Function at 0x40fd00
Capabilities:
Enumerate files on windows
Enumerate files recursively
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x3d
push 0
push 0
dec ecx
jne 0x40fd09
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov byte [ebp - 5], cl
mov ebx, edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.004034f8
lea esi, [ebp - 0x148]
xor eax, eax
push ebp
push 0x4103f9
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 6], 0
mov dword [esi], 0x27
push esi
lea edx, [ebp - 0x154]
mov eax, 0x410408
call fcn.0040478c
mov eax, dword [ebp - 0x154]
lea edx, [ebp - 0x150]
call fcn.00404cc0
mov ecx, dword [ebp - 0x150]
lea eax, [ebp - 0x14c]
mov edx, dword [ebp - 4]
call fcn.00403354
mov eax, dword [ebp - 0x14c]
call fcn.00403508
push eax
call sub.kernel32.dll_FindFirstFileA
mov edi, eax
cmp edi, 0xffffffff
je 0x40fe4a
test bl, bl
jne 0x40fdbc
lea eax, [ebp - 0x158]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.004032f0
mov eax, dword [ebp - 0x158]
call fcn.0040fc20
test al, al
je 0x40fe35
test bl, bl
jne 0x40fdc4
mov byte [ebp - 6], 1
test byte [esi], 1
je 0x40fe03
push 0
lea eax, [ebp - 0x160]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.004032f0
mov ecx, dword [ebp - 0x160]
lea eax, [ebp - 0x15c]
mov edx, dword [ebp - 4]
call fcn.00403354
mov eax, dword [ebp - 0x15c]
call fcn.00403508
push eax
call sub.kernel32.dll_SetFileAttributesA
lea eax, [ebp - 0x168]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.004032f0
mov ecx, dword [ebp - 0x168]
lea eax, [ebp - 0x164]
mov edx, dword [ebp - 4]
call fcn.00403354
mov eax, dword [ebp - 0x164]
call fcn.0040eadc
push esi
push edi
call sub.kernel32.dll_FindNextFileA
test eax, eax
jne 0x40fd96
push edi
call sub.kernel32.dll_FindClose
cmp byte [ebp - 6], 0
jne 0x4103d3
mov dword [esi], 0x27
push esi
lea edx, [ebp - 0x174]
mov eax, 0x410408
call fcn.0040478c
mov eax, dword [ebp - 0x174]
lea edx, [ebp - 0x170]
call fcn.00404cc0
mov ecx, dword [ebp - 0x170]
lea eax, [ebp - 0x16c]
mov edx, dword [ebp - 4]
call fcn.00403354
mov eax, dword [ebp - 0x16c]
call fcn.00403508
push eax
call sub.kernel32.dll_FindFirstFileA
mov edi, eax
cmp edi, 0xffffffff
je 0x40ff2e
test byte [esi], 1
je 0x40feeb
push 0
lea eax, [ebp - 0x17c]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.004032f0
mov ecx, dword [ebp - 0x17c]
lea eax, [ebp - 0x178]
mov edx, dword [ebp - 4]
call fcn.00403354
mov eax, dword [ebp - 0x178]
call fcn.00403508
push eax
call sub.kernel32.dll_SetFileAttributesA
lea eax, [ebp - 0x184]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.004032f0
mov ecx, dword [ebp - 0x184]
lea eax, [ebp - 0x180]
mov edx, dword [ebp - 4]
call fcn.00403354
mov eax, dword [ebp - 0x180]
call fcn.0040eadc
push esi
push edi
call sub.kernel32.dll_FindNextFileA
test eax, eax
jne 0x40feac
push edi
call sub.kernel32.dll_FindClose
mov dword [esi], 0x16
push esi
lea eax, [ebp - 0x188]
mov ecx, 0x41046c
mov edx, dword [ebp - 4]
call fcn.00403354
mov eax, dword [ebp - 0x188]
call fcn.00403508
push eax
call sub.kernel32.dll_FindFirstFileA
mov edi, eax
cmp edi, 0xffffffff
je 0x4103d3
test byte [esi], 0x10
je 0x4103be
lea eax, [ebp - 0x18c]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.004032f0
mov eax, dword [ebp - 0x18c]
mov edx, 0x410478
call fcn.00403454
je 0x4103be
lea eax, [ebp - 0x190]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.004032f0
mov eax, dword [ebp - 0x190]
mov edx, 0x410484
call fcn.00403454
je 0x4103be
lea eax, [ebp - 0x194]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.004032f0
mov eax, dword [ebp - 0x194]
mov edx, dword [0x41f224]
call fcn.004046bc
test eax, eax
je 0x4103be
lea eax, [ebp - 0x198]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.004032f0
mov eax, dword [ebp - 0x198]
mov edx, dword [0x41f228]
call fcn.004046bc
test eax, eax
je 0x4103be
lea eax, [ebp - 0x19c]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.004032f0
mov eax, dword [ebp - 0x19c]
mov edx, dword [0x41f22c]
call fcn.004046bc
test eax, eax
je 0x4103be
lea eax, [ebp - 0x1a0]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.004032f0
mov eax, dword [ebp - 0x1a0]
mov edx, dword [0x41f234]
call fcn.004046bc
test eax, eax
je 0x4103be
lea eax, [ebp - 0x1a4]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.004032f0
mov eax, dword [ebp - 0x1a4]
mov edx, dword [0x41f238]
call fcn.004046bc
test eax, eax
je 0x4103be
lea eax, [ebp - 0x1a8]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.004032f0
mov eax, dword [ebp - 0x1a8]
mov edx, dword [0x41f21c]
call fcn.004046bc
test eax, eax
je 0x4103be
lea eax, [ebp - 0x1ac]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.004032f0
mov eax, dword [ebp - 0x1ac]
mov edx, dword [0x41f230]
call fcn.004046bc
test eax, eax
je 0x4103be
lea eax, [ebp - 0x1b0]
push eax
mov eax, dword [ebp - 4]
call fcn.00403308
mov edx, eax
sub edx, 0xf
inc edx
mov ecx, 0xf
mov eax, dword [ebp - 4]
call fcn.00403568
mov eax, dword [ebp - 0x1b0]
mov edx, dword [0x41f1ec]
call fcn.004046bc
test eax, eax
jne 0x410366
lea eax, [ebp - 0x1b4]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.004032f0
mov eax, dword [ebp - 0x1b4]
mov edx, dword [0x41f1f0]
call fcn.004046bc
test eax, eax
je 0x4103be
lea eax, [ebp - 0x1b8]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.004032f0
mov eax, dword [ebp - 0x1b8]
mov edx, dword [0x41f1f4]
call fcn.004046bc
test eax, eax
je 0x4103be
lea eax, [ebp - 0x1bc]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.004032f0
mov eax, dword [ebp - 0x1bc]
mov edx, dword [0x41f1e4]
call fcn.004046bc
test eax, eax
je 0x4103be
lea eax, [ebp - 0x1c0]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.004032f0
mov eax, dword [ebp - 0x1c0]
mov edx, dword [0x41f1e0]
call fcn.004046bc
test eax, eax
je 0x4103be
lea eax, [ebp - 0x1c4]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.004032f0
mov eax, dword [ebp - 0x1c4]
mov edx, dword [0x41f1e8]
call fcn.004046bc
test eax, eax
je 0x4103be
lea eax, [ebp - 0x1c8]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.004032f0
mov eax, dword [ebp - 0x1c8]
mov edx, dword [0x41f1f8]
call fcn.004046bc
test eax, eax
je 0x4103be
lea eax, [ebp - 0x1cc]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.004032f0
mov eax, dword [ebp - 0x1cc]
mov edx, dword [0x41f1fc]
call fcn.004046bc
test eax, eax
je 0x4103be
lea eax, [ebp - 0x1d0]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.004032f0
mov eax, dword [ebp - 0x1d0]
mov edx, dword [0x41f200]
call fcn.004046bc
test eax, eax
je 0x4103be
lea eax, [ebp - 0x1d4]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.004032f0
mov eax, dword [ebp - 0x1d4]
mov edx, dword [0x41f204]
call fcn.004046bc
test eax, eax
je 0x4103be
lea eax, [ebp - 0x1d8]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.004032f0
mov eax, dword [ebp - 0x1d8]
mov edx, dword [0x41f20c]
call fcn.004046bc
test eax, eax
je 0x4103be
lea eax, [ebp - 0x1dc]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.004032f0
mov eax, dword [ebp - 0x1dc]
mov edx, dword [0x41f214]
call fcn.004046bc
test eax, eax
je 0x4103be
lea eax, [ebp - 0x1e0]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.004032f0
mov eax, dword [ebp - 0x1e0]
mov edx, dword [0x41f218]
call fcn.004046bc
test eax, eax
je 0x4103be
lea eax, [ebp - 0x1e4]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.004032f0
mov eax, dword [ebp - 0x1e4]
mov edx, dword [0x41f220]
call fcn.004046bc
test eax, eax
je 0x4103be
mov eax, dword [ebp - 4]
call fcn.00403308
cmp eax, 3
jg 0x41037d
push 0x3e8
call sub.kernel32.dll_Sleep
push dword [ebp - 4]
lea eax, [ebp - 0x1ec]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.004032f0
push dword [ebp - 0x1ec]
push 0x41048f
lea eax, [ebp - 0x1e8]
mov edx, 3
call fcn.004033c8
mov eax, dword [ebp - 0x1e8]
mov cl, byte [ebp - 5]
mov edx, ebx
call fcn.0040fd00
push esi
push edi
call sub.kernel32.dll_FindNextFileA
test eax, eax
jne 0x40ff64
push edi
call sub.kernel32.dll_FindClose
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x410400
lea eax, [ebp - 0x1ec]
mov edx, 0x29
call fcn.00403198
lea eax, [ebp - 4]
call fcn.00403174
ret