Function at 0x43d0a0
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x178
mov eax, dword [0x552064]
xor eax, ebp
mov dword [ebp - 8], eax
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0x160], edx
mov dword [ebp - 0x154], ecx
mov esi, dword [edi + 0xc]
test esi, esi
je 0x43ddd8
mov eax, dword [edi + 0x10]
mov eax, dword [eax]
cmp eax, 0x10
ja case.default.0x43d1c7
jmp dword [eax*4 + 0x43de64]
cmp esi, 1
jbe 0x43ddd8
mov eax, dword [edi + 0x10]
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x43ddd8
mov eax, dword [0x5645cc]
mov edx, dword [0x5645c8]
sub eax, edx
cmp eax, ecx
jbe 0x43ddd8
mov cl, byte [edx + ecx]
jmp 0x43ddda
mov ecx, dword [0x5645d8]
mov edx, dword [0x5645d4]
cmp esi, 1
jbe 0x43d144
mov eax, dword [edi + 0x10]
mov ebx, dword [eax + 4]
test ebx, ebx
je 0x43d144
mov eax, ecx
sub eax, edx
sar eax, 2
cmp eax, ebx
jbe 0x43d144
mov ebx, dword [edx + ebx*4]
jmp 0x43d146
xor ebx, ebx
cmp esi, 2
jbe 0x43d1f6
mov eax, dword [edi + 0x10]
mov eax, dword [eax + 8]
sub eax, 0
je 0x43d1a8
sub eax, 1
je 0x43d187
cmp esi, 3
jbe 0x43d1a4
mov eax, dword [edi + 0x10]
mov eax, dword [eax + 0xc]
test eax, eax
je 0x43d1a4
sub ecx, edx
sar ecx, 2
cmp ecx, eax
jbe 0x43d1a4
mov eax, dword [edx + eax*4]
test eax, eax
je 0x43d1a4
cmp ecx, eax
jbe 0x43d1a4
mov ecx, dword [edx + eax*4]
jmp 0x43d1b3
cmp esi, 3
jbe 0x43d1a4
mov eax, dword [edi + 0x10]
mov eax, dword [eax + 0xc]
test eax, eax
je 0x43d1a4
sub ecx, edx
sar ecx, 2
cmp ecx, eax
jbe 0x43d1a4
mov ecx, dword [edx + eax*4]
jmp 0x43d1b3
xor ecx, ecx
jmp 0x43d1b3
cmp esi, 3
jbe 0x43d1f6
mov eax, dword [edi + 0x10]
mov ecx, dword [eax + 0xc]
cmp esi, 4
jbe case.0x43d1c7.0
mov eax, dword [edi + 0x10]
mov eax, dword [eax + 0x10]
cmp eax, 5
ja case.default.0x43d1c7
jmp dword [eax*4 + 0x43dea8]
cmp ebx, ecx
setge bl
jmp 0x43ddf0
cmp ebx, ecx
setg bl
jmp 0x43ddf0
cmp ebx, ecx
setl bl
jmp 0x43ddf0
cmp ebx, ecx
setne bl
jmp 0x43ddf0
xor ecx, ecx
cmp ebx, ecx
sete bl
jmp 0x43ddf0
mov eax, 0x88888889
imul dword [0x560614]
add edx, dword [0x560614]
sar edx, 5
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
cmp esi, 1
jbe 0x43d244
mov eax, dword [edi + 0x10]
mov ecx, dword [eax + 4]
cmp esi, 2
jbe 0x43d246
mov edx, dword [eax + 8]
test edx, edx
mov eax, ebx
cmove eax, ecx
cmove ecx, ebx
cmp ecx, eax
setge bl
jmp 0x43ddf0
xor ecx, ecx
xor edx, edx
mov eax, ebx
test edx, edx
cmove eax, ecx
cmove ecx, ebx
cmp ecx, eax
setge bl
jmp 0x43ddf0
mov ebx, dword [0x560600]
jmp 0x43d21d
cmp esi, 3
jbe 0x43d2ca
mov eax, dword [edi + 0x10]
mov eax, dword [eax + 0xc]
and eax, 0xf
sub eax, 0
je 0x43d2cf
sub eax, 1
mov eax, dword [edi + 0x10]
je 0x43d2aa
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x43d2d7
mov eax, dword [0x5645d8]
mov esi, dword [0x5645d4]
sub eax, esi
sar eax, 2
cmp eax, ecx
jbe 0x43d2d7
mov edx, dword [esi + ecx*4]
test edx, edx
je 0x43d2d7
cmp eax, edx
jbe 0x43d2d7
mov edx, dword [esi + edx*4]
jmp 0x43d2d9
mov edx, dword [eax + 4]
test edx, edx
je 0x43d2d7
mov eax, dword [0x5645d8]
mov ecx, dword [0x5645d4]
sub eax, ecx
sar eax, 2
cmp eax, edx
jbe 0x43d2d7
mov edx, dword [ecx + edx*4]
jmp 0x43d2d9
cmp esi, 1
jbe 0x43d2d7
mov eax, dword [edi + 0x10]
mov edx, dword [eax + 4]
jmp 0x43d2d9
xor edx, edx
mov esi, dword [0x5605f0]
xor ecx, ecx
test esi, esi
jle 0x43d30a
mov ebx, dword [0x5605f4]
nop dword [eax + eax]
movzx eax, word [ebx + ecx*2]
cmp eax, edx
je 0x43d2ff
inc ecx
cmp ecx, esi
jl 0x43d2f0
jmp 0x43d30a
mov eax, dword [0x5605f8]
cmp byte [ecx + eax], 0
ja 0x43d319
mov ecx, edx
call fcn.00472550
test eax, eax
jg 0x43d319
xor cl, cl
jmp 0x43d31b
mov cl, 1
cmp dword [edi + 0xc], 2
jbe 0x43d33b
mov eax, dword [edi + 0x10]
mov edx, dword [eax + 8]
mov al, cl
xor al, 1
test edx, edx
movzx ebx, al
movzx eax, cl
cmove ebx, eax
jmp 0x43ddf0
mov al, cl
xor edx, edx
xor al, 1
test edx, edx
movzx ebx, al
movzx eax, cl
cmove ebx, eax
jmp 0x43ddf0
cmp esi, 4
jbe 0x43d3b7
mov eax, dword [edi + 0x10]
mov eax, dword [eax + 0x10]
and eax, 0xf
sub eax, 0
je 0x43d3bc
sub eax, 1
mov eax, dword [edi + 0x10]
je 0x43d397
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x43d3c4
mov eax, dword [0x5645d8]
mov edx, dword [0x5645d4]
sub eax, edx
sar eax, 2
cmp eax, ecx
jbe 0x43d3c4
mov esi, dword [edx + ecx*4]
test esi, esi
je 0x43d3c4
cmp eax, esi
jbe 0x43d3c4
mov esi, dword [edx + esi*4]
jmp 0x43d3c6
mov esi, dword [eax + 4]
test esi, esi
je 0x43d3c4
mov eax, dword [0x5645d8]
mov ecx, dword [0x5645d4]
sub eax, ecx
sar eax, 2
cmp eax, esi
jbe 0x43d3c4
mov esi, dword [ecx + esi*4]
jmp 0x43d3c6
cmp esi, 1
jbe 0x43d3c4
mov eax, dword [edi + 0x10]
mov esi, dword [eax + 4]
jmp 0x43d3c6
xor esi, esi
mov ecx, esi
call fcn.004800c0
mov ecx, dword [edi + 0xc]
mov ebx, eax
cmp ecx, 2
jbe case.0x43d3ea.0
mov eax, dword [edi + 0x10]
mov eax, dword [eax + 8]
cmp eax, 6
ja case.default.0x43d1c7
jmp dword [eax*4 + 0x43dec0]
mov esi, dword [ebx + 0xc4]
mov ecx, esi
call fcn.004a1d70
test al, al
je 0x43d40d
mov ecx, dword [ebx + 4]
call fcn.00432200
mov esi, dword [eax + 8]
mov ecx, dword [edi + 8]
mov edx, esi
call fcn.00496580
mov bl, al
jmp 0x43ddf0
cmp ecx, 3
jbe 0x43d437
mov eax, dword [edi + 0x10]
mov eax, dword [eax + 0xc]
cmp dword [ebx + 0xe0], eax
setge bl
jmp 0x43ddf0
xor eax, eax
cmp dword [ebx + 0xe0], eax
setge bl
jmp 0x43ddf0
cmp ecx, 3
jbe 0x43d45d
mov eax, dword [edi + 0x10]
mov eax, dword [eax + 0xc]
cmp dword [ebx + 0x10], eax
setge bl
jmp 0x43ddf0
xor eax, eax
cmp dword [ebx + 0x10], eax
setge bl
jmp 0x43ddf0
cmp ecx, 3
jbe 0x43d47d
mov eax, dword [edi + 0x10]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x154], eax
jmp 0x43d487
mov dword [ebp - 0x154], 0
mov esi, dword [ebx + 0x100]
xor ecx, ecx
test esi, esi
jle case.default.0x43d1c7
mov edx, dword [ebx + 0x2f8]
mov ebx, dword [ebp - 0x154]
movzx eax, word [edx]
cmp eax, ebx
je case.0x43d608.10001
inc ecx
add edx, 2
cmp ecx, esi
jl 0x43d4a3
jmp case.default.0x43d1c7
cmp ecx, 3
jbe 0x43d4c8
mov eax, dword [edi + 0x10]
mov esi, dword [eax + 0xc]
jmp 0x43d4ca
xor esi, esi
xor eax, eax
lea ecx, [ebx + 0x2fc]
cmp eax, 4
jbe 0x43d4db
xor edx, edx
jmp 0x43d4de
movzx edx, word [ecx]
cmp edx, esi
je case.0x43d608.10001
inc eax
add ecx, 2
cmp eax, 5
jl 0x43d4d2
jmp case.default.0x43d1c7
cmp ecx, 3
jbe 0x43d510
mov eax, dword [edi + 0x10]
mov ecx, ebx
mov edx, dword [eax + 0xc]
call fcn.0045f050
test eax, eax
setg bl
jmp 0x43ddf0
xor edx, edx
mov ecx, ebx
call fcn.0045f050
test eax, eax
setg bl
jmp 0x43ddf0
mov edx, dword [0x5605e8]
xor ecx, ecx
test edx, edx
jle case.default.0x43d1c7
mov ebx, dword [0x5605ec]
nop dword [eax]
movzx eax, word [ebx + ecx*2]
cmp eax, esi
je case.0x43d608.10001
inc ecx
cmp ecx, edx
jl 0x43d540
jmp case.default.0x43d1c7
cmp esi, 3
jbe 0x43d56b
mov eax, dword [edi + 0x10]
mov ecx, dword [eax + 0xc]
cmp esi, 4
jbe 0x43d56d
mov ebx, dword [eax + 0x10]
jmp 0x43d56f
xor ecx, ecx
xor ebx, ebx
and ecx, 0xf
sub ecx, 0
je 0x43d5dc
sub ecx, 1
je 0x43d5b4
cmp esi, 1
jbe 0x43d5e9
mov eax, dword [edi + 0x10]
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x43d5e9
mov eax, dword [0x5645d8]
mov edx, dword [0x5645d4]
sub eax, edx
sar eax, 2
cmp eax, ecx
jbe 0x43d5e9
mov edx, dword [edx + ecx*4]
test edx, edx
je 0x43d5e9
cmp eax, edx
jbe 0x43d5e9
mov eax, dword [0x5645d4]
mov edx, dword [eax + edx*4]
jmp 0x43d5eb
cmp esi, 1
jbe 0x43d5e9
mov eax, dword [edi + 0x10]
mov edx, dword [eax + 4]
test edx, edx
je 0x43d5e9
mov eax, dword [0x5645d8]
mov ecx, dword [0x5645d4]
sub eax, ecx
sar eax, 2
cmp eax, edx
jbe 0x43d5e9
mov edx, dword [ecx + edx*4]
jmp 0x43d5eb
cmp esi, 1
jbe 0x43d5e9
mov eax, dword [edi + 0x10]
mov edx, dword [eax + 4]
jmp 0x43d5eb
xor edx, edx
sub ebx, 0
je 0x43d6cf
sub ebx, 1
jne case.default.0x43d1c7
lea eax, [edx - 0x2711]
cmp eax, 4
ja case.default.0x43d608
jmp dword [eax*4 + 0x43dedc]
mov eax, dword [0x5637e9]
cmp eax, dword [0x563ca0]
sete bl
jmp 0x43ddf0
mov eax, dword [0x563759]
cmp eax, dword [0x563ca0]
sete bl
jmp 0x43ddf0
mov eax, dword [0x5636c9]
cmp eax, dword [0x563ca0]
sete bl
jmp 0x43ddf0
mov eax, dword [ebp - 0x160]
mov edx, dword [eax + 0x14]
test edx, edx
jle 0x43d66a
mov ecx, dword [0x5603c4]
call fcn.0045b6b0
test eax, eax
setne bl
jmp 0x43ddf0
mov ecx, dword [ebp - 0x154]
mov eax, dword [ecx]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
mov esi, dword [eax + 8]
dec ecx
nop dword [eax + eax]
mov eax, dword [esi + ecx*4]
mov edx, dword [eax + 0x14]
test edx, edx
jg case.default.0x43d608
sub ecx, 1
jns 0x43d680
mov eax, dword [0x5603c4]
mov ecx, dword [eax]
mov esi, dword [ecx + 4]
test esi, esi
jle 0x43d6c3
mov eax, dword [ecx + 8]
mov eax, dword [eax + esi*4 - 4]
cmp dword [eax + 4], 0
jl 0x43d6c3
xor eax, eax
test esi, esi
jle 0x43d6c3
mov ecx, dword [ecx + 8]
mov edx, dword [ecx]
cmp dword [edx + 4], 0
je 0x43d6c5
inc eax
add ecx, 4
cmp eax, esi
jl 0x43d6b3
xor edx, edx
test edx, edx
setne bl
jmp 0x43ddf0
cmp esi, 2
jbe 0x43d6dc
mov eax, dword [edi + 0x10]
mov esi, dword [eax + 8]
jmp 0x43d6de
xor esi, esi
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x154]
push eax
call fcn.00453d40
add esp, 4
movzx eax, byte [eax + 0x16]
cmp eax, esi
sete bl
jmp 0x43ddf0
cmp esi, 1
jbe 0x43d71b
mov eax, dword [edi + 0x10]
mov eax, dword [eax + 4]
inc eax
cmp dword [0x5605a3], eax
sete bl
jmp 0x43ddf0
xor eax, eax
inc eax
cmp dword [0x5605a3], eax
sete bl
jmp 0x43ddf0
mov bl, byte [edx + 0x30]
jmp 0x43ddf0
cmp byte [0x564435], 0
jne case.0x43d608.10001
cmp byte [0x556e8d], 0
jmp 0x43ddf2
mov eax, 0x88888889
imul dword [0x560633]
add edx, dword [0x560633]
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp esi, 1
jbe 0x43d78f
mov eax, dword [edi + 0x10]
mov edx, dword [eax + 4]
cmp esi, 2
jbe 0x43d791
mov esi, dword [eax + 8]
test esi, esi
mov eax, edx
cmove eax, ecx
cmove ecx, edx
cmp eax, ecx
setge bl
jmp 0x43ddf0
xor edx, edx
xor esi, esi
mov eax, edx
test esi, esi
cmove eax, ecx
cmove ecx, edx
cmp eax, ecx
setge bl
jmp 0x43ddf0
cmp esi, 1
jbe case.0x43d7bb.0
mov eax, dword [edi + 0x10]
mov eax, dword [eax + 4]
cmp eax, 3
ja case.default.0x43d1c7
jmp dword [eax*4 + 0x43def0]
mov bl, byte [0x556b21]
jmp 0x43ddf0
mov bl, byte [0x564688]
jmp 0x43ddf0
mov bl, byte [0x560200]
jmp 0x43ddf0
mov eax, dword [0x563dac]
mov dword [ebp - 0x15c], eax
test eax, eax
jne 0x43d88d
mov ebx, 0xa
xor esi, esi
mov dword [ebp - 0x154], ebx
lea ecx, [ebx + 0xc]
and ecx, 0xfffffffc
call fcn.004a2590
mov byte [eax + 8], 0
mov dword [eax + 4], ebx
lea ebx, [eax + 8]
mov dword [eax], 1
mov eax, dword [ebp - 0x154]
mov byte [ebx + eax], 0
mov eax, dword [ebp - 0x15c]
push esi
push eax
push ebx
call fcn.004fe1f0
add esp, 0xc
lea eax, [ebx + esi]
push 0xa
push str._Save.lsd
push eax
call fcn.004fe1f0
add esp, 0xc
lea eax, [ebp - 0x14c]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov esi, eax
mov byte [ebp - 0x155], 0
cmp esi, 0xffffffff
je 0x43d8b3
nop dword [eax + eax]
cmp dword [ebp - 0x14c], 0x20
je 0x43d8a5
lea eax, [ebp - 0x14c]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x43d870
jmp 0x43d8ac
mov esi, dword [eax - 4]
lea ebx, [esi + 0xa]
mov dword [ebp - 0x154], ebx
test ebx, ebx
jg 0x43d803
xor ebx, ebx
jmp 0x43d82e
mov byte [ebp - 0x155], 1
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
test ebx, ebx
je 0x43d8d2
mov eax, dword [ebx - 8]
add ebx, 0xfffffff8
cmp eax, 0xffffffff
je 0x43d8d2
dec eax
mov dword [ebx], eax
test eax, eax
jg 0x43d8d2
push ebx
call fcn.00501c9e
add esp, 4
mov bl, byte [ebp - 0x155]
jmp 0x43ddf0
cmp esi, 1
jbe case.0x43d8f1.0
mov eax, dword [edi + 0x10]
mov eax, dword [eax + 4]
cmp eax, 3
ja case.default.0x43d1c7
jmp dword [eax*4 + 0x43df00]
cmp dword [0x563c84], 0
sete bl
jmp 0x43ddf0
mov bl, byte [0x556b22]
jmp 0x43ddf0
call dword [sym.imp.WINMM.dll_timeGetTime]
sub eax, dword [0x564b94]
cmp eax, 0x3e8
ja case.0x43d608.10001
mov eax, dword [0x564b98]
inc eax
cmp eax, 3
jle case.0x43d608.10001
jmp case.default.0x43d1c7
cmp byte [0x563ede], 0
sete bl
jmp 0x43ddf0
cmp esi, 1
jbe 0x43ddd8
mov eax, dword [edi + 0x10]
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x43ddd8
mov eax, dword [0x5645d8]
mov edx, dword [0x5645d4]
sub eax, edx
sar eax, 2
cmp eax, ecx
jbe 0x43ddd8
mov ecx, dword [edx + ecx*4]
jmp 0x43d0f4
mov ecx, dword [0x5645d8]
mov edx, dword [0x5645d4]
cmp esi, 1
jbe 0x43d9b9
mov eax, dword [edi + 0x10]
mov ebx, dword [eax + 4]
test ebx, ebx
je 0x43d9b9
mov eax, ecx
sub eax, edx
sar eax, 2
cmp eax, ebx
jbe 0x43d9b9
mov ebx, dword [edx + ebx*4]
test ebx, ebx
je 0x43d9b9
cmp eax, ebx
jbe 0x43d9b9
mov ebx, dword [edx + ebx*4]
jmp 0x43d9bb
xor ebx, ebx
cmp esi, 2
jbe 0x43d1f6
mov eax, dword [edi + 0x10]
mov eax, dword [eax + 8]
sub eax, 0
je 0x43da1d
sub eax, 1
je 0x43d9fc
cmp esi, 3
jbe 0x43da19
mov eax, dword [edi + 0x10]
mov eax, dword [eax + 0xc]
test eax, eax
je 0x43da19
sub ecx, edx
sar ecx, 2
cmp ecx, eax
jbe 0x43da19
mov eax, dword [edx + eax*4]
test eax, eax
je 0x43da19
cmp ecx, eax
jbe 0x43da19
mov ecx, dword [edx + eax*4]
jmp 0x43da2c
cmp esi, 3
jbe 0x43da19
mov eax, dword [edi + 0x10]
mov eax, dword [eax + 0xc]
test eax, eax
je 0x43da19
sub ecx, edx
sar ecx, 2
cmp ecx, eax
jbe 0x43da19
mov ecx, dword [edx + eax*4]
jmp 0x43da2c
xor ecx, ecx
jmp 0x43da2c
cmp esi, 3
jbe 0x43d1f6
mov eax, dword [edi + 0x10]
mov ecx, dword [eax + 0xc]
cmp esi, 4
jbe case.0x43d1c7.0
mov eax, dword [edi + 0x10]
mov eax, dword [eax + 0x10]
cmp eax, 5
ja case.default.0x43d1c7
jmp dword [eax*4 + 0x43df10]
cmp ebx, ecx
setle bl
jmp 0x43ddf0
mov ecx, dword [0x5645e4]
mov ebx, dword [0x5645e0]
cmp esi, 1
jbe 0x43db2d
mov eax, dword [edi + 0x10]
mov edx, dword [eax + 4]
mov dword [ebp - 0x154], edx
test dl, 0xf
je 0x43daee
cmp esi, 2
jbe 0x43db2f
mov eax, dword [eax + 8]
mov dword [ebp - 0x150], eax
test eax, eax
je 0x43db2f
mov eax, dword [0x5645d8]
sub eax, dword [0x5645d4]
sar eax, 2
cmp eax, dword [ebp - 0x150]
jbe 0x43db2f
mov eax, dword [ebp - 0x150]
mov edx, dword [0x5645d4]
mov eax, dword [edx + eax*4]
mov edx, dword [ebp - 0x154]
mov dword [ebp - 0x150], eax
test eax, eax
je 0x43db2f
mov eax, ecx
sub eax, ebx
sar eax, 2
cmp eax, dword [ebp - 0x150]
jbe 0x43db2f
mov eax, dword [ebp - 0x150]
mov eax, dword [ebx + eax*4]
mov dword [ebp - 0x150], eax
jmp 0x43db39
cmp esi, 2
jbe 0x43db2f
mov eax, dword [eax + 8]
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x154]
mov edx, eax
je 0x43db2f
mov eax, ecx
sub eax, ebx
sar eax, 2
cmp eax, dword [ebp - 0x150]
jbe 0x43db2f
mov eax, dword [ebp - 0x150]
mov eax, dword [ebx + eax*4]
mov dword [ebp - 0x150], eax
jmp 0x43db39
xor edx, edx
mov dword [ebp - 0x150], 0
movzx eax, dl
shr eax, 4
sub eax, 0
je 0x43db97
sub eax, 1
je 0x43db86
cmp esi, 3
jbe 0x43db93
mov eax, dword [edi + 0x10]
mov eax, dword [eax + 0xc]
test eax, eax
je 0x43db93
mov edx, dword [0x5645d8]
sub edx, dword [0x5645d4]
sar edx, 2
cmp edx, eax
jbe 0x43db93
mov edx, dword [0x5645d4]
mov eax, dword [edx + eax*4]
test eax, eax
je 0x43db93
sub ecx, ebx
sar ecx, 2
cmp ecx, eax
jbe 0x43db93
mov ebx, dword [ebx + eax*4]
jmp 0x43db9a
cmp esi, 3
jbe 0x43db93
mov eax, dword [edi + 0x10]
mov eax, dword [eax + 0xc]
jmp 0x43db74
xor ebx, ebx
jmp 0x43db9a
mov ebx, dword [edi + 8]
cmp esi, 4
jbe 0x43dba7
mov eax, dword [edi + 0x10]
mov ecx, dword [eax + 0x10]
jmp 0x43dba9
xor ecx, ecx
mov eax, ecx
mov dword [ebp - 0x15c], ecx
shr eax, 8
test al, al
je 0x43dd03
mov ecx, dword [ebp - 0x150]
call fcn.00497c80
mov ecx, ebx
mov dword [ebp - 0x150], eax
call fcn.00497c80
mov ebx, dword [ebp - 0x150]
mov esi, eax
mov dword [ebp - 0x154], esi
test ebx, ebx
je 0x43dc0b
mov esi, dword [ebx - 4]
mov edx, ebx
test esi, esi
je 0x43dc05
nop
mov cl, byte [edx]
dec esi
mov al, cl
sub al, 0x41
cmp al, 0x19
ja 0x43dc00
add cl, 0x20
mov byte [edx], cl
inc edx
test esi, esi
jne 0x43dbf0
mov esi, dword [ebp - 0x154]
test esi, esi
je 0x43dc3b
mov esi, dword [esi - 4]
mov edx, dword [ebp - 0x154]
test esi, esi
je 0x43dc35
nop dword [eax]
mov cl, byte [edx]
dec esi
mov al, cl
sub al, 0x41
cmp al, 0x19
ja 0x43dc30
add cl, 0x20
mov byte [edx], cl
inc edx
test esi, esi
jne 0x43dc20
mov esi, dword [ebp - 0x154]
mov edx, esi
mov ecx, ebx
call fcn.00496580
mov bl, al
mov eax, dword [ebp - 0x15c]
movzx eax, al
cmp eax, 3
ja case.default.0x43dc54
jmp dword [eax*4 + 0x43df28]
mov ecx, dword [ebp - 0x150]
mov edx, esi
call fcn.00496580
mov bl, al
jmp case.default.0x43dc54
mov ecx, dword [ebp - 0x150]
mov edx, esi
call fcn.00496580
test al, al
jmp 0x43dcac
mov ecx, dword [ebp - 0x150]
mov edx, esi
push 0
call fcn.00497630
add esp, 4
cmp eax, 0xffffffff
setne bl
jmp case.default.0x43dc54
mov ecx, dword [ebp - 0x150]
mov edx, esi
push 0
call fcn.00497630
add esp, 4
cmp eax, 0xffffffff
sete bl
mov eax, dword [ebp - 0x150]
test eax, eax
je 0x43dcd3
lea ecx, [eax - 8]
mov eax, dword [ecx]
cmp eax, 0xffffffff
je 0x43dcd3
dec eax
mov dword [ecx], eax
test eax, eax
jg 0x43dcd3
push ecx
call fcn.00501c9e
add esp, 4
test esi, esi
je 0x43ddf0
mov eax, dword [esi - 8]
add esi, 0xfffffff8
cmp eax, 0xffffffff
je 0x43ddf0
dec eax
mov dword [esi], eax
test eax, eax
jg 0x43ddf0
push esi
call fcn.00501c9e
add esp, 4
jmp 0x43ddf0
movzx eax, cl
cmp eax, 3
ja case.default.0x43d1c7
jmp dword [eax*4 + 0x43df38]
mov ecx, dword [ebp - 0x150]
mov edx, ebx
call fcn.00496580
mov bl, al
jmp 0x43ddf0
mov ecx, dword [ebp - 0x150]
mov edx, ebx
call fcn.00496580
test al, al
sete bl
jmp 0x43ddf0
mov ecx, dword [ebp - 0x150]
mov edx, ebx
push 0
call fcn.00497630
add esp, 4
cmp eax, 0xffffffff
setne bl
jmp 0x43ddf0
mov ecx, dword [ebp - 0x150]
mov edx, ebx
push 0
call fcn.00497630
add esp, 4
cmp eax, 0xffffffff
sete bl
jmp 0x43ddf0
mov eax, dword [edi + 0x10]
mov dword [ebp - 0x170], eax
lea eax, [esi*4 + 0x18]
mov dword [ebp - 0x178], ecx
mov dword [ebp - 0x174], edx
mov dword [ebp - 0x16c], 0x18
movups xmm0, xmmword [ebp - 0x178]
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x164], 0
movups xmmword [0x5570ec], xmm0
movq xmm0, qword [ebp - 0x168]
movq qword [0x5570fc], xmm0
call fcn.00444a50
test eax, eax
setne bl
jmp 0x43ddf0
xor cl, cl
cmp esi, 2
jbe 0x43dde7
mov eax, dword [edi + 0x10]
mov eax, dword [eax + 8]
jmp 0x43dde9
xor eax, eax
test eax, eax
setne bl
xor bl, cl
test bl, bl
jne case.0x43d608.10001
mov ebx, dword [ebp - 0x160]
mov esi, dword [edi + 4]
mov eax, dword [ebx + 0xc]
mov ecx, dword [ebx + 0x10]
mov eax, dword [eax]
mov edx, dword [eax + 4]
mov edi, dword [eax + 8]
cmp ecx, edx
jae case.0x43d608.10001
nop
mov eax, dword [edi + ecx*4]
cmp esi, dword [eax + 4]
je 0x43de2e
inc ecx
cmp ecx, edx
jb 0x43de10
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.004e66f2
mov esp, ebp
pop ebp
ret
mov eax, dword [eax]
cmp eax, 0x55fa
je 0x43de3e
cmp eax, 0x55fb
jne 0x43de43
inc ecx
cmp ecx, edx
je 0x43de57
mov dword [ebx + 0x10], ecx
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004e66f2
mov esp, ebp
pop ebp
ret
mov ecx, str.cmd_else_404
call fcn.00469b60
nop dword [eax]
in eax, 0xd0
inc ebx
add byte [ecx], bl
rol dword [ebx], 1
add dl, dl
inc ebx
add byte [edx + edx*8 + 0x43], bl
add byte [edx + edx*8 + 0x43], ah
add byte [ecx - 0x2d], dl
inc ebx
add byte [esi - 0x2b], dl
inc ebx
add byte [ecx], al
xlatb
inc ebx
add byte [edi + edx*8], ch
inc ebx
add byte [edi + edx*8], dh
inc ebx
add byte [ebp - 0x29], cl
inc ebx
add byte [edi - 0x22ffbc29], ah
fadd dword [ebx]
dec esp
fld dword [ebx]
sbb ecx, 0x43
add byte [ebp - 38], dl
inc ebx
add byte [eax - 0x23], bh
inc ebx
add al, bh
rol dword [ebx], 1
into
rol dword [ebx], 1
dec ebx
fiadd dword [ebx]
fcom st(1)
inc ebx
add dl, ah
rol dword [ebx], 1
in al, dx
rol dword [ebx], 1
and edx, ebp
inc ebx
add cl, dh
rol dword [ebx], cl
push ds
aam 67
add byte [edi - 0x2c], al
inc ebx
add byte [edx - 0x2c], ch
inc ebx
add byte [ebx - 0xbffbc2c], bh
aam 0x43
add byte [esi - 0x22], al
inc ebx
add byte [edi], cl
salc
inc ebx
add byte [edx], ah
salc
inc ebx
add byte [0x480043d6], dh
salc
inc ebx
add bl, ah
xlatb
inc ebx
add dl, al
xlatb
inc ebx
add ch, cl
xlatb
inc ebx
add al, bl
xlatb
inc ebx
add byte [0xf80043d9], bh
fadd dword [ebx]
pop es
fld dword [ebx]
adc bl, cl
inc ebx
add al, bh
rol dword [ebx], 1
into
rol dword [ebx], 1
dec ebx
fiadd dword [ebx]
fcom st(1)
inc ebx
add dl, ah
rol dword [ebx], 1
in al, dx
rol dword [ebx], 1
pop ebx
fadd qword [ebx]
insb byte es:[edi], dx
fadd qword [ebx]
jge 0x43df0e
inc ebx
add byte [edi + 0x160043dc], dl
fld qword [ebx]
sub bl, ch
inc ebx
add byte [ecx - 0x23], al
inc ebx
add byte [esi - 0x23], bl
inc ebx
add ah, cl
int3