Function at 0x429f80
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x158
mov eax, dword [0x63e758]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
mov dword [ebp - 0x154], eax
mov eax, dword [ebp + 0xc]
push edi
mov dword [ebp - 0x148], eax
mov eax, dword [ebp + 0x10]
push 0
mov dword [ebp - 0x150], eax
call fcn.00431c10
mov edi, eax
add esp, 4
mov edx, edi
lea eax, [edx + 1]
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x429fc2
sub edx, eax
lea ebx, [edx + 0x82]
lea eax, [ebx + 1]
push eax
call fcn.0058023c
mov esi, eax
add esp, 4
test esi, esi
jne 0x42a044
push 4
push str.com.freerdp.channels.addin
call fcn.0042f4e0
add esp, 4
push eax
call fcn.0042f7e0
add esp, 8
test eax, eax
je 0x42a44f
push str.malloc_failed_
push str.freerdp_channels_list_dynamic_addins
push str.C:BuildFreeRDP_stable_1.1BuildFreeRDPchannelsclient_addin.c
push 0xae
push 4
push 0
push str.com.freerdp.channels.addin
call fcn.0042f4e0
add esp, 4
push eax
call fcn.0042fce0
add esp, 0x1c
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005802ce
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x154]
test eax, eax
je 0x42a0a2
mov edx, dword [ebp - 0x148]
mov ecx, dword [ebp - 0x150]
test edx, edx
je 0x42a077
test ecx, ecx
je 0x42a08f
push edi
push ecx
push edx
push eax
push str._s_client__s__s._s
push ebx
push esi
call fcn.00580ea1
add esp, 0x1c
jmp 0x42a0b2
test ecx, ecx
je 0x42a08f
push edi
push ecx
push eax
push str._s_client____s._s
push ebx
push esi
call fcn.00580ea1
add esp, 0x18
jmp 0x42a0b2
push edi
push eax
push str._s_client._s
push ebx
push esi
call fcn.00580ea1
add esp, 0x14
jmp 0x42a0b2
push edi
push str.__client._s
push ebx
push esi
call fcn.00580ea1
add esp, 0x10
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42a0b7
sub ecx, edx
lea ebx, [ecx + 0x2e]
push ebx
call fcn.0058023c
mov edi, eax
add esp, 4
test edi, edi
jne 0x42a121
push 4
push str.com.freerdp.channels.addin
call fcn.0042f4e0
add esp, 4
push eax
call fcn.0042f7e0
add esp, 8
test eax, eax
je 0x42a11b
push str.malloc_failed_
push str.freerdp_channels_list_dynamic_addins
push str.C:BuildFreeRDP_stable_1.1BuildFreeRDPchannelsclient_addin.c
push 0xcd
push 4
push edi
push str.com.freerdp.channels.addin
call fcn.0042f4e0
add esp, 4
push eax
call fcn.0042fce0
add esp, 0x1c
push esi
jmp 0x42a447
push 0x1e
push str.C:_Program_Files__x86__FreeRDP
push edi
call fcn.00580540
push str.lib_freerdp2
push ebx
push edi
mov byte [edi + 0x1e], 0
call fcn.00431a00
push esi
push ebx
push edi
call fcn.00431a00
push esi
call fcn.00580204
add esp, 0x28
lea eax, [ebp - 0x144]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov ebx, eax
push edi
mov dword [ebp - 0x154], ebx
call fcn.00580204
push 4
xor edi, edi
push 0x80
mov dword [ebp - 0x148], edi
call fcn.00580d1f
add esp, 0xc
mov dword [ebp - 0x14c], eax
test eax, eax
jne 0x42a1cc
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
push 4
push str.com.freerdp.channels.addin
call fcn.0042f4e0
add esp, 4
push eax
call fcn.0042f7e0
add esp, 8
test eax, eax
je 0x42a44f
push str.calloc_failed_
push str.freerdp_channels_list_dynamic_addins
push str.C:BuildFreeRDP_stable_1.1BuildFreeRDPchannelsclient_addin.c
push 0xdf
jmp 0x42a017
cmp ebx, 0xffffffff
je 0x42a451
push 0x34
push 1
xor esi, esi
call fcn.00580d1f
mov ebx, eax
add esp, 8
mov dword [ebp - 0x150], ebx
test ebx, ebx
je 0x42a3ce
mov dl, byte [ebp - 0x118]
test dl, dl
je 0x42a382
lea ecx, [ebp - 0x118]
xor eax, eax
lea ecx, [ecx + 1]
cmp dl, 0x2d
sete al
add esi, eax
mov al, byte [ecx]
mov dl, al
test al, al
jne 0x42a207
cmp esi, 1
jne 0x42a264
lea eax, [ebp - 0x118]
push 0x2d
push eax
call fcn.00581060
inc eax
lea ecx, [ebp - 0x118]
sub eax, ecx
dec eax
push eax
mov eax, ecx
push eax
lea eax, [ebx + 4]
push eax
call fcn.00582300
mov eax, dword [ebp - 0x14c]
add esp, 0x14
mov dword [ebx], 0x121
mov dword [eax + edi*4], ebx
inc edi
mov dword [ebp - 0x148], edi
jmp 0x42a38b
cmp esi, 2
jne 0x42a2de
lea eax, [ebp - 0x118]
push 0x2d
push eax
call fcn.00581060
push 0x2d
lea edi, [eax + 1]
push edi
call fcn.00581060
push 0x2e
lea ebx, [eax + 1]
push ebx
call fcn.00581060
lea esi, [eax + 1]
lea eax, [ebp - 0x118]
sub edi, eax
dec edi
push edi
mov edi, dword [ebp - 0x150]
push eax
lea eax, [edi + 4]
push eax
call fcn.00582300
sub esi, ebx
lea eax, [edi + 0x24]
dec esi
push esi
push ebx
push eax
call fcn.00582300
mov eax, dword [ebp - 0x148]
add esp, 0x30
mov ebx, dword [ebp - 0x14c]
mov dword [edi], 0x321
mov dword [ebx + eax*4], edi
mov edi, eax
inc edi
mov dword [ebp - 0x148], edi
jmp 0x42a391
cmp esi, 3
jne 0x42a382
lea eax, [ebp - 0x118]
push 0x2d
push eax
call fcn.00581060
push 0x2d
lea edi, [eax + 1]
push edi
call fcn.00581060
push 0x2d
lea ebx, [eax + 1]
push ebx
call fcn.00581060
inc eax
push 0x2e
push eax
mov dword [ebp - 0x158], eax
call fcn.00581060
lea esi, [eax + 1]
lea eax, [ebp - 0x118]
sub edi, eax
dec edi
push edi
push eax
mov eax, dword [ebp - 0x150]
add eax, 4
push eax
call fcn.00582300
mov edi, dword [ebp - 0x158]
mov eax, edi
sub eax, ebx
dec eax
push eax
push ebx
mov ebx, dword [ebp - 0x150]
lea eax, [ebx + 0x24]
push eax
call fcn.00582300
sub esi, edi
lea eax, [ebx + 0x14]
dec esi
push esi
push edi
push eax
call fcn.00582300
mov edi, dword [ebp - 0x148]
add esp, 0x44
mov eax, dword [ebp - 0x14c]
mov dword [ebx], 0x721
mov dword [eax + edi*4], ebx
inc edi
mov dword [ebp - 0x148], edi
jmp 0x42a38b
push ebx
call fcn.00580204
add esp, 4
mov ebx, dword [ebp - 0x14c]
mov esi, dword [ebp - 0x154]
lea eax, [ebp - 0x144]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x42a1d5
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov dword [ebx + edi*4], 0
mov eax, ebx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005802ce
mov esp, ebp
pop ebp
ret
push 4
push str.com.freerdp.channels.addin
call fcn.0042f4e0
add esp, 4
push eax
call fcn.0042f7e0
add esp, 8
test eax, eax
je 0x42a418
push str.calloc_failed_
push str.freerdp_channels_list_dynamic_addins
push str.C:BuildFreeRDP_stable_1.1BuildFreeRDPchannelsclient_addin.c
push 0xef
push 4
push 0
push str.com.freerdp.channels.addin
call fcn.0042f4e0
add esp, 4
push eax
call fcn.0042fce0
add esp, 0x1c
push dword [ebp - 0x154]
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ebx, dword [ebp - 0x14c]
xor esi, esi
mov eax, dword [ebx]
test eax, eax
je 0x42a446
push eax
call fcn.00580204
mov eax, dword [ebx + esi*4 + 4]
lea esi, [esi + 1]
add esp, 4
test eax, eax
jne 0x42a432
push ebx
call fcn.00580204
add esp, 4
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005802ce
mov esp, ebp
pop ebp
ret