Function at 0x41055c
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x44
push 8
call fcn.004b7848
add esp, 4
mov dword [ebp - 4], eax
mov edi, eax
mov esi, 0x5d3c00
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
push 8
call fcn.004b7848
add esp, 4
mov dword [ebp - 0x10], eax
mov edi, eax
mov esi, 0x5d3c00
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
push 0x34
call fcn.004b7848
add esp, 4
mov dword [ebp - 0x24], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 0xd
rep stosd dword es:[edi], eax
add ebx, 4
push ebx
push 8
call fcn.004b7848
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
pop ebx
add ebx, 4
push ebx
push 8
call fcn.004b7848
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
pop ebx
add ebx, 4
push ebx
push 8
call fcn.004b7848
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
pop ebx
add ebx, 0x14
push ebx
push 0x210
call fcn.004b7848
add esp, 4
pop ebx
mov dword [ebx], eax
mov edi, eax
mov esi, 0x5d43c8
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
xor eax, eax
mov ecx, 0x82
rep stosd dword es:[edi], eax
add ebx, 4
push ebx
push 0x24
call fcn.004b7848
add esp, 4
pop ebx
mov dword [ebx], eax
mov edi, eax
mov esi, 0x5d43d0
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
xor eax, eax
mov ecx, 7
rep stosd dword es:[edi], eax
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x2c], 0
cmp dword [ebp + 0x28], 0
jne 0x41070f
mov ebx, dword [ebp + 0x10]
mov ebx, dword [ebx]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x4106d9
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x4106d5
imul eax, dword [ebx]
jmp 0x4106ca
mov ecx, eax
test ecx, ecx
je 0x4106f8
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x4106f1
push ebx
push eax
call fcn.004b784e
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x4106df
call fcn.004b784e
add esp, 4
mov eax, 0x5d3c00
mov ebx, dword [ebp + 0x10]
mov dword [ebx], eax
jmp 0x410720
push 1
lea eax, [ebp - 4]
push eax
push dword [ebp + 8]
call fcn.00411468
lea eax, [ebp - 4]
push eax
push 4
mov eax, 2
call fcn.004b7842
add esp, 8
mov ebx, dword [ebp + 8]
mov eax, dword [ebx]
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x34], ebx
call fcn.00403718
mov dword [ebp - 0x38], ecx
mov edi, dword [ebp - 0x34]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x410765
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x38]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x34]
call fcn.004b7866
add esp, 8
mov dword [ebp - 4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x38]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x30]
push edi
test eax, eax
je 0x4107a8
push eax
mov ebx, eax
call fcn.00401680
inc eax
push eax
call fcn.004b7848
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
mov ebx, dword [ebp + 0x10]
mov ebx, dword [ebx]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x4107cb
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x4107c7
imul eax, dword [ebx]
jmp 0x4107bc
mov ecx, eax
test ecx, ecx
je 0x4107ea
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x4107e3
push ebx
push eax
call fcn.004b784e
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x4107d1
call fcn.004b784e
add esp, 4
mov eax, 0x5d3c00
mov ebx, dword [ebp + 0x10]
mov dword [ebx], eax
mov ebx, dword [ebp - 4]
call fcn.00406fc4
xor ecx, ecx
push eax
lea eax, [ebp - 8]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x41127f
mov ebx, dword [ebp - 4]
call fcn.00403718
push ebx
push ecx
mov eax, dword [ebp - 8]
dec eax
jns 0x410842
push 0x108
push 0x417fd99
push 4
call fcn.004b785a
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x41085f
push 0x108
push 0x417fd99
push 1
call fcn.004b785a
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebx]
test eax, eax
je 0x410885
push eax
mov ebx, eax
call fcn.00401680
inc eax
push eax
call fcn.004b7848
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x410896
push ebx
call fcn.004b784e
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push 0x80000301
push 0
push 1
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x4108b9
mov eax, 0x5d3b7c
push eax
push 2
mov ebx, 0x4b82c0
call fcn.004b7854
add esp, 0x1c
mov dword [ebp - 0x30], eax
push 0x5d447c
push dword [ebp - 0x30]
call fcn.0040182c
add esp, 8
cmp eax, 0
mov eax, 0
setne al
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4108fd
push ebx
call fcn.004b784e
add esp, 4
cmp dword [ebp - 0x34], 0
je 0x410937
push 0x5d447c
push dword [ebp - 0xc]
mov ecx, 2
call fcn.004016eb
add esp, 8
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x410933
push ebx
call fcn.004b784e
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x5d3e94
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp + 0xc]
mov eax, dword [ebx]
test eax, eax
jne 0x41095e
mov eax, 0x5d3b7c
push eax
push 3
mov ebx, 0x4b9210
call fcn.004b7854
add esp, 0x28
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 0x10]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x410996
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x410992
imul eax, dword [ebx]
jmp 0x410987
mov ecx, eax
test ecx, ecx
je 0x4109b5
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x4109ae
push ebx
push eax
call fcn.004b784e
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x41099c
call fcn.004b784e
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 0x10]
call fcn.00406fc4
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
xor ecx, ecx
push eax
lea eax, [ebp - 0x18]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x411274
mov ebx, dword [ebp - 0x10]
call fcn.00403718
push ebx
push ecx
mov eax, dword [ebp - 0x18]
dec eax
jns 0x410a0d
push 0x2b5
push 0x417fd99
push 4
call fcn.004b785a
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x410a2a
push 0x2b5
push 0x417fd99
push 1
call fcn.004b785a
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x30], ebx
mov ebx, dword [ebp - 0x30]
push dword [ebx]
push dword [ebp - 0xc]
mov ecx, 2
call fcn.004016eb
add esp, 8
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x410a5e
push ebx
call fcn.004b784e
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
lea eax, [ebp - 0x1c]
push eax
call fcn.00412048
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], esp
mov eax, dword [ebp - 0x24]
push eax
push 0x25c
call fcn.004b7848
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x208
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x1c
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x410b6f
add eax, 8
push eax
call sub.KERNEL32.DLL_FindFirstFileW
cmp dword [ebp - 0x38], esp
je 0x410b91
push 0x31c
push 0x417fd99
push 6
call fcn.004b785a
add esp, 0xc
push eax
mov ebx, dword [ebp - 0x3c]
push ebx
mov edi, dword [ebp - 0x40]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 8
pop edi
add edi, 4
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 8
pop edi
add edi, 4
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 8
pop edi
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.004b7842
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x410c63
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x410c61
imul eax, dword [edi]
jmp 0x410c56
mov ecx, eax
cmp ecx, 0x208
jle 0x410c70
mov ecx, 0x208
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x208
push ebx
push edi
push 1
mov eax, 2
call fcn.004b7842
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x410cae
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x410cac
imul eax, dword [edi]
jmp 0x410ca1
mov ecx, eax
cmp ecx, 0x1c
jle 0x410cb8
mov ecx, 0x1c
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x1c
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
call fcn.004b784e
add esp, 4
pop eax
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x410cfe
push ebx
call fcn.004b784e
add esp, 4
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jle 0x41126c
mov ebx, dword [ebp - 0x24]
add ebx, 0x20
mov dword [ebp - 0x30], ebx
push 0xa0000101
push 0
mov ebx, dword [ebp - 0x30]
push dword [ebx]
push 1
mov ebx, 0x4b93a0
call fcn.004b7854
add esp, 0x10
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
call fcn.004121ec
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x410d54
push ebx
call fcn.004b784e
add esp, 4
mov eax, dword [ebp - 0x38]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x410d68
push ebx
call fcn.004b784e
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
push dword [ebp - 0x28]
push dword [ebp - 0xc]
mov ecx, 2
call fcn.004016eb
add esp, 8
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
call fcn.00412574
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x410d9e
push ebx
call fcn.004b784e
add esp, 4
cmp dword [ebp - 0x34], 0
jne 0x410e6c
cmp dword [ebp + 0x18], 0
je 0x410de0
push dword [ebp - 0x28]
push dword [ebp - 0xc]
mov ecx, 2
call fcn.004016eb
add esp, 8
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x410ddc
push ebx
call fcn.004b784e
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
push dword [ebp + 0x10]
push 4
mov eax, 2
call fcn.004b7842
add esp, 8
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp + 0x10]
mov ebx, dword [ebx]
mov dword [ebp - 0x34], ebx
call fcn.00403718
mov dword [ebp - 0x38], ecx
mov edi, dword [ebp - 0x34]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x410e24
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x38]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x34]
call fcn.004b7866
add esp, 8
mov ebx, dword [ebp + 0x10]
mov dword [ebx], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x38]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x30]
push edi
test eax, eax
je 0x410e69
push eax
mov ebx, eax
call fcn.00401680
inc eax
push eax
call fcn.004b7848
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
mov dword [ebp - 0x30], esp
mov eax, dword [ebp - 0x24]
push eax
push 0x25c
call fcn.004b7848
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x208
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x1c
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push dword [ebp - 0x20]
call sub.KERNEL32.DLL_FindNextFileW
cmp dword [ebp - 0x30], esp
je 0x410f7b
push 0x66b
push 0x417fd99
push 6
call fcn.004b785a
add esp, 0xc
push eax
mov ebx, dword [ebp - 0x34]
push ebx
mov edi, dword [ebp - 0x38]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 8
pop edi
add edi, 4
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 8
pop edi
add edi, 4
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 8
pop edi
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.004b7842
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x41104d
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x41104b
imul eax, dword [edi]
jmp 0x411040
mov ecx, eax
cmp ecx, 0x208
jle 0x41105a
mov ecx, 0x208
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x208
push ebx
push edi
push 1
mov eax, 2
call fcn.004b7842
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x411098
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x411096
imul eax, dword [edi]
jmp 0x41108b
mov ecx, eax
cmp ecx, 0x1c
jle 0x4110a2
mov ecx, 0x1c
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x1c
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
call fcn.004b784e
add esp, 4
pop eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jne 0x411245
mov ebx, dword [ebp - 0x24]
add ebx, 0x20
mov dword [ebp - 0x30], ebx
push 0xa0000101
push 0
mov ebx, dword [ebp - 0x30]
push dword [ebx]
push 1
mov ebx, 0x4b93a0
call fcn.004b7854
add esp, 0x10
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
call fcn.004121ec
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x411128
push ebx
call fcn.004b784e
add esp, 4
mov eax, dword [ebp - 0x38]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41113c
push ebx
call fcn.004b784e
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
push dword [ebp - 0x28]
push dword [ebp - 0xc]
mov ecx, 2
call fcn.004016eb
add esp, 8
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
call fcn.00412574
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x411172
push ebx
call fcn.004b784e
add esp, 4
cmp dword [ebp - 0x34], 0
jne 0x411240
cmp dword [ebp + 0x18], 0
je 0x4111b4
push dword [ebp - 0x28]
push dword [ebp - 0xc]
mov ecx, 2
call fcn.004016eb
add esp, 8
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4111b0
push ebx
call fcn.004b784e
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
push dword [ebp + 0x10]
push 4
mov eax, 2
call fcn.004b7842
add esp, 8
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp + 0x10]
mov ebx, dword [ebx]
mov dword [ebp - 0x34], ebx
call fcn.00403718
mov dword [ebp - 0x38], ecx
mov edi, dword [ebp - 0x34]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x4111f8
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x38]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x34]
call fcn.004b7866
add esp, 8
mov ebx, dword [ebp + 0x10]
mov dword [ebx], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x38]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x30]
push edi
test eax, eax
je 0x41123d
push eax
mov ebx, eax
call fcn.00401680
inc eax
push eax
call fcn.004b7848
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
jmp 0x410e6c
mov dword [ebp - 0x30], esp
push dword [ebp - 0x20]
call sub.KERNEL32.DLL_FindClose
cmp dword [ebp - 0x30], esp
je 0x41126c
push 0x873
push 0x417fd99
push 6
call fcn.004b785a
add esp, 0xc
pop eax
pop ebx
pop ecx
jmp 0x4109d8
add esp, 0xc
pop eax
pop ebx
pop ecx
jmp 0x41080d
add esp, 0xc
cmp dword [ebp + 0x20], 0
je 0x41129b
push 1
push 0
push dword [ebp + 0x10]
call fcn.00412af8
mov ebx, dword [ebp + 0x10]
mov ebx, dword [ebx]
call fcn.00406fc4
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 4]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x4112c6
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x4112c2
imul eax, dword [ebx]
jmp 0x4112b7
mov ecx, eax
test ecx, ecx
je 0x4112e5
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x4112de
push ebx
push eax
call fcn.004b784e
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x4112cc
call fcn.004b784e
add esp, 4
mov eax, 0x5d3c00
mov dword [ebp - 4], eax
mov ebx, dword [ebp - 0x10]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x411313
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x41130f
imul eax, dword [ebx]
jmp 0x411304
mov ecx, eax
test ecx, ecx
je 0x411332
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x41132b
push ebx
push eax
call fcn.004b784e
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x411319
call fcn.004b784e
add esp, 4
mov eax, 0x5d3c00
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x2c]
jmp 0x41134a
push eax
mov ebx, dword [ebp - 4]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x411369
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x411365
imul eax, dword [ebx]
jmp 0x41135a
mov ecx, eax
test ecx, ecx
je 0x411388
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x411381
push ebx
push eax
call fcn.004b784e
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x41136f
call fcn.004b784e
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4113a0
push ebx
call fcn.004b784e
add esp, 4
mov ebx, dword [ebp - 0x10]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x4113be
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x4113ba
imul eax, dword [ebx]
jmp 0x4113af
mov ecx, eax
test ecx, ecx
je 0x4113dd
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x4113d6
push ebx
push eax
call fcn.004b784e
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x4113c4
call fcn.004b784e
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x4113f5
push ebx
call fcn.004b784e
add esp, 4
mov ebx, dword [ebp - 0x24]
push ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.004b784e
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.004b784e
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.004b784e
add esp, 4
pop ebx
add ebx, 0x14
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.004b784e
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.004b784e
add esp, 4
pop ebx
call fcn.004b784e
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x411461
push ebx
call fcn.004b784e
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 0x28