Function at 0x439dc0
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
lea esp, [esp - 0x194]
push ebx
push esi
push edi
mov dword [ebp - 0x144], 0
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x14c], 0
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x160], 0
xor eax, eax
push fcn.00439d50
push ebp
push 0x414a60
push dword fs:[eax]
mov dword fs:[eax], esp
mov ecx, dword [0x5f5000]
mov edx, 1
mov eax, 0x620cb8
call fcn.00429c20
mov dword [ebp - 0x178], eax
mov ebx, 0x620d38
lea eax, [ebp - 0x160]
mov edx, 0x620d38
call fcn.0040cf40
mov dword [ebp - 0x164], 4
lea eax, [ebp - 0x164]
push eax
mov edx, 0x620d38
mov ecx, 1
lea eax, [ebp - 0x160]
call fcn.0040d060
lea eax, [ebp - 0x168]
push eax
mov eax, dword [0x5f2970]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2970]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 0x160]
call fcn.00408bc0
lea eax, [ebp - 0x168]
push eax
mov eax, dword [0x5f2980]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2980]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 0x160]
add eax, 4
call fcn.00408bc0
lea eax, [ebp - 0x168]
push eax
mov eax, dword [0x5f2990]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2990]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 0x160]
add eax, 8
call fcn.00408bc0
lea eax, [ebp - 0x168]
push eax
mov eax, dword [0x5f29a0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f29a0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 0x160]
add eax, 0xc
call fcn.00408bc0
mov edx, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x178]
lea eax, [ecx + 8]
mov ecx, ebx
call fcn.0040d040
mov ecx, dword [0x5f50c0]
mov edx, 1
mov eax, 0x620cb8
call fcn.00429c20
mov dword [ebp - 0x17c], eax
mov ebx, 0x620d38
lea eax, [ebp - 0x160]
mov edx, 0x620d38
call fcn.0040cf40
mov dword [ebp - 0x164], 3
lea eax, [ebp - 0x164]
push eax
mov edx, 0x620d38
mov ecx, 1
lea eax, [ebp - 0x160]
call fcn.0040d060
lea eax, [ebp - 0x168]
push eax
mov eax, dword [0x5f29b0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f29b0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 0x160]
call fcn.00408bc0
lea eax, [ebp - 0x168]
push eax
mov eax, dword [0x5f29c0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f29c0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 0x160]
add eax, 4
call fcn.00408bc0
lea eax, [ebp - 0x168]
push eax
mov eax, dword [0x5f29d0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f29d0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 0x160]
add eax, 8
call fcn.00408bc0
mov edx, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x17c]
lea eax, [ecx + 8]
mov ecx, ebx
call fcn.0040d040
mov ecx, dword [0x5f50e0]
mov edx, 1
mov eax, 0x620cb8
call fcn.00429c20
mov dword [ebp - 0x180], eax
mov ebx, 0x620d38
lea eax, [ebp - 0x160]
mov edx, 0x620d38
call fcn.0040cf40
mov dword [ebp - 0x164], 2
lea eax, [ebp - 0x164]
push eax
mov edx, 0x620d38
mov ecx, 1
lea eax, [ebp - 0x160]
call fcn.0040d060
lea eax, [ebp - 0x168]
push eax
mov eax, dword [0x5f29e0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f29e0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 0x160]
call fcn.00408bc0
lea eax, [ebp - 0x168]
push eax
mov eax, dword [0x5f29f0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f29f0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 0x160]
add eax, 4
call fcn.00408bc0
mov edx, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x180]
lea eax, [ecx + 8]
mov ecx, ebx
call fcn.0040d040
mov ecx, dword [0x5f50f0]
mov edx, 1
mov eax, 0x620cb8
call fcn.00429c20
mov edi, eax
mov ebx, 0x620d38
lea eax, [ebp - 0x160]
mov edx, 0x620d38
call fcn.0040cf40
mov dword [ebp - 0x164], 4
lea eax, [ebp - 0x164]
push eax
mov edx, 0x620d38
mov ecx, 1
lea eax, [ebp - 0x160]
call fcn.0040d060
lea eax, [ebp - 0x168]
push eax
mov eax, dword [0x5f2a00]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2a00]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 0x160]
call fcn.00408bc0
lea eax, [ebp - 0x168]
push eax
mov eax, dword [0x5f2a10]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2a10]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 0x160]
add eax, 4
call fcn.00408bc0
lea eax, [ebp - 0x168]
push eax
mov eax, dword [0x5f2a20]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2a20]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 0x160]
add eax, 8
call fcn.00408bc0
lea eax, [ebp - 0x168]
push eax
mov eax, dword [0x5f2a30]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2a30]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 0x160]
add eax, 0xc
call fcn.00408bc0
mov edx, dword [ebp - 0x160]
lea eax, [edi + 8]
mov ecx, ebx
call fcn.0040d040
mov ecx, 0x1000000
mov edx, 1
mov eax, 0x620cb8
call fcn.00429c20
mov esi, eax
mov ebx, 0x620d38
lea eax, [ebp - 0x160]
mov edx, 0x620d38
call fcn.0040cf40
mov dword [ebp - 0x164], 1
lea eax, [ebp - 0x164]
push eax
mov edx, 0x620d38
mov ecx, 1
lea eax, [ebp - 0x160]
call fcn.0040d060
lea eax, [ebp - 0x168]
push eax
mov eax, dword [0x5f2a40]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f2a40]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 0x160]
call fcn.00408bc0
mov edx, dword [ebp - 0x160]
lea eax, [esi + 8]
mov ecx, ebx
call fcn.0040d040
mov byte [ebp - 0x184], 1
mov ebx, 0x6222e0
lea eax, [ebp - 0x16c]
mov edx, 0x6222e0
call fcn.0040cf40
mov dword [ebp - 0x164], 5
lea eax, [ebp - 0x164]
push eax
mov edx, 0x6222e0
mov ecx, 1
lea eax, [ebp - 0x16c]
call fcn.0040d060
mov eax, dword [ebp - 0x16c]
mov edx, dword [ebp - 0x178]
mov dword [eax], edx
mov eax, dword [ebp - 0x16c]
mov edx, dword [ebp - 0x17c]
mov dword [eax + 4], edx
mov edx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x180]
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x16c]
mov dword [eax + 0xc], edi
mov eax, dword [ebp - 0x16c]
mov dword [eax + 0x10], esi
mov edx, dword [ebp - 0x16c]
lea eax, [ebp - 0x14c]
mov ecx, ebx
call fcn.0040d040
lea eax, [ebp - 0x144]
push eax
mov eax, dword [0x5f19e0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f19e0]
mov eax, 0x617d90
call fcn.00423b60
lea eax, [ebp - 0x140]
push eax
mov eax, dword [ebp - 0x144]
test eax, eax
jne 0x43a3f6
mov eax, 0x6722f0
push eax
call sub.kernel32.dll_FindFirstFileA
mov dword [ebp - 0x190], eax
cmp eax, 0xffffffff
je 0x43a57c
mov byte [ebp - 0x18c], 1
jmp 0x43a56d
push 1
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x114]
xor cx, cx
mov edx, 0x103
call fcn.004095b0
mov eax, dword [ebp - 0x14c]
test eax, eax
je 0x43a444
mov eax, dword [eax - 4]
add eax, 1
sub eax, 1
mov esi, eax
mov dword [ebp - 0x194], 0xffffffff
lea esi, [esi]
nop
add dword [ebp - 0x194], 1
mov eax, dword [ebp - 0x14c]
mov edx, dword [ebp - 0x194]
mov eax, dword [eax + edx*4]
mov eax, dword [eax + 8]
test eax, eax
je 0x43a47b
mov eax, dword [eax - 4]
add eax, 1
sub eax, 1
mov ebx, eax
mov edi, 0xffffffff
lea esi, [esi]
add edi, 1
lea eax, [ebp - 0x170]
call fcn.00403d00
push 0
lea eax, [ebp - 0x174]
push eax
mov eax, dword [0x5f16a0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x5f16a0]
mov eax, 0x617d90
call fcn.00423b60
mov edx, dword [ebp - 0x174]
mov ecx, dword [ebp - 0x148]
lea eax, [ebp - 0x170]
call fcn.00408cc0
mov eax, dword [ebp - 0x170]
lea edx, [ebp - 0x168]
call fcn.004598a0
mov edx, dword [ebp - 0x168]
lea ecx, [ebp - 0x15c]
mov eax, 0x620a30
call fcn.004282c0
lea edx, [ebp - 0x15c]
lea ecx, [ebp - 0x174]
mov eax, 0x620a30
call fcn.00428240
mov edx, dword [ebp - 0x174]
mov eax, dword [ebp - 0x14c]
mov ecx, dword [ebp - 0x194]
mov eax, dword [eax + ecx*4]
mov eax, dword [eax + 8]
mov eax, dword [eax + edi*4]
call fcn.00409780
test eax, eax
jne 0x43a53c
mov byte [ebp - 0x188], 0
jmp 0x43a593
cmp ebx, edi
ja 0x43a488
cmp esi, dword [ebp - 0x194]
ja 0x43a458
lea eax, [ebp - 0x140]
push eax
push dword [ebp - 0x190]
call sub.kernel32.dll_FindNextFileA
or eax, eax
setne al
mov byte [ebp - 0x18c], al
mov al, byte [ebp - 0x18c]
test al, al
jne 0x43a418
nop
push dword [ebp - 0x190]
call sub.kernel32.dll_FindClose
mov al, byte [ebp - 0x184]
mov byte [ebp - 0x188], al
xor eax, eax
pop edx
add esp, 0xc
mov dword fs:[eax], edx
mov eax, ebp
call fcn.00439d50
mov al, byte [ebp - 0x188]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret