Function at 0x419730
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffae8
mov dword [ebp - 0x58], edx
mov dword [ebp - 0x54], eax
mov eax, 0x6eeaac
call fcn.0066ce04
mov edx, dword [ebp - 0x54]
mov ecx, dword [edx + 0x33c]
mov dword [ebp - 0x5c], ecx
push dword [ebp - 0x58]
push 0x825d7c
call fcn.0066c9ec
add esp, 8
push 0x5c
push 0x825d7c
call fcn.0066cb29
add esp, 8
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x88]
test eax, eax
jne 0x4197ff
mov dl, byte [0x825d7c]
test dl, dl
je 0x4197ff
push 0x825d7c
push 0x6eb17d
lea ecx, [ebp - 0x1c4]
push ecx
call fcn.00670e94
add esp, 0xc
mov eax, dword [0x6e714c]
test eax, eax
jne 0x419850
mov dword [0x6e7148], 1
mov word [ebp - 0x40], 8
lea edx, [ebp - 0x1c4]
lea eax, [ebp - 4]
call fcn.0067ceb4
inc dword [ebp - 0x34]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x54]
mov eax, dword [ecx + 0x464]
call fcn.00639f78
dec dword [ebp - 0x34]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0067d0a0
xor ecx, ecx
mov dword [0x6e7148], ecx
jmp 0x419850
mov eax, dword [0x6e714c]
test eax, eax
jne 0x419850
mov dword [0x6e7148], 1
mov word [ebp - 0x40], 0x14
mov edx, 0x825d7c
lea eax, [ebp - 8]
call fcn.0067ceb4
inc dword [ebp - 0x34]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x54]
mov eax, dword [ecx + 0x464]
call fcn.00639f78
dec dword [ebp - 0x34]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0067d0a0
xor ecx, ecx
mov dword [0x6e7148], ecx
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax + 0x22c]
call fcn.00659730
mov edx, dword [ebp - 0x5c]
mov eax, dword [edx + 0x22c]
call fcn.00659710
xor edx, edx
mov dword [0x6e87f4], edx
mov ecx, dword [ebp - 0x58]
mov al, byte [ecx]
test al, al
jne 0x419b7d
mov edx, dword [ebp - 0x54]
mov eax, dword [edx + 0x338]
call fcn.00655528
call fcn.00653588
mov dword [ebp - 0x80], eax
mov edx, dword [ebp - 0x80]
test edx, edx
je 0x419af3
mov ecx, dword [ebp - 0x5c]
mov eax, dword [ecx + 0x22c]
call fcn.006595c0
mov dword [ebp - 0x60], eax
mov word [ebp - 0x40], 0x20
mov edx, dword [ebp - 0x80]
add edx, 8
lea eax, [ebp - 0xc]
call fcn.0067ceec
inc dword [ebp - 0x34]
mov edx, dword [eax]
mov eax, dword [ebp - 0x60]
call fcn.00659030
dec dword [ebp - 0x34]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.0067d0a0
mov ecx, dword [ebp - 0x80]
mov edx, dword [ecx + 0xc]
mov eax, dword [ebp - 0x60]
call fcn.006590e0
mov ecx, dword [ebp - 0x80]
mov eax, dword [ecx + 0xc]
mov edx, dword [eax]
sub edx, 1
jb 0x419912
je 0x419944
dec edx
je 0x419975
sub edx, 3
je 0x4199a7
jmp 0x419add
mov ecx, dword [0x6e70cc]
test ecx, ecx
je 0x419930
mov ecx, 0x10
xor edx, edx
mov eax, dword [ebp - 0x60]
call fcn.00659218
jmp 0x419add
mov ecx, 3
xor edx, edx
mov eax, dword [ebp - 0x60]
call fcn.00659218
jmp 0x419add
mov eax, dword [0x6e70cc]
test eax, eax
je 0x419961
mov ecx, 0x11
xor edx, edx
mov eax, dword [ebp - 0x60]
call fcn.00659218
jmp 0x419add
mov ecx, 4
xor edx, edx
mov eax, dword [ebp - 0x60]
call fcn.00659218
jmp 0x419add
mov edx, dword [0x6e70cc]
test edx, edx
je 0x419993
mov ecx, 0x12
xor edx, edx
mov eax, dword [ebp - 0x60]
call fcn.00659218
jmp 0x419add
mov ecx, 5
xor edx, edx
mov eax, dword [ebp - 0x60]
call fcn.00659218
jmp 0x419add
push dword [0x825d64]
mov ecx, dword [ebp - 0x60]
add ecx, 0x24
mov dword [ebp - 0xa4], ecx
mov eax, dword [ebp - 0xa4]
mov edx, dword [eax]
test edx, edx
je 0x4199cf
mov ecx, dword [ebp - 0xa4]
mov eax, dword [ecx]
jmp 0x4199d4
mov eax, 0x6eb181
push eax
call fcn.0066cbe8
add esp, 8
test eax, eax
jne 0x419a13
mov edx, dword [0x6e70cc]
test edx, edx
je 0x4199ff
mov ecx, 0x13
xor edx, edx
mov eax, dword [ebp - 0x60]
call fcn.00659218
jmp 0x419add
mov ecx, 6
xor edx, edx
mov eax, dword [ebp - 0x60]
call fcn.00659218
jmp 0x419add
push dword [0x825d6c]
mov ecx, dword [ebp - 0x60]
add ecx, 0x24
mov dword [ebp - 0xa8], ecx
mov eax, dword [ebp - 0xa8]
mov edx, dword [eax]
test edx, edx
je 0x419a3b
mov ecx, dword [ebp - 0xa8]
mov eax, dword [ecx]
jmp 0x419a40
mov eax, 0x6eb182
push eax
call fcn.0066cbe8
add esp, 8
test eax, eax
jne 0x419a79
mov edx, dword [0x6e70cc]
test edx, edx
je 0x419a68
mov ecx, 0xe
xor edx, edx
mov eax, dword [ebp - 0x60]
call fcn.00659218
jmp 0x419add
mov ecx, 7
xor edx, edx
mov eax, dword [ebp - 0x60]
call fcn.00659218
jmp 0x419add
push dword [0x825d68]
mov ecx, dword [ebp - 0x60]
add ecx, 0x24
mov dword [ebp - 0xac], ecx
mov eax, dword [ebp - 0xac]
mov edx, dword [eax]
test edx, edx
je 0x419aa1
mov ecx, dword [ebp - 0xac]
mov eax, dword [ecx]
jmp 0x419aa6
mov eax, 0x6eb183
push eax
call fcn.0066cbe8
add esp, 8
test eax, eax
jne 0x419add
mov edx, dword [0x6e70cc]
test edx, edx
je 0x419ace
mov ecx, 0x14
xor edx, edx
mov eax, dword [ebp - 0x60]
call fcn.00659218
jmp 0x419add
mov ecx, 8
xor edx, edx
mov eax, dword [ebp - 0x60]
call fcn.00659218
mov eax, dword [ebp - 0x80]
call fcn.00653478
mov dword [ebp - 0x80], eax
mov edx, dword [ebp - 0x80]
test edx, edx
jne 0x4198a2
mov ecx, dword [ebp - 0x5c]
mov eax, dword [ecx + 0x22c]
call fcn.0065990c
push 0x560b
call fcn.00402a64
pop ecx
push eax
push dword [0x825d60]
push str._s_0__s__0_KB
lea edx, [ebp - 0x1c4]
push edx
call fcn.00670e94
add esp, 0x10
mov word [ebp - 0x40], 0x2c
lea edx, [ebp - 0x1c4]
lea eax, [ebp - 0x10]
call fcn.0067ceb4
inc dword [ebp - 0x34]
push dword [eax]
mov ecx, dword [ebp - 0x54]
mov eax, dword [ecx + 0x3b4]
mov eax, dword [eax + 0x208]
mov edx, 2
call fcn.00651e10
pop edx
call fcn.00651d6c
dec dword [ebp - 0x34]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.0067d0a0
mov eax, dword [ebp - 0x50]
mov dword fs:[0], eax
jmp 0x41a194
push dword [ebp - 0x58]
lea ecx, [ebp - 0x408]
push ecx
call fcn.0066c9ec
add esp, 8
lea eax, [ebp - 0x408]
push eax
call fcn.0066ca1c
pop ecx
mov dword [ebp - 0x8c], eax
mov edx, dword [ebp - 0x8c]
movsx ecx, byte [ebp + edx - 0x409]
cmp ecx, 0x5c
je 0x419bc9
push 0x6eb192
lea eax, [ebp - 0x408]
push eax
call fcn.0066c910
add esp, 8
push 0x6eb194
lea edx, [ebp - 0x408]
push edx
call fcn.0066c910
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x90], ecx
xor eax, eax
mov dword [ebp - 0x94], eax
push 1
call sub.KERNEL32.DLL_SetErrorMode
mov dword [ebp - 0x9c], eax
lea edx, [ebp - 0x304]
push edx
lea ecx, [ebp - 0x408]
push ecx
call sub.KERNEL32.DLL_FindFirstFileA
mov dword [ebp - 0x6c], eax
cmp eax, 0xffffffff
je 0x41a036
mov dword [ebp - 0xa0], 1
mov edx, dword [ebp - 0xa0]
test edx, edx
jne 0x419c67
push 0x140
push 1
lea ecx, [ebp - 0x304]
push ecx
call fcn.0066c86c
add esp, 0xc
lea eax, [ebp - 0x304]
push eax
push dword [ebp - 0x6c]
call sub.KERNEL32.DLL_FindNextFileA
mov dword [ebp - 0xa0], eax
mov edx, dword [ebp - 0xa0]
cmp edx, 0x12
je 0x41a02e
mov ecx, dword [ebp - 0xa0]
test ecx, ecx
jne 0x419c82
mov eax, dword [ebp - 0x304]
cmp eax, 0x20
jne 0x41a02e
jmp 0x419c23
xor edx, edx
mov dword [ebp - 0xa0], edx
lea ecx, [ebp - 0x2d8]
push ecx
call fcn.00450eb8
pop ecx
test eax, eax
jne 0x419c23
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax + 0x22c]
call fcn.006595c0
mov dword [ebp - 0x60], eax
mov word [ebp - 0x40], 0x38
lea edx, [ebp - 0x2d8]
lea eax, [ebp - 0x14]
call fcn.0067ceb4
inc dword [ebp - 0x34]
mov edx, dword [eax]
mov eax, dword [ebp - 0x60]
call fcn.00659030
dec dword [ebp - 0x34]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.0067d0a0
mov ecx, dword [0x6e87f4]
mov eax, dword [0x6e87f8]
cmp ecx, eax
jge 0x419d01
mov edx, dword [0x6e87f4]
mov ecx, dword [edx*4 + 0x8266d4]
mov dword [ebp - 0x98], ecx
jmp 0x419d22
push 0x18
call fcn.0066c210
pop ecx
mov edx, dword [0x6e87f4]
mov dword [edx*4 + 0x8266d4], eax
mov dword [ebp - 0x98], eax
inc dword [0x6e87f8]
inc dword [0x6e87f4]
test byte [ebp - 0x304], 0x10
je 0x419d81
mov ecx, dword [ebp - 0x98]
mov dword [ecx], 1
mov eax, dword [ebp - 0x98]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov ecx, 2
xor edx, edx
mov eax, dword [ebp - 0x60]
call fcn.00659218
mov byte [ebp - 0x1c4], 0
push dword [0x825d54]
lea edx, [ebp - 0x518]
push edx
call fcn.0066c9ec
add esp, 8
jmp 0x419e38
mov ecx, dword [ebp - 0x98]
xor eax, eax
mov dword [ecx], eax
lea edx, [ebp - 0x84]
push edx
push 1
lea ecx, [ebp - 0x518]
lea edx, [ebp - 0x2d8]
mov eax, dword [ebp - 0x54]
call fcn.00404844
mov ecx, dword [ebp - 0x84]
xor edx, edx
mov eax, dword [ebp - 0x60]
call fcn.00659218
mov ecx, dword [ebp - 0x2e4]
mov eax, dword [ebp - 0x98]
mov dword [eax + 0x10], ecx
mov edx, dword [ebp - 0x2e8]
mov ecx, dword [ebp - 0x98]
mov dword [ecx + 0x14], edx
mov eax, dword [ebp - 0x98]
mov edx, dword [eax + 0x10]
mov dword [ebp - 0x7c], edx
mov edx, dword [eax + 0x14]
mov dword [ebp - 0x78], edx
lea ecx, [ebp - 0x1c4]
push ecx
push dword [ebp - 0x78]
push dword [ebp - 0x7c]
call fcn.00413c34
add esp, 0xc
inc dword [ebp - 0x90]
push 0
push 2
push 0
push 0x800
mov edx, dword [ebp - 0x98]
mov eax, dword [edx + 0x10]
mov edx, dword [edx + 0x14]
add eax, 0x800
adc edx, 0
sub eax, 1
sbb edx, 0
call fcn.00674507
call fcn.006744e4
add dword [ebp - 0x94], eax
mov edx, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x2f0]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0x2ec]
mov dword [edx + 8], ecx
mov edx, dword [ebp - 0x98]
mov eax, dword [ebp - 0x60]
call fcn.006590e0
mov ecx, dword [ebp - 0x60]
add ecx, 8
mov dword [ebp - 0xb0], ecx
mov word [ebp - 0x40], 0x44
lea edx, [ebp - 0x1c4]
lea eax, [ebp - 0x18]
call fcn.0067ceb4
inc dword [ebp - 0x34]
mov edx, dword [eax]
mov eax, dword [ebp - 0xb0]
mov eax, dword [eax]
mov ecx, dword [eax]
call dword [ecx + 0x38]
dec dword [ebp - 0x34]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.0067d0a0
mov ecx, dword [ebp - 0x60]
add ecx, 8
mov dword [ebp - 0xb4], ecx
mov word [ebp - 0x40], 0x50
lea edx, [ebp - 0x518]
lea eax, [ebp - 0x1c]
call fcn.0067ceb4
inc dword [ebp - 0x34]
mov edx, dword [eax]
mov eax, dword [ebp - 0xb4]
mov eax, dword [eax]
mov ecx, dword [eax]
call dword [ecx + 0x38]
dec dword [ebp - 0x34]
lea eax, [ebp - 0x1c]
mov edx, 2
call fcn.0067d0a0
test byte [ebp - 0x304], 2
je 0x419f2e
mov ecx, dword [ebp - 0x60]
add ecx, 8
mov dword [ebp - 0xb8], ecx
mov word [ebp - 0x40], 0x5c
mov edx, 0x6eb198
lea eax, [ebp - 0x20]
call fcn.0067ceb4
inc dword [ebp - 0x34]
mov edx, dword [eax]
mov eax, dword [ebp - 0xb8]
mov eax, dword [eax]
mov ecx, dword [eax]
call dword [ecx + 0x38]
dec dword [ebp - 0x34]
lea eax, [ebp - 0x20]
mov edx, 2
call fcn.0067d0a0
jmp 0x419f6f
mov ecx, dword [ebp - 0x60]
add ecx, 8
mov dword [ebp - 0xbc], ecx
mov word [ebp - 0x40], 0x68
mov edx, 0x6eb19a
lea eax, [ebp - 0x24]
call fcn.0067ceb4
inc dword [ebp - 0x34]
mov edx, dword [eax]
mov eax, dword [ebp - 0xbc]
mov eax, dword [eax]
mov ecx, dword [eax]
call dword [ecx + 0x38]
dec dword [ebp - 0x34]
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.0067d0a0
push 0x6eb19c
lea ecx, [ebp - 0x1c4]
push ecx
call fcn.00670e94
add esp, 8
lea eax, [ebp - 0x74]
push eax
lea edx, [ebp - 0x2f0]
push edx
call sub.KERNEL32.DLL_FileTimeToLocalFileTime
test eax, eax
je 0x419fe7
lea ecx, [ebp - 0x418]
push ecx
lea eax, [ebp - 0x74]
push eax
call sub.KERNEL32.DLL_FileTimeToSystemTime
test eax, eax
je 0x419fe7
movzx edx, word [ebp - 0x40e]
push edx
movzx ecx, word [ebp - 0x410]
push ecx
movzx eax, word [ebp - 0x412]
push eax
movzx edx, word [ebp - 0x416]
push edx
movzx ecx, word [ebp - 0x418]
push ecx
push 0x6eb1ad
lea eax, [ebp - 0x1c4]
push eax
call fcn.00670e94
add esp, 0x1c
mov edx, dword [ebp - 0x60]
add edx, 8
mov dword [ebp - 0xc0], edx
mov word [ebp - 0x40], 0x74
lea edx, [ebp - 0x1c4]
lea eax, [ebp - 0x28]
call fcn.0067ceb4
inc dword [ebp - 0x34]
mov edx, dword [eax]
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax]
mov ecx, dword [eax]
call dword [ecx + 0x38]
dec dword [ebp - 0x34]
lea eax, [ebp - 0x28]
mov edx, 2
call fcn.0067d0a0
jmp 0x419c23
push dword [ebp - 0x6c]
call sub.KERNEL32.DLL_FindClose
push dword [ebp - 0x9c]
call sub.KERNEL32.DLL_SetErrorMode
mov eax, dword [ebp - 0x5c]
call fcn.0065ca88
mov edx, dword [ebp - 0x5c]
mov eax, dword [edx + 0x22c]
call fcn.0065990c
mov edx, dword [ebp - 0x94]
cmp edx, 0x2710
jl 0x41a111
mov ecx, dword [ebp - 0x94]
add ecx, 0x3ff
test ecx, ecx
jns 0x41a07f
add ecx, 0x3ff
sar ecx, 0xa
mov dword [ebp - 0x94], ecx
mov eax, dword [ebp - 0x94]
cmp eax, 0x2710
jl 0x41a0dd
mov edx, dword [ebp - 0x94]
add edx, 0x3ff
test edx, edx
jns 0x41a0ab
add edx, 0x3ff
sar edx, 0xa
push edx
push 0x560b
call fcn.00402a64
pop ecx
push eax
push dword [ebp - 0x90]
push dword [0x825d60]
push str._s__d__s___d_GB
lea ecx, [ebp - 0x1c4]
push ecx
call fcn.00670e94
add esp, 0x18
jmp 0x41a143
push dword [ebp - 0x94]
push 0x560b
call fcn.00402a64
pop ecx
push eax
push dword [ebp - 0x90]
push dword [0x825d60]
push str._s__d__s___d_MB
lea eax, [ebp - 0x1c4]
push eax
call fcn.00670e94
add esp, 0x18
jmp 0x41a143
push dword [ebp - 0x94]
push 0x560b
call fcn.00402a64
pop ecx
push eax
push dword [ebp - 0x90]
push dword [0x825d60]
push str._s__d__s___d_KB
lea edx, [ebp - 0x1c4]
push edx
call fcn.00670e94
add esp, 0x18
mov word [ebp - 0x40], 0x80
lea edx, [ebp - 0x1c4]
lea eax, [ebp - 0x2c]
call fcn.0067ceb4
inc dword [ebp - 0x34]
push dword [eax]
mov ecx, dword [ebp - 0x54]
mov eax, dword [ecx + 0x3b4]
mov eax, dword [eax + 0x208]
mov edx, 2
call fcn.00651e10
pop edx
call fcn.00651d6c
dec dword [ebp - 0x34]
lea eax, [ebp - 0x2c]
mov edx, 2
call fcn.0067d0a0
mov eax, dword [ebp - 0x50]
mov dword fs:[0], eax
mov esp, ebp
pop ebp
ret