Function at 0x4895c0
Capabilities:
Enumerate files on windows

Disassembly:
push 0xffffffffffffffff
push 0x60cb3d
mov eax, dword fs:[0]
push eax
sub esp, 0xadc
mov eax, dword [0x6687b8]
xor eax, esp
mov dword [esp + 0xad8], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x6687b8]
xor eax, esp
push eax
lea eax, [esp + 0xaf0]
mov dword fs:[0], eax
mov ebx, 1
test byte [0x6809d0], bl
jne 0x489637
or dword [0x6809d0], ebx
cmp dword [0x678ec4], 0
jne 0x48962a
cmp dword [0x678ec8], 0
jne 0x48962a
mov dword [0x678ec4], 0x6790b8
push 0x6131e0
call fcn.005d268a
add esp, 4
mov ebp, dword [0x678ec4]
mov eax, dword [ebp + 4]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [0x678ec0], ebx
mov dword [esp + 0x1c], 0x5a
call fcn.004874e0
mov eax, dword [ebp + 8]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x5b
call fcn.004874e0
mov eax, dword [ebp + 0xc]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x5c
call fcn.004874e0
mov eax, dword [ebp + 0x10]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x5d
call fcn.004874e0
mov eax, dword [ebp + 0x424]
push 0
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x5e
call fcn.004874e0
mov ecx, dword [ebp + 0x428]
push 0
push ecx
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x5f
call fcn.004874e0
mov eax, dword [ebp + 0x42c]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x60
call fcn.004874e0
mov edx, dword [ebp + 0x434]
push 0
push edx
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x61
call fcn.004874e0
mov eax, dword [ebp + 0x438]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x62
call fcn.004874e0
mov eax, dword [ebp + 0x43c]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x63
call fcn.004874e0
mov eax, dword [ebp + 0x444]
push 0
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x64
call fcn.004874e0
mov eax, dword [ebp + 0x448]
cdq
push edx
push eax
mov dword [esp + 0x1c], 0x65
lea eax, [esp + 0x1c]
call fcn.004874e0
mov eax, dword [ebp + 0x44c]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x66
call fcn.004874e0
mov ecx, dword [ebp + 0x454]
push 0
push ecx
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x67
call fcn.004874e0
mov eax, dword [ebp + 0x458]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x68
call fcn.004874e0
mov eax, dword [ebp + 0x45c]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x69
call fcn.004874e0
mov eax, dword [ebp + 0x460]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x6a
call fcn.004874e0
mov eax, dword [ebp + 0x880]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x6b
call fcn.004874e0
mov eax, dword [ebp + 0x884]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x6d
call fcn.004874e0
mov eax, dword [ebp + 0x888]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x6e
call fcn.004874e0
mov eax, dword [ebp + 0x88c]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x6f
call fcn.004874e0
mov eax, dword [ebp + 0x890]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x70
call fcn.004874e0
mov eax, dword [ebp + 0x894]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x71
call fcn.004874e0
mov eax, dword [ebp + 0x898]
cdq
mov dword [esp + 0x14], 0x72
push edx
push eax
lea eax, [esp + 0x1c]
call fcn.004874e0
mov eax, dword [ebp + 0x89c]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x73
call fcn.004874e0
mov eax, dword [ebp + 0x8a0]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x74
call fcn.004874e0
mov eax, dword [ebp + 0x8a4]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x75
call fcn.004874e0
mov eax, dword [ebp + 0x8a8]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x76
call fcn.004874e0
movzx eax, word [ebp + 0x8ac]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x77
call fcn.004874e0
movzx eax, word [ebp + 0x8ae]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x78
call fcn.004874e0
movzx eax, word [ebp + 0x8b0]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x79
call fcn.004874e0
movzx eax, word [ebp + 0x8b2]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x7a
call fcn.004874e0
mov eax, dword [ebp + 0x98c]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0xa8
call fcn.004874e0
mov eax, dword [ebp + 0x990]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x6c
call fcn.004874e0
mov eax, dword [ebp + 0x8c4]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x7b
call fcn.004874e0
mov dword [esp + 0x14], 0x7c
mov edx, dword [ebp + 0x8cc]
push 0
push edx
lea eax, [esp + 0x1c]
call fcn.004874e0
lea esi, [esp + 0x4c]
call fcn.00498dc0
test byte [0x6809cc], bl
jne 0x489a07
or dword [0x6809cc], ebx
push 0x613990
call fcn.005d268a
add esp, 4
lea eax, [esp + 0x4c]
push eax
mov ecx, 0x6809c0
call fcn.004993f0
lea ecx, [esp + 0x4c]
mov eax, ecx
mov edi, str.10000000_0000_0000_0000_000000000001
lea esi, [eax + 2]
mov dx, word [eax]
add eax, 2
test dx, dx
jne 0x489a24
sub eax, esi
sar eax, 1
jne 0x489a37
xor ecx, ecx
mov eax, str.10000000_0000_0000_0000_000000000001
lea esi, [eax + 2]
nop
mov dx, word [eax]
add eax, 2
test dx, dx
jne 0x489a40
sub eax, esi
sar eax, 1
jne 0x489a53
xor edi, edi
test ecx, ecx
jne 0x489a5b
test edi, edi
jmp 0x489a8e
test edi, edi
je 0x489a90
mov eax, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x489a87
test dx, dx
je 0x489a83
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x489a87
add eax, 4
add ecx, 4
test dx, dx
jne 0x489a61
xor eax, eax
jmp 0x489a8c
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x489a95
push 0
push ebx
jmp 0x489a99
push 0
push 0
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x7d
call fcn.004874e0
mov eax, dword [ebp + 0x8d8]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x7e
call fcn.004874e0
mov eax, dword [ebp + 0x8dc]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x7f
call fcn.004874e0
mov eax, dword [ebp + 0x8e4]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x80
call fcn.004874e0
mov ecx, dword [esp + 0x45c]
mov edx, dword [0x67f168]
mov dword [edx], ecx
mov eax, dword [esp + 0x460]
mov ecx, dword [0x67f168]
mov dword [ecx + 4], eax
movzx edx, word [esp + 0x464]
mov eax, dword [0x67f168]
mov word [eax + 8], dx
mov ecx, dword [esp + 0x664]
mov edx, dword [0x67f16c]
mov dword [edx], ecx
mov eax, dword [esp + 0x668]
mov ecx, dword [0x67f16c]
mov dword [ecx + 4], eax
movzx edx, word [esp + 0x66c]
mov eax, dword [0x67f16c]
mov word [eax + 8], dx
mov eax, dword [esp + 0x86c]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x83
call fcn.004874e0
mov ecx, dword [esp + 0x870]
push 0
push ecx
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x84
call fcn.004874e0
mov edx, dword [esp + 0x874]
push 0
push edx
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x85
call fcn.004874e0
mov eax, dword [esp + 0x878]
push 0
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x86
call fcn.004874e0
mov ecx, dword [esp + 0x87c]
push 0
push ecx
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x87
call fcn.004874e0
mov edx, dword [esp + 0x880]
push 0
push edx
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x88
call fcn.004874e0
mov dword [esp + 0x14], 0x89
push 0
mov eax, dword [esp + 0x888]
push eax
lea eax, [esp + 0x1c]
call fcn.004874e0
mov ecx, dword [esp + 0x888]
push 0
push ecx
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x8a
call fcn.004874e0
mov eax, dword [ebp + 0x8ec]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x8b
call fcn.004874e0
mov edx, dword [ebp + 0x8f4]
push 0
push edx
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x8c
call fcn.004874e0
mov eax, dword [ebp + 0x8f8]
push 0
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x8d
call fcn.004874e0
mov ecx, dword [ebp + 0x8fc]
push 0
push ecx
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x8e
call fcn.004874e0
mov edx, dword [ebp + 0x900]
push 0
push edx
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x8f
call fcn.004874e0
lea eax, [esp + 0x4c]
push eax
push ecx
call fcn.0048aa70
add esp, 4
push eax
call fcn.0048ab00
mov esi, eax
test esi, esi
je 0x489cff
mov ecx, dword [esi + 0x10]
mov eax, dword [ecx - 0xc]
lea edx, [eax + eax]
cmp edx, 0xa
jbe 0x489ce1
mov eax, 0xa
jmp 0x489ce3
add eax, eax
cmp eax, 0xa
jb 0x489ced
mov eax, 0xa
push eax
mov eax, dword [0x67f1a8]
push ecx
push eax
call fcn.005d8ed0
add esp, 0xc
jmp 0x489d1b
mov ecx, dword [0x628c3c]
mov edx, dword [0x67f1a8]
mov dword [edx], ecx
mov eax, dword [0x628c40]
mov ecx, dword [0x67f1a8]
mov dword [ecx + 4], eax
push 0
mov edi, 0x90
push 0
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], edi
call fcn.004874e0
push 0
mov ebx, 0xde
push 0
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], ebx
call fcn.004874e0
test esi, esi
je 0x489d9d
mov edx, dword [esi + 4]
cmp dword [edx - 0xc], 0
lea eax, [esi + 4]
je 0x489d9d
push eax
mov ecx, str.10000000_0000_0000_0000_000000000001
call fcn.00414f20
add esp, 4
test al, al
mov dword [esp + 0x14], edi
je 0x489d73
push 0
push 1
jmp 0x489d81
xor eax, eax
cmp dword [esi + 0x18], eax
setne al
add eax, 2
cdq
push edx
push eax
lea eax, [esp + 0x1c]
call fcn.004874e0
mov eax, dword [esi + 0x20]
push 0
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], ebx
call fcn.004874e0
mov eax, dword [ebp + 0x918]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x92
call fcn.004874e0
push 0
push 0
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x93
call fcn.004874e0
mov eax, dword [ebp + 0x920]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x94
call fcn.004874e0
mov eax, dword [ebp + 0x924]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x95
call fcn.004874e0
mov eax, dword [ebp + 0x92c]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x96
call fcn.004874e0
mov eax, dword [ebp + 0x930]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x97
call fcn.004874e0
lea edi, [esp + 0x20]
lea esi, [esp + 0x14]
mov dword [esp + 0x20], 0
call fcn.004ecdd0
xor eax, eax
cmp dword [esp + 0x14], eax
je 0x489e5c
cmp dword [esp + 0x20], eax
setne al
lea eax, [eax + eax + 1]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x98
call fcn.004874e0
mov eax, dword [ebp + 0x950]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x99
call fcn.004874e0
mov eax, dword [ebp + 0x954]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x9a
call fcn.004874e0
mov eax, dword [ebp + 0x95c]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x9b
call fcn.004874e0
mov eax, dword [ebp + 0x964]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x9c
call fcn.004874e0
mov ecx, dword [ebp + 0x96c]
xor edi, edi
push edi
push ecx
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x9d
call fcn.004874e0
mov edx, dword [ebp + 0x970]
push edi
push edx
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x9e
call fcn.004874e0
mov eax, dword [ebp + 0x974]
push edi
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x9f
call fcn.004874e0
mov eax, dword [ebp + 0x978]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0xa0
call fcn.004874e0
mov ecx, dword [ebp + 0x97c]
push edi
push ecx
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0xa1
call fcn.004874e0
push edi
push 1
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0xa2
call fcn.004874e0
mov eax, dword [ebp + 0x980]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0xa3
call fcn.004874e0
mov edx, dword [ebp + 0x984]
mov dword [esp + 0x14], 0xa4
push edi
push edx
lea eax, [esp + 0x1c]
call fcn.004874e0
movzx eax, word [ebp + 0x988]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0xa5
call fcn.004874e0
mov eax, dword [ebp + 0x8d0]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0xa6
call fcn.004874e0
mov eax, dword [ebp + 0x9f0]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0xa7
call fcn.004874e0
push edi
mov dword [esp + 0x20], edi
mov dword [esp + 0x18], edi
mov dword [esp + 0x2c], edi
xor ebx, ebx
mov dword [esp + 0x24], edi
call fcn.00512fa0
add esp, 4
mov dword [esp + 0x2c], edi
mov dword [esp + 0x30], edi
mov dword [esp + 0x34], edi
mov dword [esp + 0x38], edi
lea eax, [esp + 0x2c]
push eax
mov dword [esp + 0xafc], edi
call fcn.005147f0
mov eax, dword [esp + 0x34]
add esp, 4
cmp eax, edi
mov dword [esp + 0x18], edi
jbe 0x48a112
mov dword [esp + 0x24], edi
cmp dword [esp + 0x18], eax
jae 0x48a280
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x24]
lea esi, [edx + ecx]
push esi
call fcn.00487b70
test eax, eax
je 0x48a07b
mov eax, dword [esi + 0x14]
add dword [esp + 0x28], 1
add dword [esp + 0x20], eax
cmp eax, ebx
jbe 0x48a0f6
mov ebx, eax
jmp 0x48a0f6
add dword [esp + 0x1c], 1
mov eax, dword [esi + 4]
mov ecx, 0x625fcc
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x48a0ae
cmp dx, di
je 0x48a0aa
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x48a0ae
add eax, 4
add ecx, 4
cmp dx, di
jne 0x48a088
xor eax, eax
jmp 0x48a0b3
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, edi
sete al
test al, al
je 0x48a0f6
cmp dword [esi + 0x24], edi
je 0x48a0f6
lea ecx, [esi + 0x18]
lea edi, [esp + 0x44]
call fcn.004140f0
mov ecx, dword [eax]
mov dword [esp + 0x3c], ecx
mov edx, dword [eax + 4]
lea eax, [esp + 0x3c]
push eax
mov dword [esp + 0x44], edx
call fcn.005d58b8
add esp, 4
push eax
call fcn.005d5662
add esp, 4
mov dword [esp + 0x14], eax
xor edi, edi
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x30]
add dword [esp + 0x24], 0x2c
add ecx, 1
cmp ecx, eax
mov dword [esp + 0x18], ecx
jb 0x48a041
mov ecx, dword [esp + 0x1c]
push edi
push ecx
lea eax, [esp + 0x20]
mov dword [esp + 0x20], 0xa9
call fcn.004874e0
mov edx, dword [esp + 0x14]
push edi
push edx
lea eax, [esp + 0x20]
mov dword [esp + 0x20], 0xaa
call fcn.004874e0
mov eax, dword [esp + 0x28]
push edi
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0xab
call fcn.004874e0
mov ecx, dword [esp + 0x20]
push edi
push ecx
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0xac
call fcn.004874e0
push edi
push ebx
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0xad
call fcn.004874e0
mov edx, dword [0x677600]
mov eax, dword [edx + 0xc]
mov ecx, 0x677600
call eax
add eax, 0x10
mov dword [esp + 0x28], eax
mov byte [esp + 0xaf8], 1
mov edx, dword [0x677600]
mov eax, dword [edx + 0xc]
mov ecx, 0x677600
call eax
add eax, 0x10
mov dword [esp + 0x1c], eax
mov byte [esp + 0xaf8], 2
mov edx, dword [0x677600]
mov eax, dword [edx + 0xc]
mov ecx, 0x677600
call eax
add eax, 0x10
mov dword [esp + 0x18], eax
lea esi, [esp + 0x24]
mov byte [esp + 0xaf8], 3
call fcn.00487c00
mov byte [esp + 0xaf8], 4
mov ecx, dword [esp + 0x24]
mov eax, dword [ecx - 0xc]
cmp eax, edi
jle 0x48a21c
lea edx, [eax - 1]
cmp edx, edi
jl 0x48a280
cmp edx, eax
jg 0x48a280
movzx eax, word [ecx + edx*2]
cmp ax, 0x5c
je 0x48a21c
push 0x5c
mov edi, esi
call fcn.0040af90
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x18]
push edx
mov ebx, str..lnk
call fcn.0040aab0
add esp, 8
mov byte [esp + 0xaf8], 5
mov ecx, dword [eax]
mov esi, dword [esp + 0x18]
lea eax, [ecx - 0x10]
add esi, 0xfffffff0
cmp eax, esi
je 0x48a297
cmp dword [esi + 0xc], 0
lea edi, [esi + 0xc]
jl 0x48a28a
mov edx, dword [eax]
cmp edx, dword [esi]
jne 0x48a28a
call fcn.0040a210
mov ebx, eax
or eax, 0xffffffff
lock xadd dword [edi], eax
dec eax
test eax, eax
jg 0x48a277
mov ecx, dword [esi]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push esi
call eax
add ebx, 0x10
mov dword [esp + 0x18], ebx
jmp 0x48a297
push 0x80070057
call fcn.00403650
mov ebx, dword [ecx - 0xc]
push ecx
lea eax, [esp + 0x1c]
call fcn.004037a0
mov byte [esp + 0xaf8], 4
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x48a2bf
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edx, dword [esp + 0x18]
lea ecx, [esp + 0x89c]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp eax, 0xffffffff
mov esi, dword [esp + 0x1c]
mov dword [esp + 0x14], eax
je 0x48a459
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x24]
push ecx
lea ebx, [esp + 0x8d0]
call fcn.0040aab0
add esp, 8
mov byte [esp + 0xaf8], 6
mov eax, dword [esi - 8]
mov ecx, 1
sub ecx, dword [esi - 4]
sub eax, 0x104
or eax, ecx
jge 0x48a32a
mov ecx, 0x104
lea eax, [esp + 0x1c]
call fcn.00403540
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x20]
mov ebx, esi
call fcn.00487ce0
test esi, esi
jne 0x48a33d
xor eax, eax
jmp 0x48a357
mov eax, esi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x48a342
sub eax, edx
sar eax, 1
js 0x48a280
cmp eax, dword [esi - 8]
jg 0x48a280
mov dword [esi - 0xc], eax
mov word [esi + eax*2], 0
mov edi, dword [esi - 0xc]
mov eax, dword [esi - 8]
mov ecx, 1
sub ecx, dword [esi - 4]
sub eax, edi
or eax, ecx
jge 0x48a38c
mov ecx, edi
lea eax, [esp + 0x1c]
call fcn.00403540
mov esi, dword [esp + 0x1c]
lea edx, [edi + 1]
push edx
push esi
call fcn.005d45bb
add esp, 8
test edi, edi
jl 0x48a280
cmp edi, dword [esi - 8]
jg 0x48a280
mov dword [esi - 0xc], edi
mov word [esi + edi*2], 0
cmp dword [esi - 0xc], 0
jl 0x48a3d4
push str.qqpyclipboard.exe
push esi
call fcn.005d2e73
add esp, 8
test eax, eax
je 0x48a3d4
sub eax, esi
sar eax, 1
cmp eax, 0xffffffff
jne 0x48a419
mov byte [esp + 0xaf8], 4
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x48a3fc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x89c]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x48a2e3
jmp 0x48a44e
lea eax, [esp + 0x1c]
lea edi, [esp + 0x28]
call fcn.0040ab90
mov byte [esp + 0xaf8], 4
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x48a44e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push ecx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov edi, dword [esp + 0x28]
cmp dword [edi - 0xc], 0
je 0x48a46a
mov eax, 1
jmp 0x48a46c
xor eax, eax
xor ecx, ecx
push ecx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x102
call fcn.004874e0
mov eax, dword [ebp + 0xc4c]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x103
call fcn.004874e0
mov eax, dword [ebp + 0xc50]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x104
call fcn.004874e0
push 0
push 0
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x11c
call fcn.004874e0
mov eax, dword [ebp + 0xc74]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x119
call fcn.004874e0
mov eax, dword [ebp + 0xa00]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x12d
call fcn.004874e0
mov eax, dword [ebp + 0xce4]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x12b
call fcn.004874e0
mov eax, dword [ebp + 0xce8]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x12f
call fcn.004874e0
mov eax, dword [ebp + 0xcec]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x137
call fcn.004874e0
mov eax, dword [ebp + 0xd00]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x13f
call fcn.004874e0
mov eax, dword [ebp + 0xd94]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x151
call fcn.004874e0
mov eax, dword [ebp + 0x99c]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x140
call fcn.004874e0
mov eax, dword [ebp + 0xd1c]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x147
call fcn.004874e0
mov eax, dword [ebp + 0x91c]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x141
call fcn.004874e0
mov eax, dword [ebp + 0xd2c]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x144
call fcn.004874e0
mov eax, dword [ebp + 0xd30]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x145
call fcn.004874e0
mov eax, dword [ebp + 0xd34]
cdq
push edx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x146
call fcn.004874e0
mov byte [esp + 0xaf8], 3
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x48a644
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xaf8], 2
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x48a66c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
add esi, 0xfffffff0
mov byte [esp + 0xaf8], 1
lea ecx, [esi + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x48a690
mov ecx, dword [esi]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push esi
call edx
lea eax, [edi - 0x10]
mov byte [esp + 0xaf8], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x48a6b4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov esi, dword [esp + 0x2c]
test esi, esi
je 0x48a6de
mov edi, dword [esp + 0x30]
test edi, edi
jbe 0x48a6d5
call fcn.00469250
add esi, 0x2c
sub edi, 1
jne 0x48a6c4
mov esi, dword [esp + 0x2c]
push esi
call fcn.005d27e0
add esp, 4
mov ecx, dword [esp + 0xaf0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xad8]
xor ecx, esp
call fcn.005d28b3
add esp, 0xae8
ret