Function at 0x4344fb
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov ebx, dword [ebp + 0x14]
mov esi, dword [ebp + 0x10]
mov edi, 0x572513
xor eax, eax
mov dword [0x56ef9c], eax
xor edx, edx
mov dword [0x56ef98], edx
xor ecx, ecx
mov dword [0x56ee84], ecx
mov dword [0x56ee78], 1
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 4]
test eax, eax
je 0x434583
cmp byte [eax], 0x2d
jne 0x434583
push 0x6f
push eax
call fcn.00539518
add esp, 8
test eax, eax
je 0x434555
mov dword [0x56ef98], 1
push 0x61
mov edx, dword [ebp + 0xc]
push dword [edx + 4]
call fcn.00539518
add esp, 8
test eax, eax
je 0x43457d
mov dword [0x56ee84], 1
mov dword [0x56ef98], 1
inc dword [0x56ee78]
mov ecx, dword [ebp + 0xc]
mov eax, dword [0x56ee78]
cmp dword [ecx + eax*4], 0
jne 0x4345a6
push 0
push 0
mov edx, dword [ebp + 0xc]
push dword [edx]
push 0
call fcn.00467118
jmp 0x434aa6
push 0
push 0x104
push esi
push dword [0x56ee78]
push dword [ebp + 0xc]
call fcn.004d670d
mov dword [0x56ee78], eax
cmp dword [0x56ee78], 0
jge 0x4345df
push 3
push 0
mov ecx, dword [ebp + 0xc]
push dword [ecx]
push 0
call fcn.00467118
jmp 0x434aa6
push esi
push esi
call fcn.0041cd2d
test eax, eax
jne 0x4345ff
push 3
push 0
mov eax, dword [ebp + 0xc]
push dword [eax]
push 0
call fcn.00467118
jmp 0x434aa6
push 0
push 0x104
push ebx
mov edx, dword [0x56ee78]
inc edx
push edx
push dword [ebp + 0xc]
call fcn.004d670d
mov dword [0x56ee78], eax
cmp dword [0x56ee78], 0
jge 0x43463a
push 3
push 0
mov ecx, dword [ebp + 0xc]
push dword [ecx]
push 0
call fcn.00467118
jmp 0x434aa6
push 0x572713
push 0x572613
push edi
push 0x572510
push ebx
call fcn.0053e8e0
add esp, 0x14
cmp byte [0x572510], 0
jne 0x4346a8
cmp byte [edi], 0x5c
je 0x4346a8
cmp byte [edi], 0x2f
je 0x4346a8
cmp byte [edi], 0
je 0x43468b
push 0x572713
push 0x572613
push edi
push 0x553318
push 0x54d75a
push ebx
call sub.USER32.dll_wsprintfA
add esp, 0x18
jmp 0x4346a8
push 0x572713
push 0x572613
push 0x553318
push 0x54d764
push ebx
call sub.USER32.dll_wsprintfA
add esp, 0x14
cmp byte [0x572613], 0
je 0x4346ba
cmp byte [0x572713], 0
jne 0x4346f3
push ebx
call fcn.005395b8
pop ecx
mov dword [0x56ee78], eax
cmp dword [0x56ee78], 0
jle 0x4346e9
mov eax, dword [0x56ee78]
cmp byte [ebx + eax - 1], 0x5c
je 0x4346e9
push 0x54d76c
push ebx
call fcn.005394dc
add esp, 8
mov dword [0x56ef9c], 1
xor edx, edx
mov dword [0x56ee7c], edx
cmp dword [0x556164], 0
je 0x434739
push 0x56efa0
push esi
call sub.KERNEL32.dll_FindFirstFileA
mov dword [0x56f0e0], eax
cmp dword [0x56f0e0], 0xffffffff
jne 0x43472c
mov dword [0x56ee80], 1
jmp 0x434a28
xor ecx, ecx
mov dword [0x56ee80], ecx
jmp 0x434a28
push 0x27
push 0x56ee88
push esi
call fcn.0053cd24
add esp, 0xc
mov dword [0x56ee80], eax
jmp 0x434a28
cmp dword [0x556164], 0
je 0x43478c
test byte [0x56efa0], 0x10
je 0x43478c
push 0x56efa0
push dword [0x56f0e0]
call sub.KERNEL32.dll_FindNextFileA
test eax, eax
jne 0x434a28
mov dword [0x56ee80], 1
jmp 0x434a28
cmp dword [0x56ef9c], 0
je 0x4347eb
push 0x572713
push 0x572613
push edi
push 0x572510
push ebx
call fcn.0053e8e0
add esp, 0x14
cmp dword [0x556164], 0
je 0x4347d2
push 0x56efcc
push edi
push 0x572510
push 0x54d76f
push ebx
call sub.USER32.dll_wsprintfA
add esp, 0x14
jmp 0x4347eb
push 0x56ee98
push edi
push 0x572510
push 0x54d777
push ebx
call sub.USER32.dll_wsprintfA
add esp, 0x14
cmp dword [0x556164], 0
jne 0x4347fb
push ebx
call fcn.00541e38
pop ecx
cmp dword [0x56ef98], 0
jne 0x4348a8
push 3
push ebx
call fcn.0041c947
test eax, eax
je 0x4348a8
cmp dword [0x56ee7c], 1
jge 0x43482f
push dword [0x54d29c]
push dword [ebp + 8]
call fcn.004dfc12
push ebx
push 0
push 0x2cf
call fcn.0041c35b
push eax
push 0x56f1c4
call sub.USER32.dll_wsprintfA
add esp, 0xc
xor eax, eax
mov dword [0x558950], eax
push dword [0x54d29c]
push 0x56f1c4
push dword [ebp + 8]
call fcn.004dfd6c
cmp dword [0x556164], 0
je 0x43488d
push 0x56efa0
push dword [0x56f0e0]
call sub.KERNEL32.dll_FindNextFileA
test eax, eax
jne 0x43489d
mov dword [0x56ee80], 1
jmp 0x43489d
push 0x56ee88
call fcn.0053cde4
pop ecx
mov dword [0x56ee80], eax
inc dword [0x56ee7c]
jmp 0x434a28
push 0x572713
push 0x572613
push edi
push 0x572510
push esi
call fcn.0053e8e0
add esp, 0x14
cmp dword [0x556164], 0
je 0x4348e5
push 0x56efcc
push edi
push 0x572510
push 0x54d77f
push esi
call sub.USER32.dll_wsprintfA
add esp, 0x14
jmp 0x4348fe
push 0x56ee98
push edi
push 0x572510
push 0x54d787
push esi
call sub.USER32.dll_wsprintfA
add esp, 0x14
push dword [0x56ee84]
push 0x56f1c4
push ebx
push esi
call fcn.0041d3af
mov dword [0x56ee78], eax
cmp dword [0x56ee78], 0
jle 0x43497a
cmp dword [0x556164], 0
je 0x43493c
push dword [0x56f0e0]
call sub.KERNEL32.dll_FindClose
mov dword [0x56f0e0], 0xffffffff
cmp dword [0x56ee78], 1
jne 0x434959
push 1
push esi
mov edx, dword [ebp + 0xc]
push dword [edx]
push 0
call fcn.00467118
jmp 0x434aa6
cmp dword [0x56ee78], 2
jne 0x434a35
push 4
push ebx
mov ecx, dword [ebp + 0xc]
push dword [ecx]
push 0
call fcn.00467118
jmp 0x434aa6
inc dword [0x56ee7c]
cmp dword [ebp + 0x18], 0
je 0x4349bc
push ebx
push esi
push 0
push 0x2d0
call fcn.0041c35b
push eax
push 0x56f1c4
call sub.USER32.dll_wsprintfA
add esp, 0x10
xor eax, eax
mov dword [0x558950], eax
push dword [0x54d29c]
push 0x56f1c4
push dword [ebp + 8]
call fcn.004dfd6c
push 0x572713
push 0x572613
push edi
push 0x572510
push 0x54d78f
push esi
call sub.USER32.dll_wsprintfA
add esp, 0x18
cmp dword [0x56ef9c], 0
jne 0x4349ef
mov dword [0x56ee80], 1
jmp 0x434a35
cmp dword [0x556164], 0
je 0x434a18
push 0x56efa0
push dword [0x56f0e0]
call sub.KERNEL32.dll_FindNextFileA
test eax, eax
jne 0x434a28
mov dword [0x56ee80], 1
jmp 0x434a28
push 0x56ee88
call fcn.0053cde4
pop ecx
mov dword [0x56ee80], eax
cmp dword [0x56ee80], 0
je 0x434753
cmp dword [0x556164], 0
je 0x434a52
cmp dword [0x56f0e0], 0xffffffff
je 0x434a52
push dword [0x56f0e0]
call sub.KERNEL32.dll_FindClose
cmp dword [0x56ee7c], 0
jle 0x434a6f
cmp dword [ebp + 0x18], 0
je 0x434a6f
push dword [0x54d29c]
push dword [ebp + 8]
call fcn.004dfc12
cmp dword [0x56ee7c], 0
je 0x434a88
cmp dword [0x56ee80], 0
je 0x434a88
mov eax, 1
jmp 0x434aa6
push ebx
push esi
push 0
push 0x2d1
call fcn.0041c35b
push eax
push 0x5720e8
call sub.USER32.dll_wsprintfA
add esp, 0x10
xor eax, eax
pop edi
pop esi
pop ebx
pop ebp
ret 0x14