp - 0x268]
call fcn.004090f0
push dword [ebp - 0x280]
mov esi, dword [ebp - 0x2c0]
mov ebx, dword [ebp - 0x2b4]
push esi
push ebx
push str.addonsmgr4
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
add esi, 0xfffffff0
or ecx, 0xffffffff
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x489c96
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
add ebx, 0xfffffff0
mov byte [ebp - 4], 0x14
lea eax, [ebx + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x489cb4
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [ebp - 4], 0x12
lea eax, [edi + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x489cd2
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov ebx, dword [ebp - 0x294]
mov edi, dword [ebp - 0x27c]
cmp edi, ebx
jne 0x489ac7
test edi, edi
je 0x489d11
push edi
call fcn.004e8c3e
add esp, 4
mov dword [ebp - 0x27c], 0
mov dword [ebp - 0x278], 0
mov dword [ebp - 0x274], 0
mov edx, dword [ebp - 0x2a4]
add edx, 0xfffffff0
mov byte [ebp - 4], 0xe
lea eax, [edx + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x489d35
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x280]
add edx, 0xfffffff0
mov byte [ebp - 4], 0xd
lea eax, [edx + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x489d59
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x28c]
add edx, 0xfffffff0
mov byte [ebp - 4], 0xc
lea eax, [edx + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x489d7d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x290]
add edx, 0xfffffff0
mov byte [ebp - 4], 2
lea eax, [edx + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x489da1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edi, dword [ebp - 0x2c4]
lea eax, [ebp - 0x260]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
mov ebx, dword [ebp - 0x26c]
test eax, eax
je 0x489df7
mov edx, dword [0x568ad4]
lea ecx, [edx + 1]
lea eax, [edx + 2]
imul eax, ecx
imul eax, edx
cdq
mov ecx, 0x15
idiv ecx
cmp edx, 0xc
jne 0x489660
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
jmp 0x489660
mov edx, dword [ebp - 0x270]
add edx, 0xfffffff0
mov byte [ebp - 4], 0
lea eax, [edx + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x489e1b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edi, dword [ebp - 0x29c]
mov esi, dword [ebp - 0x2a0]
mov edx, dword [ebp - 0x2ac]
mov eax, edi
sub eax, esi
inc edx
sar eax, 2
mov dword [ebp - 0x2ac], edx
cmp edx, eax
jl 0x4895d4
mov cl, byte [ebp - 0x261]
mov dword [ebp - 4], 0xffffffff
test esi, esi
je 0x489e92
cmp esi, edi
je 0x489e81
mov edx, dword [esi]
sub edx, 0x10
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x489e74
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 4
cmp esi, edi
jne 0x489e58
mov esi, dword [ebp - 0x2a0]
push esi
call fcn.004e8c3e
mov al, byte [ebp - 0x261]
add esp, 4
jmp 0x489e94
mov al, cl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004e9514
mov esp, ebp
pop ebp
ret