Function at 0x43ccf0
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a1128
mov eax, dword fs:[0]
push eax
sub esp, 0x284
mov eax, dword [0x4c3c64]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x288], eax
mov dword [ebp - 0x280], ecx
mov dword [ebp - 0x284], edx
xor edi, edi
push 0x24c
lea eax, [ebp - 0x25c]
mov esi, 1
push edi
mov dword [ebp - 4], esi
push eax
mov dword [ebp - 0x260], edi
call fcn.00485e30
mov edx, dword [ebp + 0xc]
add esp, 0xc
lea ecx, [ebp - 0x260]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x290], eax
cmp eax, 0xffffffff
je 0x43d332
mov dword [ebp - 0x26c], esi
mov edi, edi
push ecx
mov ebx, esp
mov dword [ebp - 0x28c], esp
mov dword [ebp - 0x278], ebx
call fcn.0047727e
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x43d399
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebx], eax
mov ecx, 0x4aa0a4
mov byte [ebp - 4], 2
test ecx, 0xffff0000
jne 0x43cea3
mov edx, ecx
movzx esi, dx
push esi
call fcn.0047f19d
mov edi, eax
test edi, edi
je 0x43cebd
mov eax, esi
shr eax, 4
inc eax
movzx ecx, ax
push 6
push ecx
push edi
call dword [sym.imp.KERNEL32.dll_FindResourceW]
test eax, eax
je 0x43cebd
push esi
push eax
push edi
call fcn.004206df
mov edi, eax
add esp, 0xc
test edi, edi
je 0x43cebd
mov eax, dword [ebx]
movzx esi, word [edi]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, esi
or eax, ecx
jge 0x43ce2c
push esi
mov ecx, ebx
call fcn.0042051d
movzx eax, word [edi]
mov edx, dword [ebx]
add edi, 2
mov dword [ebp - 0x264], edx
cmp eax, 0xffffffff
jne 0x43ce49
push edi
call fcn.0048550b
add esp, 4
inc eax
add eax, eax
push eax
lea ecx, [esi + esi]
push edi
push ecx
mov dword [ebp - 0x268], ecx
mov ecx, dword [ebp - 0x264]
push ecx
call fcn.00485242
add esp, 0x10
cmp eax, 0x50
ja case.0x43cfb8.1
movzx edx, byte [eax + 0x43d3cc]
jmp dword [edx*4 + 0x43d3bc]
test esi, esi
jl 0x43d3ad
mov eax, dword [ebx]
cmp esi, dword [eax - 8]
jg 0x43d3ad
mov edx, dword [ebp - 0x268]
mov dword [eax - 0xc], esi
mov eax, dword [ebx]
xor ecx, ecx
mov word [edx + eax], cx
jmp 0x43cebd
push 0x4aa0a4
call fcn.0048550b
add esp, 4
push eax
push 0x4aa0a4
mov ecx, ebx
call fcn.004214bc
push ecx
mov byte [ebp - 4], 3
mov ebx, esp
mov dword [ebp - 0x278], esp
mov dword [ebp - 0x270], ebx
call fcn.0047727e
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x43d399
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebx], eax
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 4
test ecx, 0xffff0000
jne 0x43cfe5
mov edx, ecx
movzx esi, dx
push esi
call fcn.0047f19d
mov edi, eax
test edi, edi
je 0x43d003
mov eax, esi
shr eax, 4
inc eax
movzx ecx, ax
push 6
push ecx
push edi
call dword [sym.imp.KERNEL32.dll_FindResourceW]
test eax, eax
je 0x43d003
push esi
push eax
push edi
call fcn.004206df
mov edi, eax
add esp, 0xc
test edi, edi
je 0x43d003
mov eax, dword [ebx]
movzx esi, word [edi]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, esi
or eax, ecx
jge 0x43cf6e
push esi
mov ecx, ebx
call fcn.0042051d
movzx eax, word [edi]
mov edx, dword [ebx]
add edi, 2
mov dword [ebp - 0x268], edx
cmp eax, 0xffffffff
jne 0x43cf8b
push edi
call fcn.0048550b
add esp, 4
inc eax
add eax, eax
push eax
lea ecx, [esi + esi]
push edi
push ecx
mov dword [ebp - 0x264], ecx
mov ecx, dword [ebp - 0x268]
push ecx
call fcn.00485242
add esp, 0x10
cmp eax, 0x50
ja case.0x43cfb8.1
movzx edx, byte [eax + 0x43d430]
jmp dword [edx*4 + 0x43d420]
test esi, esi
jl 0x43d3ad
mov eax, dword [ebx]
cmp esi, dword [eax - 8]
jg 0x43d3ad
mov edx, dword [ebp - 0x264]
mov dword [eax - 0xc], esi
mov eax, dword [ebx]
xor ecx, ecx
mov word [edx + eax], cx
jmp 0x43d003
lea eax, [ebp - 0x234]
push eax
call fcn.0048550b
add esp, 4
push eax
lea ecx, [ebp - 0x234]
push ecx
mov ecx, ebx
call fcn.004214bc
mov byte [ebp - 4], 5
mov esi, dword [ebp + 0x10]
push ecx
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
mov dword [ebp - 0x270], esp
mov ebx, esp
call eax
cmp dword [esi + 0xc], 0
lea ecx, [esi + 0xc]
jl 0x43d03a
cmp eax, dword [esi]
jne 0x43d03a
mov edi, esi
mov edx, 1
lock xadd dword [ecx], edx
jmp 0x43d075
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x43d3b7
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.00485242
add esp, 0x10
add edi, 0x10
mov dword [ebx], edi
lea edi, [ebp - 0x27c]
mov byte [ebp - 4], 1
call fcn.00452020
add esp, 0xc
mov byte [ebp - 4], 6
mov esi, dword [ebp - 0x27c]
push 1
push 0
push ecx
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
mov dword [ebp - 0x270], esp
mov ebx, esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x43d0ca
cmp eax, dword [esi]
jne 0x43d0ca
mov edi, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x43d105
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x43d3b7
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.00485242
add esp, 0x10
lea ecx, [ebp - 0x274]
add edi, 0x10
push ecx
mov dword [ebx], edi
call fcn.004675e0
add esp, 0x10
mov edx, dword [ebp - 0x284]
mov eax, dword [ebp - 0x280]
mov ecx, dword [ebp + 0x1c]
push edx
mov edx, dword [ebp - 0x288]
push eax
mov eax, dword [ebp + 0x14]
push ecx
mov byte [ebp - 4], 7
mov esi, dword [ebp - 0x274]
push edx
push eax
push ecx
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
mov dword [ebp - 0x270], esp
mov ebx, esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x43d170
cmp eax, dword [esi]
jne 0x43d170
mov edi, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x43d1ab
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x43d3b7
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.00485242
add esp, 0x10
add edi, 0x10
mov dword [ebx], edi
mov byte [ebp - 4], 8
mov esi, dword [ebp + 0x10]
lea ecx, [ebp - 0x260]
push ecx
push ecx
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
mov dword [ebp - 0x278], esp
mov ebx, esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x43d1ee
cmp eax, dword [esi]
jne 0x43d1ee
mov edi, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x43d229
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x43d3b7
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.00485242
add esp, 0x10
add edi, 0x10
mov dword [ebx], edi
mov byte [ebp - 4], 9
mov esi, dword [ebp + 0xc]
push ecx
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
mov dword [ebp - 0x28c], esp
mov ebx, esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x43d265
cmp eax, dword [esi]
jne 0x43d265
mov edi, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x43d2a0
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x43d3b7
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.00485242
add esp, 0x10
mov ecx, dword [ebp + 8]
add edi, 0x10
push 0
mov dword [ebx], edi
push ecx
mov byte [ebp - 4], 7
call fcn.0043b6b0
and dword [ebp - 0x26c], eax
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x274]
add eax, 0xfffffff0
add esp, 0x2c
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x43d2e3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x27c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43d309
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov esi, dword [ebp - 0x290]
lea ecx, [ebp - 0x260]
push ecx
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x43cd80
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov edi, dword [ebp - 0x26c]
mov byte [ebp - 4], 0
mov eax, dword [ebp + 0xc]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x43d355
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43d37b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00484f14
mov esp, ebp
pop ebp
ret
dec ebp
invalid
push 0x80004005
call fcn.00420000
call fcn.004777e6
call fcn.0047781e
push 0x80070057
call fcn.00420000
call fcn.00420588
jge 0x43d38c
inc ebx
add byte [ebx - 0x57ffbc2d], ah
rol dword [ebx], cl
test al, 0xd3
inc ebx
add byte [eax], al
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ecx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [edx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [edx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [eax]
lea ecx, [ecx]
mov edi, 0xa30043cf
rol dword [ebx], cl
test al, 0xd3
inc ebx
add byte [eax + 0x43d3], ch
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ecx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [edx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [edx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [eax]
int3