Function at 0x480810
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4bd5aa
mov eax, dword fs:[0]
push eax
sub esp, 0x7f8
mov eax, dword [0x587614]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x7b4], ebx
mov dword [ebp - 0x7ac], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x104
push 0x58cfe8
push 0
mov dword [ebp - 0x7c8], eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0x5c
push 0x58cfe8
call sub.VCRUNTIME140.dll_wcsrchr
add esp, 8
test eax, eax
je 0x480886
add eax, 2
jmp 0x48088b
mov eax, 0x58cfe8
xor ecx, ecx
push ecx
mov word [eax], cx
call fcn.00451940
mov edi, dword [sym.imp.USER32.dll_PostQuitMessage]
test eax, eax
jns 0x4808a4
push 0
call edi
push ecx
push esp
call int.00451e80
lea eax, [ebp - 0x7b8]
push eax
call fcn.00451d00
add esp, 8
push 0
push str.PartnerRIPClassZ64
mov dword [ebp - 4], 0
call dword [sym.imp.USER32.dll_FindWindowW]
push eax
call sub.mfc140u.dll_CWnd::FromHandle
mov esi, eax
test esi, esi
je 0x480908
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_IsIconic]
mov ecx, esi
test eax, eax
je 0x4808ed
push 9
jmp 0x4808ef
push 5
call sub.mfc140u.dll_CWnd::ShowWindow
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
push 0
call edi
xor esi, esi
jmp 0x48156b
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
mov ecx, ebx
call sub.mfc140u.dll_CWinApp::InitInstance
call sub.mfc140u.dll_AfxOleInit
test eax, eax
jne 0x48092f
push 0xffffffffffffffff
push eax
push 0x64
call sub.mfc140u.dll_AfxMessageBox
xor esi, esi
jmp 0x48156b
mov eax, dword [0x4f9f1c]
movq xmm0, qword [str.HmpsdllZ.dll]
mov dword [ebp - 0x68c], eax
mov al, byte [0x4f9f20]
push 0x58cfe8
movq qword [ebp - 0x694], xmm0
mov byte [ebp - 0x688], al
call fcn.0048cad0
push eax
lea eax, [ebp - 0x798]
push 0x4c3c40
push eax
call fcn.00421150
push 0x58cfe8
call fcn.0048cad0
push eax
lea eax, [ebp - 0x590]
push 0x4c3c40
push eax
call fcn.00421150
add esp, 0x20
lea eax, [ebp - 0x798]
push eax
push 0x47f700
call fcn.00420de0
push 0
call sub.mfc140u.dll_AfxEnableControlContainer
add esp, 4
mov ecx, ebx
push str.Human_Plus
call sub.mfc140u.dll_CWinApp::SetRegistryKey
push 1
mov dword [ebx + 0x4c], 0
call fcn.004775c0
add esp, 4
mov ecx, 0x58d238
push 2
push 0x4f9f8c
push 0x4c21a8
call sub.mfc140u.dll_CWinApp::GetProfileIntW
push 0xffffffffffffffff
push str.nLanguage
mov dword [0x582198], eax
mov ecx, 0x58d238
push 0x4c21a8
mov dword [ebx + 0xd0], 1
call sub.mfc140u.dll_CWinApp::GetProfileIntW
mov ecx, ebx
mov dword [0x5821c0], 0
call fcn.004829f0
push 0
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov edi, dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64_s]
mov dword [ebp - 0x7c4], eax
lea eax, [ebp - 0x7c4]
push eax
lea eax, [ebp - 0x444]
mov dword [ebp - 0x7c0], edx
push eax
call edi
xor ecx, ecx
test eax, eax
lea eax, [ebp - 0x7c4]
cmove ecx, dword [ebp - 0x438]
push eax
lea eax, [ebp - 0x468]
mov dword [ebp - 0x7ac], ecx
push eax
call edi
add esp, 0x14
test eax, eax
jne 0x480a6f
mov esi, dword [ebp - 0x458]
inc esi
jmp 0x480a71
xor esi, esi
lea eax, [ebp - 0x7c4]
push eax
lea eax, [ebp - 0x48c]
push eax
call edi
add esp, 8
test eax, eax
jne 0x480a95
mov eax, dword [ebp - 0x478]
add eax, 0x76c
jmp 0x480a97
xor eax, eax
push dword [ebp - 0x7ac]
push esi
push eax
call fcn.0047f5a0
push 0x58cfe8
mov dword [ebp - 0x7a0], eax
lea eax, [ebp - 0x420]
push str._sBackup.pjr
push eax
call fcn.00427d70
add esp, 0x18
lea eax, [ebp - 0x6dc]
push eax
lea eax, [ebp - 0x420]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov edi, dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__18]
mov dword [ebp - 0x7a8], eax
cmp eax, 0xffffffff
je 0x480bee
mov esi, dword [sym.imp.USER32.dll_wsprintfW]
mov ebx, eax
nop dword [eax]
nop dword [eax + eax]
test byte [ebp - 0x6dc], 0x10
lea eax, [ebp - 0x6b0]
push eax
lea eax, [ebp - 0x218]
je 0x480b1d
push str.___s__
jmp 0x480b22
push 0x4dcd98
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x7ac]
push eax
lea eax, [ebp - 0x7b0]
push eax
lea eax, [ebp - 0x7a4]
push eax
lea eax, [ebp - 0x6b0]
push str.Jobs__d__d__d
push eax
call fcn.00408820
add esp, 0x14
cmp eax, 3
jne 0x480bc6
push dword [ebp - 0x7ac]
push dword [ebp - 0x7b0]
push dword [ebp - 0x7a4]
call fcn.0047f5a0
mov ecx, dword [ebp - 0x7a0]
add esp, 0xc
sub ecx, eax
cmp ecx, 3
jle 0x480bc6
lea ecx, [ebp - 0x79c]
call dword [sym.imp.mfc140u.dll_Ordinal_296]
lea eax, [ebp - 0x6b0]
mov byte [ebp - 4], 1
push eax
push 0x58cfe8
lea eax, [ebp - 0x79c]
push str._sBackup_s
push eax
call edi
push dword [ebp - 0x79c]
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wunlink]
add esp, 0x14
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x79c]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x6dc]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x480b00
push dword [ebp - 0x7a8]
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ebx, dword [ebp - 0x7b4]
push 0x8a0
call sub.mfc140u.dll_operator_2
add esp, 4
mov dword [ebp - 0x7a0], eax
mov byte [ebp - 4], 2
test eax, eax
je 0x480c12
mov ecx, eax
call fcn.0042e4e0
jmp 0x480c14
xor eax, eax
lea ecx, [ebp - 0x79c]
mov dword [0x58cfdc], eax
call dword [sym.imp.mfc140u.dll_Ordinal_296]
push 0x58cfe8
lea eax, [ebp - 0x79c]
mov byte [ebp - 4], 3
push str._sJobDefault.pjr
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x434]
call sub.mfc140u.dll_CFile::CFile
push 0
push 0x8000
push dword [ebp - 0x79c]
lea ecx, [ebp - 0x434]
mov byte [ebp - 4], 4
call sub.mfc140u.dll_CFile::Open
lea ecx, [ebp - 0x434]
test eax, eax
je 0x480cb5
push 4
lea eax, [ebp - 0x7a0]
push eax
call sub.mfc140u.dll_CFile::Read
push 4
lea eax, [ebp - 0x7a4]
push eax
lea ecx, [ebp - 0x434]
call sub.mfc140u.dll_CFile::Read
mov ecx, dword [0x58cfdc]
lea eax, [ebp - 0x434]
push eax
call fcn.0042ffb0
lea ecx, [ebp - 0x434]
call sub.mfc140u.dll_CFile::Close
lea ecx, [ebp - 0x434]
call fcn.004b4f4e
lea ecx, [ebp - 0x79c]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
mov eax, dword [0x58cfdc]
lea ecx, [ebp - 0x79c]
mov dword [0x58cfd8], eax
call dword [sym.imp.mfc140u.dll_Ordinal_296]
push 0x58cfe8
lea eax, [ebp - 0x79c]
mov byte [ebp - 4], 5
push str._sJobs.pjr
push eax
call edi
add esp, 0xc
lea ecx, [ebp - 0x434]
call sub.mfc140u.dll_CFile::CFile
push 0
push 0x8000
push dword [ebp - 0x79c]
lea ecx, [ebp - 0x434]
mov byte [ebp - 4], 6
call sub.mfc140u.dll_CFile::Open
lea ecx, [ebp - 0x434]
test eax, eax
je 0x480e15
push 4
lea eax, [ebp - 0x7a0]
push eax
call sub.mfc140u.dll_CFile::Read
push 4
lea eax, [ebp - 0x7ac]
push eax
lea ecx, [ebp - 0x434]
call sub.mfc140u.dll_CFile::Read
cmp dword [ebp - 0x7ac], 0
mov dword [ebp - 0x7a8], 0
jle 0x480e04
push 0x8a0
call sub.mfc140u.dll_operator_2
add esp, 4
mov dword [ebp - 0x7a4], eax
mov byte [ebp - 4], 7
test eax, eax
je 0x480d8a
mov ecx, eax
call fcn.0042e4e0
mov edi, eax
jmp 0x480d8c
xor edi, edi
lea eax, [ebp - 0x434]
mov byte [ebp - 4], 6
push eax
mov ecx, edi
call fcn.0042ffb0
push 0
push dword [edi + 0x10]
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__waccess]
push 0
push dword [edi + 0xc]
mov esi, eax
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__waccess]
add esp, 0x10
cmp esi, 0xffffffff
je 0x480dd1
cmp eax, 0xffffffff
je 0x480de2
push edi
lea ecx, [ebx + 0xd4]
call sub.mfc140u.dll_Ordinal_2006
jmp 0x480deb
cmp eax, 0xffffffff
je 0x480de2
push dword [edi + 0x10]
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wunlink]
add esp, 4
mov eax, dword [edi]
mov ecx, edi
push 1
call dword [eax + 4]
mov esi, dword [ebp - 0x7a8]
inc esi
mov dword [ebp - 0x7a8], esi
cmp esi, dword [ebp - 0x7ac]
jl 0x480d64
lea ecx, [ebp - 0x434]
call sub.mfc140u.dll_CFile::Close
lea ecx, [ebp - 0x434]
call fcn.004b4f4e
lea ecx, [ebp - 0x79c]
mov byte [ebp - 4], 0
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
push 0
lea eax, [ebp - 0x7d8]
mov dword [0x58cfd4], 0xffffffff
push eax
lea eax, [ebx + 0xcc]
mov dword [ebp - 0x7d8], 1
push eax
mov dword [ebp - 0x7d4], 0
mov dword [ebp - 0x7d0], 0
mov dword [ebp - 0x7cc], 0
call sub.gdiplus.dll_GdiplusStartup
test eax, eax
je 0x480e8a
push 0
push 0
push str.GDI___.
call sub.mfc140u.dll_AfxMessageBox_1
xor esi, esi
jmp 0x48156b
push 0xc7a876
push ecx
mov ecx, esp
push str.g___8
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
lea eax, [ebp - 0x7a4]
push eax
call fcn.00451d00
add esp, 8
push dword [eax]
mov byte [ebp - 4], 8
push ecx
mov ecx, esp
push str.Z8A_6E8
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
lea eax, [ebp - 0x7a0]
push eax
call fcn.00451d00
add esp, 8
push dword [eax]
mov ecx, 0x58d238
mov byte [ebp - 4], 9
call sub.mfc140u.dll_CWinApp::WriteProfileInt
lea ecx, [ebp - 0x7a0]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x7a4]
mov byte [ebp - 4], 0
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
push 1
push ecx
mov ecx, esp
push 0x4f9ff4
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
lea eax, [ebp - 0x7a4]
push eax
call fcn.00451d00
add esp, 8
push dword [eax]
mov byte [ebp - 4], 0xa
push ecx
mov ecx, esp
push str.Z8A_6E8
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__19]
lea eax, [ebp - 0x7a0]
push eax
call fcn.00451d00
add esp, 8
les ecx, [eax]
push dword [eax]
mov ecx, 0x58d238
mov byte [ebp - 4], 0xb
call sub.mfc140u.dll_CWinApp::WriteProfileInt
lea ecx, [ebp - 0x7a0]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x7a4]
mov byte [ebp - 4], 0
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
push 0x104
lea eax, [ebp - 0x218]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
call fcn.005e30b4
ja 0x480fd3
movsd dword es:[edi], dword [esi]
mov eax, dword [0xa13d4189]
jg 0x480f3b
ret
clc
invalid
lea ecx, [ebp - 0x7b8]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004b61c2
mov esp, ebp
pop ebp
ret