Function at 0x439e40
Capabilities:
Enumerate files on windows

Disassembly:
mov dword [0x56a8a4], 0x56c100
sub esp, 0x154
mov dword [0x56a8a8], 0x56c0f0
push ebx
push esi
push edi
xor esi, esi
mov eax, dword [esp + 0x168]
push ebp
mov ecx, dword [esp + 0x168]
push eax
push ecx
mov dword [0x56a8ac], esi
mov dword [0x56a8c0], esi
call fcn.0043a3c0
add esp, 8
test eax, eax
jne 0x43a2d3
mov eax, 1
mov dword [0x57119c], eax
mov dword [0x56c168], eax
call fcn.0043ad00
test eax, eax
jne 0x43a2d3
xor ebx, ebx
call fcn.0043ac70
push 0x54ae20
mov eax, dword [0x56a8a4]
push eax
mov ebp, dword [sym.imp.MSVCR80.dll_strpbrk]
call ebp
add esp, 8
test eax, eax
jne 0x439ecf
mov dword [esp + 0x10], ebx
jmp 0x439edc
mov dword [esp + 0x10], 1
call fcn.0043a2e0
cmp dword [0x56a8b0], 0
jne 0x439f95
xor ecx, ecx
mov eax, dword [0x56a8a8]
mov al, byte [eax + ecx]
cmp al, 0x20
je 0x439f07
cmp al, 0x2a
je 0x439f07
mov byte [ecx + 0x56b3c0], al
inc ecx
cmp ecx, 8
jl 0x439eeb
mov byte [ecx + 0x56b3c0], 0
cmp ecx, 8
jge 0x439f2a
mov eax, dword [0x56a8a8]
cmp byte [eax + ecx], 0x2a
jne 0x439f2a
mov dword [0x56c16c], 1
jmp 0x439f34
mov dword [0x56c16c], 0
xor eax, eax
mov edx, 8
mov ecx, dword [0x56a8a8]
mov cl, byte [ecx + edx]
cmp cl, 0x20
je 0x439f5b
cmp cl, 0x2a
je 0x439f5b
mov byte [eax + 0x56b3b4], cl
inc edx
inc eax
cmp eax, 3
jl 0x439f3b
mov byte [eax + 0x56b3b4], 0
cmp eax, 3
jge 0x439f7e
mov eax, dword [0x56a8a8]
cmp byte [eax + edx], 0x2a
jne 0x439f7e
mov dword [0x5711dc], 1
jmp 0x439f88
mov dword [0x5711dc], 0
cmp dword [0x56a8b0], 0
je 0x43a162
mov eax, dword [0x5711a4]
push eax
call fcn.0043b4d0
add esp, 4
test eax, eax
jne 0x43a2d3
call fcn.0043ae10
lea eax, [esp + 0x24]
mov ecx, dword [0x56a8a4]
push eax
mov ebp, dword [sym.imp.KERNEL32.dll_FindFirstFileA]
push ecx
call ebp
cmp eax, 0xffffffff
mov ebp, eax
je 0x439fd2
test byte [esp + 0x24], 0xa0
jne 0x439fd7
mov byte [esp + 0x50], 0
cmp dword [0x56a8b8], 0
je 0x43a110
cmp dword [esp + 0x10], 0
je 0x43a06a
cmp dword [0x57119c], 0
jne 0x43a007
lea eax, [esp + 0x50]
push eax
push str.__s_n
call dword [sym.imp.MSVCR80.dll_printf]
add esp, 8
mov eax, dword [0x56a8a8]
lea ecx, [esp + 0x50]
push eax
push ecx
call fcn.0043aa50
add esp, 8
mov esi, eax
test esi, esi
jne 0x43a126
mov eax, dword [0x56a8a4]
cmp byte [eax + 1], 0x3a
je 0x43a05d
cmp byte [eax], 0x2f
je 0x43a05d
lea edi, [esp + 0x50]
mov ecx, 0xffffffff
sub eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
shr ecx, 2
mov esi, edi
mov edi, dword [0x56a8a4]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x43a06a
lea eax, [esp + 0x50]
push eax
call fcn.0043a310
add esp, 4
mov eax, dword [0x56a8a8]
push eax
call dword [esp + 0x174]
add esp, 4
call fcn.0043ba50
test eax, eax
je 0x43a0b0
mov eax, dword [0x56a8a4]
push eax
call fcn.0043bdc0
add esp, 4
mov esi, eax
test esi, esi
jne 0x43a13a
call fcn.0043b130
mov esi, eax
test esi, esi
jne 0x43a14e
inc ebx
call fcn.0043be70
lea eax, [esp + 0x24]
push eax
push ebp
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov ecx, 0xa0
test eax, eax
je 0x43a0e0
test dword [esp + 0x24], ecx
je 0x43a0c1
test eax, eax
je 0x43a0e0
mov eax, dword [0x56a8bc]
cmp dword [0x56bec0], eax
ja 0x439fd7
push ebp
call dword [sym.imp.KERNEL32.dll_FindClose]
test ebx, ebx
je 0x43a280
mov eax, dword [0x5711a4]
push eax
call fcn.0043aed0
add esp, 4
test eax, eax
je 0x43a280
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x154
ret
push 2
call fcn.0043b9e0
mov dword [0x56a8c0], 1
add esp, 4
jmp 0x43a0e0
push ebp
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, esi
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x154
ret
push ebp
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, esi
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x154
ret
push ebp
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, esi
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x154
ret
mov eax, dword [0x5711a4]
push eax
call fcn.0043b4d0
add esp, 4
test eax, eax
jne 0x43a2d3
mov dword [0x56b3b0], 0
call fcn.0043b670
cmp dword [0x56b3cc], 0
mov dword [0x56beb4], eax
jne 0x43a2d3
xor ebp, ebp
cmp dword [esp + 0x10], ebp
je 0x43a21d
mov eax, dword [0x56a8bc]
lea ecx, [esp + 0x14]
shl eax, 5
add eax, 0x56c181
push eax
push ecx
call fcn.0043a370
add esp, 8
cmp dword [0x57119c], ebp
jne 0x43a1d7
lea eax, [esp + 0x14]
push eax
push str.__s_n
call dword [sym.imp.MSVCR80.dll_printf]
add esp, 8
mov eax, dword [0x56a8a4]
cmp byte [eax + 1], 0x3a
je 0x43a210
cmp byte [eax], 0x2f
je 0x43a210
lea edi, [esp + 0x14]
mov ecx, 0xffffffff
sub eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
shr ecx, 2
mov esi, edi
mov edi, dword [0x56a8a4]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x43a21d
lea eax, [esp + 0x14]
push eax
call fcn.0043a310
add esp, 4
mov eax, dword [0x56a8bc]
shl eax, 5
add eax, 0x56c181
push eax
call dword [esp + 0x174]
add esp, 4
mov ecx, dword [0x56a8a4]
push ecx
call fcn.0043bdf0
add esp, 4
test eax, eax
jne 0x43a2d3
call fcn.0043af40
test eax, eax
jne 0x43a2d3
inc ebx
cmp dword [esp + 0x10], ebp
je 0x43a280
call fcn.0043b670
mov dword [0x56beb4], eax
cmp dword [0x56b3cc], ebp
jne 0x43a2b1
cmp dword [esp + 0x10], ebp
je 0x43a280
cmp dword [0x56beb4], ebp
jne 0x43a19b
cmp dword [0x57119c], 0
jne 0x43a298
push ebx
push str.__________d_file_copiato_i__n
call dword [sym.imp.MSVCR80.dll_printf]
add esp, 8
cmp dword [0x56a8c0], 0
je 0x43a2c1
mov eax, 0x66
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x154
ret
mov eax, dword [0x56beb4]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x154
ret
cmp dword [0x56a8ac], 1
mov eax, 0
adc eax, 0xffffffff
and eax, 0x6e
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x154
ret