Function at 0x411430
Capabilities:
Enumerate files on windows

Disassembly:
enter 0x88c, 0
push ebx
push ecx
push edx
mov esi, dword [ebp + 0x10]
lea edi, [ebp - 0x108]
call fcn.00401940
lea esi, [ebp - 0x108]
lea edi, [ebp - 0x78c]
call fcn.00401b30
mov esi, 0x428e7d
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x68c]
call fcn.00401b30
mov esi, 0x428e80
call fcn.00401af0
lea edi, [ebp - 0x48c]
lea esi, [ebp - 0x68c]
call fcn.00401940
lea eax, [ebp - 0x248]
push eax
lea ebx, [ebp - 0x48b]
push ebx
call sub.kernel32.dll_FindFirstFileA
mov dword [ebp - 0x38c], eax
lea ebx, [ebp - 0x68c]
push ebx
lea eax, [ebp - 0x21c]
push eax
call fcn.00402b90
lea edi, [ebp - 0x58c]
lea esi, [ebp - 0x68c]
call fcn.00401940
push 0x428e82
mov eax, edi
push eax
call fcn.004033b0
test eax, eax
jle 0x4114db
jmp 0x411628
mov eax, dword [ebp - 0x248]
and eax, 0x10
cmp eax, 0x10
jne 0x4114ee
jmp 0x411628
movzx eax, byte [ebp - 0x58c]
cmp byte [ebp + eax - 0x58c], 0x10
ja 0x411516
push 0xff
lea ebx, [ebp - 0x58c]
push ebx
movzx ecx, al
push ecx
push 1
call fcn.00404fd0
push 0x428e85
lea eax, [ebp - 0x58c]
push eax
call fcn.004033b0
test eax, eax
jle 0x41154c
push 0xff
lea eax, [ebp - 0x58c]
push eax
push 1
push 0x428e87
push eax
call fcn.004033b0
push eax
call fcn.00404fd0
jmp 0x41155c
lea edi, [ebp - 0x58c]
mov esi, 0x428e89
call fcn.00401940
push 0x43074c
push 0x18
push 0x428e8a
push 0
call fcn.00403350
movzx eax, byte [ebp - 0x58c]
push eax
push 0
call fcn.00404040
push 1
push 0x428ea2
push 0
call fcn.00403350
lea eax, [ebp - 0x58c]
push eax
push 0
call fcn.00402790
push 1
push 0x428ea3
push 0
call fcn.00403350
movzx eax, byte [ebp - 0x58b]
push eax
push 0
call fcn.00404040
call fcn.00403330
lea esi, [ebp - 0x58c]
mov edi, 0x428ea4
call fcn.004066c0
test al, al
je 0x411628
mov eax, dword [ebp + 8]
mov esi, eax
lea edi, [ebp - 0x78c]
call fcn.00401b30
lea eax, [ebp - 0x88c]
push eax
lea ebx, [ebp - 0x58c]
push ebx
call fcn.004117f0
lea esi, [ebp - 0x88c]
lea edi, [ebp - 0x78c]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x68c]
call fcn.00401b30
mov esi, 0x428ea5
call fcn.00401af0
mov esi, edi
mov edi, dword [ebp + 8]
push dword [ebp + 0xc]
call fcn.00401950
lea eax, [ebp - 0x248]
push eax
push dword [ebp - 0x38c]
call sub.kernel32.dll_FindNextFileA
test al, al
je 0x4117d1
lea eax, [ebp - 0x68c]
push eax
lea ebx, [ebp - 0x21c]
push ebx
call fcn.00402b90
lea edi, [ebp - 0x58c]
lea esi, [ebp - 0x68c]
call fcn.00401940
push 0x428ea7
mov eax, edi
push eax
call fcn.004033b0
test eax, eax
jle 0x411679
jmp 0x411628
mov eax, dword [ebp - 0x248]
and eax, 0x10
cmp eax, 0x10
jne 0x411689
jmp 0x411628
push 0x43074c
push 0x19
push 0x428eaa
push 0
call fcn.00403350
movzx eax, byte [ebp - 0x58c]
push eax
push 0
call fcn.00404040
push 1
push 0x428ec3
push 0
call fcn.00403350
lea eax, [ebp - 0x58c]
push eax
push 0
call fcn.00402790
push 1
push 0x428ec4
push 0
call fcn.00403350
movzx eax, byte [ebp - 0x58b]
push eax
push 0
call fcn.00404040
call fcn.00403330
cmp byte [ebp - 0x58c], 0
jbe 0x41171a
movzx eax, byte [ebp - 0x58c]
cmp byte [ebp + eax - 0x58c], 0x10
ja 0x41171a
push 0xff
lea ebx, [ebp - 0x58c]
push ebx
movzx ecx, al
push ecx
push 1
call fcn.00404fd0
push 0x428ec5
lea eax, [ebp - 0x58c]
push eax
call fcn.004033b0
test eax, eax
jle 0x411750
push 0xff
lea eax, [ebp - 0x58c]
push eax
push 1
push 0x428ec7
push eax
call fcn.004033b0
push eax
call fcn.00404fd0
jmp 0x411760
lea edi, [ebp - 0x58c]
mov esi, 0x428ec9
call fcn.00401940
lea esi, [ebp - 0x58c]
mov edi, 0x428eca
call fcn.004066c0
test al, al
je 0x4117cc
mov eax, dword [ebp + 8]
mov esi, eax
lea edi, [ebp - 0x78c]
call fcn.00401b30
lea eax, [ebp - 0x88c]
push eax
lea ebx, [ebp - 0x58c]
push ebx
call fcn.004117f0
lea esi, [ebp - 0x88c]
lea edi, [ebp - 0x78c]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x68c]
call fcn.00401b30
mov esi, 0x428ecb
call fcn.00401af0
mov esi, edi
mov edi, dword [ebp + 8]
push dword [ebp + 0xc]
call fcn.00401950
jmp 0x411628
push dword [ebp - 0x38c]
call sub.kernel32.dll_FindClose
pop edx
pop ecx
pop ebx
leave
ret 0xc