Function at 0x4349a0
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a73ac
mov eax, dword fs:[0]
push eax
sub esp, 0xd34
mov eax, dword [0x4bc1f0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xd40], ecx
mov ecx, dword [ebp - 0xd40]
add ecx, 0x3ead48
call fcn.004366e0
mov ecx, dword [ebp - 0xd40]
add ecx, 0x3ead64
call fcn.004366e0
mov ecx, dword [ebp - 0xd40]
add ecx, 0x3ead80
call fcn.004366e0
mov ecx, 0x4c5778
call fcn.00408a60
push eax
lea eax, [ebp - 0x11c]
push eax
call dword [sym.imp.kernel32.dll_lstrcpyA]
push 0x4b4720
lea ecx, [ebp - 0x11c]
push ecx
call dword [sym.imp.kernel32.dll_lstrcatA]
lea edx, [ebp - 0x25c]
push edx
lea eax, [ebp - 0x11c]
push eax
call dword [sym.imp.kernel32.dll_FindFirstFileA]
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0xffffffff
jne 0x434a56
jmp 0x434b9c
lea ecx, [ebp - 0x678]
call fcn.0047ef70
mov dword [ebp - 4], 0
mov ecx, 0x4c5778
call fcn.00408a60
push eax
lea ecx, [ebp - 0x11c]
push ecx
call dword [sym.imp.kernel32.dll_lstrcpyA]
lea edx, [ebp - 0x230]
push edx
lea eax, [ebp - 0x11c]
push eax
call dword [sym.imp.kernel32.dll_lstrcatA]
lea ecx, [ebp - 0x11c]
push ecx
lea ecx, [ebp - 0x678]
call fcn.0047e6a0
lea ecx, [ebp - 0x678]
call fcn.0044f710
mov dword [ebp - 0x264], eax
lea ecx, [ebp - 0x678]
call fcn.00423b60
cmp eax, dword [ebp - 0x264]
jge 0x434b8a
mov byte [ebp - 0x64c], 0
lea edx, [ebp - 0x64c]
push edx
lea ecx, [ebp - 0x678]
call fcn.0047e780
push 0x4b4730
lea eax, [ebp - 0x64c]
push eax
call dword [sym.imp.kernel32.dll_lstrcmpiA]
test eax, eax
jne 0x434b85
lea ecx, [ebp - 0x64c]
push ecx
lea ecx, [ebp - 0x678]
call fcn.0047e780
lea edx, [ebp - 0x64c]
push edx
lea ecx, [ebp - 0x678]
call fcn.0047e780
push 0x4b473c
lea eax, [ebp - 0x64c]
push eax
call dword [sym.imp.kernel32.dll_lstrcmpiA]
test eax, eax
je 0x434b85
lea ecx, [ebp - 0x64c]
push ecx
lea edx, [ebp - 0x784]
push edx
call dword [sym.imp.kernel32.dll_lstrcpyA]
mov dword [ebp - 0x680], 0
lea eax, [ebp - 0x784]
push eax
mov ecx, dword [ebp - 0xd40]
add ecx, 0x3ead64
call fcn.00436590
lea ecx, [ebp - 0x64c]
push ecx
lea ecx, [ebp - 0x678]
call fcn.0047e780
jmp 0x434b25
jmp 0x434ab7
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x678]
call fcn.0047efd0
mov edx, dword [ebp - 0x260]
push edx
call dword [sym.imp.kernel32.dll_FindClose]
mov eax, dword [ebp - 0xd40]
cmp dword [eax + 0x165fa8], 4
jl 0x434bbd
jmp 0x434f1a
mov ecx, dword [ebp - 0xd40]
add ecx, 0x3ead2c
call fcn.004366e0
mov ecx, 0x4c5778
call fcn.00408a60
push eax
lea ecx, [ebp - 0x11c]
push ecx
call dword [sym.imp.kernel32.dll_lstrcpyA]
push 0x4b4740
lea edx, [ebp - 0x11c]
push edx
call dword [sym.imp.kernel32.dll_lstrcatA]
mov dword [ebp - 0x788], 0
lea eax, [ebp - 0x25c]
push eax
lea ecx, [ebp - 0x11c]
push ecx
call dword [sym.imp.kernel32.dll_FindFirstFileA]
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0xffffffff
jne 0x434c2a
jmp 0x434e57
mov dword [ebp - 0x78c], 1
cmp dword [ebp - 0x78c], 0
je 0x434dde
cmp dword [ebp - 0x25c], 0x10
je 0x434dbf
lea edx, [ebp - 0x230]
push edx
call dword [sym.imp.kernel32.dll_lstrlenA]
mov dword [ebp - 0x7a0], eax
push 0
lea eax, [ebp - 0x230]
push eax
lea ecx, [ebp - 0x79c]
call fcn.0047fba0
mov dword [ebp - 4], 1
push 4
lea ecx, [ebp - 0x79c]
call fcn.0047ffc0
push 0x4b4748
lea ecx, [ebp - 0x79c]
call fcn.00401020
push eax
call dword [sym.imp.kernel32.dll_lstrcmpiA]
test eax, eax
jne 0x434ca9
jmp 0x434d8e
push 0x4b4750
lea ecx, [ebp - 0x79c]
call fcn.00401020
push eax
call dword [sym.imp.kernel32.dll_lstrcmpiA]
test eax, eax
jne 0x434d77
mov ecx, 0x4c5778
call fcn.0042a2d0
mov dword [ebp - 0x7a8], eax
mov ecx, 0x4c5778
call fcn.0042a2f0
mov dword [ebp - 0x7a4], eax
mov dword [ebp - 0x7ac], 0
mov dword [ebp - 0x7ac], 0
jmp 0x434d0d
mov ecx, dword [ebp - 0x7ac]
add ecx, 1
mov dword [ebp - 0x7ac], ecx
mov edx, dword [ebp - 0x7ac]
cmp edx, dword [ebp - 0x7a4]
jge 0x434d44
mov eax, dword [ebp - 0x7ac]
mov ecx, dword [ebp - 0x7a8]
mov edx, dword [ecx + eax*4]
push edx
mov eax, dword [ebp - 0xd40]
add eax, 0x3ead2c
push eax
mov ecx, dword [ebp - 0xd40]
call fcn.00434900
jmp 0x434cfe
lea ecx, [ebp - 0x25c]
push ecx
mov edx, dword [ebp - 0x260]
push edx
call dword [sym.imp.kernel32.dll_FindNextFileA]
mov dword [ebp - 0x78c], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x79c]
call fcn.0047fd10
jmp 0x434c34
cmp dword [ebp - 0x7a0], 4
jl 0x434d8e
mov eax, dword [ebp - 0x7a0]
mov byte [ebp + eax - 0x234], 0
lea ecx, [ebp - 0x230]
push ecx
mov edx, dword [ebp - 0xd40]
add edx, 0x3ead2c
push edx
mov ecx, dword [ebp - 0xd40]
call fcn.00434900
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x79c]
call fcn.0047fd10
lea eax, [ebp - 0x25c]
push eax
mov ecx, dword [ebp - 0x260]
push ecx
call dword [sym.imp.kernel32.dll_FindNextFileA]
mov dword [ebp - 0x78c], eax
jmp 0x434c34
mov edx, dword [ebp - 0x260]
push edx
call dword [sym.imp.kernel32.dll_FindClose]
cmp dword [ebp - 0x788], 1
jge 0x434e57
mov dword [ebp - 0x788], 1
mov ecx, 0x4c5778
call fcn.00408a60
push eax
lea eax, [ebp - 0x11c]
push eax
call dword [sym.imp.kernel32.dll_lstrcpyA]
push 0x4b4758
lea ecx, [ebp - 0x11c]
push ecx
call dword [sym.imp.kernel32.dll_lstrcatA]
mov ecx, 0x55f458
call fcn.0041b3e0
push eax
lea edx, [ebp - 0x11c]
push edx
call dword [sym.imp.kernel32.dll_lstrcatA]
push 0x4b475c
lea eax, [ebp - 0x11c]
push eax
call dword [sym.imp.kernel32.dll_lstrcatA]
jmp 0x434c02
mov ecx, dword [ebp - 0xd40]
add ecx, 0x3ead10
call fcn.004366e0
mov ecx, 0x4c5778
call fcn.00408a60
push eax
lea ecx, [ebp - 0x11c]
push ecx
call dword [sym.imp.kernel32.dll_lstrcpyA]
push 0x4b4760
lea edx, [ebp - 0x11c]
push edx
call dword [sym.imp.kernel32.dll_lstrcatA]
lea eax, [ebp - 0x25c]
push eax
lea ecx, [ebp - 0x11c]
push ecx
call dword [sym.imp.kernel32.dll_FindFirstFileA]
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0xffffffff
jne 0x434eb7
jmp 0x434f1a
mov dword [ebp - 0x7b0], 1
cmp dword [ebp - 0x7b0], 0
je 0x434f0d
cmp dword [ebp - 0x25c], 0x10
je 0x434ef1
lea edx, [ebp - 0x230]
push edx
mov eax, dword [ebp - 0xd40]
add eax, 0x3ead10
push eax
mov ecx, dword [ebp - 0xd40]
call fcn.00434900
lea ecx, [ebp - 0x25c]
push ecx
mov edx, dword [ebp - 0x260]
push edx
call dword [sym.imp.kernel32.dll_FindNextFileA]
mov dword [ebp - 0x7b0], eax
jmp 0x434ec1
mov eax, dword [ebp - 0x260]
push eax
call dword [sym.imp.kernel32.dll_FindClose]
mov ecx, dword [ebp - 0xd40]
cmp dword [ecx + 0x165fa8], 4
jge 0x434f2e
jmp 0x4352bc
mov ecx, 0x4c5778
call fcn.00408a60
push eax
lea edx, [ebp - 0x11c]
push edx
call dword [sym.imp.kernel32.dll_lstrcpyA]
push 0x4b476c
lea eax, [ebp - 0x11c]
push eax
call dword [sym.imp.kernel32.dll_lstrcatA]
lea ecx, [ebp - 0x25c]
push ecx
lea edx, [ebp - 0x11c]
push edx
call dword [sym.imp.kernel32.dll_FindFirstFileA]
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0xffffffff
jne 0x434f80
jmp 0x4352bc
mov dword [ebp - 0xb08], 1
cmp dword [ebp - 0xb08], 0
je 0x43511b
cmp dword [ebp - 0x25c], 0x10
je 0x4350fc
lea eax, [ebp - 0x230]
push eax
lea ecx, [ebp - 0xc2c]
push ecx
call dword [sym.imp.kernel32.dll_lstrcpyA]
lea edx, [ebp - 0xc2c]
push edx
call dword [sym.imp.kernel32.dll_lstrlenA]
mov dword [ebp - 0xb20], eax
mov eax, dword [ebp - 0xb20]
lea ecx, [ebp + eax - 0x234]
push ecx
lea edx, [ebp - 0x9c4]
push edx
call dword [sym.imp.kernel32.dll_lstrcpyA]
push 0x4b4778
lea eax, [ebp - 0x9c4]
push eax
call dword [sym.imp.kernel32.dll_lstrcmpiA]
test eax, eax
jne 0x435034
lea ecx, [ebp - 0x230]
push ecx
lea edx, [ebp - 0x9c4]
push edx
call dword [sym.imp.kernel32.dll_lstrcpyA]
lea eax, [ebp - 0x25c]
push eax
mov ecx, dword [ebp - 0x260]
push ecx
call dword [sym.imp.kernel32.dll_FindNextFileA]
mov dword [ebp - 0xb08], eax
jmp 0x434f8a
push 0x4b4780
lea edx, [ebp - 0x9c4]
push edx
call dword [sym.imp.kernel32.dll_lstrcmpiA]
test eax, eax
jne 0x43507c
mov eax, dword [ebp - 0xb20]
mov byte [ebp + eax - 0xc30], 0
lea ecx, [ebp - 0xc2c]
push ecx
mov edx, dword [ebp - 0xd40]
add edx, 0x3ead80
push edx
mov ecx, dword [ebp - 0xd40]
call fcn.00434900
jmp 0x4350fc
cmp dword [ebp - 0xb20], 4
jl 0x435093
mov eax, dword [ebp - 0xb20]
mov byte [ebp + eax - 0xc30], 0
push 0x4b4788
lea ecx, [ebp - 0x230]
push ecx
call dword [sym.imp.kernel32.dll_lstrcmpiA]
test eax, eax
je 0x4350bf
push 0x4b478c
lea edx, [ebp - 0x230]
push edx
call dword [sym.imp.kernel32.dll_lstrcmpiA]
test eax, eax
jne 0x4350de
lea eax, [ebp - 0x25c]
push eax
mov ecx, dword [ebp - 0x260]
push ecx
call dword [sym.imp.kernel32.dll_FindNextFileA]
mov dword [ebp - 0xb08], eax
jmp 0x434f8a
lea edx, [ebp - 0xc2c]
push edx
mov eax, dword [ebp - 0xd40]
add eax, 0x3ead48
push eax
mov ecx, dword [ebp - 0xd40]
call fcn.00434900
lea ecx, [ebp - 0x25c]
push ecx
mov edx, dword [ebp - 0x260]
push edx
call dword [sym.imp.kernel32.dll_FindNextFileA]
mov dword [ebp - 0xb08], eax
jmp 0x434f8a
mov eax, dword [ebp - 0x260]
push eax
call dword [sym.imp.kernel32.dll_FindClose]
lea ecx, [ebp - 0x9fc]
call fcn.00474af0
mov dword [ebp - 4], 2
lea ecx, [ebp - 0xb18]
call fcn.0047fb00
mov byte [ebp - 4], 3
mov ecx, 0x4c5778
call fcn.00408a60
push eax
lea ecx, [ebp - 0x8bc]
push ecx
call dword [sym.imp.kernel32.dll_lstrcpyA]
push 0x4b4790
lea edx, [ebp - 0x8bc]
push edx
call dword [sym.imp.kernel32.dll_lstrcatA]
lea eax, [ebp - 0x9c4]
push eax
lea ecx, [ebp - 0x8bc]
push ecx
call dword [sym.imp.kernel32.dll_lstrcatA]
lea edx, [ebp - 0x8bc]
push edx
lea ecx, [ebp - 0x9fc]
call fcn.00474ba0
lea ecx, [ebp - 0x9fc]
call fcn.00474bd0
mov dword [ebp - 0xb1c], eax
cmp dword [ebp - 0xb1c], 0
je 0x435290
mov eax, dword [ebp - 0xb1c]
push eax
lea ecx, [ebp - 0xb04]
push ecx
call dword [sym.imp.kernel32.dll_lstrcpyA]
lea edx, [ebp - 0xb04]
push edx
call dword [sym.imp.kernel32.dll_lstrlenA]
mov dword [ebp - 0xc30], eax
mov eax, dword [ebp - 0xc30]
lea ecx, [ebp + eax - 0xb08]
push ecx
lea edx, [ebp - 0xd3c]
push edx
call dword [sym.imp.kernel32.dll_lstrcpyA]
cmp dword [ebp - 0xc30], 4
jl 0x435210
mov eax, dword [ebp - 0xc30]
mov byte [ebp + eax - 0xb08], 0
push 0x4b4798
lea ecx, [ebp - 0xd3c]
push ecx
call dword [sym.imp.kernel32.dll_lstrcmpiA]
test eax, eax
jne 0x435246
lea edx, [ebp - 0xb04]
push edx
mov eax, dword [ebp - 0xd40]
add eax, 0x3ead48
push eax
mov ecx, dword [ebp - 0xd40]
call fcn.00434900
jmp 0x43527a
push 0x4b47a0
lea ecx, [ebp - 0xd3c]
push ecx
call dword [sym.imp.kernel32.dll_lstrcmpiA]
test eax, eax
jne 0x43527a
lea edx, [ebp - 0xb04]
push edx
mov eax, dword [ebp - 0xd40]
add eax, 0x3ead80
push eax
mov ecx, dword [ebp - 0xd40]
call fcn.00434900
lea ecx, [ebp - 0x9fc]
call fcn.00474bd0
mov dword [ebp - 0xb1c], eax
jmp 0x4351aa
lea ecx, [ebp - 0x9fc]
call fcn.00481310
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xb18]
call fcn.0047fd10
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9fc]
call fcn.00474b40
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00483c0e
mov esp, ebp
pop ebp
ret