Function at 0x415930
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
mov ebx, ecx
sub esp, 0x1a4
mov eax, dword [ecx + 4]
mov dword [ebp - 0x198], ecx
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp + 8]
lea esi, [eax + 0x4000]
mov dword [ebp - 0x190], eax
push esi
push dword [ebp + 0xc]
mov dword [ebp - 0x194], eax
call fcn.0041522d
add esp, 0x10
mov dword [ebp - 0x19c], eax
test eax, eax
je 0x415ade
push eax
push eax
push 0x44342e
push dword [ebx + 0x58]
call fcn.00405368
add esp, 0x10
mov ecx, str._for
mov edi, eax
test eax, eax
jne 0x4159a0
mov ecx, 0x4437db
mov edi, ecx
push eax
push eax
push 0x443445
push dword [ebx + 0x58]
mov dword [ebp - 0x1a0], ecx
call fcn.00405368
add esp, 0x10
mov ecx, dword [ebp - 0x1a0]
test eax, eax
mov edx, eax
jne 0x4159cb
mov edx, 0x4437db
jmp 0x4159d0
mov ecx, str._for
push eax
push eax
lea eax, [ebp - 0x198]
push edx
push edi
push ecx
push esi
push str._a_nametop___a__h2_Statistics.__h2___s_event_s_s__s___center__ul__n
push eax
mov dword [ebp - 0x1a0], edx
call fcn.0042ca58
add esp, 0x20
mov eax, str._n______X_X_____li__a_href__s___s__a_
cmp dword [ebp + 0x10], 0xff
mov ecx, str._li__a_href____admin__state_n_ut_u_s___s__a_
mov edx, dword [ebp - 0x1a0]
cmove ecx, eax
xor esi, esi
mov eax, dword [esi*4 + 0x438c20]
test eax, eax
je 0x415a4a
mov dword [ebp - 0x1a4], edx
push edx
push edx
push eax
push eax
lea eax, [ebp - 0x198]
push esi
inc esi
push dword [ebp + 0x14]
push ecx
push eax
mov dword [ebp - 0x1a0], ecx
call fcn.0042ca58
mov ecx, dword [ebp - 0x1a0]
mov edx, dword [ebp - 0x1a4]
add esp, 0x20
jmp 0x415a0c
push eax
xor esi, esi
push eax
push edx
push edi
lea edi, [ebp - 0x198]
push dword [ebp + 0x10]
push dword [ebp + 0x14]
push dword [0x4331b8]
push edi
call fcn.0042ca58
add esp, 0x20
cmp dword [ebp + 0x10], 0xff
je 0x415aa6
mov eax, dword [ebp + 0x10]
sub esp, 0xc
mov ecx, ebx
movzx eax, byte [eax + 0x443b60]
push eax
mov eax, dword [ebp + 0x10]
push dword [eax*4 + 0x438c20]
push edi
push dword [eax*4 + 0x443ba0]
push dword [ebp - 0x19c]
call fcn.00414cce
add esp, 0xc
jmp 0x415ade
mov eax, dword [esi*4 + 0x438c20]
test eax, eax
je 0x415ade
movzx edx, byte [esi + 0x443b60]
sub esp, 0xc
mov ecx, ebx
push edx
push eax
lea eax, [ebp - 0x198]
push eax
push dword [esi*4 + 0x443ba0]
inc esi
push dword [ebp - 0x19c]
call fcn.00414cce
add esp, 0xc
jmp 0x415aa6
lea esi, [ebp - 0x198]
push eax
push dword [0x433130]
push 0x443879
push esi
call fcn.0042ca58
mov eax, dword [0x46c99c]
add esp, 0x10
test eax, eax
je 0x415c60
mov edi, dword [ebp + 8]
push ecx
push eax
lea ebx, [edi + 0x2000]
push 0x44387d
push ebx
call dword [sym.imp.USER32.dll_wsprintfA]
pop edi
pop eax
push 0x2e
push ebx
call fcn.00403476
add esp, 0x10
test eax, eax
je 0x415b34
mov dword [eax], 0x2a
lea edi, [ebp - 0x158]
push eax
push eax
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov ebx, eax
pop eax
pop edx
cmp ebx, 0xffffffff
je 0x415c60
mov ecx, 0x30
xor edx, edx
lea eax, [ebp - 0x188]
call fcn.00413aff
test byte [ebp - 0x158], 0x10
jne 0x415bf1
sub esp, 0xc
lea edx, [ebp - 0x12c]
push edx
call fcn.0042d208
add esp, 0x10
lea edx, [ebp - 0x12c]
cmp byte [ebp + eax - 0x12d], 0x2e
lea ecx, [eax - 1]
cmove eax, ecx
cmp eax, 4
jle 0x415bcf
sub esp, 0xc
lea eax, [edx + eax - 4]
push eax
call fcn.004123ba
add esp, 0x10
test eax, eax
je 0x415bcf
mov ecx, 0x64
cdq
idiv ecx
dec eax
mov ecx, edx
cmp eax, 0xb
ja 0x415bf1
mov edx, 1
shl edx, cl
or dword [ebp + eax*4 - 0x188], edx
jmp 0x415bf1
test byte [ebp - 0x188], 1
jne 0x415bf1
push eax
push dword [ebp + 0x10]
push str._a_href___admin__state_n0t_u_today__a__nbsp_
push esi
call fcn.0042ca58
or dword [ebp - 0x188], 1
add esp, 0x10
push eax
push eax
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
pop edx
pop ecx
test eax, eax
jne 0x415b63
sub esp, 0xc
push ebx
mov ebx, 1
call dword [sym.imp.KERNEL32.dll_FindClose]
add esp, 0xc
imul edi, ebx, 0x64
mov ecx, 1
mov eax, 1
shl eax, cl
and eax, dword [ebp + ebx*4 - 0x18c]
je 0x415c54
push eax
push eax
lea eax, [ecx + edi]
push ecx
push ebx
push dword [ebp + 0x10]
push eax
push str._a_href___admin__state_n_ut_u__u__u__a__nbsp_
push esi
mov dword [ebp - 0x19c], ecx
call fcn.0042ca58
mov ecx, dword [ebp - 0x19c]
add esp, 0x20
inc ecx
cmp ecx, 0x20
jne 0x415c1f
inc ebx
cmp ebx, 0xd
jne 0x415c17
push ebx
push dword [0x4330d8]
push 0x4431b5
push esi
call fcn.0042ca58
mov edx, dword [ebp - 0x194]
mov eax, dword [ebp - 0x190]
add esp, 0x10
sub eax, edx
je 0x415c97
push ecx
push eax
push edx
push dword [ebp - 0x198]
call dword [ebp - 0x18c]
add esp, 0x10
lea esp, [ebp - 0xc]
xor eax, eax
pop ebx
pop esi
pop edi
pop ebp
ret 0x10