Function at 0x404670
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x42bb99
mov eax, dword fs:[0]
push eax
sub esp, 0x574
mov eax, dword [0x44c00c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x578], edx
mov edi, ecx
mov dword [ebp - 0x56c], edi
mov dword [ebp - 4], 0
mov eax, dword [0x435cdc]
mov dword [ebp - 0x118], eax
mov eax, dword [0x435ce0]
mov dword [ebp - 0x114], eax
xor eax, eax
mov word [ebp - 0x110], ax
mov eax, dword [0x435ce4]
mov dword [ebp - 0x124], eax
mov eax, dword [0x435ce8]
mov dword [ebp - 0x120], eax
xor eax, eax
mov word [ebp - 0x11c], ax
mov eax, dword [0x435cec]
mov dword [ebp - 0xe8], eax
movzx eax, word [0x435cf0]
mov word [ebp - 0xe4], ax
mov eax, dword [0x435cf4]
mov dword [ebp - 0xf4], eax
movzx eax, word [0x435cf8]
mov word [ebp - 0xf0], ax
mov eax, dword [0x435cfc]
mov dword [ebp - 0x100], eax
mov eax, dword [0x435d00]
mov dword [ebp - 0xfc], eax
xor eax, eax
mov word [ebp - 0xf8], ax
mov eax, dword [0x435d04]
mov dword [ebp - 0x10c], eax
mov eax, dword [0x435d08]
mov dword [ebp - 0x108], eax
xor eax, eax
mov word [ebp - 0x104], ax
mov eax, dword [0x435d0c]
mov dword [ebp - 0x34], eax
mov eax, dword [0x435d10]
mov dword [ebp - 0x30], eax
xor eax, eax
mov word [ebp - 0x2c], ax
mov eax, dword [0x435d14]
mov dword [ebp - 0x7c], eax
mov eax, dword [0x435d18]
mov dword [ebp - 0x78], eax
xor eax, eax
movq xmm0, qword [str.DOCM]
mov word [ebp - 0x74], ax
mov eax, dword [0x435d1c]
mov dword [ebp - 0x94], eax
mov eax, dword [0x435d20]
mov dword [ebp - 0x90], eax
xor eax, eax
mov word [ebp - 0x8c], ax
mov eax, dword [0x435d24]
mov dword [ebp - 0x88], eax
mov eax, dword [0x435d28]
mov dword [ebp - 0x84], eax
xor eax, eax
mov word [ebp - 0x80], ax
movzx eax, word [0x435d34]
mov word [ebp - 0x1b8], ax
movzx eax, word [0x435d40]
mov word [ebp - 0x1ac], ax
movzx eax, word [0x435d4c]
movq qword [ebp - 0x1c0], xmm0
movq xmm0, qword [str.docm]
mov word [ebp - 0x1d0], ax
movzx eax, word [0x435d58]
movq qword [ebp - 0x1b4], xmm0
movq xmm0, qword [str.DOCX]
mov word [ebp - 0x1c4], ax
mov eax, dword [0x435d5c]
movq qword [ebp - 0x1d8], xmm0
movq xmm0, qword [str.docx]
mov dword [ebp - 0xa0], eax
mov eax, dword [0x435d60]
mov dword [ebp - 0x570], 1
mov dword [ebp - 0xe2], 0
mov dword [ebp - 0xee], 0
movq qword [ebp - 0x1cc], xmm0
mov dword [ebp - 0x9c], eax
xor eax, eax
movq xmm0, qword [str.xlsx]
mov word [ebp - 0x98], ax
mov eax, dword [0x435d64]
mov dword [ebp - 0xac], eax
mov eax, dword [0x435d68]
mov dword [ebp - 0xa8], eax
xor eax, eax
mov word [ebp - 0xa4], ax
mov eax, dword [0x435d6c]
mov dword [ebp - 0xb8], eax
mov eax, dword [0x435d70]
mov dword [ebp - 0xb4], eax
xor eax, eax
mov word [ebp - 0xb0], ax
mov eax, dword [0x435d74]
mov dword [ebp - 0x70], eax
mov eax, dword [0x435d78]
mov dword [ebp - 0x6c], eax
xor eax, eax
mov word [ebp - 0x68], ax
movzx eax, word [0x435d84]
mov word [ebp - 0x1f4], ax
movzx eax, word [0x435d90]
mov word [ebp - 0x200], ax
movzx eax, word [0x435d9c]
mov word [ebp - 0x218], ax
movzx eax, word [0x435da8]
mov word [ebp - 0x20c], ax
movzx eax, word [0x435db4]
mov word [ebp - 0x230], ax
movzx eax, word [0x435dc0]
mov word [ebp - 0x224], ax
mov eax, dword [0x435dc4]
mov dword [ebp - 0xd0], eax
mov eax, dword [0x435dc8]
mov dword [ebp - 0xcc], eax
xor eax, eax
mov word [ebp - 0xc8], ax
mov eax, dword [0x435dcc]
mov dword [ebp - 0xdc], eax
mov eax, dword [0x435dd0]
mov dword [ebp - 0xd8], eax
xor eax, eax
mov word [ebp - 0xd4], ax
mov eax, dword [0x435dd4]
mov dword [ebp - 0x148], eax
mov eax, dword [0x435dd8]
mov dword [ebp - 0x144], eax
xor eax, eax
mov word [ebp - 0x140], ax
mov eax, dword [0x435ddc]
mov dword [ebp - 0x154], eax
mov eax, dword [0x435de0]
mov dword [ebp - 0x150], eax
xor eax, eax
movq qword [ebp - 0x1fc], xmm0
movq xmm0, qword [str.XLSX]
mov word [ebp - 0x14c], ax
mov eax, dword [0x435de4]
movq qword [ebp - 0x208], xmm0
movq xmm0, qword [str.XLSB]
mov dword [ebp - 0x130], eax
mov eax, dword [0x435de8]
movq qword [ebp - 0x220], xmm0
movq xmm0, qword [str.xlsb]
mov dword [ebp - 0x12c], eax
xor eax, eax
movq qword [ebp - 0x214], xmm0
movq xmm0, qword [str.XLSM]
mov word [ebp - 0x128], ax
mov eax, dword [0x435dec]
mov dword [ebp - 0x13c], eax
mov eax, dword [0x435df0]
movq qword [ebp - 0x238], xmm0
movq xmm0, qword [str.xlsm]
mov dword [ebp - 0x138], eax
xor eax, eax
movq qword [ebp - 0x22c], xmm0
movq xmm0, qword [str.jpeg]
mov word [ebp - 0x134], ax
movzx eax, word [0x435dfc]
mov word [ebp - 0x1dc], ax
movzx eax, word [0x435e08]
mov word [ebp - 0x1e8], ax
mov eax, dword [0x435e0c]
mov dword [ebp - 0x160], eax
mov eax, dword [0x435e10]
mov dword [ebp - 0x15c], eax
xor eax, eax
mov word [ebp - 0x158], ax
mov eax, dword [0x435e14]
mov dword [ebp - 0x16c], eax
mov eax, dword [0x435e18]
mov dword [ebp - 0x168], eax
xor eax, eax
mov word [ebp - 0x164], ax
mov eax, dword [0x435e1c]
mov dword [ebp - 0x178], eax
mov eax, dword [0x435e20]
mov dword [ebp - 0x174], eax
xor eax, eax
mov word [ebp - 0x170], ax
mov eax, dword [0x435e24]
mov dword [ebp - 0x184], eax
mov eax, dword [0x435e28]
mov dword [ebp - 0x180], eax
xor eax, eax
mov word [ebp - 0x17c], ax
mov eax, dword [0x435e34]
mov dword [ebp - 0x240], eax
xor eax, eax
mov word [ebp - 0x23c], ax
mov eax, dword [0x435e40]
mov dword [ebp - 0x250], eax
xor eax, eax
mov word [ebp - 0x24c], ax
mov eax, dword [0x435e44]
mov dword [ebp - 0x28], eax
mov eax, dword [0x435e48]
mov dword [ebp - 0x24], eax
xor eax, eax
mov word [ebp - 0x20], ax
mov eax, dword [0x435e4c]
mov dword [ebp - 0x1c], eax
mov eax, dword [0x435e50]
mov dword [ebp - 0x18], eax
xor eax, eax
mov word [ebp - 0x14], ax
mov eax, dword [0x435e54]
mov dword [ebp - 0x190], eax
mov eax, dword [0x435e58]
mov dword [ebp - 0x18c], eax
xor eax, eax
mov word [ebp - 0x188], ax
mov eax, dword [0x435e5c]
mov dword [ebp - 0x19c], eax
mov eax, dword [0x435e60]
mov dword [ebp - 0x198], eax
xor eax, eax
mov word [ebp - 0x194], ax
mov eax, dword [0x435e64]
mov dword [ebp - 0x1a8], eax
mov eax, dword [0x435e68]
mov dword [ebp - 0x1a4], eax
xor eax, eax
mov word [ebp - 0x1a0], ax
mov eax, dword [0x435e6c]
movq qword [ebp - 0x1e4], xmm0
movq xmm0, qword [str.JPEG]
mov dword [ebp - 0x40], eax
mov eax, dword [0x435e70]
movq qword [ebp - 0x1f0], xmm0
movq xmm0, qword [str.accdb]
mov dword [ebp - 0x3c], eax
xor eax, eax
movq qword [ebp - 0x248], xmm0
movq xmm0, qword [str.ACCDB]
mov word [ebp - 0x38], ax
mov eax, dword [0x435e74]
movq qword [ebp - 0x258], xmm0
mov dword [ebp - 0x4c], eax
mov eax, dword [0x435e78]
lea ecx, [edi - 2]
mov dword [ebp - 0x48], eax
lea edx, [ecx + 2]
xor eax, eax
mov word [ebp - 0x44], ax
mov eax, dword [0x435e7c]
mov dword [ebp - 0x58], eax
mov eax, dword [0x435e80]
mov dword [ebp - 0x54], eax
xor eax, eax
mov word [ebp - 0x50], ax
mov eax, dword [0x435e84]
mov dword [ebp - 0x64], eax
mov eax, dword [0x435e88]
mov dword [ebp - 0x60], eax
xor eax, eax
mov word [ebp - 0x5c], ax
mov eax, dword [0x435e8c]
mov dword [ebp - 0xc4], eax
mov eax, dword [0x435e90]
mov dword [ebp - 0xc0], eax
xor eax, eax
mov word [ebp - 0xbc], ax
mov ax, word [ecx + 2]
lea ecx, [ecx + 2]
test ax, ax
jne 0x404c45
mov eax, dword [str..]
mov dword [ecx], eax
mov eax, dword [0x435e98]
mov dword [ecx + 4], eax
mov ax, word [0x435e9c]
mov word [ecx + 8], ax
lea eax, [ebp - 0x568]
push eax
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, edi
mov ebx, eax
lea eax, [esi + 2]
nop
mov cx, word [esi]
add esi, 2
test cx, cx
jne 0x404c80
sub esi, eax
push 0x435ea0
push edi
sar esi, 1
call fcn.00413c04
add esp, 8
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x404ca0
sub eax, edx
sar eax, 1
sub esi, eax
xor eax, eax
mov word [edi + esi*2], ax
cmp ebx, 0xffffffff
je 0x40567b
mov esi, dword [sym.imp.KERNEL32.dll_FindNextFileW]
nop word [eax + eax]
lea ecx, [ebp - 0x53c]
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x404ce0
sub ecx, edx
sar ecx, 1
cmp ecx, 1
jne 0x404d1b
lea eax, [ebp - 0x53c]
push 0x2e
push eax
call fcn.00413e87
add esp, 8
test eax, eax
je 0x404d1b
lea eax, [ebp - 0x568]
push eax
push ebx
call esi
test eax, eax
je 0x40567b
lea ecx, [ebp - 0x53c]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x404d24
sub ecx, edx
sar ecx, 1
cmp ecx, 2
jne 0x404d62
lea eax, [ebp - 0x53c]
push 0x435ea8
push eax
call fcn.00413c04
add esp, 8
test eax, eax
je 0x404d62
lea eax, [ebp - 0x568]
push eax
push ebx
call esi
test eax, eax
je 0x40567b
movups xmm0, xmmword [str.Windows]
xor eax, eax
mov dword [ebp - 0x298], 0
mov word [ebp - 0x25c], ax
mov eax, dword [0x435ed0]
movups xmmword [ebp - 0x26c], xmm0
mov dword [ebp - 0x270], eax
movups xmm0, xmmword [str.microsoft]
mov eax, dword [0x435ee4]
mov dword [ebp - 0x284], eax
mov eax, dword [0x435f08]
movups xmmword [ebp - 0x280], xmm0
mov dword [ebp - 0x2cc], eax
movups xmm0, xmmword [str.Microsoft]
mov ax, word [0x435f34]
mov word [ebp - 0x2e4], ax
lea eax, [ebp - 0x26c]
movups xmmword [ebp - 0x294], xmm0
push eax
movups xmm0, xmmword [str.Program]
lea eax, [ebp - 0x53c]
mov word [ebp - 0x2c0], 0
push eax
movups xmmword [ebp - 0x2a8], xmm0
mov dword [ebp - 0x2ac], 0
movups xmm0, xmmword [str.All_Users]
mov dword [ebp - 0x2e2], 0
movups xmmword [ebp - 0x2dc], xmm0
xorps xmm0, xmm0
movq qword [ebp - 0x2c8], xmm0
movups xmm0, xmmword [str.Default]
movups xmmword [ebp - 0x2bc], xmm0
movups xmm0, xmmword [str._Recycle.Bin]
movups xmmword [ebp - 0x2fc], xmm0
movq xmm0, qword [0x435f2c]
movq qword [ebp - 0x2ec], xmm0
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x404eff
lea eax, [ebp - 0x280]
push eax
lea eax, [ebp - 0x53c]
push eax
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x404eff
lea eax, [ebp - 0x294]
push eax
lea eax, [ebp - 0x53c]
push eax
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x404eff
lea eax, [ebp - 0x2a8]
push eax
lea eax, [ebp - 0x53c]
push eax
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x404eff
lea eax, [ebp - 0x2dc]
push eax
lea eax, [ebp - 0x53c]
push eax
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x404eff
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x53c]
push eax
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x404eff
lea eax, [ebp - 0x2fc]
push eax
lea eax, [ebp - 0x53c]
push eax
call fcn.00413c04
add esp, 8
test eax, eax
je 0x4050b7
lea eax, [ebp - 0x568]
push eax
push ebx
call esi
test eax, eax
je 0x404fe5
lea eax, [ebp - 0x26c]
push eax
lea eax, [ebp - 0x53c]
push eax
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x404fd3
lea eax, [ebp - 0x280]
push eax
lea eax, [ebp - 0x53c]
push eax
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x404fd3
lea eax, [ebp - 0x294]
push eax
lea eax, [ebp - 0x53c]
push eax
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x404fd3
lea eax, [ebp - 0x2a8]
push eax
lea eax, [ebp - 0x53c]
push eax
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x404fd3
lea eax, [ebp - 0x2dc]
push eax
lea eax, [ebp - 0x53c]
push eax
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x404fd3
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x53c]
push eax
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x404fd3
lea eax, [ebp - 0x2fc]
push eax
lea eax, [ebp - 0x53c]
push eax
call fcn.00413c04
add esp, 8
test eax, eax
je 0x4050b7
lea eax, [ebp - 0x568]
push eax
push ebx
call esi
test eax, eax
jne 0x404f11
lea eax, [ebp - 0x26c]
push eax
lea eax, [ebp - 0x53c]
push eax
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x40567b
lea eax, [ebp - 0x280]
push eax
lea eax, [ebp - 0x53c]
push eax
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x40567b
lea eax, [ebp - 0x294]
push eax
lea eax, [ebp - 0x53c]
push eax
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x40567b
lea eax, [ebp - 0x2a8]
push eax
lea eax, [ebp - 0x53c]
push eax
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x40567b
lea eax, [ebp - 0x2dc]
push eax
lea eax, [ebp - 0x53c]
push eax
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x40567b
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x53c]
push eax
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x40567b
lea eax, [ebp - 0x2fc]
push eax
lea eax, [ebp - 0x53c]
push eax
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x40567b
mov eax, dword [ebp - 0x568]
and al, 0x16
cmp al, 0x10
jne 0x405193
lea edx, [ebp - 0x53c]
mov esi, edx
nop
mov ax, word [edx]
add edx, 2
test ax, ax
jne 0x4050d0
sub edx, esi
add edi, 0xfffffffe
lea eax, [edi + 2]
mov dword [ebp - 0x574], eax
nop dword [eax]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4050f0
mov ecx, edx
sub esp, 0x18
shr ecx, 2
xor eax, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, esp
push 0xffffffffffffffff
push eax
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], 0
mov word [ecx], ax
lea eax, [ebp + 8]
push eax
call fcn.0040c660
mov edx, dword [ebp - 0x578]
mov ecx, dword [ebp - 0x574]
call fcn.00404670
mov edi, dword [ebp - 0x56c]
add esp, 0x18
mov ecx, edi
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x405150
sub ecx, edx
lea edx, [ebp - 0x53c]
sar ecx, 1
lea esi, [edx + 2]
nop dword [eax + eax]
mov ax, word [edx]
add edx, 2
test ax, ax
jne 0x405170
sub edx, esi
mov esi, dword [sym.imp.KERNEL32.dll_FindNextFileW]
sar edx, 1
sub ecx, edx
xor eax, eax
mov word [edi + ecx*2 - 2], ax
jmp 0x405669
lea eax, [ebp - 0x53c]
push 0x2e
push eax
call fcn.00413f34
mov edi, eax
add esp, 8
test edi, edi
je 0x405663
test byte [ebp - 0x568], 7
jne 0x405663
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4051c0
sub ecx, edx
sar ecx, 1
cmp ecx, 2
jbe 0x4051ec
lea eax, [ebp - 0x34]
push eax
lea eax, [edi + 2]
push eax
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056b2
lea eax, [ebp - 0x7c]
push eax
lea esi, [edi + 2]
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0x88]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0x94]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0x1b4]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0x1c0]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0x1cc]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0x1d8]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0xa0]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0xac]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0xb8]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0x70]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0xd0]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0xdc]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0xe8]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0xf4]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0x100]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0x10c]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0x118]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0x124]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0x130]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0x13c]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0x148]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0x154]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0x1e4]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0x1f0]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0x1fc]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0x208]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0x214]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0x220]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0x22c]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0x238]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0x160]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0x16c]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0x178]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0x184]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0x28]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0x1c]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0x248]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0x258]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0x28]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0x1c]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0x190]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0x19c]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0x1a8]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0x40]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0x4c]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0x58]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0x64]
push eax
push esi
call fcn.00413c04
add esp, 8
test eax, eax
jne 0x4056ac
lea eax, [ebp - 0xc4]
push eax
push esi
call fcn.00413c04
mov esi, dword [sym.imp.KERNEL32.dll_FindNextFileW]
add esp, 8
test eax, eax
jne 0x4056b2
mov edi, dword [ebp - 0x56c]
lea eax, [ebp - 0x568]
push eax
push ebx
call esi
test eax, eax
jne 0x404cd0
mov eax, dword [ebp + 0x1c]
cmp eax, 8
jb 0x405690
inc eax
lea ecx, [ebp + 8]
push eax
push dword [ebp + 8]
call fcn.0040d8b0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041020c
mov esp, ebp
pop ebp
ret
mov esi, dword [sym.imp.KERNEL32.dll_FindNextFileW]
mov edi, dword [ebp - 0x56c]
lea ecx, [ebp - 0x314]
push edi
call fcn.004095f0
mov byte [ebp - 4], 1
cmp word [ebp - 0x53c], 0
jne 0x4056d6
xor ecx, ecx
jmp 0x4056ef
lea ecx, [ebp - 0x53c]
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4056e0
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x53c]
push eax
lea ecx, [ebp - 0x314]
call fcn.0040da60
mov eax, dword [ebp - 0x578]
cmp eax, 1
jne 0x4057a6
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x57c], esp
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], 0
cmp dword [ecx + 0x14], 8
jb 0x405734
mov eax, dword [ecx]
jmp 0x405736
mov eax, ecx
xor edx, edx
push 0xffffffffffffffff
mov word [eax], dx
lea eax, [ebp + 8]
push edx
push eax
call fcn.0040c660
sub esp, 0x18
mov byte [ebp - 4], 2
mov ecx, esp
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], 0
cmp dword [ecx + 0x14], 8
jb 0x405768
mov eax, dword [ecx]
jmp 0x40576a
mov eax, ecx
xor edx, edx
push 0xffffffffffffffff
mov word [eax], dx
lea eax, [ebp - 0x314]
push edx
push eax
call fcn.0040c660
mov ecx, dword [ebp - 0x570]
mov byte [ebp - 4], 1
call fcn.00405870
inc dword [ebp - 0x570]
add esp, 0x30
push 0xfa
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x405823
test eax, eax
jne 0x405823
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x57c], esp
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], eax
cmp dword [ecx + 0x14], 8
jb 0x4057cd
mov eax, dword [ecx]
jmp 0x4057cf
mov eax, ecx
xor edx, edx
push 0xffffffffffffffff
mov word [eax], dx
lea eax, [ebp + 8]
push edx
push eax
call fcn.0040c660
sub esp, 0x18
mov byte [ebp - 4], 3
mov ecx, esp
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], 0
cmp dword [ecx + 0x14], 8
jb 0x405801
mov eax, dword [ecx]
jmp 0x405803
mov eax, ecx
xor edx, edx
push 0xffffffffffffffff
mov word [eax], dx
lea eax, [ebp - 0x314]
push edx
push eax
call fcn.0040c660
mov byte [ebp - 4], 1
call fcn.00406240
add esp, 0x30
push 0
push 0x435208
lea ecx, [ebp - 0x314]
call fcn.0040c5a0
inc dword [0x44e334]
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x300]
cmp eax, 8
jb 0x405669
inc eax
lea ecx, [ebp - 0x314]
push eax
push dword [ebp - 0x314]
call fcn.0040d8b0
jmp 0x405669