Function at 0x450f20
Capabilities:
Check if file exists
Enumerate files on windows

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5ee40b
mov eax, dword fs:[0]
push eax
push ebx
mov eax, 0x1368
call fcn.0041ead0
mov eax, dword [0x70f200]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1350], ecx
mov edi, dword [ebx + 8]
lea ecx, [ebp - 0x38]
mov eax, dword [ebx + 0xc]
xorps xmm0, xmm0
mov esi, dword [ebx + 0x10]
mov dword [ebp - 0x1344], eax
mov eax, dword [ebx + 0x14]
mov dword [ebp - 0x1358], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0x1348], esi
mov dword [ebp - 0x1328], eax
movq qword [ebp - 0x38], xmm0
mov dword [ebp - 0x30], 0
call fcn.005dc5e0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x90]
xorps xmm0, xmm0
mov dword [ebp - 0x88], 0
movq qword [ebp - 0x90], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0x40], 0
lea ecx, [ebp - 0x48]
movq qword [ebp - 0x48], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0x7c], 0
lea ecx, [ebp - 0x84]
movq qword [ebp - 0x84], xmm0
call fcn.005dc5e0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1314]
xorps xmm0, xmm0
mov dword [ebp - 0x130c], 0
movq qword [ebp - 0x1314], xmm0
call fcn.005d6ac0
xorps xmm0, xmm0
lea ecx, [ebp - 0x1324]
movups xmmword [ebp - 0x1324], xmm0
call fcn.005d6b10
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x3c], 0
call fcn.005d6aa0
push 0xfc8
lea eax, [ebp - 0x1308]
mov dword [ebp - 0x132c], 0
push 0
push eax
call fcn.00420090
add esp, 0xc
lea ecx, [ebp - 0x1308]
call fcn.005e9a70
mov byte [ebp - 4], 7
call fcn.005d8790
xor eax, eax
mov dword [ebp - 0x4c], 0
comisd xmm0, xmmword [0x6edab8]
mov ecx, 8
xorps xmm0, xmm0
movq qword [ebp - 0x54], xmm0
cmovae eax, ecx
sub esp, 8
mov dword [ebp - 0x133c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.SoftwareMicrosoftWindows_NTCurrentVersionWinlogon
push esi
push str.HKU_
lea ecx, [ebp - 0x54]
call fcn.005dc520
push ecx
push 0x20019
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 8
call fcn.005dc190
push eax
lea ecx, [ebp - 0x3c]
call fcn.005d6a30
test al, al
je 0x451474
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x627930
lea ecx, [ebp - 0x54]
call fcn.005dc190
push eax
push str.s_Winlogon_entries__
push dword [ebp - 0x1344]
lea ecx, [ebp - 0x48]
call fcn.005dc200
mov eax, dword [ebx + 0x18]
push ecx
push dword [ebp - 0x133c]
inc eax
lea ecx, [ebp - 0x48]
push eax
mov dword [ebp - 0x1330], eax
call fcn.005dc190
mov ecx, dword [ebp - 0x1328]
mov edx, eax
call fcn.005ca9c0
xorps xmm0, xmm0
mov dword [ebp - 0x132c], 1
lea ecx, [ebp - 0x6c]
mov dword [ebp - 0x1374], 0x6417fc
mov dword [ebp - 0x1370], str.Userinit
mov dword [ebp - 0x136c], str.System
mov dword [ebp - 0x1368], str.Load
mov dword [ebp - 0x1364], 0x6484e0
mov dword [ebp - 0x1360], str.UIHost
mov dword [ebp - 0x135c], str.AppInit_DLLs
movups xmmword [ebp - 0x6c], xmm0
movq qword [ebp - 0x5c], xmm0
call fcn.005d9320
xor eax, eax
mov byte [ebp - 4], 9
mov dword [ebp - 0x1338], eax
nop word [eax + eax]
mov esi, dword [ebp + eax*4 - 0x1374]
lea ecx, [ebp - 0x3c]
lea eax, [ebp - 0x1324]
mov dword [ebp - 0x134c], esi
push eax
push esi
call fcn.005d68b0
test al, al
je 0x451438
mov eax, dword [ebp - 0x131c]
cmp eax, 1
je 0x4511f9
cmp eax, 2
jne 0x451438
lea ecx, [ebp - 0x1324]
call fcn.005d3b00
test al, al
je 0x451438
mov ecx, dword [ebp - 0x1324]
call fcn.005d8c40
test eax, eax
je 0x451438
push 0
push 0x628818
push ecx
lea ecx, [ebp - 0x6c]
call fcn.005d9070
xor edx, edx
lea ecx, [ebp - 0x6c]
mov dword [ebp - 0x1340], edx
call fcn.005d9210
test eax, eax
je 0x451438
push 3
push 1
push edx
lea ecx, [ebp - 0x6c]
call fcn.005d9220
push eax
lea ecx, [ebp - 0x38]
call fcn.005dc260
mov ecx, eax
call fcn.005da0f0
mov ecx, eax
call fcn.005dc3a0
test eax, eax
je 0x45141b
mov edx, dword [ebp - 0x1350]
lea ecx, [ebp - 0x38]
push 3
lea edx, [edx + 0x1c]
call fcn.005e88c0
test al, al
jne 0x4512af
sub esp, 0xc
lea ecx, [ebp - 0x38]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.File_not_found:
call fcn.005da510
jmp 0x451334
mov eax, dword [edi + 8]
test al, 1
je 0x4512e0
and eax, 0xffffff08
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x1334], eax
call fcn.005dc190
mov dl, byte [ebp - 0x1334]
mov ecx, eax
call fcn.005e33a0
test al, al
jne 0x45141b
jmp 0x451334
test al, 2
je 0x45130e
and eax, 0xffffff08
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x1334], eax
call fcn.005dc190
mov dl, byte [ebp - 0x1334]
mov ecx, eax
call fcn.005e3270
test al, al
jne 0x45141b
jmp 0x451334
test al, 4
je 0x451334
push 0
lea ecx, [ebp - 0x38]
call fcn.005dc190
lea edx, [ebp - 0x84]
mov ecx, eax
call fcn.005e65a0
add esp, 4
test eax, eax
je 0x45141b
test byte [edi + 8], 8
je 0x451344
cmp byte [edi + 0xc], 0
jne 0x451462
mov ecx, dword [ebp - 0x1328]
mov edx, 0x186a0
push 0xffffffffffffffff
push dword [ebp - 0x1330]
push esi
call fcn.005caa40
lea ecx, [ebp - 0x38]
mov esi, eax
call fcn.005dc190
mov ecx, dword [ebp - 0x1328]
mov edx, esi
push eax
push 1
call fcn.005ca650
lea ecx, [ebp - 0x38]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x1308]
call fcn.005e9660
push str.No_description
push 0x62e020
lea ecx, [ebp - 0x1308]
call fcn.005e98f0
mov ecx, dword [ebp - 0x1328]
mov edx, esi
push eax
push 2
call fcn.005ca650
mov eax, dword [ebp - 0x1338]
lea ecx, [ebp - 0x54]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp + eax*4 - 0x1374]
push 0x62bd28
call fcn.005dc190
push eax
lea ecx, [ebp - 0x48]
call fcn.005dc200
lea ecx, [ebp - 0x48]
call fcn.005dc190
mov ecx, dword [ebp - 0x1328]
mov edx, esi
push eax
push 4
call fcn.005ca650
push 0
lea ecx, [ebp - 0x38]
call fcn.005dc190
mov ecx, dword [ebp - 0x1328]
mov edx, esi
push eax
call fcn.005ca7a0
mov esi, dword [ebp - 0x134c]
mov edx, dword [ebp - 0x1340]
lea ecx, [ebp - 0x6c]
inc edx
mov dword [ebp - 0x1340], edx
call fcn.005d9210
cmp edx, eax
jb 0x451247
mov eax, dword [ebp - 0x1338]
inc eax
mov dword [ebp - 0x1338], eax
cmp eax, 7
jl 0x4511c0
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 8
call fcn.005d9280
mov esi, dword [ebp - 0x1348]
jmp 0x45147d
lea ecx, [ebp - 0x6c]
call fcn.005d9280
mov esi, 1
jmp 0x451d5a
mov eax, dword [ebx + 0x18]
mov dword [ebp - 0x1330], eax
push fcn.005dc430
push fcn.005dc5e0
push 2
push 0xc
lea eax, [ebp - 0x2c]
push eax
call fcn.0041e804
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.SoftwareMicrosoftWindowsCurrentVersion_
push esi
push str.HKU_
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xa
call fcn.005dc200
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer_
push esi
push str.HKU_
lea ecx, [ebp - 0x20]
call fcn.005dc200
xor eax, eax
mov dword [ebp - 0x64], 0x6484e0
mov dword [ebp - 0x60], str.RunHidden
mov dword [ebp - 0x5c], str.RunOnce
mov dword [ebp - 0x58], str.RunOnceEx
mov dword [ebp - 0x1340], eax
test eax, eax
je 0x451516
cmp eax, 2
jne 0x451575
mov edx, str.s_RunOnce_entries
jmp 0x45151b
mov edx, str.s_startup_entries
mov eax, dword [ebp - 0x1344]
lea ecx, [ebp - 0x48]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push edx
push eax
call fcn.005dc200
mov eax, dword [ebp - 0x1330]
push ecx
push dword [ebp - 0x133c]
inc eax
lea ecx, [ebp - 0x48]
push eax
mov dword [ebp - 0x1330], eax
call fcn.005dc190
mov ecx, dword [ebp - 0x1328]
mov edx, eax
call fcn.005ca9c0
inc dword [ebp - 0x132c]
mov eax, dword [ebp - 0x1340]
mov ecx, dword [ebp + eax*4 - 0x64]
xor esi, esi
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x1334], esi
mov dword [ebp - 0x1354], ecx
mov dword [ebp - 0x134c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push ecx
mov ecx, eax
call fcn.005dc190
push eax
lea ecx, [ebp - 0x54]
call fcn.005dc200
push ecx
push 0x20019
lea ecx, [ebp - 0x54]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x3c]
call fcn.005d6a30
test al, al
je 0x451820
mov dl, 1
lea ecx, [ebp - 0x3c]
call fcn.005d4010
test al, al
jne 0x451820
xor eax, eax
mov dword [ebp - 0x1348], eax
cmp byte [edi + 0xc], al
jne 0x451820
lea ecx, [ebp - 0x1314]
push ecx
push eax
lea ecx, [ebp - 0x3c]
call fcn.005d62e0
test al, al
je 0x45181a
mov eax, dword [ebp - 0x1310]
cmp eax, 1
je 0x451623
cmp eax, 2
jne 0x451803
lea eax, [ebp - 0x1324]
push eax
push dword [ebp - 0x1314]
lea ecx, [ebp - 0x3c]
call fcn.005d68b0
test al, al
je 0x451803
ret
add dword [eax], eax
invalid
lea ecx, [ebp - 0x1324]
call fcn.005d3b00
test al, al
je 0x451803
push 1
push dword [ebp - 0x1324]
lea ecx, [ebp - 0x38]
call fcn.005dc260
mov edx, dword [ebp - 0x1350]
lea ecx, [ebp - 0x38]
push 3
lea edx, [edx + 0x1c]
call fcn.005e88c0
test al, al
jne 0x45169f
sub esp, 0xc
lea ecx, [ebp - 0x38]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.File_not_found:
call fcn.005da510
jmp 0x451724
mov eax, dword [edi + 8]
test al, 1
je 0x4516d0
and eax, 0xffffff08
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x1338], eax
call fcn.005dc190
mov dl, byte [ebp - 0x1338]
mov ecx, eax
call fcn.005e33a0
test al, al
jne 0x451803
jmp 0x451724
test al, 2
je 0x4516fe
and eax, 0xffffff08
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x1338], eax
call fcn.005dc190
mov dl, byte [ebp - 0x1338]
mov ecx, eax
call fcn.005e3270
test al, al
jne 0x451803
jmp 0x451724
test al, 4
je 0x451724
push 0
lea ecx, [ebp - 0x38]
call fcn.005dc190
lea edx, [ebp - 0x84]
mov ecx, eax
call fcn.005e65a0
add esp, 4
test eax, eax
je 0x451803
test byte [edi + 8], 8
je 0x451734
cmp byte [edi + 0xc], 0
jne 0x451861
mov ecx, dword [ebp - 0x1328]
mov edx, 0x186a0
push 0xffffffffffffffff
push dword [ebp - 0x1330]
push dword [ebp - 0x1314]
call fcn.005caa40
lea ecx, [ebp - 0x38]
mov esi, eax
call fcn.005dc190
mov ecx, dword [ebp - 0x1328]
mov edx, esi
push eax
push 1
call fcn.005ca650
lea ecx, [ebp - 0x38]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x1308]
call fcn.005e9660
push str.No_description
push 0x62e020
lea ecx, [ebp - 0x1308]
call fcn.005e98f0
mov ecx, dword [ebp - 0x1328]
mov edx, esi
push eax
push 2
call fcn.005ca650
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x1314]
lea ecx, [ebp - 0x54]
push 0x62bd28
call fcn.005dc190
push eax
lea ecx, [ebp - 0x48]
call fcn.005dc200
lea ecx, [ebp - 0x48]
call fcn.005dc190
mov ecx, dword [ebp - 0x1328]
mov edx, esi
push eax
push 4
call fcn.005ca650
push 0
lea ecx, [ebp - 0x38]
call fcn.005dc190
mov ecx, dword [ebp - 0x1328]
mov edx, esi
push eax
call fcn.005ca7a0
mov eax, dword [ebp - 0x1348]
inc eax
cmp byte [edi + 0xc], 0
mov dword [ebp - 0x1348], eax
je 0x4515f7
mov esi, dword [ebp - 0x1334]
mov eax, dword [ebp - 0x134c]
inc esi
mov ecx, dword [ebp - 0x1354]
add eax, 0xc
mov dword [ebp - 0x1334], esi
mov dword [ebp - 0x134c], eax
cmp esi, 2
jl 0x451590
mov eax, dword [ebp - 0x1340]
inc eax
mov dword [ebp - 0x1340], eax
cmp eax, 4
jl 0x451506
cmp byte [edi + 0xc], 0
je 0x45186c
mov esi, dword [ebp - 0x132c]
jmp 0x451d44
xorps xmm0, xmm0
mov dword [ebp - 0x70], 0
lea ecx, [ebp - 0x78]
movq qword [ebp - 0x78], xmm0
call fcn.005dc5e0
mov edx, dword [ebp - 0x1358]
lea eax, [ebp - 0x78]
push eax
mov byte [ebp - 4], 0xb
call fcn.0059c880
test al, al
jne 0x4518ab
mov esi, dword [ebp - 0x132c]
mov dword [ebp - 0x132c], esi
jmp 0x451d3c
sub esp, 8
mov dword [ebp - 0x58], 0
xorps xmm0, xmm0
lea ecx, [ebp - 0x78]
movq qword [ebp - 0x60], xmm0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str..
call fcn.005dc190
push eax
lea ecx, [ebp - 0x60]
call fcn.005dc520
push 0x4c
lea eax, [ebp - 0xe0]
push 0
push eax
call fcn.00420090
add esp, 0xc
lea ecx, [ebp - 0xe0]
call fcn.005e9520
push 0x260
lea eax, [ebp - 0x340]
mov byte [ebp - 4], 0xd
push 0
push eax
call fcn.00420090
add esp, 0xc
lea ecx, [ebp - 0x60]
call fcn.005dc190
push 0x250
mov esi, eax
lea eax, [ebp - 0x340]
push 0
push eax
call fcn.00420090
add esp, 0xc
lea eax, [ebp - 0x340]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, dword [sym.imp.KERNEL32.dll_FindNextFileW]
mov dword [ebp - 0xf0], eax
cmp eax, 0xffffffff
je 0x4519f7
mov ecx, 3
mov dword [ebp - 0xec], ecx
nop dword [eax]
cmp word [ebp - 0x314], 0x2e
jne 0x451996
mov dx, word [ebp - 0x312]
test dx, dx
je 0x4519c6
cmp dx, 0x2e
jne 0x451996
cmp word [ebp - 0x310], 0
je 0x4519c6
test ecx, ecx
je 0x4519f7
mov edx, dword [ebp - 0x340]
test cl, 1
je 0x4519ad
test edx, 0x400
jne 0x4519c6
test cl, 2
je 0x4519b9
test dl, 0x10
je 0x4519f7
jmp 0x4519c6
test cl, 4
je 0x4519f7
test edx, 0x10
jne 0x4519f7
lea ecx, [ebp - 0x340]
push ecx
push eax
call esi
test eax, eax
je 0x4519e2
mov ecx, dword [ebp - 0xec]
mov eax, dword [ebp - 0xf0]
jmp 0x451970
push dword [ebp - 0xf0]
call dword [sym.imp.KERNEL32.dll_FindClose]
or eax, 0xffffffff
mov dword [ebp - 0xf0], eax
mov byte [ebp - 4], 0xe
cmp eax, 0xffffffff
je 0x451d17
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x627930
lea ecx, [ebp - 0x78]
call fcn.005dc190
push eax
push str.s_startup_folder__
push dword [ebp - 0x1344]
lea ecx, [ebp - 0x48]
call fcn.005dc200
mov eax, dword [ebp - 0x1330]
push ecx
push dword [ebp - 0x133c]
inc eax
lea ecx, [ebp - 0x48]
push eax
mov dword [ebp - 0x1330], eax
call fcn.005dc190
mov ecx, dword [ebp - 0x1328]
mov edx, eax
call fcn.005ca9c0
inc dword [ebp - 0x132c]
cmp byte [edi + 0xc], 0
jne 0x451d11
push 0
mov edx, str.desktop.ini
lea ecx, [ebp - 0x314]
call fcn.005d8ad0
test eax, eax
je 0x451cae
xor esi, esi
lea eax, [ebp - 0x314]
cmp word [ebp - 0x314], si
je 0x451abc
nop word [eax + eax]
movzx ecx, word [eax + 2]
add eax, 2
cmp ecx, 0x2e
jne 0x451ab0
mov esi, eax
jmp 0x451aa0
test cx, cx
jne 0x451aa0
test esi, esi
je 0x451abc
add esi, 2
push 0
mov edx, 0x66c890
mov ecx, esi
call fcn.005d8ad0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test eax, eax
lea ecx, [ebp - 0x78]
lea eax, [ebp - 0x314]
push eax
push 0x624284
jne 0x451b30
call fcn.005dc190
push eax
lea ecx, [ebp - 0x90]
call fcn.005dc200
push 0
lea ecx, [ebp - 0x90]
call fcn.005dc190
push eax
lea ecx, [ebp - 0xe0]
call fcn.005e93e0
push ecx
lea ecx, [ebp - 0xe0]
call fcn.005e9390
push eax
lea ecx, [ebp - 0x38]
call fcn.005dc510
jmp 0x451b3e
call fcn.005dc190
push eax
lea ecx, [ebp - 0x38]
call fcn.005dc200
lea ecx, [ebp - 0x38]
call fcn.005dc190
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x451b6e
sub esp, 0xc
lea ecx, [ebp - 0x38]
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push str.File_not_found:
call fcn.005da510
jmp 0x451bf3
mov eax, dword [edi + 8]
test al, 1
je 0x451b9f
and eax, 0xffffff08
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x133c], eax
call fcn.005dc190
mov dl, byte [ebp - 0x133c]
mov ecx, eax
call fcn.005e33a0
test al, al
jne 0x451ca8
jmp 0x451bf3
test al, 2
je 0x451bcd
and eax, 0xffffff08
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x133c], eax
call fcn.005dc190
mov dl, byte [ebp - 0x133c]
mov ecx, eax
call fcn.005e3270
test al, al
jne 0x451ca8
jmp 0x451bf3
test al, 4
je 0x451bf3
push 0
lea ecx, [ebp - 0x38]
call fcn.005dc190
lea edx, [ebp - 0x84]
mov ecx, eax
call fcn.005e65a0
add esp, 4
test eax, eax
je 0x451ca8
test byte [edi + 8], 8
je 0x451c03
cmp byte [edi + 0xc], 0
jne 0x451d11
mov ecx, dword [ebp - 0x1328]
lea eax, [ebp - 0x314]
push 0xffffffffffffffff
push dword [ebp - 0x1330]
mov edx, 0x186a0
push eax
call fcn.005caa40
lea ecx, [ebp - 0x38]
mov esi, eax
call fcn.005dc190
mov ecx, dword [ebp - 0x1328]
mov edx, esi
push eax
push 1
call fcn.005ca650
lea ecx, [ebp - 0x38]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x1308]
call fcn.005e9660
push str.No_description
push 0x62e020
lea ecx, [ebp - 0x1308]
call fcn.005e98f0
mov ecx, dword [ebp - 0x1328]
mov edx, esi
push eax
push 2
call fcn.005ca650
lea ecx, [ebp - 0x90]
call fcn.005dc190
mov ecx, dword [ebp - 0x1328]
mov edx, esi
push eax
push 3
call fcn.005ca650
push 0
lea ecx, [ebp - 0x38]
call fcn.005dc190
mov ecx, dword [ebp - 0x1328]
mov edx, esi
push eax
call fcn.005ca7a0
mov esi, dword [sym.imp.KERNEL32.dll_FindNextFileW]
mov eax, dword [ebp - 0xf0]
cmp eax, 0xffffffff
je 0x451d03
lea ecx, [ebp - 0x340]
push ecx
push eax
call esi
test eax, eax
je 0x451cee
lea ecx, [ebp - 0x340]
call fcn.004011a0
test al, al
jne 0x451a65
mov ecx, dword [ebp - 0x132c]
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x132c], ecx
jmp 0x451d17
push dword [ebp - 0xf0]
call dword [sym.imp.KERNEL32.dll_FindClose]
or eax, 0xffffffff
mov dword [ebp - 0xf0], eax
mov ecx, dword [ebp - 0x132c]
mov dword [ebp - 0x132c], ecx
jmp 0x451d17
mov eax, dword [ebp - 0xf0]
mov esi, dword [ebp - 0x132c]
cmp eax, 0xffffffff
je 0x451d29
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
lea ecx, [ebp - 0xe0]
call fcn.005e9080
lea ecx, [ebp - 0x60]
call fcn.005dc430
lea ecx, [ebp - 0x78]
call fcn.005dc430
push fcn.005dc430
push 2
push 0xc
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 8
push eax
call fcn.0041e45b
lea ecx, [ebp - 0x54]
call fcn.005dc430
lea ecx, [ebp - 0x34c]
call fcn.005dc430
lea ecx, [ebp - 0x358]
call fcn.005dc430
lea ecx, [ebp - 0x364]
call fcn.005dc430
lea ecx, [ebp - 0x3c]
call fcn.005d69e0
lea ecx, [ebp - 0x1324]
call fcn.005d6b00
lea ecx, [ebp - 0x1314]
call fcn.005d6ab0
lea ecx, [ebp - 0x84]
call fcn.005dc430
lea ecx, [ebp - 0x48]
call fcn.005dc430
lea ecx, [ebp - 0x90]
call fcn.005dc430
lea ecx, [ebp - 0x38]
call fcn.005dc430
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041e1b5
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x14