Function at 0x43aed0
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
lea esp, [esp - 0x194]
push ebx
push esi
push edi
mov dword [ebp - 0x144], 0
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x14c], 0
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x160], 0
xor eax, eax
push fcn.0043ae60
push ebp
push 0x414810
push dword fs:[eax]
mov dword fs:[eax], esp
mov ecx, dword [0x56bf90]
mov edx, 1
mov eax, 0x597b20
call fcn.00429540
mov dword [ebp - 0x178], eax
mov ebx, 0x597b98
lea eax, [ebp - 0x160]
mov edx, 0x597b98
call fcn.0040cd30
mov dword [ebp - 0x164], 4
lea eax, [ebp - 0x164]
push eax
mov edx, 0x597b98
mov ecx, 1
lea eax, [ebp - 0x160]
call fcn.0040ce50
lea eax, [ebp - 0x168]
push eax
mov eax, dword [0x569890]
call fcn.0040cd20
mov ecx, eax
mov edx, dword [0x569890]
mov eax, 0x58ed90
call fcn.004237d0
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 0x160]
call fcn.00408bd0
lea eax, [ebp - 0x168]
push eax
mov eax, dword [0x5698a0]
call fcn.0040cd20
mov ecx, eax
mov edx, dword [0x5698a0]
mov eax, 0x58ed90
call fcn.004237d0
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 0x160]
add eax, 4
call fcn.00408bd0
lea eax, [ebp - 0x168]
push eax
mov eax, dword [0x5698b0]
call fcn.0040cd20
mov ecx, eax
mov edx, dword [0x5698b0]
mov eax, 0x58ed90
call fcn.004237d0
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 0x160]
add eax, 8
call fcn.00408bd0
lea eax, [ebp - 0x168]
push eax
mov eax, dword [0x5698c0]
call fcn.0040cd20
mov ecx, eax
mov edx, dword [0x5698c0]
mov eax, 0x58ed90
call fcn.004237d0
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 0x160]
add eax, 0xc
call fcn.00408bd0
mov edx, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x178]
lea eax, [ecx + 8]
mov ecx, ebx
call fcn.0040ce30
mov ecx, dword [0x56c050]
mov edx, 1
mov eax, 0x597b20
call fcn.00429540
mov dword [ebp - 0x17c], eax
mov ebx, 0x597b98
lea eax, [ebp - 0x160]
mov edx, 0x597b98
call fcn.0040cd30
mov dword [ebp - 0x164], 3
lea eax, [ebp - 0x164]
push eax
mov edx, 0x597b98
mov ecx, 1
lea eax, [ebp - 0x160]
call fcn.0040ce50
lea eax, [ebp - 0x168]
push eax
mov eax, dword [0x5698d0]
call fcn.0040cd20
mov ecx, eax
mov edx, dword [0x5698d0]
mov eax, 0x58ed90
call fcn.004237d0
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 0x160]
call fcn.00408bd0
lea eax, [ebp - 0x168]
push eax
mov eax, dword [0x5698e0]
call fcn.0040cd20
mov ecx, eax
mov edx, dword [0x5698e0]
mov eax, 0x58ed90
call fcn.004237d0
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 0x160]
add eax, 4
call fcn.00408bd0
lea eax, [ebp - 0x168]
push eax
mov eax, dword [0x5698f0]
call fcn.0040cd20
mov ecx, eax
mov edx, dword [0x5698f0]
mov eax, 0x58ed90
call fcn.004237d0
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 0x160]
add eax, 8
call fcn.00408bd0
mov edx, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x17c]
lea eax, [ecx + 8]
mov ecx, ebx
call fcn.0040ce30
mov ecx, dword [0x56c070]
mov edx, 1
mov eax, 0x597b20
call fcn.00429540
mov dword [ebp - 0x180], eax
mov ebx, 0x597b98
lea eax, [ebp - 0x160]
mov edx, 0x597b98
call fcn.0040cd30
mov dword [ebp - 0x164], 2
lea eax, [ebp - 0x164]
push eax
mov edx, 0x597b98
mov ecx, 1
lea eax, [ebp - 0x160]
call fcn.0040ce50
lea eax, [ebp - 0x168]
push eax
mov eax, dword [0x569900]
call fcn.0040cd20
mov ecx, eax
mov edx, dword [0x569900]
mov eax, 0x58ed90
call fcn.004237d0
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 0x160]
call fcn.00408bd0
lea eax, [ebp - 0x168]
push eax
mov eax, dword [0x569910]
call fcn.0040cd20
mov ecx, eax
mov edx, dword [0x569910]
mov eax, 0x58ed90
call fcn.004237d0
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 0x160]
add eax, 4
call fcn.00408bd0
mov edx, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x180]
lea eax, [ecx + 8]
mov ecx, ebx
call fcn.0040ce30
mov ecx, dword [0x56c080]
mov edx, 1
mov eax, 0x597b20
call fcn.00429540
mov edi, eax
mov ebx, 0x597b98
lea eax, [ebp - 0x160]
mov edx, 0x597b98
call fcn.0040cd30
mov dword [ebp - 0x164], 4
lea eax, [ebp - 0x164]
push eax
mov edx, 0x597b98
mov ecx, 1
lea eax, [ebp - 0x160]
call fcn.0040ce50
lea eax, [ebp - 0x168]
push eax
mov eax, dword [0x569920]
call fcn.0040cd20
mov ecx, eax
mov edx, dword [0x569920]
mov eax, 0x58ed90
call fcn.004237d0
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 0x160]
call fcn.00408bd0
lea eax, [ebp - 0x168]
push eax
mov eax, dword [0x569930]
call fcn.0040cd20
mov ecx, eax
mov edx, dword [0x569930]
mov eax, 0x58ed90
call fcn.004237d0
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 0x160]
add eax, 4
call fcn.00408bd0
lea eax, [ebp - 0x168]
push eax
mov eax, dword [0x569940]
call fcn.0040cd20
mov ecx, eax
mov edx, dword [0x569940]
mov eax, 0x58ed90
call fcn.004237d0
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 0x160]
add eax, 8
call fcn.00408bd0
lea eax, [ebp - 0x168]
push eax
mov eax, dword [0x569950]
call fcn.0040cd20
mov ecx, eax
mov edx, dword [0x569950]
mov eax, 0x58ed90
call fcn.004237d0
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 0x160]
add eax, 0xc
call fcn.00408bd0
mov edx, dword [ebp - 0x160]
lea eax, [edi + 8]
mov ecx, ebx
call fcn.0040ce30
mov ecx, 0x1000000
mov edx, 1
mov eax, 0x597b20
call fcn.00429540
mov esi, eax
mov ebx, 0x597b98
lea eax, [ebp - 0x160]
mov edx, 0x597b98
call fcn.0040cd30
mov dword [ebp - 0x164], 1
lea eax, [ebp - 0x164]
push eax
mov edx, 0x597b98
mov ecx, 1
lea eax, [ebp - 0x160]
call fcn.0040ce50
lea eax, [ebp - 0x168]
push eax
mov eax, dword [0x569960]
call fcn.0040cd20
mov ecx, eax
mov edx, dword [0x569960]
mov eax, 0x58ed90
call fcn.004237d0
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 0x160]
call fcn.00408bd0
mov edx, dword [ebp - 0x160]
lea eax, [esi + 8]
mov ecx, ebx
call fcn.0040ce30
mov byte [ebp - 0x184], 1
mov ebx, 0x599138
lea eax, [ebp - 0x16c]
mov edx, 0x599138
call fcn.0040cd30
mov dword [ebp - 0x164], 5
lea eax, [ebp - 0x164]
push eax
mov edx, 0x599138
mov ecx, 1
lea eax, [ebp - 0x16c]
call fcn.0040ce50
mov eax, dword [ebp - 0x16c]
mov edx, dword [ebp - 0x178]
mov dword [eax], edx
mov eax, dword [ebp - 0x16c]
mov edx, dword [ebp - 0x17c]
mov dword [eax + 4], edx
mov edx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x180]
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x16c]
mov dword [eax + 0xc], edi
mov eax, dword [ebp - 0x16c]
mov dword [eax + 0x10], esi
mov edx, dword [ebp - 0x16c]
lea eax, [ebp - 0x14c]
mov ecx, ebx
call fcn.0040ce30
lea eax, [ebp - 0x144]
push eax
mov eax, dword [0x568900]
call fcn.0040cd20
mov ecx, eax
mov edx, dword [0x568900]
mov eax, 0x58ed90
call fcn.004237d0
lea eax, [ebp - 0x140]
push eax
mov eax, dword [ebp - 0x144]
test eax, eax
jne 0x43b506
mov eax, 0x5e92f0
push eax
call sub.kernel32.dll_FindFirstFileA
mov dword [ebp - 0x190], eax
cmp eax, 0xffffffff
je 0x43b68c
mov byte [ebp - 0x18c], 1
jmp 0x43b67d
push 1
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x114]
xor cx, cx
mov edx, 0x103
call fcn.004095c0
mov eax, dword [ebp - 0x14c]
test eax, eax
je 0x43b554
mov eax, dword [eax - 4]
add eax, 1
sub eax, 1
mov esi, eax
mov dword [ebp - 0x194], 0xffffffff
lea esi, [esi]
nop
add dword [ebp - 0x194], 1
mov eax, dword [ebp - 0x14c]
mov edx, dword [ebp - 0x194]
mov eax, dword [eax + edx*4]
mov eax, dword [eax + 8]
test eax, eax
je 0x43b58b
mov eax, dword [eax - 4]
add eax, 1
sub eax, 1
mov ebx, eax
mov edi, 0xffffffff
lea esi, [esi]
add edi, 1
lea eax, [ebp - 0x170]
call fcn.00403d10
push 0
lea eax, [ebp - 0x174]
push eax
mov eax, dword [0x5685c0]
call fcn.0040cd20
mov ecx, eax
mov edx, dword [0x5685c0]
mov eax, 0x58ed90
call fcn.004237d0
mov edx, dword [ebp - 0x174]
mov ecx, dword [ebp - 0x148]
lea eax, [ebp - 0x170]
call fcn.00408cd0
mov eax, dword [ebp - 0x170]
lea edx, [ebp - 0x168]
call fcn.00459eb0
mov edx, dword [ebp - 0x168]
lea ecx, [ebp - 0x15c]
mov eax, 0x5978a8
call fcn.00427bf0
lea edx, [ebp - 0x15c]
lea ecx, [ebp - 0x174]
mov eax, 0x5978a8
call fcn.00427b70
mov edx, dword [ebp - 0x174]
mov eax, dword [ebp - 0x14c]
mov ecx, dword [ebp - 0x194]
mov eax, dword [eax + ecx*4]
mov eax, dword [eax + 8]
mov eax, dword [eax + edi*4]
call fcn.00409790
test eax, eax
jne 0x43b64c
mov byte [ebp - 0x188], 0
jmp 0x43b6a3
cmp ebx, edi
ja 0x43b598
cmp esi, dword [ebp - 0x194]
ja 0x43b568
lea eax, [ebp - 0x140]
push eax
push dword [ebp - 0x190]
call sub.kernel32.dll_FindNextFileA
or eax, eax
setne al
mov byte [ebp - 0x18c], al
mov al, byte [ebp - 0x18c]
test al, al
jne 0x43b528
nop
push dword [ebp - 0x190]
call sub.kernel32.dll_FindClose
mov al, byte [ebp - 0x184]
mov byte [ebp - 0x188], al
xor eax, eax
pop edx
add esp, 0xc
mov dword fs:[eax], edx
mov eax, ebp
call fcn.0043ae60
mov al, byte [ebp - 0x188]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret