Function at 0x43bdcd
Capabilities:
Enumerate files on windows
Read .ini file

Disassembly:
mov eax, 0x56bb2a
call fcn.00524444
mov eax, 0x1f88
call fcn.00524e70
mov eax, dword [0x61d784]
push ebx
push esi
push edi
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x14], eax
xor ebx, ebx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 4], ebx
push dword [ebp + 8]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 1
call fcn.0053ebbd
mov eax, dword [0x61d784]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x24], eax
mov esi, str.FTP::
mov byte [ebp - 4], 4
push esi
mov dword [ebp - 0x48], ebx
push dword [ebp + 8]
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x90], ebx
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x88], ebx
call fcn.00527150
mov edi, eax
pop ecx
cmp edi, ebx
pop ecx
je 0x43c32f
push esi
call fcn.00525390
add eax, edi
mov dword [esp], 0x5c0744
push eax
call fcn.00527150
pop ecx
test eax, eax
pop ecx
jne 0x43c1cd
mov al, byte [0x625794]
or edi, 0xffffffff
push eax
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x20], edi
call fcn.0053aa62
cmp byte [0x625794], bl
mov esi, eax
je 0x43beff
cmp esi, edi
je 0x43beff
mov eax, dword [ebp - 0x10]
mov al, byte [esi + eax + 1]
cmp al, 0x30
jl 0x43beff
cmp al, 0x39
jg 0x43beff
lea eax, [esi + 1]
lea ecx, [ebp - 0x10]
push eax
lea eax, [ebp + 0x10]
push eax
call fcn.0053a8b5
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 5
call fcn.0053ec88
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 4
call fcn.0053eb4f
lea eax, [ebp + 0x10]
push esi
push eax
lea ecx, [ebp - 0x10]
call fcn.0053a9ea
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 6
call fcn.0053ec88
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 4
call fcn.0053eb4f
push dword [ebp - 0x18]
call fcn.00524c6e
dec eax
pop ecx
mov dword [ebp - 0x20], eax
mov esi, dword [0x62a294]
push str.__O1
lea ecx, [ebp - 0x10]
call fcn.0053aa84
cmp eax, edi
je 0x43bf3f
push 1
lea ecx, [ebp - 0x10]
pop esi
push eax
lea eax, [ebp + 0x10]
push eax
call fcn.0053a9ea
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 7
call fcn.0053ec88
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 4
call fcn.0053eb4f
push str.__O0
lea ecx, [ebp - 0x10]
call fcn.0053aa84
cmp eax, edi
je 0x43bf78
push eax
lea eax, [ebp + 0x10]
push eax
lea ecx, [ebp - 0x10]
xor esi, esi
call fcn.0053a9ea
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 8
call fcn.0053ec88
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 4
call fcn.0053eb4f
cmp esi, dword [0x62a294]
je 0x43bf8e
mov ecx, dword [ebp - 0x30]
mov dword [0x62a294], esi
call fcn.0043d927
mov eax, dword [0x61d784]
mov dword [ebp + 8], eax
mov byte [ebp - 4], 9
mov dword [ebp + 0xc], ebx
mov dword [ebp + 0x10], ebx
mov dword [ebp + 0x14], ebx
call fcn.0055c7c5
mov eax, dword [eax + 4]
lea ecx, [ebp + 0xc]
push ebx
push ecx
lea ecx, [ebp + 8]
push ecx
mov ecx, eax
call fcn.0044199a
mov ecx, dword [ebp + 0xc]
mov edi, eax
cmp ecx, ebx
je 0x43bfef
call fcn.0046ca72
push eax
lea ecx, [ebp + 8]
call fcn.0053ec88
push dword [ebp - 0x10]
push dword [ebp + 8]
call fcn.00524dbe
pop ecx
test eax, eax
pop ecx
jne 0x43bfef
mov dword [ebp + 0x14], 1
jmp 0x43c0c7
mov esi, 0x622c94
cmp edi, ebx
je 0x43c04b
push esi
lea ecx, [ebp + 8]
call fcn.0053ecd8
call fcn.0055c7c5
mov eax, dword [eax + 4]
lea ecx, [ebp + 0xc]
push edi
push ecx
lea ecx, [ebp + 8]
push ecx
mov ecx, eax
call fcn.0044199a
mov ecx, dword [ebp + 0xc]
mov edi, eax
call fcn.0046ca72
push eax
lea ecx, [ebp + 8]
call fcn.0053ec88
push dword [ebp - 0x10]
push dword [ebp + 8]
call fcn.00524dbe
pop ecx
test eax, eax
pop ecx
jne 0x43c046
push 1
pop eax
mov dword [ebp + 0x10], eax
mov dword [ebp + 0x14], eax
cmp dword [ebp + 0x10], ebx
je 0x43bff4
cmp dword [ebp + 0x10], ebx
jne 0x43c0c7
push ebx
lea ecx, [ebp - 0x1f94]
call fcn.004de1d2
push 0x61d
lea ecx, [ebp - 0x1f94]
mov byte [ebp - 4], 0xa
call fcn.004de6c3
push 1
lea eax, [ebp - 0x10]
pop edi
lea ecx, [ebp - 0x1db4]
push eax
mov dword [ebp - 0x1db8], edi
call fcn.0053ec88
push esi
lea ecx, [ebp - 0x1db0]
call fcn.0053ecd8
lea ecx, [ebp - 0x1f94]
call fcn.005453a7
mov eax, dword [ebp - 0x1d4c]
cmp eax, ebx
mov dword [ebp + 0xc], eax
je 0x43c0af
mov dword [ebp + 0x10], edi
lea ecx, [ebp - 0x1f94]
mov byte [ebp - 4], 9
call fcn.0043d5aa
cmp dword [ebp + 0x10], ebx
je 0x43c1be
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx]
call dword [eax + 0x60]
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x50], eax
lea edx, [ebp - 0x50]
mov eax, dword [ecx]
push edx
call dword [eax + 0x64]
mov esi, eax
cmp esi, ebx
je 0x43c1be
mov ecx, esi
call fcn.005421db
mov ecx, dword [0x62ae38]
push eax
call fcn.0042e112
push dword [esi + 0x1c]
call dword [sym.imp.USER32.dll_SetActiveWindow]
push eax
call fcn.00540b59
mov ecx, esi
call fcn.00543e83
mov ecx, esi
call fcn.005421db
push dword [eax + 0x1c]
call dword [sym.imp.USER32.dll_IsIconic]
cmp eax, ebx
je 0x43c135
push 9
mov ecx, esi
call fcn.005421db
mov ecx, eax
call fcn.00543e1a
cmp dword [ebp - 0x20], ebx
jl 0x43c1ac
mov eax, dword [ebp + 0xc]
mov dword [ebp + 0x10], 2
mov ecx, 0x5c0abc
cmp dword [eax + 0x18c], ebx
je 0x43c15d
mov dword [ebp + 0x10], 4
mov ecx, 0x5c0ac8
or edi, 0xffffffff
push ebx
push edi
push ebx
push ebx
push ebx
push edi
push edi
push ebx
push ebx
push dword [eax + 0x18c]
lea edx, [ebp + 0x10]
add eax, 0x208
push dword [ebp - 0x20]
push ebx
push ebx
push 1
push edx
push ecx
push edi
push edi
push ebx
push ebx
push eax
call fcn.004d43dc
add esp, 0x54
mov ecx, esi
push edi
push edi
push edx
push eax
call fcn.004b9c25
mov ecx, esi
call fcn.005421db
push eax
call fcn.00401e47
mov ecx, eax
call fcn.0042e112
cmp dword [ebp + 0x14], ebx
jne 0x43c1be
mov ecx, dword [0x62ae3c]
push 1
call fcn.00496cb7
mov esi, dword [ebp + 0xc]
mov byte [ebp - 4], 4
lea ecx, [ebp + 8]
jmp 0x43c420
mov eax, dword [0x61d784]
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 0xb
mov dword [ebp + 8], ebx
xor edi, edi
call fcn.0055c7c5
mov eax, dword [eax + 4]
lea ecx, [ebp + 8]
push ebx
push ecx
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, eax
call fcn.0044199a
mov ecx, dword [ebp + 8]
mov esi, eax
cmp ecx, ebx
je 0x43c21e
call fcn.0046ca72
push eax
lea ecx, [ebp - 0x1c]
call fcn.0053ec88
push dword [ebp + 0x10]
push dword [ebp - 0x1c]
call fcn.00524dbe
pop ecx
test eax, eax
pop ecx
je 0x43c27a
cmp esi, ebx
je 0x43c272
push 0x622c94
lea ecx, [ebp - 0x1c]
call fcn.0053ecd8
call fcn.0055c7c5
mov eax, dword [eax + 4]
lea ecx, [ebp + 8]
push esi
push ecx
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, eax
call fcn.0044199a
mov ecx, dword [ebp + 8]
mov esi, eax
call fcn.0046ca72
push eax
lea ecx, [ebp - 0x1c]
call fcn.0053ec88
push dword [ebp + 0x10]
push dword [ebp - 0x1c]
call fcn.00524dbe
pop ecx
test eax, eax
pop ecx
jne 0x43c26e
push 1
pop edi
cmp edi, ebx
je 0x43c21e
cmp edi, ebx
je 0x43c323
mov eax, dword [0x61d784]
mov dword [ebp - 0x28], eax
mov dword [ebp + 0x10], eax
push 0x46
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xd
call fcn.00545796
push 0x47
lea ecx, [ebp + 0x10]
call fcn.00545796
xor esi, esi
cmp dword [ebp + 0xc], ebx
je 0x43c2da
mov ecx, dword [ebp + 8]
mov eax, dword [ecx]
call dword [eax + 0x58]
test eax, eax
je 0x43c2d7
call fcn.00401e47
cmp eax, ebx
jne 0x43c2bd
xor eax, eax
jmp 0x43c2c0
mov eax, dword [eax + 0x1c]
push 0x12004
push dword [ebp - 0x28]
push dword [ebp + 0x10]
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 6
jne 0x43c2da
push 1
pop esi
mov ecx, dword [ebp + 8]
mov eax, dword [ecx]
call dword [eax + 0x58]
test eax, eax
je 0x43c2ea
cmp esi, ebx
jne 0x43c2fa
mov ecx, dword [ebp + 8]
mov eax, dword [ecx]
call dword [eax + 0x58]
test eax, eax
jne 0x43c38e
mov ecx, dword [ebp + 8]
push ebx
mov eax, dword [ecx]
call dword [eax + 0x5c]
mov ecx, dword [ebp + 8]
call fcn.00470e16
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0xc
call fcn.0053eb4f
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xb
call fcn.0053eb4f
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 4
call fcn.0053eb4f
push dword [ebp - 0x10]
call fcn.00525390
lea edi, [eax - 1]
xor esi, esi
cmp edi, ebx
pop ecx
jle 0x43c46e
mov eax, dword [ebp - 0x10]
add eax, esi
cmp byte [eax], 0x2f
jne 0x43c384
cmp esi, ebx
je 0x43c359
cmp byte [eax - 1], 0x20
je 0x43c384
cmp byte [0x625794], 0x2f
jne 0x43c36d
mov al, byte [eax + 1]
cmp al, 0x30
jl 0x43c36d
cmp al, 0x39
jle 0x43c384
cmp dword [0x5c0e54], ebx
je 0x43c467
push 0x5c
push esi
lea ecx, [ebp - 0x10]
call fcn.0053f095
inc esi
cmp esi, edi
jl 0x43c345
jmp 0x43c46e
mov ecx, dword [ebp + 8]
mov esi, ecx
mov eax, dword [ecx]
call dword [eax + 0x60]
lea ecx, [ebp + 0x14]
mov dword [ebp + 0x14], eax
mov eax, dword [esi]
push ecx
mov ecx, esi
call dword [eax + 0x64]
mov esi, eax
cmp esi, ebx
je 0x43c3fe
mov ecx, esi
call fcn.005421db
mov ecx, dword [0x62ae38]
push eax
call fcn.0042e112
cmp dword [ebp + 0xc], ebx
jne 0x43c3da
push dword [esi + 0x1c]
call dword [sym.imp.USER32.dll_SetActiveWindow]
push eax
call fcn.00540b59
mov ecx, esi
call fcn.00543e83
mov ecx, esi
call fcn.005421db
push dword [eax + 0x1c]
call dword [sym.imp.USER32.dll_IsIconic]
cmp eax, ebx
je 0x43c3fe
push 9
mov ecx, esi
call fcn.005421db
mov ecx, eax
call fcn.00543e1a
mov esi, dword [ebp + 8]
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0xc
call fcn.0053eb4f
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xb
call fcn.0053eb4f
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1c]
call fcn.0053eb4f
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 3
call fcn.0053eb4f
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 2
call fcn.0053eb4f
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 1
call fcn.0053eb4f
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.0053eb4f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.0053eb4f
mov eax, esi
jmp 0x43d599
mov dword [ebp - 0x68], 1
mov esi, dword [0x62a294]
push 1
pop edi
lea ecx, [ebp - 0x10]
push str.__O1
call fcn.0053aa84
cmp eax, 0xffffffff
je 0x43c4b1
push eax
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x10]
mov esi, edi
call fcn.0053a9ea
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0xe
call fcn.0053ec88
lea ecx, [ebp + 8]
mov byte [ebp - 4], 4
call fcn.0053eb4f
push str.__O0
lea ecx, [ebp - 0x10]
call fcn.0053aa84
cmp eax, 0xffffffff
je 0x43c4eb
push eax
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x10]
xor esi, esi
call fcn.0053a9ea
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0xf
call fcn.0053ec88
lea ecx, [ebp + 8]
mov byte [ebp - 4], 4
call fcn.0053eb4f
cmp esi, dword [0x62a294]
je 0x43c501
mov ecx, dword [ebp - 0x30]
mov dword [0x62a294], esi
call fcn.0043d927
push 0x5c1890
lea ecx, [ebp - 0x10]
call fcn.0053aa84
or esi, 0xffffffff
cmp eax, esi
jne 0x43c526
push 0x5c19b0
lea ecx, [ebp - 0x10]
call fcn.0053aa84
cmp eax, esi
je 0x43c552
push eax
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x10]
call fcn.0053a9ea
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x10
call fcn.0053ec88
lea ecx, [ebp + 8]
mov byte [ebp - 4], 4
call fcn.0053eb4f
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x60], edi
push 0x5c1894
lea ecx, [ebp - 0x10]
call fcn.0053aa84
cmp eax, esi
jne 0x43c574
push 0x5c19ac
lea ecx, [ebp - 0x10]
call fcn.0053aa84
cmp eax, esi
je 0x43c5a0
push eax
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x10]
call fcn.0053a9ea
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x11
call fcn.0053ec88
lea ecx, [ebp + 8]
mov byte [ebp - 4], 4
call fcn.0053eb4f
mov dword [ebp - 0x88], edi
push 0x5c1898
lea ecx, [ebp - 0x10]
call fcn.0053aa84
cmp eax, esi
jne 0x43c5c2
push 0x5c19a8
lea ecx, [ebp - 0x10]
call fcn.0053aa84
cmp eax, esi
je 0x43c5eb
push eax
lea eax, [ebp + 0xc]
push eax
lea ecx, [ebp - 0x10]
call fcn.0053a9ea
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x12
call fcn.0053ec88
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 4
call fcn.0053eb4f
mov dword [ebp + 0xc], ebx
push 0x5c189c
lea ecx, [ebp - 0x10]
call fcn.0053aa84
cmp eax, esi
jne 0x43c60d
push 0x5c19a4
lea ecx, [ebp - 0x10]
call fcn.0053aa84
cmp eax, esi
je 0x43c67e
push eax
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x10]
call fcn.0053a9ea
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x13
call fcn.0053ec88
lea ecx, [ebp + 8]
mov byte [ebp - 4], 4
call fcn.0053eb4f
push 0x5bd27c
push dword [ebp - 0x10]
call fcn.005268ed
pop ecx
cmp eax, ebx
pop ecx
mov dword [ebp - 0x70], eax
je 0x43c67e
lea ecx, [ebp - 0x90]
mov dword [ebp - 0x54], edi
push ecx
lea ecx, [ebp - 0xb1c]
push ecx
push ebx
push eax
call fcn.0044720f
add esp, 0x10
cmp eax, esi
je 0x43c67e
mov byte [ebp + eax - 0xb1c], bl
lea eax, [ebp - 0xb1c]
push eax
lea ecx, [ebp - 0x10]
call fcn.0053ecd8
mov al, byte [0x625794]
lea ecx, [ebp - 0x10]
push eax
call fcn.0053f016
cmp byte [0x625794], bl
mov esi, eax
je 0x43c74e
cmp esi, 0xffffffff
je 0x43c74e
lea eax, [esi + 1]
lea ecx, [ebp - 0x10]
push eax
lea eax, [ebp + 8]
push eax
call fcn.0053a8b5
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x14
call fcn.0053ec88
lea ecx, [ebp + 8]
mov byte [ebp - 4], 4
call fcn.0053eb4f
lea eax, [ebp + 8]
push esi
push eax
lea ecx, [ebp - 0x10]
call fcn.0053a9ea
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x15
call fcn.0053ec88
lea ecx, [ebp + 8]
mov byte [ebp - 4], 4
call fcn.0053eb4f
push dword [ebp - 0x18]
call fcn.00524c6e
dec eax
pop ecx
mov dword [ebp - 0x20], eax
mov al, byte [0x625794]
push eax
lea ecx, [ebp - 0x18]
call fcn.0053f016
cmp eax, 0xffffffff
je 0x43c83f
inc eax
lea ecx, [ebp - 0x18]
push eax
lea eax, [ebp + 8]
push eax
call fcn.0053a8b5
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x16
call fcn.0053ec88
lea ecx, [ebp + 8]
mov byte [ebp - 4], 4
call fcn.0053eb4f
push dword [ebp - 0x18]
call fcn.00524c6e
pop ecx
mov dword [ebp - 0x5c], eax
jmp 0x43c83f
push 0x5c19a0
lea ecx, [ebp - 0x10]
call fcn.0053aa84
push 0x5c199c
lea ecx, [ebp - 0x10]
mov dword [ebp + 0x10], eax
call fcn.0053aa84
push 0x5c1998
lea ecx, [ebp - 0x10]
mov dword [ebp + 8], eax
call fcn.0053aa84
push 0x5c1994
lea ecx, [ebp - 0x10]
mov edi, eax
call fcn.0053aa84
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp + 0x10]
cmp ecx, edi
mov eax, ecx
jg 0x43c798
mov eax, edi
cmp eax, dword [ebp + 8]
jle 0x43c7a9
cmp ecx, edi
jle 0x43c7a5
mov eax, ecx
jmp 0x43c7ac
mov eax, edi
jmp 0x43c7ac
mov eax, dword [ebp + 8]
cmp eax, dword [ebp - 0x28]
jle 0x43c7d0
cmp ecx, edi
mov eax, ecx
jg 0x43c7b9
mov eax, edi
cmp eax, dword [ebp + 8]
jle 0x43c7cb
cmp ecx, edi
jle 0x43c7c7
mov esi, dword [ebp + 0x10]
jmp 0x43c7d3
mov esi, edi
jmp 0x43c7d3
mov esi, dword [ebp + 8]
jmp 0x43c7d3
mov esi, dword [ebp - 0x28]
cmp esi, 0xffffffff
je 0x43c83c
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x10]
push eax
push esi
call fcn.00434d97
add esp, 0xc
cmp esi, edi
jne 0x43c7fa
cmp eax, ebx
je 0x43c7f5
dec eax
mov dword [ebp - 0x4c], eax
or edi, 0xffffffff
jmp 0x43c78d
cmp esi, dword [ebp + 0x10]
jne 0x43c80d
cmp eax, ebx
je 0x43c807
dec eax
mov dword [ebp - 0x20], eax
or dword [ebp + 0x10], 0xffffffff
jmp 0x43c78d
cmp esi, dword [ebp + 8]
jne 0x43c822
cmp eax, ebx
je 0x43c819
mov dword [ebp - 0x5c], eax
or dword [ebp + 8], 0xffffffff
jmp 0x43c78d
cmp esi, dword [ebp - 0x28]
jne 0x43c83c
lea eax, [ebp - 0x18]
lea ecx, [ebp - 0x24]
push eax
call fcn.0053ec88
or dword [ebp - 0x28], 0xffffffff
jmp 0x43c78d
push 1
pop edi
lea eax, [ebp - 0xd4]
mov dword [ebp + 0x10], ebx
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetCPInfo]
test eax, eax
je 0x43c860
movzx eax, byte [ebp - 0xd0]
mov dword [ebp - 0x6c], eax
jmp 0x43c863
mov dword [ebp - 0x6c], ebx
lea eax, [ebp - 0x214]
mov dword [ebp + 8], edi
push eax
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp eax, 0xffffffff
mov dword [ebp - 0x1c], eax
je 0x43c9c8
test byte [ebp - 0x214], 0x10
je 0x43c8a2
lea eax, [ebp - 0x214]
push eax
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x43c882
mov dword [ebp + 8], ebx
test byte [ebp - 0x214], 1
je 0x43c8ae
mov dword [ebp - 0x48], edi
push dword [ebp - 0x10]
call fcn.00525390
mov esi, eax
pop ecx
cmp esi, ebx
je 0x43c944
jle 0x43c90c
mov eax, dword [ebp - 0x10]
cmp dword [0x64ea60], ebx
je 0x43c8f4
mov dword [ebp - 0x50], esi
add esi, eax
push esi
push eax
mov edi, eax
call fcn.00528500
sub eax, edi
pop ecx
mov esi, eax
mov eax, dword [ebp - 0x10]
pop ecx
mov cl, byte [esi + eax]
cmp cl, 0x5c
je 0x43c909
cmp cl, 0x3a
je 0x43c909
jmp 0x43c903
mov cl, byte [esi + eax - 1]
cmp cl, 0x5c
je 0x43c90c
cmp cl, 0x3a
je 0x43c90c
dec esi
cmp esi, ebx
jg 0x43c8c6
jmp 0x43c90c
mov esi, dword [ebp - 0x50]
lea eax, [ebp - 0x10]
lea ecx, [ebp - 0x14]
push eax
call fcn.0053ec88
lea eax, [ebp - 0xb8]
push esi
push eax
lea ecx, [ebp - 0x14]
call fcn.0053a9ea
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x17
call fcn.0053ec88
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 4
call fcn.0053eb4f
cmp dword [ebp + 0x14], ebx
jne 0x43c998
cmp dword [ebp - 0x6c], ebx
je 0x43c963
push dword [ebp - 0x6c]
lea eax, [ebp - 0x1e8]
push eax
call fcn.00526800
pop ecx
test eax, eax
pop ecx
jne 0x43c998
lea eax, [ebp - 0x1e8]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0xb0]
push eax
call fcn.0053ede4
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x19
call fcn.0053ec88
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xb0]
call fcn.0053eb4f
jmp 0x43c9d4
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0xa4]
push eax
call fcn.0053ede4
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x18
call fcn.0053ec88
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xa4]
jmp 0x43c991
lea eax, [ebp - 0x10]
lea ecx, [ebp - 0x14]
push eax
call fcn.0053ec88
mov esi, 0x622c94
push esi
push dword [ebp - 0x14]
call fcn.00524dbe
pop ecx
test eax, eax
pop ecx
je 0x43d50e
cmp dword [0x625904], ebx
jne 0x43ca72
mov eax, dword [ebp - 0x14]
cmp dword [eax - 8], 4
jl 0x43ca72
mov eax, dword [eax - 8]
lea ecx, [ebp - 0x14]
add eax, 0xfffffffc
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.0053a8b5
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x1a
call fcn.0053f083
push 0x5bfd50
lea ecx, [ebp - 0x58]
call fcn.0053aa84
cmp eax, 0xffffffff
je 0x43ca66
push dword [ebp - 0x14]
lea eax, [ebp - 0xd4]
push 0x14
push eax
push esi
push str.Signature
push 0x5c0c5c
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0xd4]
push eax
push str.UE_Proj:
call fcn.00527150
pop ecx
test eax, eax
pop ecx
je 0x43d4a9
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 4
call fcn.0053eb4f
cmp dword [ebp + 8], ebx
je 0x43d43b
lea eax, [ebp - 0x31c]
push 0x105
push eax
mov byte [ebp - 0x31c], bl
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GetShortPathNameA]
cmp dword [0x625910], ebx
mov dword [ebp - 0x50], ebx
mov dword [ebp + 0x10], ebx
mov dword [ebp - 0x84], ebx
je 0x43cb0c
mov eax, dword [ebp - 0x14]
cmp dword [eax - 8], 4
jl 0x43cb0c
mov eax, dword [eax - 8]
lea ecx, [ebp - 0x14]
add eax, 0xfffffffc
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.0053a8b5
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1b
call fcn.0053f083
push str..lnk
lea ecx, [ebp - 0x28]
call fcn.0053aa84
cmp eax, 0xffffffff
jne 0x43caf6
push str..pif
lea ecx, [ebp - 0x28]
call fcn.0053aa84
cmp eax, 0xffffffff
je 0x43cb00
mov dword [ebp - 0x84], 1
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 4
call fcn.0053eb4f
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x64], ebx
mov ecx, dword [eax + 0x80]
cmp ecx, ebx
je 0x43d026
mov eax, dword [ecx]
call dword [eax + 0x10]
cmp eax, ebx
mov dword [ebp - 0x64], eax
je 0x43d026
cmp dword [ebp + 0x10], ebx
jne 0x43d026
mov eax, dword [ebp - 0x30]
lea edx, [ebp - 0x64]
push edx
mov ecx, dword [eax + 0x80]
mov eax, dword [ecx]
call dword [eax + 0x14]
mov esi, eax
mov ecx, esi
mov eax, dword [esi]
call dword [eax + 0x54]
cmp eax, ebx
mov dword [ebp - 0x8c], eax
je 0x43d01d
mov eax, dword [esi]
lea ecx, [ebp - 0x8c]
push ecx
mov ecx, esi
call dword [eax + 0x58]
mov edi, eax
cmp edi, ebx
je 0x43cc3d
lea eax, [ebp - 0x14]
lea ecx, [ebp - 0xa0]
push eax
call fcn.0053e8c4
mov eax, dword [eax]
mov ecx, dword [edi + 0x20]
push eax
push ecx
mov byte [ebp - 4], 0x1c
call fcn.00528430
pop ecx
test eax, eax
pop ecx
je 0x43cc25
cmp dword [edi + 0x188], ebx
je 0x43cbe4
lea eax, [ebp - 0x14]
lea ecx, [ebp - 0xac]
push eax
call fcn.0053e8c4
mov eax, dword [eax]
mov ecx, dword [edi + 0x158]
push eax
push ecx
call fcn.00528430
neg eax
pop ecx
sbb al, al
pop ecx
inc al
lea ecx, [ebp - 0xac]
mov byte [ebp + 0xb], al
call fcn.0053eb4f
cmp byte [ebp + 0xb], bl
jne 0x43cc25
cmp dword [0x5c0af4], ebx
je 0x43cc20
cmp byte [ebp - 0x31c], bl
setne al
cmp al, bl
je 0x43cc20
cmp byte [edi + 0x50], bl
lea eax, [edi + 0x50]
setne cl
cmp cl, bl
je 0x43cc20
lea ecx, [ebp - 0x31c]
push ecx
push eax
call fcn.00528430
neg eax
sbb al, al
pop ecx
inc al
pop ecx
mov byte [ebp + 0xb], al
jne 0x43cc25
mov byte [ebp + 0xb], bl
jmp 0x43cc29
mov byte [ebp + 0xb], 1
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 4
call fcn.0053eb4f
cmp byte [ebp + 0xb], bl
jne 0x43cc4e
cmp dword [ebp - 0x8c], ebx
jne 0x43cb62
jmp 0x43d01d
mov eax, dword [0x61d784]
xor esi, esi
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x78], eax
push 0x46
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x1e
call fcn.00545796
push 0x47
lea ecx, [ebp - 0x78]
call fcn.00545796
cmp dword [ebp + 0xc], ebx
je 0x43ccad
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x58]
test eax, eax
je 0x43ccaa
call fcn.00401e47
cmp eax, ebx
jne 0x43cc90
xor eax, eax
jmp 0x43cc93
mov eax, dword [eax + 0x1c]
push 0x12004
push dword [ebp - 0x3c]
push dword [ebp - 0x78]
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 6
jne 0x43ccad
push 1
pop esi
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x58]
test eax, eax
je 0x43ccca
cmp esi, ebx
je 0x43ccca
push ebx
push ebx
mov ecx, edi
call fcn.00475dfe
jmp 0x43d005
mov eax, dword [edi]
mov ecx, edi
mov dword [ebp + 0x10], edi
call dword [eax + 0x60]
lea ecx, [ebp - 0xb4]
mov dword [ebp - 0xb4], eax
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0x64]
mov esi, eax
cmp esi, ebx
je 0x43cd40
mov ecx, esi
call fcn.005421db
mov ecx, dword [0x62ae38]
push eax
call fcn.0042e112
cmp dword [ebp + 0xc], ebx
jne 0x43cd1c
push dword [esi + 0x1c]
call dword [sym.imp.USER32.dll_SetActiveWindow]
push eax
call fcn.00540b59
mov ecx, esi
call fcn.00543e83
mov ecx, esi
call fcn.005421db
push dword [eax + 0x1c]
call dword [sym.imp.USER32.dll_IsIconic]
cmp eax, ebx
je 0x43cd40
push 9
mov ecx, esi
call fcn.005421db
mov ecx, eax
call fcn.00543e1a
cmp edi, ebx
je 0x43d005
mov ecx, dword [0x62ae3c]
cmp dword [ecx + 0x193c], ebx
je 0x43cd66
cmp dword [edi + 0x188], ebx
jne 0x43cd66
push dword [ebp - 0x14]
call fcn.00484732
mov eax, dword [ebp - 0x18]
cmp dword [eax - 8], ebx
je 0x43d005
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x60]
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0xa8], eax
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0x64]
mov esi, eax
cmp esi, ebx
je 0x43d005
cmp dword [ebp - 0x20], ebx
jge 0x43cda5
cmp dword [ebp - 0x4c], ebx
jl 0x43cf64
push 0x622c94
push dword [ebp - 0x24]
call fcn.00524dbe
pop ecx
test eax, eax
pop ecx
jne 0x43cf64
mov eax, dword [edi + 0x18c]
mov dword [ebp + 8], 1
cmp eax, ebx
mov dword [ebp - 0x7c], 0x5c0ac0
je 0x43cdf0
push 2
mov dword [ebp - 0x7c], 0x5c0ad4
pop ecx
cmp dword [edi + 0x164], ecx
mov dword [ebp + 8], ecx
je 0x43cdf0
mov dword [ebp - 0x7c], 0x5c0ad0
cmp dword [ebp - 0x4c], ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x40], ebx
jle 0x43ce9c
cmp dword [ebp + 8], 2
jne 0x43ce4e
movzx cx, byte [0x5c1cd4]
mov dword [ebp - 0x74], ecx
or ecx, 0xffffffff
push ebx
push ecx
push ebx
push ebx
push ebx
push ecx
push ecx
push ebx
push ebx
push eax
push dword [ebp - 0x20]
lea eax, [ebp + 8]
push ebx
push ebx
push 1
push eax
lea eax, [ebp - 0x74]
push eax
push ecx
push ecx
push ebx
lea eax, [edi + 0x208]
push ebx
push eax
call fcn.004d43dc
add esp, 0x54
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], edx
mov dword [ebp + 8], 2
jmp 0x43ce8b
or ecx, 0xffffffff
push ebx
push ecx
push ebx
push ebx
push ebx
push ecx
push ecx
push ebx
push ebx
push eax
lea eax, [ebp + 8]
push dword [ebp - 0x20]
push ebx
push ebx
push 1
push eax
push 0x5c1cd4
push ecx
push ecx
push ebx
lea eax, [edi + 0x208]
push ebx
push eax
call fcn.004d43dc
add esp, 0x54
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], edx
mov dword [ebp + 8], 1
mov eax, dword [ebp - 0x44]
and eax, dword [ebp - 0x40]
cmp eax, 0xffffffff
jne 0x43ce9c
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x40], ebx
cmp dword [ebp - 0x20], ebx
jle 0x43cee8
or eax, 0xffffffff
push ebx
push eax
push ebx
push ebx
push ebx
push eax
push eax
push ebx
push ebx
push dword [edi + 0x18c]
lea ecx, [ebp + 8]
add edi, 0x208
push dword [ebp - 0x20]
push ebx
push ebx
push 1
push ecx
push dword [ebp - 0x7c]
push eax
push eax
push dword [ebp - 0x40]
push dword [ebp - 0x44]
push edi
call fcn.004d43dc
add esp, 0x54
cmp edx, ebx
jl 0x43cee8
jg 0x43cee2
cmp eax, ebx
jbe 0x43cee8
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], edx
push 0xffffffffffffffff
push 0xffffffffffffffff
push dword [ebp - 0x40]
mov ecx, esi
push dword [ebp - 0x44]
call fcn.004b9c25
push 0xffffffffffffffff
push dword [ebp - 0x5c]
push dword [esi + 0x1c]
call fcn.00465077
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0x80]
push eax
push dword [esi + 0x1c]
call fcn.00463bb0
push dword [ebp - 0x98]
push dword [ebp - 0x80]
push ebx
push dword [esi + 0x1c]
call fcn.00463ca0
mov eax, dword [ebp - 0x80]
mov ecx, dword [esi + 0xf0]
cdq
add ecx, eax
mov eax, dword [esi + 0xf4]
adc eax, edx
mov dword [esi + 0x220], ecx
mov dword [esi + 0x228], ecx
push ebx
mov ecx, esi
mov dword [esi + 0x224], eax
mov dword [esi + 0x22c], eax
call fcn.004b7e2a
jmp 0x43d005
push 0x622c94
push dword [ebp - 0x24]
call fcn.00524dbe
pop ecx
test eax, eax
pop ecx
je 0x43d005
lea eax, [ebp - 0x24]
push eax
mov eax, dword [0x62ae3c]
lea ecx, [eax + 0x1948]
call fcn.0053ec88
push 1
mov dword [esi + 0x1d4], ebx
pop eax
mov dword [esi + 0x1d0], eax
mov ecx, dword [0x62ae3c]
push ebx
push ebx
mov ecx, dword [ecx + 0x195c]
push eax
mov dword [esi + 0x1d8], ecx
mov ecx, dword [0x62ae3c]
mov ecx, dword [ecx + 0x1960]
mov dword [esi + 0x1dc], ecx
mov ecx, dword [0x62ae3c]
mov ecx, dword [ecx + 0x1950]
mov dword [esi + 0x1ec], eax
mov dword [esi + 0x1e8], ecx
mov dword [esi + 0x1f0], eax
mov ecx, dword [0x62ae3c]
mov ecx, dword [ecx + 0x197c]
mov dword [esi + 0x1e4], ebx
mov dword [esi + 0x208], ecx
push dword [ebp - 0x24]
mov ecx, esi
call fcn.004c8470
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x1d
call fcn.0053eb4f
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 4
call fcn.0053eb4f
cmp dword [ebp - 0x64], ebx
jne 0x43cb30
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x30]
lea ecx, [eax + 0x1c0]
call fcn.0053ec88
cmp dword [ebp + 0x10], ebx
jne 0x43d379
cmp dword [0x6259e4], ebx
jne 0x43d06b
cmp dword [0x6259e0], ebx
jne 0x43d06b
cmp dword [ebp - 0x84], ebx
jne 0x43d06b
cmp dword [ebp - 0x68], ebx
jne 0x43d06b
push dword [ebp - 0x14]
mov ecx, dword [ebp - 0x30]
call fcn.0054ef94
jmp 0x43d079
push dword [ebp - 0x68]
mov ecx, dword [ebp - 0x30]
push dword [ebp - 0x14]
call fcn.00442687
cmp eax, ebx
mov dword [ebp + 0x10], eax
je 0x43d379
mov ecx, dword [0x62ae3c]
cmp dword [ecx + 0x193c], ebx
je 0x43d0a2
cmp dword [eax + 0x188], ebx
jne 0x43d0a2
push dword [ebp - 0x14]
call fcn.00484732
mov edi, dword [ebp + 0x10]
mov ecx, edi
mov eax, dword [edi]
call dword [eax + 0x60]
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0xc0], eax
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0x64]
mov esi, eax
mov eax, dword [ebp - 0x18]
cmp dword [eax - 8], ebx
je 0x43d353
cmp esi, ebx
je 0x43d379
cmp dword [ebp - 0x20], ebx
jge 0x43d0e4
cmp dword [ebp - 0x4c], ebx
jl 0x43d2b2
push 0x622c94
push dword [ebp - 0x24]
call fcn.00524dbe
pop ecx
test eax, eax
pop ecx
jne 0x43d2b2
cmp dword [edi + 0x164], 2
mov dword [ebp + 8], 1
mov dword [ebp - 0x3c], 0x5c0ac0
jne 0x43d119
mov dword [ebp - 0x3c], 0x5c0ac4
mov eax, dword [edi + 0x18c]
cmp eax, ebx
je 0x43d131
mov dword [ebp + 8], 4
mov dword [ebp - 0x3c], 0x5c0ac8
cmp dword [ebp - 0x4c], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], ebx
jle 0x43d1e2
cmp dword [ebp + 8], 2
jne 0x43d191
or edi, 0xffffffff
push ebx
push edi
push ebx
push ebx
push ebx
push edi
push edi
push ebx
push ebx
push eax
lea eax, [ebp + 8]
push dword [ebp - 0x20]
movzx cx, byte [0x5c1cd4]
push ebx
push ebx
push 1
push eax
lea eax, [ebp - 0x74]
mov dword [ebp - 0x74], ecx
push eax
mov eax, dword [ebp + 0x10]
push edi
push edi
push ebx
add eax, 0x208
push ebx
push eax
call fcn.004d43dc
add esp, 0x54
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], edx
mov dword [ebp + 8], 2
jmp 0x43d1d0
or edi, 0xffffffff
push ebx
push edi
push ebx
push ebx
push ebx
push edi
push edi
push ebx
push ebx
push eax
lea eax, [ebp + 8]
push dword [ebp - 0x4c]
push ebx
push ebx
push 1
push eax
mov eax, dword [ebp + 0x10]
push 0x5c1cd4
push edi
push edi
push ebx
add eax, 0x208
push ebx
push eax
call fcn.004d43dc
add esp, 0x54
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], edx
mov dword [ebp + 8], 1
mov eax, dword [ebp - 0x38]
and eax, dword [ebp - 0x34]
cmp eax, edi
jne 0x43d1e5
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], ebx
jmp 0x43d1e5
or edi, 0xffffffff
cmp dword [ebp - 0x20], ebx
jle 0x43d230
mov eax, dword [ebp + 0x10]
push ebx
push edi
push ebx
push ebx
push ebx
push edi
push edi
push ebx
push ebx
push dword [eax + 0x18c]
lea ecx, [ebp + 8]
add eax, 0x208
push dword [ebp - 0x20]
push ebx
push ebx
push 1
push ecx
push dword [ebp - 0x3c]
push edi
push edi
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push eax
call fcn.004d43dc
add esp, 0x54
cmp edx, ebx
jl 0x43d230
jg 0x43d22a
cmp eax, ebx
jbe 0x43d230
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], edx
push edi
push edi
push dword [ebp - 0x34]
mov ecx, esi
push dword [ebp - 0x38]
call fcn.004b9c25
push edi
push dword [ebp - 0x5c]
push dword [esi + 0x1c]
call fcn.00465077
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0x94]
push eax
push dword [esi + 0x1c]
call fcn.00463bb0
push dword [ebp - 0xbc]
push dword [ebp - 0x94]
push ebx
push dword [esi + 0x1c]
call fcn.00463ca0
mov eax, dword [ebp - 0x94]
mov ecx, dword [esi + 0xf0]
cdq
add ecx, eax
mov eax, dword [esi + 0xf4]
adc eax, edx
mov dword [esi + 0x220], ecx
mov dword [esi + 0x228], ecx
push ebx
mov ecx, esi
mov dword [esi + 0x224], eax
mov dword [esi + 0x22c], eax
call fcn.004b7e2a
jmp 0x43d353
push 0x622c94
push dword [ebp - 0x24]
call fcn.00524dbe
pop ecx
test eax, eax
pop ecx
je 0x43d353
lea eax, [ebp - 0x24]
push eax
mov eax, dword [0x62ae3c]
lea ecx, [eax + 0x1948]
call fcn.0053ec88
push 1
mov dword [esi + 0x1d4], ebx
pop eax
mov dword [esi + 0x1d0], eax
mov ecx, dword [0x62ae3c]
push ebx
push ebx
mov ecx, dword [ecx + 0x195c]
push eax
mov dword [esi + 0x1d8], ecx
mov ecx, dword [0x62ae3c]
mov ecx, dword [ecx + 0x1960]
mov dword [esi + 0x1dc], ecx
mov ecx, dword [0x62ae3c]
mov ecx, dword [ecx + 0x1950]
mov dword [esi + 0x1ec], eax
mov dword [esi + 0x1e8], ecx
mov dword [esi + 0x1f0], eax
mov ecx, dword [0x62ae3c]
mov ecx, dword [ecx + 0x197c]
mov dword [esi + 0x1e4], ebx
mov dword [esi + 0x208], ecx
push dword [ebp - 0x24]
mov ecx, esi
call fcn.004c8470
cmp esi, ebx
je 0x43d379
cmp dword [ebp + 0xc], ebx
jne 0x43d372
push dword [esi + 0x1c]
call dword [sym.imp.USER32.dll_SetActiveWindow]
push eax
call fcn.00540b59
mov ecx, esi
call fcn.00543e83
mov dword [ebp - 0x50], 1
cmp dword [ebp - 0x48], ebx
mov eax, dword [ebp + 0x10]
je 0x43d390
push 1
cmp eax, ebx
pop edi
je 0x43d393
mov dword [eax + 0x498], edi
jmp 0x43d393
push 1
pop edi
cmp dword [ebp - 0x88], ebx
je 0x43d3a5
cmp eax, ebx
je 0x43d3a5
mov dword [eax + 0x1ec], edi
cmp dword [ebp - 0x50], ebx
je 0x43d3b6
mov ecx, dword [0x62ae3c]
push edi
call fcn.00496cb7
cmp dword [ebp - 0x1c], 0xffffffff
je 0x43d43b
mov esi, dword [sym.imp.KERNEL32.dll_FindNextFileA]
lea eax, [ebp - 0x214]
push eax
push dword [ebp - 0x1c]
call esi
cmp eax, ebx
je 0x43d43b
test byte [ebp - 0x214], 0x10
je 0x43d3eb
lea eax, [ebp - 0x214]
push eax
push dword [ebp - 0x1c]
call esi
cmp eax, ebx
jne 0x43d3d2
cmp eax, ebx
je 0x43d43b
test byte [ebp - 0x214], 1
je 0x43d3fd
mov dword [ebp - 0x48], edi
jmp 0x43d403
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x1e8]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x9c]
push eax
call fcn.0053ede4
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1f
call fcn.0053ec88
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 4
call fcn.0053eb4f
jmp 0x43ca7b
cmp dword [ebp - 0x54], ebx
je 0x43d489
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0xb1c]
push eax
push ebx
push dword [ebp - 0x70]
call fcn.0044720f
add esp, 0x10
cmp eax, 0xffffffff
je 0x43d47d
mov byte [ebp + eax - 0xb1c], bl
lea eax, [ebp - 0xb1c]
push eax
lea ecx, [ebp - 0x10]
call fcn.0053ecd8
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x48], eax
jmp 0x43d489
push dword [ebp - 0x70]
mov dword [ebp - 0x54], ebx
call fcn.00526b3c
pop ecx
cmp dword [ebp - 0x1c], 0xffffffff
je 0x43d498
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [ebp - 0x54], ebx
je 0x43d54d
push 1
pop edi
jmp 0x43c863
mov eax, dword [ebp - 0x30]
push dword [ebp - 0x14]
lea esi, [eax + 0x1c8]
mov eax, dword [eax + 0x1c8]
push eax
call fcn.00524dbe
pop ecx
test eax, eax
pop ecx
je 0x43d502
mov eax, dword [0x62ae3c]
push 1
add eax, 0x38c
mov edi, dword [eax]
mov dword [eax], ebx
mov ecx, dword [0x62ae3c]
call fcn.004a07c4
mov eax, dword [0x62ae3c]
mov ecx, esi
mov dword [eax + 0x38c], edi
lea eax, [ebp - 0x14]
push eax
call fcn.0053ec88
push dword [esi]
mov ecx, dword [ebp - 0x30]
call fcn.004403e0
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 4
call fcn.0053eb4f
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 3
call fcn.0053eb4f
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 2
call fcn.0053eb4f
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 1
call fcn.0053eb4f
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.0053eb4f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.0053eb4f
xor eax, eax
jmp 0x43d599
push dword [ebp - 0x48]
mov ecx, dword [0x62ae3c]
call fcn.004937a5
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 3
call fcn.0053eb4f
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 2
call fcn.0053eb4f
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 1
call fcn.0053eb4f
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.0053eb4f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.0053eb4f
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 0x10