Function at 0x4319a4
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov ebx, dword [ebp + 0x14]
mov esi, dword [ebp + 0x10]
mov edi, 0x50cff7
xor eax, eax
mov dword [0x509cc8], eax
xor edx, edx
mov dword [0x509cc4], edx
xor ecx, ecx
mov dword [0x509bb0], ecx
mov dword [0x509ba4], 1
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 4]
test eax, eax
je 0x431a2d
cmp byte [eax], 0x2d
jne 0x431a2d
push 0x6f
push eax
call fcn.00401278
add esp, 8
test eax, eax
je 0x4319fe
mov dword [0x509cc4], 1
push 0x61
mov edx, dword [ebp + 0xc]
mov ecx, dword [edx + 4]
push ecx
call fcn.00401278
add esp, 8
test eax, eax
je 0x431a27
mov dword [0x509bb0], 1
mov dword [0x509cc4], 1
inc dword [0x509ba4]
mov eax, dword [ebp + 0xc]
mov edx, dword [0x509ba4]
cmp dword [eax + edx*4], 0
jne 0x431a52
push 0
push 0
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx]
push eax
push 0
call fcn.0045bf34
jmp 0x431f65
push 0
push pe_nt_image_headers32
push esi
mov edx, dword [0x509ba4]
push edx
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.004b7ad4
mov dword [0x509ba4], eax
cmp dword [0x509ba4], 0
jge 0x431a8e
push 3
push 0
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
push edx
push 0
call fcn.0045bf34
jmp 0x431f65
push esi
push esi
call fcn.0041ff0c
test eax, eax
jne 0x431aaf
push 3
push 0
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx]
push eax
push 0
call fcn.0045bf34
jmp 0x431f65
push 0
push pe_nt_image_headers32
push ebx
mov edx, dword [0x509ba4]
inc edx
push edx
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.004b7ad4
mov dword [0x509ba4], eax
cmp dword [0x509ba4], 0
jge 0x431aec
push 3
push 0
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
push edx
push 0
call fcn.0045bf34
jmp 0x431f65
push 0x50d1f7
push 0x50d0f7
push edi
push 0x50cff4
push ebx
call fcn.00405b58
add esp, 0x14
cmp byte [0x50cff4], 0
jne 0x431b5a
cmp byte [edi], 0x5c
je 0x431b5a
cmp byte [edi], 0x2f
je 0x431b5a
cmp byte [edi], 0
je 0x431b3d
push 0x50d1f7
push 0x50d0f7
push edi
push 0x4f7cec
push 0x4f2e2c
push ebx
call sub.USER32.dll_wsprintfA
add esp, 0x18
jmp 0x431b5a
push 0x50d1f7
push 0x50d0f7
push 0x4f7cec
push 0x4f2e36
push ebx
call sub.USER32.dll_wsprintfA
add esp, 0x14
cmp byte [0x50d0f7], 0
je 0x431b6c
cmp byte [0x50d1f7], 0
jne 0x431ba6
push ebx
call fcn.00401318
pop ecx
mov dword [0x509ba4], eax
cmp dword [0x509ba4], 0
jle 0x431b9c
mov ecx, dword [0x509ba4]
cmp byte [ebx + ecx - 1], 0x5c
je 0x431b9c
push 0x4f2e3e
push ebx
call fcn.0040123c
add esp, 8
mov dword [0x509cc8], 1
xor eax, eax
mov dword [0x509ba8], eax
cmp dword [0x515ee8], 0
je 0x431beb
push 0x509ccc
push esi
call sub.KERNEL32.dll_FindFirstFileA
mov dword [0x509e0c], eax
cmp dword [0x509e0c], 0xffffffff
jne 0x431bde
mov dword [0x509bac], 1
jmp 0x431ee4
xor edx, edx
mov dword [0x509bac], edx
jmp 0x431ee4
push 0x27
push 0x509bb4
push esi
call fcn.004049dc
add esp, 0xc
mov dword [0x509bac], eax
jmp 0x431ee4
cmp dword [0x515ee8], 0
je 0x431c3f
test byte [0x509ccc], 0x10
je 0x431c3f
push 0x509ccc
mov ecx, dword [0x509e0c]
push ecx
call sub.KERNEL32.dll_FindNextFileA
test eax, eax
jne 0x431ee4
mov dword [0x509bac], 1
jmp 0x431ee4
cmp dword [0x509cc8], 0
je 0x431c9e
push 0x50d1f7
push 0x50d0f7
push edi
push 0x50cff4
push ebx
call fcn.00405b58
add esp, 0x14
cmp dword [0x515ee8], 0
je 0x431c85
push 0x509cf8
push edi
push 0x50cff4
push 0x4f2e41
push ebx
call sub.USER32.dll_wsprintfA
add esp, 0x14
jmp 0x431c9e
push 0x509bc4
push edi
push 0x50cff4
push 0x4f2e49
push ebx
call sub.USER32.dll_wsprintfA
add esp, 0x14
cmp dword [0x515ee8], 0
jne 0x431cae
push ebx
call fcn.00408b88
pop ecx
cmp dword [0x509cc4], 0
jne 0x431d5f
push 3
push ebx
call fcn.0041f620
test eax, eax
je 0x431d5f
cmp dword [0x509ba8], 1
jge 0x431ce3
mov eax, dword [0x4f29d4]
push eax
mov edx, dword [ebp + 8]
push edx
call fcn.004bc3ec
push ebx
push 0
push 0x2cf
call fcn.0041f178
push eax
push 0x509f90
call sub.USER32.dll_wsprintfA
add esp, 0xc
xor ecx, ecx
mov dword [0x4fb760], ecx
mov eax, dword [0x4f29d4]
push eax
push 0x509f90
mov edx, dword [ebp + 8]
push edx
call fcn.004bc548
cmp dword [0x515ee8], 0
je 0x431d44
push 0x509ccc
mov ecx, dword [0x509e0c]
push ecx
call sub.KERNEL32.dll_FindNextFileA
test eax, eax
jne 0x431d54
mov dword [0x509bac], 1
jmp 0x431d54
push 0x509bb4
call fcn.00404a9c
pop ecx
mov dword [0x509bac], eax
inc dword [0x509ba8]
jmp 0x431ee4
push 0x50d1f7
push 0x50d0f7
push edi
push 0x50cff4
push esi
call fcn.00405b58
add esp, 0x14
cmp dword [0x515ee8], 0
je 0x431d9c
push 0x509cf8
push edi
push 0x50cff4
push 0x4f2e51
push esi
call sub.USER32.dll_wsprintfA
add esp, 0x14
jmp 0x431db5
push 0x509bc4
push edi
push 0x50cff4
push 0x4f2e59
push esi
call sub.USER32.dll_wsprintfA
add esp, 0x14
mov eax, dword [0x509bb0]
push eax
push 0x509f90
push ebx
push esi
call fcn.00420000
mov dword [0x509ba4], eax
cmp dword [0x509ba4], 0
jle 0x431e34
cmp dword [0x515ee8], 0
je 0x431df4
mov edx, dword [0x509e0c]
push edx
call sub.KERNEL32.dll_FindClose
mov dword [0x509e0c], 0xffffffff
cmp dword [0x509ba4], 1
jne 0x431e12
push 1
push esi
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx]
push eax
push 0
call fcn.0045bf34
jmp 0x431f65
cmp dword [0x509ba4], 2
jne 0x431ef1
push 4
push ebx
mov edx, dword [ebp + 0xc]
mov ecx, dword [edx]
push ecx
push 0
call fcn.0045bf34
jmp 0x431f65
inc dword [0x509ba8]
cmp dword [ebp + 0x18], 0
je 0x431e78
push ebx
push esi
push 0
push 0x2d0
call fcn.0041f178
push eax
push 0x509f90
call sub.USER32.dll_wsprintfA
add esp, 0x10
xor eax, eax
mov dword [0x4fb760], eax
mov edx, dword [0x4f29d4]
push edx
push 0x509f90
mov ecx, dword [ebp + 8]
push ecx
call fcn.004bc548
push 0x50d1f7
push 0x50d0f7
push edi
push 0x50cff4
push 0x4f2e61
push esi
call sub.USER32.dll_wsprintfA
add esp, 0x18
cmp dword [0x509cc8], 0
jne 0x431eab
mov dword [0x509bac], 1
jmp 0x431ef1
cmp dword [0x515ee8], 0
je 0x431ed4
push 0x509ccc
mov eax, dword [0x509e0c]
push eax
call sub.KERNEL32.dll_FindNextFileA
test eax, eax
jne 0x431ee4
mov dword [0x509bac], 1
jmp 0x431ee4
push 0x509bb4
call fcn.00404a9c
pop ecx
mov dword [0x509bac], eax
cmp dword [0x509bac], 0
je 0x431c05
cmp dword [0x515ee8], 0
je 0x431f0f
cmp dword [0x509e0c], 0xffffffff
je 0x431f0f
mov edx, dword [0x509e0c]
push edx
call sub.KERNEL32.dll_FindClose
cmp dword [0x509ba8], 0
jle 0x431f2e
cmp dword [ebp + 0x18], 0
je 0x431f2e
mov ecx, dword [0x4f29d4]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.004bc3ec
cmp dword [0x509ba8], 0
je 0x431f47
cmp dword [0x509bac], 0
je 0x431f47
mov eax, 1
jmp 0x431f65
push ebx
push esi
push 0
push 0x2d1
call fcn.0041f178
push eax
push 0x50cbd8
call sub.USER32.dll_wsprintfA
add esp, 0x10
xor eax, eax
pop edi
pop esi
pop ebx
pop ebp
ret 0x14