Function at 0x475e8c
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff004
push eax
add esp, 0xfffffdec
push ebx
push esi
push edi
mov dword [ebp - 0xb9c], ecx
mov dword [ebp - 0xb98], edx
mov dword [ebp - 0xb94], eax
mov eax, 0x589f88
call fcn.00528424
lea edx, [ebp - 0xd28]
lea eax, [ebp - 0x10]
push edx
mov edx, 0x589cb4
mov word [ebp - 0xb80], 8
call fcn.00537758
inc dword [ebp - 0xb74]
lea ecx, [ebp - 0x10]
push ecx
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0xb94]
call fcn.00537758
inc dword [ebp - 0xb74]
xor ecx, ecx
mov dword [ebp - 0x14], ecx
lea ecx, [ebp - 0x14]
inc dword [ebp - 0xb74]
pop edx
call fcn.00537910
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x18]
mov edx, dword [ebp - 0xb98]
call fcn.00537758
inc dword [ebp - 0xb74]
xor eax, eax
mov dword [ebp - 0x1c], eax
lea edx, [ebp - 0x18]
inc dword [ebp - 0xb74]
lea ecx, [ebp - 0x1c]
pop eax
call fcn.00537910
cmp dword [ebp - 0x1c], 0
je 0x475f44
mov edx, dword [ebp - 0x1c]
jmp 0x475f49
mov edx, 0x589cb6
push edx
call sub.KERNEL32.DLL_FindFirstFileA
mov dword [ebp - 0xba0], eax
dec dword [ebp - 0xb74]
lea eax, [ebp - 0x1c]
mov edx, 2
call fcn.005378b8
dec dword [ebp - 0xb74]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.005378b8
dec dword [ebp - 0xb74]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.005378b8
dec dword [ebp - 0xb74]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.005378b8
dec dword [ebp - 0xb74]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.005378b8
mov word [ebp - 0xb80], 0x14
mov eax, dword [ebp - 0xba0]
push eax
lea ecx, [ebp - 8]
push ecx
call fcn.0044a290
add esp, 8
inc dword [ebp - 0xb74]
mov word [ebp - 0xb80], 0x20
cmp dword [ebp - 0xba0], 0xffffffff
je 0x477084
test byte [ebp - 0xd28], 0x10
jne 0x47703d
lea eax, [ebp - 0xcfc]
mov ecx, dword [ebp + 0x18]
mov edx, dword [ebp - 0xb9c]
call fcn.00448950
test al, al
je 0x47703d
mov eax, dword [ebp + 0x14]
cmp byte [eax], 0
je 0x47622b
mov word [ebp - 0xb80], 0x38
mov edx, 0x589cb7
lea eax, [ebp - 0x62c]
call fcn.00537758
inc dword [ebp - 0xb74]
lea edx, [ebp - 0x62c]
push edx
lea eax, [ebp - 0x628]
mov edx, dword [ebp - 0xb94]
call fcn.00537758
inc dword [ebp - 0xb74]
xor ecx, ecx
mov dword [ebp - 0x630], ecx
lea ecx, [ebp - 0x630]
inc dword [ebp - 0xb74]
pop edx
call fcn.00537910
lea eax, [ebp - 0x630]
push eax
lea edx, [ebp - 0xcfc]
lea eax, [ebp - 0x634]
call fcn.00537758
inc dword [ebp - 0xb74]
xor eax, eax
mov dword [ebp - 0x638], eax
lea edx, [ebp - 0x634]
inc dword [ebp - 0xb74]
lea ecx, [ebp - 0x638]
pop eax
call fcn.00537910
lea ecx, [ebp - 0x638]
mov ecx, dword [ecx]
mov dl, 1
mov eax, dword [0x50e4f8]
call fcn.004032ac
mov dword [ebp - 0xba4], eax
dec dword [ebp - 0xb74]
lea eax, [ebp - 0x638]
mov edx, 2
call fcn.005378b8
dec dword [ebp - 0xb74]
lea eax, [ebp - 0x634]
mov edx, 2
call fcn.005378b8
dec dword [ebp - 0xb74]
lea eax, [ebp - 0x630]
mov edx, 2
call fcn.005378b8
dec dword [ebp - 0xb74]
lea eax, [ebp - 0x62c]
mov edx, 2
call fcn.005378b8
dec dword [ebp - 0xb74]
lea eax, [ebp - 0x628]
mov edx, 2
call fcn.005378b8
mov word [ebp - 0xb80], 0x2c
mov word [ebp - 0xb80], 0x44
push 1
mov edx, str.FileTypeIsPwDump
lea eax, [ebp - 0x640]
call fcn.00537758
inc dword [ebp - 0xb74]
mov edx, str.Common
mov ecx, dword [eax]
lea eax, [ebp - 0x63c]
push ecx
mov word [ebp - 0xb80], 0x50
call fcn.00537758
inc dword [ebp - 0xb74]
mov edx, dword [eax]
mov eax, dword [ebp - 0xba4]
pop ecx
mov ebx, dword [eax]
call dword [ebx + 0x10]
mov edx, dword [ebp + 0x10]
mov byte [edx], al
dec dword [ebp - 0xb74]
lea eax, [ebp - 0x640]
mov edx, 2
call fcn.005378b8
dec dword [ebp - 0xb74]
lea eax, [ebp - 0x63c]
mov edx, 2
call fcn.005378b8
mov word [ebp - 0xb80], 0x2c
mov eax, dword [ebp - 0xba4]
mov dword [ebp - 0x648], eax
cmp dword [ebp - 0x648], 0
je 0x476217
mov ecx, dword [ebp - 0x648]
mov eax, dword [ecx]
mov dword [ebp - 0x644], eax
mov word [ebp - 0xb80], 0x68
mov edx, 3
mov eax, dword [ebp - 0x648]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0xb80], 0x5c
cmp word [ebp - 0xb7e], 0
je 0x476222
ret
mov word [ebp - 0xb80], 0x20
mov word [ebp - 0xb80], 0x74
lea edx, [ebp - 0x624]
push edx
call fcn.0045a1d0
pop ecx
lea eax, [ebp - 0xba6]
add dword [ebp - 0xb74], 0x10c
mov word [ebp - 0xb80], 0x80
push eax
lea edx, [ebp - 0xba5]
push edx
lea ecx, [ebp - 0x624]
push ecx
mov edx, 0x589cca
mov word [ebp - 0xb80], 0x8c
lea eax, [ebp - 0x650]
call fcn.00537758
inc dword [ebp - 0xb74]
lea ecx, [ebp - 0x650]
push ecx
lea eax, [ebp - 0x64c]
mov edx, dword [ebp - 0xb94]
call fcn.00537758
inc dword [ebp - 0xb74]
xor ecx, ecx
mov dword [ebp - 0x654], ecx
lea ecx, [ebp - 0x654]
inc dword [ebp - 0xb74]
pop edx
call fcn.00537910
lea eax, [ebp - 0x654]
push eax
lea edx, [ebp - 0xcfc]
lea eax, [ebp - 0x658]
call fcn.00537758
inc dword [ebp - 0xb74]
xor eax, eax
mov dword [ebp - 0x65c], eax
lea edx, [ebp - 0x658]
inc dword [ebp - 0xb74]
lea ecx, [ebp - 0x65c]
pop eax
call fcn.00537910
lea edx, [ebp - 0x65c]
push edx
mov ecx, dword [ebp + 0x10]
mov al, byte [ecx]
push eax
call fcn.0043cb04
add esp, 0x14
mov ebx, eax
dec dword [ebp - 0xb74]
lea eax, [ebp - 0x65c]
mov edx, 2
call fcn.005378b8
dec dword [ebp - 0xb74]
lea eax, [ebp - 0x658]
mov edx, 2
call fcn.005378b8
dec dword [ebp - 0xb74]
lea eax, [ebp - 0x654]
mov edx, 2
call fcn.005378b8
dec dword [ebp - 0xb74]
lea eax, [ebp - 0x650]
mov edx, 2
call fcn.005378b8
dec dword [ebp - 0xb74]
lea eax, [ebp - 0x64c]
mov edx, 2
call fcn.005378b8
mov word [ebp - 0xb80], 0x80
mov ecx, dword [ebp + 0x14]
cmp byte [ecx], 0
je 0x476678
lea edx, [ebp - 0x61c]
mov eax, dword [ebp + 8]
add eax, 8
call fcn.005378e8
lea edx, [ebp - 0x618]
mov eax, dword [ebp + 8]
add eax, 0xc
call fcn.005378e8
lea edx, [ebp - 0x600]
mov eax, dword [ebp + 8]
add eax, 0x24
call fcn.005378e8
mov ecx, dword [ebp + 8]
add ecx, 0x28
mov dword [ebp - 0xbac], ecx
lea edx, [ebp - 0x5fc]
mov eax, dword [ebp - 0xbac]
call fcn.005378e8
push fcn.005378e8
push 3
push 0x100
lea ecx, [ebp - 0x5f8]
push 4
push ecx
mov eax, dword [ebp - 0xbac]
add eax, 4
push eax
call fcn.005263d8
add esp, 0x18
lea edx, [ebp - 0x184]
mov eax, dword [ebp + 8]
add eax, 0x4a0
call fcn.005378e8
lea edx, [ebp - 0x180]
mov eax, dword [ebp + 8]
add eax, 0x4a4
call fcn.005378e8
lea edx, [ebp - 0x17c]
mov eax, dword [ebp + 8]
add eax, 0x4a8
call fcn.005378e8
lea edx, [ebp - 0x178]
mov eax, dword [ebp + 8]
add eax, 0x4ac
call fcn.005378e8
lea edx, [ebp - 0x44]
mov eax, dword [ebp + 8]
add eax, 0x5e0
call fcn.005378e8
lea edx, [ebp - 0x24]
mov eax, dword [ebp + 8]
add eax, 0x600
call fcn.005378e8
mov edx, dword [ebp + 8]
mov cl, byte [ebp - 0x624]
lea esi, [ebp - 0x1f8]
mov byte [edx], cl
mov eax, dword [ebp + 8]
mov dl, byte [ebp - 0x623]
mov byte [eax + 1], dl
mov ecx, dword [ebp + 8]
mov al, byte [ebp - 0x622]
mov byte [ecx + 2], al
mov cx, word [ebp - 0x621]
mov edx, dword [ebp + 8]
mov word [edx + 3], cx
mov cl, byte [ebp - 0x61f]
mov byte [edx + 5], cl
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0x614]
mov dword [eax + 0x10], edx
mov edx, dword [ebp - 0x610]
mov dword [eax + 0x14], edx
mov dx, word [ebp - 0x60c]
mov word [eax + 0x18], dx
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x608]
mov dword [ecx + 0x1c], eax
mov edx, dword [ebp + 8]
mov ecx, dword [ebp - 0x604]
mov dword [edx + 0x20], ecx
mov ecx, 0x17
mov eax, dword [ebp + 8]
lea edi, [eax + 0x42c]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, dword [ebp + 8]
mov dl, byte [ebp - 0x19a]
lea esi, [ebp - 0x168]
mov byte [eax + 0x48a], dl
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x198]
mov dword [ecx + 0x48c], eax
mov edx, dword [ebp + 8]
mov ecx, dword [ebp - 0x194]
mov dword [edx + 0x490], ecx
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0x190]
mov dword [eax + 0x494], edx
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x18c]
mov dword [ecx + 0x498], eax
mov edx, dword [ebp + 8]
mov cl, byte [ebp - 0x188]
mov byte [edx + 0x49c], cl
mov eax, dword [ebp + 8]
mov dl, byte [ebp - 0x174]
mov byte [eax + 0x4b0], dl
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x170]
mov dword [ecx + 0x4b4], eax
mov edx, dword [ebp + 8]
mov ecx, dword [ebp - 0x16c]
mov dword [edx + 0x4b8], ecx
mov ecx, 0x20
mov eax, dword [ebp + 8]
lea edi, [eax + 0x4bc]
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
lea esi, [ebp - 0xe8]
mov ecx, 0x20
lea edi, [eax + 0x53c]
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0x68]
mov dword [eax + 0x5bc], edx
mov ecx, dword [ebp + 8]
mov al, byte [ebp - 0x64]
mov byte [ecx + 0x5c0], al
mov edx, dword [ebp + 8]
mov cl, byte [ebp - 0x63]
mov byte [edx + 0x5c1], cl
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0x60]
mov dword [eax + 0x5c4], edx
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x5c]
mov dword [ecx + 0x5c8], eax
mov edx, dword [ebp + 8]
mov ecx, dword [ebp - 0x54]
mov dword [edx + 0x5d0], ecx
mov ecx, dword [ebp - 0x50]
mov dword [edx + 0x5d4], ecx
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0x4c]
mov dword [eax + 0x5d8], edx
mov edx, dword [ebp - 0x48]
mov dword [eax + 0x5dc], edx
mov ecx, dword [ebp + 8]
mov al, byte [ebp - 0x40]
mov byte [ecx + 0x5e4], al
mov edx, dword [ebp + 8]
mov ecx, dword [ebp - 0x3c]
mov dword [edx + 0x5e8], ecx
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0x38]
mov dword [eax + 0x5ec], edx
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x34]
mov dword [ecx + 0x5f0], eax
mov eax, dword [ebp - 0x30]
mov dword [ecx + 0x5f4], eax
mov edx, dword [ebp + 8]
mov ecx, dword [ebp - 0x2c]
mov dword [edx + 0x5f8], ecx
mov ecx, dword [ebp - 0x28]
mov dword [edx + 0x5fc], ecx
mov eax, dword [ebp + 8]
mov dl, byte [ebp - 0x20]
mov byte [eax + 0x604], dl
mov ecx, dword [ebp + 0x14]
mov byte [ecx], 0
lea edx, [ebp - 0x184]
mov eax, dword [ebp + 8]
add eax, 0x4a0
call fcn.0053799c
test al, al
je 0x4767b0
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x5bc]
sub eax, dword [ebp - 0x68]
sub eax, 0xffffffff
je 0x4767a6
dec eax
je 0x4766bd
dec eax
je 0x47676d
jmp 0x4767b0
mov edx, dword [ebp + 8]
add edx, 0x4a0
push edx
mov ecx, dword [ebp + 8]
add ecx, 0x4a4
push ecx
lea eax, [ebp - 0x180]
push eax
call fcn.0043bb04
add esp, 0xc
test eax, eax
jge 0x4766f7
lea edx, [ebp - 0x180]
mov eax, dword [ebp + 8]
add eax, 0x4a4
call fcn.005378e8
mov edx, dword [ebp + 8]
add edx, 0x4a0
push edx
mov ecx, dword [ebp + 8]
add ecx, 0x4a8
push ecx
lea eax, [ebp - 0x17c]
push eax
call fcn.0043bb04
add esp, 0xc
test eax, eax
jle 0x476731
lea edx, [ebp - 0x17c]
mov eax, dword [ebp + 8]
add eax, 0x4a8
call fcn.005378e8
mov edx, dword [ebp + 8]
add edx, 0x4a0
push edx
mov ecx, dword [ebp + 8]
add ecx, 0x4ac
push ecx
lea eax, [ebp - 0x178]
push eax
call fcn.0043bb04
add esp, 0xc
test eax, eax
jge 0x4767b0
lea edx, [ebp - 0x178]
mov eax, dword [ebp + 8]
add eax, 0x4ac
call fcn.005378e8
jmp 0x4767b0
lea edx, [ebp - 0x180]
mov eax, dword [ebp + 8]
add eax, 0x4a4
call fcn.005378e8
lea edx, [ebp - 0x17c]
mov eax, dword [ebp + 8]
add eax, 0x4a8
call fcn.005378e8
lea edx, [ebp - 0x178]
mov eax, dword [ebp + 8]
add eax, 0x4ac
call fcn.005378e8
mov edx, dword [ebp + 8]
mov byte [edx + 0x5c0], 0
test ebx, ebx
je 0x476f24
mov word [ebp - 0xb80], 0xa4
lea ecx, [ebp - 0x67c]
lea eax, [ebx + 4]
push ecx
lea edx, [ebp - 0x674]
inc dword [ebp - 0xb74]
push eax
push edx
call fcn.00405934
add dword [ebp - 0xb74], 4
dec dword [ebp - 0xb74]
add esp, 0xc
mov word [ebp - 0xb80], 0x98
mov ecx, dword [ebp + 0x10]
cmp byte [ecx], 0
je 0x4768ac
push 0x20
lea eax, [ebx + 0x84]
push eax
lea edx, [ebp - 0xd5c]
push edx
call fcn.00528170
add esp, 0xc
lea ecx, [ebp - 0xd5c]
mov byte [ebp - 0xd3c], 0
push ecx
call fcn.00527f20
pop ecx
lea edx, [ebp - 0xd5c]
add eax, edx
lea ecx, [ebp - 0xbb4]
push ecx
push eax
lea eax, [ebp - 0xd5c]
push eax
lea eax, [ebp - 0x674]
push eax
call fcn.0045c06c
add esp, 0x10
push 0x20
lea edx, [ebx + 0xa8]
push edx
lea ecx, [ebp - 0xd5c]
push ecx
call fcn.00528170
add esp, 0xc
lea eax, [ebp - 0xd5c]
mov byte [ebp - 0xd3c], 0
push eax
call fcn.00527f20
pop ecx
lea edx, [ebp - 0xd5c]
add eax, edx
lea ecx, [ebp - 0xbbc]
push ecx
push eax
lea eax, [ebp - 0xd5c]
push eax
lea edx, [ebp - 0x674]
push edx
call fcn.0045c06c
add esp, 0x10
jmp 0x4769a2
push 0x10
lea ecx, [ebx + 0x1e4]
push ecx
lea eax, [ebp - 0xd5c]
push eax
call fcn.00528170
add esp, 0xc
lea edx, [ebp - 0xd5c]
mov byte [ebp - 0xd4c], 0
push edx
call fcn.00527f20
pop ecx
lea edx, [ebp - 0xbc4]
lea ecx, [ebp - 0xd5c]
push edx
add eax, ecx
lea ecx, [ebp - 0x674]
push eax
lea eax, [ebp - 0xd5c]
push eax
push ecx
call fcn.0045c06c
add esp, 0x10
push 0x30
lea eax, [ebx + 0x1f4]
push eax
lea edx, [ebp - 0xd5c]
push edx
call fcn.00528170
add esp, 0xc
lea ecx, [ebp - 0xd5c]
mov byte [ebp - 0xd2c], 0
push ecx
call fcn.00527f20
pop ecx
lea edx, [ebp - 0xd5c]
add eax, edx
lea ecx, [ebp - 0xbcc]
push ecx
push eax
lea eax, [ebp - 0xd5c]
push eax
lea eax, [ebp - 0x674]
push eax
call fcn.0045c06c
add esp, 0x10
push 0x30
lea edx, [ebx + 0x224]
push edx
lea ecx, [ebp - 0xd5c]
push ecx
call fcn.00528170
add esp, 0xc
lea eax, [ebp - 0xd5c]
mov byte [ebp - 0xd2c], 0
push eax
call fcn.00527f20
pop ecx
lea edx, [ebp - 0xd5c]
add eax, edx
lea ecx, [ebp - 0xbd4]
push ecx
push eax
lea eax, [ebp - 0xd5c]
push eax
lea edx, [ebp - 0x674]
push edx
call fcn.0045c06c
add esp, 0x10
mov esi, dword [ebp + 0xc]
lea eax, [ebp - 0x674]
push eax
mov edx, dword [ebp + 0xc]
push edx
call fcn.004770c0
mov dword [ebp - 0xbdc], eax
mov dword [ebp - 0xbd8], esi
mov eax, dword [ebp + 0xc]
xor ecx, ecx
mov dword [ebp - 0xbe4], ecx
mov dword [ebp - 0xbe0], eax
mov eax, dword [ebp - 0xbdc]
add esp, 8
cmp eax, dword [ebp - 0xbe4]
sete dl
and edx, 1
test dl, dl
je 0x476b64
mov word [ebp - 0xb80], 0xb0
lea ecx, [ebp - 0x674]
push ecx
lea eax, [ebp - 0x8f4]
push eax
call fcn.0040bfec
add esp, 8
mov ecx, 0x97
add dword [ebp - 0xb74], 4
push esi
push edi
lea edi, [ebp - 0x8dc]
lea esi, [ebp - 0xfb8]
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
inc dword [ebp - 0xb74]
lea eax, [ebp - 0x8f4]
push eax
mov edx, dword [ebp + 0xc]
push edx
call fcn.00477204
add esp, 8
add eax, 0x18
push eax
dec dword [ebp - 0xb74]
dec dword [ebp - 0xb74]
dec dword [ebp - 0xb74]
mov edi, dword [ebp - 0x8e4]
sub edi, dword [ebp - 0x8f4]
mov esi, dword [ebp - 0x8f4]
test esi, esi
je 0x476a8c
cmp edi, 0x80
jbe 0x476a82
push esi
call fcn.00526174
pop ecx
jmp 0x476a8c
push edi
push esi
call fcn.00538488
add esp, 8
dec dword [ebp - 0xb74]
dec dword [ebp - 0xb74]
mov ecx, 0x97
pop eax
push esi
push edi
mov edi, eax
mov esi, ebx
lea eax, [ebp - 0x674]
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
mov word [ebp - 0xb80], 0xe0
push eax
lea edx, [ebp - 0xb6c]
push edx
call fcn.0040bfec
add esp, 8
mov ecx, 0x97
add dword [ebp - 0xb74], 4
push esi
push edi
lea edi, [ebp - 0xb54]
lea esi, [ebp - 0x1214]
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
inc dword [ebp - 0xb74]
lea eax, [ebp - 0xb6c]
push eax
mov edx, dword [ebp + 0xc]
push edx
call fcn.00477204
add esp, 8
add eax, 0x18
push eax
dec dword [ebp - 0xb74]
dec dword [ebp - 0xb74]
dec dword [ebp - 0xb74]
mov edi, dword [ebp - 0xb5c]
sub edi, dword [ebp - 0xb6c]
mov esi, dword [ebp - 0xb6c]
test esi, esi
je 0x476b45
cmp edi, 0x80
jbe 0x476b3b
push esi
call fcn.00526174
pop ecx
jmp 0x476b45
push edi
push esi
call fcn.00538488
add esp, 8
dec dword [ebp - 0xb74]
dec dword [ebp - 0xb74]
pop eax
mov edx, dword [ebp + 0xc]
mov ecx, dword [edx + 0x38]
dec ecx
mov dword [eax + 0x254], ecx
jmp 0x476ebd
mov eax, dword [ebp - 0xbdc]
add eax, 0x10c
push eax
call fcn.00527f20
pop ecx
test eax, eax
jne 0x476bed
lea edx, [ebx + 0xec]
push edx
call fcn.00527f20
pop ecx
test eax, eax
jbe 0x476e74
push 0xe
lea ecx, [ebx + 0xec]
push ecx
mov eax, dword [ebp - 0xbdc]
add eax, 0x10c
push eax
call fcn.00528170
add esp, 0xc
lea edx, [ebx + 0x1b8]
push 7
push edx
mov ecx, dword [ebp - 0xbdc]
add ecx, 0x1d8
push ecx
call fcn.00528170
add esp, 0xc
lea eax, [ebx + 0x1bf]
push 7
push eax
mov edx, dword [ebp - 0xbdc]
add edx, 0x1df
push edx
call fcn.00528170
add esp, 0xc
jmp 0x476e74
mov byte [ebp - 0xbe5], 0
push 7
push 0x589ccc
mov ecx, dword [ebp - 0xbdc]
add ecx, 0x1d8
push ecx
call fcn.00528040
add esp, 0xc
test eax, eax
jne 0x476c71
push 7
push 0x589cd4
lea eax, [ebx + 0x1b8]
push eax
call fcn.00528040
add esp, 0xc
test eax, eax
je 0x476c71
push 7
lea edx, [ebx + 0xec]
push edx
mov ecx, dword [ebp - 0xbdc]
add ecx, 0x10c
push ecx
call fcn.00528170
add esp, 0xc
lea eax, [ebx + 0x1b8]
push 7
push eax
mov edx, dword [ebp - 0xbdc]
add edx, 0x1d8
push edx
call fcn.00528170
mov byte [ebp - 0xbe5], 1
add esp, 0xc
push 7
push 0x589cdc
mov ecx, dword [ebp - 0xbdc]
add ecx, 0x1df
push ecx
call fcn.00528040
add esp, 0xc
test eax, eax
jne 0x476cee
push 7
push 0x589ce4
lea eax, [ebx + 0x1bf]
push eax
call fcn.00528040
add esp, 0xc
test eax, eax
je 0x476cee
push 7
lea edx, [ebx + 0xf3]
push edx
mov ecx, dword [ebp - 0xbdc]
add ecx, 0x113
push ecx
call fcn.00528170
add esp, 0xc
lea eax, [ebx + 0x1bf]
push 7
push eax
mov edx, dword [ebp - 0xbdc]
add edx, 0x1df
push edx
call fcn.00528170
mov byte [ebp - 0xbe5], 1
add esp, 0xc
mov ecx, dword [ebp - 0xbdc]
add ecx, 0x11b
push ecx
call fcn.00527f20
pop ecx
test eax, eax
jne 0x476e74
lea eax, [ebx + 0xfb]
push eax
call fcn.00527f20
pop ecx
test eax, eax
jne 0x476e74
cmp byte [ebp - 0xbe5], 0
je 0x476e74
mov edx, dword [ebp + 0x10]
cmp byte [edx], 0
je 0x476e74
push 7
push 0x589cec
mov ecx, dword [ebp - 0xbdc]
add ecx, 0x1d8
push ecx
call fcn.00528040
add esp, 0xc
test eax, eax
je 0x476e74
push 7
push 0x589cf4
mov eax, dword [ebp - 0xbdc]
add eax, 0x1df
push eax
call fcn.00528040
add esp, 0xc
test eax, eax
je 0x476e74
push 7
push 0x589cfc
lea edx, [ebx + 0x1b8]
push edx
call fcn.00528040
add esp, 0xc
test eax, eax
jne 0x476df3
push 7
push 0x589d04
mov ecx, dword [ebp - 0xbdc]
add ecx, 0x1d8
push ecx
call fcn.00528040
add esp, 0xc
test eax, eax
je 0x476df3
push 7
mov eax, dword [ebp - 0xbdc]
add eax, 0x10c
push eax
lea edx, [ebx + 0xec]
push edx
call fcn.00528170
add esp, 0xc
push 7
mov ecx, dword [ebp - 0xbdc]
add ecx, 0x1d8
push ecx
lea eax, [ebx + 0x1b8]
push eax
call fcn.00528170
add esp, 0xc
push 7
push 0x589d0c
lea edx, [ebx + 0x1bf]
push edx
call fcn.00528040
add esp, 0xc
test eax, eax
jne 0x476e68
push 7
push 0x589d14
mov ecx, dword [ebp - 0xbdc]
add ecx, 0x1df
push ecx
call fcn.00528040
add esp, 0xc
test eax, eax
je 0x476e68
push 7
mov eax, dword [ebp - 0xbdc]
add eax, 0x113
push eax
lea edx, [ebx + 0xf3]
push edx
call fcn.00528170
add esp, 0xc
push 7
mov ecx, dword [ebp - 0xbdc]
add ecx, 0x1df
push ecx
lea eax, [ebx + 0x1bf]
push eax
call fcn.00528170
add esp, 0xc
mov edx, dword [ebp + 0x10]
mov eax, ebx
mov dl, byte [edx]
call fcn.004586bc
mov ecx, dword [ebp - 0xbdc]
add ecx, 0x11b
push ecx
call fcn.00527f20
pop ecx
test eax, eax
jne 0x476ebd
lea eax, [ebx + 0xfb]
push eax
call fcn.00527f20
pop ecx
test eax, eax
jbe 0x476ebd
push 0x80
lea edx, [ebx + 0xfb]
push edx
mov ecx, dword [ebp - 0xbdc]
add ecx, 0x11b
push ecx
call fcn.00528170
add esp, 0xc
mov ebx, dword [ebx + 0x1e0]
dec dword [ebp - 0xb74]
mov word [ebp - 0xb80], 0x98
dec dword [ebp - 0xb74]
mov edi, dword [ebp - 0x664]
mov eax, dword [ebp - 0x674]
sub edi, eax
mov esi, eax
test esi, esi
je 0x476f07
cmp edi, 0x80
jbe 0x476efd
push esi
call fcn.00526174
pop ecx
jmp 0x476f07
push edi
push esi
call fcn.00538488
add esp, 8
dec dword [ebp - 0xb74]
dec dword [ebp - 0xb74]
mov word [ebp - 0xb80], 0x80
test ebx, ebx
jne 0x4767b8
push ebx
call fcn.0041369c
pop ecx
dec dword [ebp - 0xb74]
dec dword [ebp - 0xb74]
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.005378b8
dec dword [ebp - 0xb74]
lea eax, [ebp - 0x44]
mov edx, 2
call fcn.005378b8
dec dword [ebp - 0xb74]
lea eax, [ebp - 0x178]
mov edx, 2
call fcn.005378b8
dec dword [ebp - 0xb74]
lea eax, [ebp - 0x17c]
mov edx, 2
call fcn.005378b8
dec dword [ebp - 0xb74]
lea eax, [ebp - 0x180]
mov edx, 2
call fcn.005378b8
dec dword [ebp - 0xb74]
lea eax, [ebp - 0x184]
mov edx, 2
call fcn.005378b8
dec dword [ebp - 0xb74]
add dword [ebp - 0xb74], 0xffffff00
push fcn.005378b8
push 3
push 0x100
push 4
lea ecx, [ebp - 0x5f8]
push ecx
call fcn.0052644c
add esp, 0x14
dec dword [ebp - 0xb74]
lea eax, [ebp - 0x5fc]
mov edx, 2
call fcn.005378b8
dec dword [ebp - 0xb74]
lea eax, [ebp - 0x600]
mov edx, 2
call fcn.005378b8
dec dword [ebp - 0xb74]
lea eax, [ebp - 0x618]
mov edx, 2
call fcn.005378b8
dec dword [ebp - 0xb74]
lea eax, [ebp - 0x61c]
mov edx, 2
call fcn.005378b8
mov word [ebp - 0xb80], 0x20
lea ecx, [ebp - 0xd28]
push ecx
mov eax, dword [ebp - 0xba0]
push eax
call sub.KERNEL32.DLL_FindNextFileA
test eax, eax
jne 0x477077
dec dword [ebp - 0xb74]
push 2
lea edx, [ebp - 8]
push edx
call fcn.0044a2c8
add esp, 8
mov ecx, dword [ebp - 0xb90]
mov dword fs:[0], ecx
jmp 0x4770a5
cmp dword [ebp - 0xba0], 0xffffffff
jne 0x475fec
dec dword [ebp - 0xb74]
push 2
lea eax, [ebp - 8]
push eax
call fcn.0044a2c8
add esp, 8
mov edx, dword [ebp - 0xb90]
mov dword fs:[0], edx
mov esp, ebp
mov edi, dword [ebp - 0x1220]
mov esi, dword [ebp - 0x121c]
mov ebx, dword [ebp - 0x1218]
pop ebp
ret 0x14