Function at 0x436420
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a747c
mov eax, dword fs:[0]
push eax
sub esp, 0xd34
mov eax, dword [0x4bc1f0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xd40], ecx
mov ecx, dword [ebp - 0xd40]
add ecx, 0x3ead48
call fcn.00438040
mov ecx, dword [ebp - 0xd40]
add ecx, 0x3ead64
call fcn.00438040
mov ecx, dword [ebp - 0xd40]
add ecx, 0x3ead80
call fcn.00438040
mov ecx, 0x4c5778
call fcn.00409580
push eax
lea eax, [ebp - 0x11c]
push eax
call dword [sym.imp.kernel32.dll_lstrcpyA]
push 0x4b48b0
lea ecx, [ebp - 0x11c]
push ecx
call dword [sym.imp.kernel32.dll_lstrcatA]
lea edx, [ebp - 0x25c]
push edx
lea eax, [ebp - 0x11c]
push eax
call dword [sym.imp.kernel32.dll_FindFirstFileA]
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0xffffffff
jne 0x4364d6
jmp 0x43661c
lea ecx, [ebp - 0x678]
call fcn.00480980
mov dword [ebp - 4], 0
mov ecx, 0x4c5778
call fcn.00409580
push eax
lea ecx, [ebp - 0x11c]
push ecx
call dword [sym.imp.kernel32.dll_lstrcpyA]
lea edx, [ebp - 0x230]
push edx
lea eax, [ebp - 0x11c]
push eax
call dword [sym.imp.kernel32.dll_lstrcatA]
lea ecx, [ebp - 0x11c]
push ecx
lea ecx, [ebp - 0x678]
call fcn.00480600
lea ecx, [ebp - 0x678]
call fcn.00451630
mov dword [ebp - 0x264], eax
lea ecx, [ebp - 0x678]
call fcn.00424e70
cmp eax, dword [ebp - 0x264]
jge 0x43660a
mov byte [ebp - 0x64c], 0
lea edx, [ebp - 0x64c]
push edx
lea ecx, [ebp - 0x678]
call fcn.00480690
push 0x4b48c0
lea eax, [ebp - 0x64c]
push eax
call dword [sym.imp.kernel32.dll_lstrcmpiA]
test eax, eax
jne 0x436605
lea ecx, [ebp - 0x64c]
push ecx
lea ecx, [ebp - 0x678]
call fcn.00480690
lea edx, [ebp - 0x64c]
push edx
lea ecx, [ebp - 0x678]
call fcn.00480690
push 0x4b48cc
lea eax, [ebp - 0x64c]
push eax
call dword [sym.imp.kernel32.dll_lstrcmpiA]
test eax, eax
je 0x436605
lea ecx, [ebp - 0x64c]
push ecx
lea edx, [ebp - 0x784]
push edx
call dword [sym.imp.kernel32.dll_lstrcpyA]
mov dword [ebp - 0x680], 0
lea eax, [ebp - 0x784]
push eax
mov ecx, dword [ebp - 0xd40]
add ecx, 0x3ead64
call fcn.00438000
lea ecx, [ebp - 0x64c]
push ecx
lea ecx, [ebp - 0x678]
call fcn.00480690
jmp 0x4365a5
jmp 0x436537
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x678]
call fcn.004809a0
mov edx, dword [ebp - 0x260]
push edx
call dword [sym.imp.kernel32.dll_FindClose]
mov eax, dword [ebp - 0xd40]
cmp dword [eax + 0x165fa8], 4
jl 0x43663d
jmp 0x43699a
mov ecx, dword [ebp - 0xd40]
add ecx, 0x3ead2c
call fcn.00438040
mov ecx, 0x4c5778
call fcn.00409580
push eax
lea ecx, [ebp - 0x11c]
push ecx
call dword [sym.imp.kernel32.dll_lstrcpyA]
push 0x4b48d0
lea edx, [ebp - 0x11c]
push edx
call dword [sym.imp.kernel32.dll_lstrcatA]
mov dword [ebp - 0x788], 0
lea eax, [ebp - 0x25c]
push eax
lea ecx, [ebp - 0x11c]
push ecx
call dword [sym.imp.kernel32.dll_FindFirstFileA]
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0xffffffff
jne 0x4366aa
jmp 0x4368d7
mov dword [ebp - 0x78c], 1
cmp dword [ebp - 0x78c], 0
je 0x43685e
cmp dword [ebp - 0x25c], 0x10
je 0x43683f
lea edx, [ebp - 0x230]
push edx
call dword [sym.imp.kernel32.dll_lstrlenA]
mov dword [ebp - 0x7a0], eax
push 0
lea eax, [ebp - 0x230]
push eax
lea ecx, [ebp - 0x79c]
call fcn.004816d0
mov dword [ebp - 4], 1
push 4
lea ecx, [ebp - 0x79c]
call fcn.004813f0
push 0x4b48d8
lea ecx, [ebp - 0x79c]
call fcn.00429040
push eax
call dword [sym.imp.kernel32.dll_lstrcmpiA]
test eax, eax
jne 0x436729
jmp 0x43680e
push 0x4b48e0
lea ecx, [ebp - 0x79c]
call fcn.00429040
push eax
call dword [sym.imp.kernel32.dll_lstrcmpiA]
test eax, eax
jne 0x4367f7
mov ecx, 0x4c5778
call fcn.0042b850
mov dword [ebp - 0x7a8], eax
mov ecx, 0x4c5778
call fcn.0042b870
mov dword [ebp - 0x7a4], eax
mov dword [ebp - 0x7ac], 0
mov dword [ebp - 0x7ac], 0
jmp 0x43678d
mov ecx, dword [ebp - 0x7ac]
add ecx, 1
mov dword [ebp - 0x7ac], ecx
mov edx, dword [ebp - 0x7ac]
cmp edx, dword [ebp - 0x7a4]
jge 0x4367c4
mov eax, dword [ebp - 0x7ac]
mov ecx, dword [ebp - 0x7a8]
mov edx, dword [ecx + eax*4]
push edx
mov eax, dword [ebp - 0xd40]
add eax, 0x3ead2c
push eax
mov ecx, dword [ebp - 0xd40]
call fcn.00436380
jmp 0x43677e
lea ecx, [ebp - 0x25c]
push ecx
mov edx, dword [ebp - 0x260]
push edx
call dword [sym.imp.kernel32.dll_FindNextFileA]
mov dword [ebp - 0x78c], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x79c]
call fcn.00481220
jmp 0x4366b4
cmp dword [ebp - 0x7a0], 4
jl 0x43680e
mov eax, dword [ebp - 0x7a0]
mov byte [ebp + eax - 0x234], 0
lea ecx, [ebp - 0x230]
push ecx
mov edx, dword [ebp - 0xd40]
add edx, 0x3ead2c
push edx
mov ecx, dword [ebp - 0xd40]
call fcn.00436380
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x79c]
call fcn.00481220
lea eax, [ebp - 0x25c]
push eax
mov ecx, dword [ebp - 0x260]
push ecx
call dword [sym.imp.kernel32.dll_FindNextFileA]
mov dword [ebp - 0x78c], eax
jmp 0x4366b4
mov edx, dword [ebp - 0x260]
push edx
call dword [sym.imp.kernel32.dll_FindClose]
cmp dword [ebp - 0x788], 1
jge 0x4368d7
mov dword [ebp - 0x788], 1
mov ecx, 0x4c5778
call fcn.00409580
push eax
lea eax, [ebp - 0x11c]
push eax
call dword [sym.imp.kernel32.dll_lstrcpyA]
push 0x4b48e8
lea ecx, [ebp - 0x11c]
push ecx
call dword [sym.imp.kernel32.dll_lstrcatA]
mov ecx, 0x5600e8
call fcn.0041c710
push eax
lea edx, [ebp - 0x11c]
push edx
call dword [sym.imp.kernel32.dll_lstrcatA]
push 0x4b48ec
lea eax, [ebp - 0x11c]
push eax
call dword [sym.imp.kernel32.dll_lstrcatA]
jmp 0x436682
mov ecx, dword [ebp - 0xd40]
add ecx, 0x3ead10
call fcn.00438040
mov ecx, 0x4c5778
call fcn.00409580
push eax
lea ecx, [ebp - 0x11c]
push ecx
call dword [sym.imp.kernel32.dll_lstrcpyA]
push 0x4b48f0
lea edx, [ebp - 0x11c]
push edx
call dword [sym.imp.kernel32.dll_lstrcatA]
lea eax, [ebp - 0x25c]
push eax
lea ecx, [ebp - 0x11c]
push ecx
call dword [sym.imp.kernel32.dll_FindFirstFileA]
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0xffffffff
jne 0x436937
jmp 0x43699a
mov dword [ebp - 0x7b0], 1
cmp dword [ebp - 0x7b0], 0
je 0x43698d
cmp dword [ebp - 0x25c], 0x10
je 0x436971
lea edx, [ebp - 0x230]
push edx
mov eax, dword [ebp - 0xd40]
add eax, 0x3ead10
push eax
mov ecx, dword [ebp - 0xd40]
call fcn.00436380
lea ecx, [ebp - 0x25c]
push ecx
mov edx, dword [ebp - 0x260]
push edx
call dword [sym.imp.kernel32.dll_FindNextFileA]
mov dword [ebp - 0x7b0], eax
jmp 0x436941
mov eax, dword [ebp - 0x260]
push eax
call dword [sym.imp.kernel32.dll_FindClose]
mov ecx, dword [ebp - 0xd40]
cmp dword [ecx + 0x165fa8], 4
jge 0x4369ae
jmp 0x436d3c
mov ecx, 0x4c5778
call fcn.00409580
push eax
lea edx, [ebp - 0x11c]
push edx
call dword [sym.imp.kernel32.dll_lstrcpyA]
push 0x4b48fc
lea eax, [ebp - 0x11c]
push eax
call dword [sym.imp.kernel32.dll_lstrcatA]
lea ecx, [ebp - 0x25c]
push ecx
lea edx, [ebp - 0x11c]
push edx
call dword [sym.imp.kernel32.dll_FindFirstFileA]
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0xffffffff
jne 0x436a00
jmp 0x436d3c
mov dword [ebp - 0xb08], 1
cmp dword [ebp - 0xb08], 0
je 0x436b9b
cmp dword [ebp - 0x25c], 0x10
je 0x436b7c
lea eax, [ebp - 0x230]
push eax
lea ecx, [ebp - 0xc2c]
push ecx
call dword [sym.imp.kernel32.dll_lstrcpyA]
lea edx, [ebp - 0xc2c]
push edx
call dword [sym.imp.kernel32.dll_lstrlenA]
mov dword [ebp - 0xb20], eax
mov eax, dword [ebp - 0xb20]
lea ecx, [ebp + eax - 0x234]
push ecx
lea edx, [ebp - 0x9c4]
push edx
call dword [sym.imp.kernel32.dll_lstrcpyA]
push 0x4b4908
lea eax, [ebp - 0x9c4]
push eax
call dword [sym.imp.kernel32.dll_lstrcmpiA]
test eax, eax
jne 0x436ab4
lea ecx, [ebp - 0x230]
push ecx
lea edx, [ebp - 0x9c4]
push edx
call dword [sym.imp.kernel32.dll_lstrcpyA]
lea eax, [ebp - 0x25c]
push eax
mov ecx, dword [ebp - 0x260]
push ecx
call dword [sym.imp.kernel32.dll_FindNextFileA]
mov dword [ebp - 0xb08], eax
jmp 0x436a0a
push 0x4b4910
lea edx, [ebp - 0x9c4]
push edx
call dword [sym.imp.kernel32.dll_lstrcmpiA]
test eax, eax
jne 0x436afc
mov eax, dword [ebp - 0xb20]
mov byte [ebp + eax - 0xc30], 0
lea ecx, [ebp - 0xc2c]
push ecx
mov edx, dword [ebp - 0xd40]
add edx, 0x3ead80
push edx
mov ecx, dword [ebp - 0xd40]
call fcn.00436380
jmp 0x436b7c
cmp dword [ebp - 0xb20], 4
jl 0x436b13
mov eax, dword [ebp - 0xb20]
mov byte [ebp + eax - 0xc30], 0
push 0x4b4918
lea ecx, [ebp - 0x230]
push ecx
call dword [sym.imp.kernel32.dll_lstrcmpiA]
test eax, eax
je 0x436b3f
push 0x4b491c
lea edx, [ebp - 0x230]
push edx
call dword [sym.imp.kernel32.dll_lstrcmpiA]
test eax, eax
jne 0x436b5e
lea eax, [ebp - 0x25c]
push eax
mov ecx, dword [ebp - 0x260]
push ecx
call dword [sym.imp.kernel32.dll_FindNextFileA]
mov dword [ebp - 0xb08], eax
jmp 0x436a0a
lea edx, [ebp - 0xc2c]
push edx
mov eax, dword [ebp - 0xd40]
add eax, 0x3ead48
push eax
mov ecx, dword [ebp - 0xd40]
call fcn.00436380
lea ecx, [ebp - 0x25c]
push ecx
mov edx, dword [ebp - 0x260]
push edx
call dword [sym.imp.kernel32.dll_FindNextFileA]
mov dword [ebp - 0xb08], eax
jmp 0x436a0a
mov eax, dword [ebp - 0x260]
push eax
call dword [sym.imp.kernel32.dll_FindClose]
lea ecx, [ebp - 0x9fc]
call fcn.00476da0
mov dword [ebp - 4], 2
lea ecx, [ebp - 0xb18]
call fcn.004811d0
mov byte [ebp - 4], 3
mov ecx, 0x4c5778
call fcn.00409580
push eax
lea ecx, [ebp - 0x8bc]
push ecx
call dword [sym.imp.kernel32.dll_lstrcpyA]
push 0x4b4920
lea edx, [ebp - 0x8bc]
push edx
call dword [sym.imp.kernel32.dll_lstrcatA]
lea eax, [ebp - 0x9c4]
push eax
lea ecx, [ebp - 0x8bc]
push ecx
call dword [sym.imp.kernel32.dll_lstrcatA]
lea edx, [ebp - 0x8bc]
push edx
lea ecx, [ebp - 0x9fc]
call fcn.00476e50
lea ecx, [ebp - 0x9fc]
call fcn.00476e80
mov dword [ebp - 0xb1c], eax
cmp dword [ebp - 0xb1c], 0
je 0x436d10
mov eax, dword [ebp - 0xb1c]
push eax
lea ecx, [ebp - 0xb04]
push ecx
call dword [sym.imp.kernel32.dll_lstrcpyA]
lea edx, [ebp - 0xb04]
push edx
call dword [sym.imp.kernel32.dll_lstrlenA]
mov dword [ebp - 0xc30], eax
mov eax, dword [ebp - 0xc30]
lea ecx, [ebp + eax - 0xb08]
push ecx
lea edx, [ebp - 0xd3c]
push edx
call dword [sym.imp.kernel32.dll_lstrcpyA]
cmp dword [ebp - 0xc30], 4
jl 0x436c90
mov eax, dword [ebp - 0xc30]
mov byte [ebp + eax - 0xb08], 0
push 0x4b4928
lea ecx, [ebp - 0xd3c]
push ecx
call dword [sym.imp.kernel32.dll_lstrcmpiA]
test eax, eax
jne 0x436cc6
lea edx, [ebp - 0xb04]
push edx
mov eax, dword [ebp - 0xd40]
add eax, 0x3ead48
push eax
mov ecx, dword [ebp - 0xd40]
call fcn.00436380
jmp 0x436cfa
push 0x4b4930
lea ecx, [ebp - 0xd3c]
push ecx
call dword [sym.imp.kernel32.dll_lstrcmpiA]
test eax, eax
jne 0x436cfa
lea edx, [ebp - 0xb04]
push edx
mov eax, dword [ebp - 0xd40]
add eax, 0x3ead80
push eax
mov ecx, dword [ebp - 0xd40]
call fcn.00436380
lea ecx, [ebp - 0x9fc]
call fcn.00476e80
mov dword [ebp - 0xb1c], eax
jmp 0x436c2a
lea ecx, [ebp - 0x9fc]
call fcn.00481f50
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xb18]
call fcn.00481220
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9fc]
call fcn.00476df0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00483cec
mov esp, ebp
pop ebp
ret