Function at 0x41ea30
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d2b9d
mov eax, dword fs:[0]
push eax
sub esp, 0x5c8
mov eax, dword [0x6385e0]
xor eax, ebp
mov dword [ebp - 0x140], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x550], ecx
mov ecx, dword [ebp + 8]
call fcn.004082e0
movzx eax, al
test eax, eax
jne 0x41ea86
mov ecx, dword [ebp + 8]
call fcn.00408320
movzx ecx, al
test ecx, ecx
je 0x41fa25
push 0x38
mov ecx, dword [ebp + 8]
call fcn.00412830
fcomp qword [0x612c60]
fnstsw ax
test ah, 1
jne 0x41fa25
mov byte [ebp - 0x56], 0
mov byte [ebp - 0x55], 0
lea ecx, [ebp - 0x2c]
call fcn.0042fe80
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x44]
call fcn.004b34a0
mov byte [ebp - 4], 1
mov ecx, dword [ebp + 8]
call fcn.00435950
push eax
lea edx, [ebp - 0x50]
push edx
call fcn.004131c0
add esp, 8
mov byte [ebp - 4], 2
mov ecx, dword [ebp + 8]
call fcn.00435950
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.004132d0
add esp, 8
mov byte [ebp - 4], 3
push 0x5c
lea ecx, [ebp - 0x50]
call fcn.004b5770
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jle 0x41eb72
mov ecx, dword [ebp - 0x54]
add ecx, 1
mov dword [ebp - 0x54], ecx
mov edx, dword [ebp - 0x54]
push edx
lea eax, [ebp - 0x430]
push eax
lea ecx, [ebp - 0x50]
call fcn.004b64e0
mov dword [ebp - 0x554], eax
mov ecx, dword [ebp - 0x554]
mov dword [ebp - 0x558], ecx
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x558]
push edx
lea ecx, [ebp - 0x44]
call fcn.004b3890
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x430]
call fcn.004b3860
push 0
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x44]
call fcn.004b4c90
movzx ecx, al
test ecx, ecx
je 0x41eb72
mov byte [ebp - 0x55], 1
movzx edx, byte [ebp - 0x55]
test edx, edx
je 0x41eb7c
jmp 0x41ebee
push 0
mov eax, dword [ebp - 0x550]
add eax, 0x108
push eax
mov ecx, dword [ebp + 8]
call fcn.00435950
mov ecx, eax
call fcn.004b69b0
movzx ecx, al
test ecx, ecx
je 0x41ebee
push 0
mov edx, dword [ebp - 0x550]
add edx, 0x108
push edx
mov ecx, dword [ebp + 8]
call fcn.00435950
mov ecx, eax
call fcn.004b4c90
movzx eax, al
test eax, eax
jne 0x41ebee
push 0
mov ecx, dword [ebp - 0x550]
add ecx, 0x114
push ecx
mov ecx, dword [ebp + 8]
call fcn.00435950
mov ecx, eax
call fcn.004b69b0
movzx edx, al
test edx, edx
jne 0x41ebee
mov byte [ebp - 0x55], 1
movzx eax, byte [ebp - 0x55]
test eax, eax
je 0x41ec7e
lea ecx, [ebp - 0x50]
push ecx
mov ecx, dword [ebp - 0x550]
call fcn.0041e330
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
je 0x41ec7e
mov edx, dword [0x63e870]
push edx
lea ecx, [ebp - 0x440]
call fcn.004b3550
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x550]
push eax
lea ecx, [ebp - 0x2c]
push ecx
push 1
lea edx, [ebp - 0x440]
push edx
lea eax, [ebp - 0x50]
push eax
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x5c]
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 0x431], al
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x440]
call fcn.004b3860
movzx ecx, byte [ebp - 0x431]
test ecx, ecx
je 0x41ec7e
lea ecx, [ebp - 0x2c]
call fcn.0040c9d0
cmp eax, 0x14
ja 0x41ec7e
mov byte [ebp - 0x56], 1
movzx edx, byte [ebp - 0x56]
test edx, edx
je 0x41f9ed
push 1
mov ecx, dword [ebp + 8]
call fcn.00412400
lea ecx, [ebp - 0x50]
call fcn.004553f0
push eax
push str.ROGUE___s_r_n
call fcn.0054eca8
add esp, 8
lea ecx, [ebp - 0x68]
call fcn.004b34a0
mov byte [ebp - 4], 6
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstall
lea ecx, [ebp - 0x78]
call fcn.004b3550
mov byte [ebp - 4], 7
push 0
lea eax, [ebp - 0x78]
push eax
call fcn.00414b30
mov ecx, eax
call fcn.00414800
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
je 0x41efc5
push str.__Finding_Rogue_Uninstall_Key_r_n
call fcn.0054eca8
add esp, 4
push 0
lea ecx, [ebp - 0x84]
call fcn.00430200
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x84]
push ecx
mov ecx, dword [ebp - 0x6c]
call fcn.00414060
movzx edx, al
test edx, edx
je 0x41ef44
mov dword [ebp - 0x88], 0
jmp 0x41ed39
mov eax, dword [ebp - 0x88]
add eax, 1
mov dword [ebp - 0x88], eax
lea ecx, [ebp - 0x84]
call fcn.004b9730
cmp dword [ebp - 0x88], eax
jge 0x41ef44
lea ecx, [ebp - 0x68]
call fcn.00404b70
test eax, eax
je 0x41ed66
jmp 0x41ef44
push 0
lea ecx, [ebp - 0x44]
push ecx
mov edx, dword [ebp - 0x88]
push edx
lea ecx, [ebp - 0x84]
call fcn.00430700
mov ecx, eax
call fcn.004b69b0
movzx eax, al
test eax, eax
je 0x41edde
push str.HKLM_
lea ecx, [ebp - 0x68]
call fcn.004b38f0
lea ecx, [ebp - 0x78]
push ecx
lea ecx, [ebp - 0x68]
call fcn.004b3ad0
push 0x5c
lea ecx, [ebp - 0x68]
call fcn.004b3a80
mov edx, dword [ebp - 0x88]
push edx
lea ecx, [ebp - 0x84]
call fcn.00430700
push eax
lea ecx, [ebp - 0x68]
call fcn.004b3ad0
push 0x5c
lea ecx, [ebp - 0x68]
call fcn.004b3a80
jmp 0x41ef44
push 0
mov eax, dword [ebp - 0x88]
push eax
lea ecx, [ebp - 0x84]
call fcn.00430700
push eax
mov ecx, dword [ebp - 0x6c]
call fcn.00414800
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
je 0x41ef3f
mov dword [ebp - 0x90], 0
jmp 0x41ee29
mov ecx, dword [ebp - 0x90]
add ecx, 1
mov dword [ebp - 0x90], ecx
cmp dword [ebp - 0x90], 3
jae 0x41eef8
mov edx, dword [0x63e870]
push edx
lea ecx, [ebp - 0x9c]
call fcn.004b3550
mov byte [ebp - 4], 9
lea eax, [ebp - 0x9c]
push eax
mov ecx, dword [ebp - 0x90]
mov edx, dword [ecx*4 + 0x63eab4]
push edx
mov ecx, dword [ebp - 0x8c]
call fcn.004141d0
movzx eax, al
test eax, eax
je 0x41eee4
push 0
lea ecx, [ebp - 0x50]
push ecx
lea ecx, [ebp - 0x9c]
call fcn.004b69b0
movzx edx, al
test edx, edx
je 0x41eee4
push str.HKLM_
lea ecx, [ebp - 0x68]
call fcn.004b38f0
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x68]
call fcn.004b3ad0
push 0x5c
lea ecx, [ebp - 0x68]
call fcn.004b3a80
mov ecx, dword [ebp - 0x88]
push ecx
lea ecx, [ebp - 0x84]
call fcn.00430700
push eax
lea ecx, [ebp - 0x68]
call fcn.004b3ad0
push 0x5c
lea ecx, [ebp - 0x68]
call fcn.004b3a80
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x9c]
call fcn.004b3860
jmp 0x41eef8
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x9c]
call fcn.004b3860
jmp 0x41ee1a
mov edx, dword [ebp - 0x8c]
mov dword [ebp - 0x448], edx
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x444], eax
cmp dword [ebp - 0x444], 0
je 0x41ef35
push 1
mov ecx, dword [ebp - 0x444]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x444]
mov eax, dword [edx]
call eax
mov dword [ebp - 0x55c], eax
jmp 0x41ef3f
mov dword [ebp - 0x55c], 0
jmp 0x41ed2a
mov ecx, dword [ebp - 0x6c]
mov dword [ebp - 0x450], ecx
mov edx, dword [ebp - 0x450]
mov dword [ebp - 0x44c], edx
cmp dword [ebp - 0x44c], 0
je 0x41ef7e
push 1
mov eax, dword [ebp - 0x44c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x44c]
mov eax, dword [edx]
call eax
mov dword [ebp - 0x560], eax
jmp 0x41ef88
mov dword [ebp - 0x560], 0
lea ecx, [ebp - 0x68]
call fcn.00404b70
test eax, eax
jle 0x41efb6
lea ecx, [ebp - 0x68]
call fcn.004553f0
push eax
push str.Rogue_Uninstall_Key:__s_r_n
call fcn.0054eca8
add esp, 8
lea ecx, [ebp - 0x68]
push ecx
mov ecx, dword [ebp + 8]
call fcn.00412b10
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x84]
call fcn.00430250
lea ecx, [ebp - 0x44]
call fcn.004553f0
push eax
push str.__Finding_Application_Data_folder:__s_r_n
call fcn.0054eca8
add esp, 8
push fcn.004b3860
push fcn.004b34a0
push 2
push 0xc
lea edx, [ebp - 0xb4]
push edx
call fcn.0054ecc0
mov byte [ebp - 4], 0xa
push 0x1a
lea eax, [ebp - 0x45c]
push eax
call fcn.004c0e70
add esp, 8
mov dword [ebp - 0x564], eax
mov ecx, dword [ebp - 0x564]
mov dword [ebp - 0x568], ecx
mov byte [ebp - 4], 0xb
lea edx, [ebp - 0x44]
push edx
mov eax, dword [ebp - 0x568]
push eax
lea ecx, [ebp - 0x468]
push ecx
call fcn.00412f50
add esp, 0xc
mov dword [ebp - 0x56c], eax
mov edx, dword [ebp - 0x56c]
mov dword [ebp - 0x570], edx
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x570]
push eax
lea ecx, [ebp - 0xb4]
call fcn.004b3890
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x468]
call fcn.004b3860
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x45c]
call fcn.004b3860
push 0x23
lea ecx, [ebp - 0x474]
push ecx
call fcn.004c0e70
add esp, 8
mov dword [ebp - 0x574], eax
mov edx, dword [ebp - 0x574]
mov dword [ebp - 0x578], edx
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x44]
push eax
mov ecx, dword [ebp - 0x578]
push ecx
lea edx, [ebp - 0x480]
push edx
call fcn.00412f50
add esp, 0xc
mov dword [ebp - 0x57c], eax
mov eax, dword [ebp - 0x57c]
mov dword [ebp - 0x580], eax
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x580]
push ecx
lea ecx, [ebp - 0xa8]
call fcn.004b3890
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x480]
call fcn.004b3860
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x474]
call fcn.004b3860
call fcn.0042e5c0
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xbc], 0
jmp 0x41f12d
mov edx, dword [ebp - 0xbc]
add edx, 1
mov dword [ebp - 0xbc], edx
cmp dword [ebp - 0xbc], 2
jae 0x41f2a7
mov eax, dword [ebp - 0xbc]
imul eax, eax, 0xc
lea ecx, [ebp + eax - 0xb4]
push ecx
mov ecx, dword [ebp - 0x550]
call fcn.0041e330
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0
je 0x41f2a2
lea ecx, [ebp - 0xdc]
call fcn.00407bf0
mov byte [ebp - 4], 0xf
lea edx, [ebp - 0xc1]
push edx
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0xe4]
push ecx
mov edx, dword [ebp - 0xbc]
imul edx, edx, 0xc
lea eax, [ebp + edx - 0xb4]
push eax
mov ecx, dword [ebp - 0xc0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xc0]
mov eax, dword [edx + 0x10]
call eax
movzx ecx, al
test ecx, ecx
je 0x41f293
lea edx, [ebp - 0xdc]
push edx
lea eax, [ebp - 0x494]
push eax
mov ecx, dword [ebp - 0xb8]
call fcn.00407c50
mov dword [ebp - 0x584], eax
mov ecx, dword [ebp - 0x584]
call fcn.00407ba0
fstp dword [ebp - 0xec]
lea ecx, [ebp - 0x494]
call fcn.00407b80
mov ecx, dword [ebp + 8]
call fcn.00409140
fsub dword [ebp - 0xec]
fstp dword [ebp - 0x588]
fld dword [ebp - 0x588]
push ecx
fstp dword [esp]
call fcn.00439690
add esp, 4
fstp dword [ebp - 0xe8]
fld dword [ebp - 0xe8]
fcomp qword [0x612c58]
fnstsw ax
test ah, 5
jp 0x41f293
mov ecx, dword [0x63e870]
push ecx
lea ecx, [ebp - 0x4a0]
call fcn.004b3550
mov byte [ebp - 4], 0x10
mov edx, dword [ebp - 0x550]
push edx
lea eax, [ebp - 0x2c]
push eax
push 1
lea ecx, [ebp - 0x4a0]
push ecx
mov edx, dword [ebp - 0xbc]
imul edx, edx, 0xc
lea eax, [ebp + edx - 0xb4]
push eax
mov ecx, dword [ebp - 0xc0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xc0]
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x4a0]
call fcn.004b3860
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xdc]
call fcn.00407c30
jmp 0x41f11e
mov byte [ebp - 4], 7
push fcn.004b3860
push 2
push 0xc
lea ecx, [ebp - 0xb4]
push ecx
call fcn.0054d703
push str.__Finding_Start_Menu_entries_r_n
call fcn.0054eca8
add esp, 4
push fcn.004b3860
push fcn.004b34a0
push 2
push 0xc
lea edx, [ebp - 0x124]
push edx
call fcn.0054ecc0
mov byte [ebp - 4], 0x11
push 2
lea eax, [ebp - 0x4ac]
push eax
call fcn.004c0e70
add esp, 8
mov dword [ebp - 0x58c], eax
mov ecx, dword [ebp - 0x58c]
mov dword [ebp - 0x590], ecx
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x590]
push edx
lea ecx, [ebp - 0x124]
call fcn.004b3890
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x4ac]
call fcn.004b3860
push 0x17
lea eax, [ebp - 0x4b8]
push eax
call fcn.004c0e70
add esp, 8
mov dword [ebp - 0x594], eax
mov ecx, dword [ebp - 0x594]
mov dword [ebp - 0x598], ecx
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x598]
push edx
lea ecx, [ebp - 0x118]
call fcn.004b3890
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x4b8]
call fcn.004b3860
lea ecx, [ebp - 0x10c]
call fcn.0042fe80
mov byte [ebp - 4], 0x14
call fcn.0042e5c0
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x12c], 0
jmp 0x41f3b0
mov eax, dword [ebp - 0x12c]
add eax, 1
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 2
jae 0x41f76d
push 0x5fab4c
lea ecx, [ebp - 0x4c4]
call fcn.004b3550
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x4c4]
push ecx
mov edx, dword [ebp - 0x12c]
imul edx, edx, 0xc
lea eax, [ebp + edx - 0x124]
push eax
lea ecx, [ebp - 0x138]
push ecx
call fcn.00412f50
add esp, 0xc
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x4c4]
call fcn.004b3860
lea edx, [ebp - 0x394]
push edx
lea ecx, [ebp - 0x138]
call fcn.004553f0
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0xffffffff
je 0x41f759
mov eax, dword [ebp - 0x394]
and eax, 0x400
je 0x41f445
jmp 0x41f730
mov ecx, dword [ebp - 0x394]
and ecx, 0x10
je 0x41f730
mov dword [ebp - 0x59c], 0x5fc5b0
lea edx, [ebp - 0x368]
mov dword [ebp - 0x5a0], edx
mov eax, dword [ebp - 0x5a0]
mov cx, word [eax]
mov word [ebp - 0x5a2], cx
mov edx, dword [ebp - 0x59c]
cmp cx, word [edx]
jne 0x41f4d0
cmp word [ebp - 0x5a2], 0
je 0x41f4c4
mov eax, dword [ebp - 0x5a0]
mov cx, word [eax + 2]
mov word [ebp - 0x5a4], cx
mov edx, dword [ebp - 0x59c]
cmp cx, word [edx + 2]
jne 0x41f4d0
add dword [ebp - 0x5a0], 4
add dword [ebp - 0x59c], 4
cmp word [ebp - 0x5a4], 0
jne 0x41f46a
mov dword [ebp - 0x5a8], 0
jmp 0x41f4db
sbb eax, eax
sbb eax, 0xffffffff
mov dword [ebp - 0x5a8], eax
mov ecx, dword [ebp - 0x5a8]
mov dword [ebp - 0x5ac], ecx
cmp dword [ebp - 0x5ac], 0
je 0x41f590
mov dword [ebp - 0x5b0], 0x5fc5b4
lea edx, [ebp - 0x368]
mov dword [ebp - 0x5b4], edx
mov eax, dword [ebp - 0x5b4]
mov cx, word [eax]
mov word [ebp - 0x5b6], cx
mov edx, dword [ebp - 0x5b0]
cmp cx, word [edx]
jne 0x41f570
cmp word [ebp - 0x5b6], 0
je 0x41f564
mov eax, dword [ebp - 0x5b4]
mov cx, word [eax + 2]
mov word [ebp - 0x5b8], cx
mov edx, dword [ebp - 0x5b0]
cmp cx, word [edx + 2]
jne 0x41f570
add dword [ebp - 0x5b4], 4
add dword [ebp - 0x5b0], 4
cmp word [ebp - 0x5b8], 0
jne 0x41f50a
mov dword [ebp - 0x5bc], 0
jmp 0x41f57b
sbb eax, eax
sbb eax, 0xffffffff
mov dword [ebp - 0x5bc], eax
mov ecx, dword [ebp - 0x5bc]
mov dword [ebp - 0x5c0], ecx
cmp dword [ebp - 0x5c0], 0
jne 0x41f595
jmp 0x41f730
lea edx, [ebp - 0x380]
push edx
lea eax, [ebp - 0x3bc]
push eax
call fcn.004117d0
add esp, 8
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x3bc]
push ecx
lea edx, [ebp - 0x4d4]
push edx
mov ecx, dword [ebp - 0x128]
call fcn.00407c50
mov dword [ebp - 0x5c4], eax
mov ecx, dword [ebp - 0x5c4]
call fcn.00407ba0
fstp dword [ebp - 0x3c0]
lea ecx, [ebp - 0x4d4]
call fcn.00407b80
mov ecx, dword [ebp + 8]
call fcn.00409140
fsub dword [ebp - 0x3c0]
fstp dword [ebp - 0x5c8]
fld dword [ebp - 0x5c8]
push ecx
fstp dword [esp]
call fcn.00439690
add esp, 4
fstp dword [ebp - 0x398]
lea eax, [ebp - 0x3a4]
push eax
lea ecx, [ebp - 0x3bc]
call fcn.00411f30
mov byte [ebp - 4], 0x19
fld dword [ebp - 0x398]
fcomp qword [0x612c58]
fnstsw ax
test ah, 5
jp 0x41f712
push 9
lea ecx, [ebp - 0x4e4]
push ecx
mov ecx, dword [ebp + 8]
call fcn.00408420
mov dword [ebp - 0x5cc], eax
mov edx, dword [ebp - 0x5cc]
mov dword [ebp - 0x5d0], edx
mov byte [ebp - 4], 0x1a
push 0
lea eax, [ebp - 0x368]
push eax
mov ecx, dword [ebp - 0x5d0]
call fcn.004b68a0
mov byte [ebp - 0x4d5], al
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x4e4]
call fcn.004b3860
movzx ecx, byte [ebp - 0x4d5]
test ecx, ecx
je 0x41f712
lea edx, [ebp - 0x368]
push edx
lea ecx, [ebp - 0x4f0]
call fcn.004b3550
mov byte [ebp - 4], 0x1b
lea eax, [ebp - 0x4f0]
push eax
mov ecx, dword [ebp - 0x12c]
imul ecx, ecx, 0xc
lea edx, [ebp + ecx - 0x124]
push edx
lea eax, [ebp - 0x3cc]
push eax
call fcn.00412f50
add esp, 0xc
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x4f0]
call fcn.004b3860
lea ecx, [ebp - 0x3cc]
push ecx
lea edx, [ebp - 0x4fc]
push edx
lea ecx, [ebp - 0x10c]
call fcn.0042feb0
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x3cc]
call fcn.004b3860
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x3a4]
call fcn.004b3860
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x3bc]
call fcn.00407c30
lea eax, [ebp - 0x394]
push eax
mov ecx, dword [ebp - 0x13c]
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x41f433
mov edx, dword [ebp - 0x13c]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x138]
call fcn.004b3860
jmp 0x41f3a1
lea ecx, [ebp - 0x10c]
call fcn.0040c9d0
cmp eax, 1
jne 0x41f841
lea eax, [ebp - 0x504]
push eax
lea ecx, [ebp - 0x10c]
call fcn.00435230
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x3d8], ecx
mov dword [ebp - 0x3d4], edx
lea ecx, [ebp - 0x3d8]
call fcn.00406340
mov ecx, eax
call fcn.004553f0
push eax
push str.Rogue_Start_Menu:__s_r_n
call fcn.0054eca8
add esp, 8
lea ecx, [ebp - 0x3d8]
call fcn.0047f6d0
push eax
mov ecx, dword [ebp - 0x550]
call fcn.0041e330
mov dword [ebp - 0x3d0], eax
cmp dword [ebp - 0x3d0], 0
je 0x41f841
mov eax, dword [0x63e870]
push eax
lea ecx, [ebp - 0x510]
call fcn.004b3550
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x550]
push ecx
lea edx, [ebp - 0x2c]
push edx
push 1
lea eax, [ebp - 0x510]
push eax
lea ecx, [ebp - 0x3d8]
call fcn.0047f6d0
push eax
mov ecx, dword [ebp - 0x3d0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x3d0]
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x510]
call fcn.004b3860
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x10c]
call fcn.00409100
mov byte [ebp - 4], 7
push fcn.004b3860
push 2
push 0xc
lea ecx, [ebp - 0x124]
push ecx
call fcn.0054d703
lea ecx, [ebp - 0x3e0]
call fcn.0047f810
lea edx, [ebp - 0x518]
push edx
lea ecx, [ebp - 0x2c]
call fcn.00435230
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x3e0], ecx
mov dword [ebp - 0x3dc], edx
jmp 0x41f8a1
lea ecx, [ebp - 0x3e0]
call fcn.0040c980
lea eax, [ebp - 0x520]
push eax
lea ecx, [ebp - 0x2c]
call fcn.0040c9a0
push eax
lea ecx, [ebp - 0x3e0]
call fcn.0047f720
movzx ecx, al
test ecx, ecx
je 0x41f9d5
mov dword [ebp - 0x3e4], 0
mov edx, dword [ebp - 0x550]
add edx, 0x290
push edx
lea ecx, [ebp - 0x3e8]
call fcn.00401610
mov byte [ebp - 4], 0x1f
push 0
lea ecx, [ebp - 0x3e0]
call fcn.0047f6d0
push eax
mov ecx, dword [ebp - 0x550]
call fcn.0041e0d0
mov dword [ebp - 0x3e4], eax
cmp dword [ebp - 0x3e4], 0
jne 0x41f989
push 0x48
call fcn.0054d57b
add esp, 4
mov dword [ebp - 0x528], eax
mov byte [ebp - 4], 0x20
cmp dword [ebp - 0x528], 0
je 0x41f951
lea ecx, [ebp - 0x3e0]
call fcn.0047f6d0
push eax
mov ecx, dword [ebp - 0x528]
call fcn.004088a0
mov dword [ebp - 0x5d4], eax
jmp 0x41f95b
mov dword [ebp - 0x5d4], 0
mov eax, dword [ebp - 0x5d4]
mov dword [ebp - 0x524], eax
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x524]
mov dword [ebp - 0x3e4], ecx
mov edx, dword [ebp - 0x3e4]
push edx
mov ecx, dword [ebp - 0x550]
call fcn.0041e250
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x3e8]
call fcn.00401640
cmp dword [ebp - 0x3e4], 0
je 0x41f9d0
mov ecx, dword [ebp - 0x3e4]
call fcn.00435950
mov ecx, eax
call fcn.004553f0
push eax
push str.Part_of_rogue:_t_s_r_n
call fcn.0054eca8
add esp, 8
mov eax, dword [ebp - 0x3e4]
push eax
mov ecx, dword [ebp + 8]
call fcn.00412bc0
jmp 0x41f896
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x78]
call fcn.004b3860
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x68]
call fcn.004b3860
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x38]
call fcn.004b3860
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x50]
call fcn.004b3860
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x44]
call fcn.004b3860
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.00409100
jmp 0x41fc82
mov ecx, dword [ebp + 8]
call fcn.004122e0
movzx ecx, al
test ecx, ecx
je 0x41fa39
jmp 0x41fc82
mov ecx, dword [ebp + 8]
call fcn.00435950
push eax
lea edx, [ebp - 0x3f4]
push edx
call fcn.004131c0
add esp, 8
mov dword [ebp - 4], 0x21
push 0
mov eax, dword [ebp - 0x550]
add eax, 0x108
push eax
mov ecx, dword [ebp + 8]
call fcn.00435950
mov ecx, eax
call fcn.004b69b0
movzx ecx, al
test ecx, ecx
je 0x41fc70
push 0
mov edx, dword [ebp - 0x550]
add edx, 0x108
push edx
mov ecx, dword [ebp + 8]
call fcn.00435950
mov ecx, eax
call fcn.004b4c90
movzx eax, al
test eax, eax
jne 0x41fc70
push 0
mov ecx, dword [ebp - 0x550]
add ecx, 0x114
push ecx
mov ecx, dword [ebp + 8]
call fcn.00435950
mov ecx, eax
call fcn.004b69b0
movzx edx, al
test edx, edx
jne 0x41fc70
lea ecx, [ebp - 0x3f4]
call fcn.004553f0
push eax
mov ecx, dword [ebp + 8]
call fcn.00435950
mov ecx, eax
call fcn.004553f0
push eax
push str.____Classifying_collateral_siblings_of__s_r_n_t_s_r_n
call fcn.0054eca8
add esp, 0xc
lea eax, [ebp - 0x3f4]
push eax
mov ecx, dword [ebp - 0x550]
call fcn.0041e330
mov dword [ebp - 0x3f8], eax
cmp dword [ebp - 0x3f8], 0
je 0x41fc70
lea ecx, [ebp - 0x418]
call fcn.0042fe80
mov byte [ebp - 4], 0x22
mov ecx, dword [0x63e870]
push ecx
lea ecx, [ebp - 0x538]
call fcn.004b3550
mov byte [ebp - 4], 0x23
mov edx, dword [ebp - 0x550]
push edx
lea eax, [ebp - 0x418]
push eax
push 1
lea ecx, [ebp - 0x538]
push ecx
lea edx, [ebp - 0x3f4]
push edx
mov eax, dword [ebp - 0x3f8]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x3f8]
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 0x529], al
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x538]
call fcn.004b3860
movzx ecx, byte [ebp - 0x529]
test ecx, ecx
je 0x41fc61
lea ecx, [ebp - 0x420]
call fcn.0047f810
lea edx, [ebp - 0x540]
push edx
lea ecx, [ebp - 0x418]
call fcn.00435230
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x420], ecx
mov dword [ebp - 0x41c], edx
jmp 0x41fbd5
lea ecx, [ebp - 0x420]
call fcn.0040c980
lea eax, [ebp - 0x548]
push eax
lea ecx, [ebp - 0x418]
call fcn.0040c9a0
push eax
lea ecx, [ebp - 0x420]
call fcn.0047f720
movzx ecx, al
test ecx, ecx
je 0x41fc31
push 1
lea ecx, [ebp - 0x420]
call fcn.0047f6d0
push eax
mov ecx, dword [ebp - 0x550]
call fcn.0041e0d0
mov dword [ebp - 0x424], eax
cmp dword [ebp - 0x424], 0
je 0x41fc2f
push 1
mov ecx, dword [ebp - 0x424]
call fcn.00412320
jmp 0x41fbca
mov byte [ebp - 0x549], 1
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x418]
call fcn.00409100
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3f4]
call fcn.004b3860
mov al, byte [ebp - 0x549]
jmp 0x41fc84
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x418]
call fcn.00409100
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3f4]
call fcn.004b3860
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x140]
xor ecx, ebp
call fcn.0054d4f5
mov esp, ebp
pop ebp
ret 4