Function at 0x413c50
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x31c
mov eax, dword [0x438374]
xor eax, ebp
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x2fc], ecx
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
mov ecx, dword [ebp - 0x2fc]
add ecx, 0x14
call fcn.0040f230
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.MSVCR90.dll_wcslen]
add esp, 4
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x14], 0
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0x10]
movzx eax, word [edx + ecx*2 - 2]
cmp eax, 0x5c
je 0x413cb2
mov ecx, dword [ebp - 0x14]
add ecx, 1
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x2fc]
add edx, 0x14
push edx
lea ecx, [ebp - 8]
call fcn.00414d60
cmp dword [ebp - 0x14], 0
je 0x413cd7
push 0x43004c
lea ecx, [ebp - 8]
call fcn.00414db0
lea eax, [ebp - 8]
push eax
lea ecx, [ebp - 0x18]
call fcn.00414d60
push 0x430050
lea ecx, [ebp - 0x18]
call fcn.00414db0
lea ecx, [ebp - 0x278]
push ecx
lea ecx, [ebp - 0x18]
call fcn.0040f230
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xffffffff
jne 0x413d24
lea ecx, [ebp - 0x18]
call fcn.00401a20
lea ecx, [ebp - 8]
call fcn.00401a20
jmp 0x4146dd
mov dword [ebp - 4], 0
mov dword [ebp - 0x1c], 1
mov edx, dword [ebp - 0x2fc]
cmp dword [edx + 0x10], 0
je 0x414162
cmp dword [ebp - 0x1c], 0
je 0x414162
mov eax, dword [ebp - 0x278]
and eax, 0x20
je 0x414149
lea ecx, [ebp - 0x24c]
test ecx, ecx
je 0x414149
push 0x2e
lea edx, [ebp - 0x24c]
push edx
call fcn.00414c90
add esp, 8
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 0
je 0x414149
mov eax, dword [ebp - 0x27c]
lea ecx, [ebp - 0x24c]
cmp eax, ecx
je 0x414149
mov edx, dword [ebp - 0x27c]
sub edx, 2
mov dword [ebp - 0x284], edx
mov eax, dword [ebp - 0x27c]
add eax, 2
mov dword [ebp - 0x280], eax
mov ecx, dword [ebp - 0x284]
lea edx, [ebp - 0x24c]
cmp ecx, edx
jb 0x414149
mov eax, dword [ebp - 0x284]
movzx ecx, word [eax]
cmp ecx, 0x5c
je 0x414149
cmp dword [ebp - 0x280], 0
je 0x414149
mov edx, dword [ebp - 0x280]
push edx
call dword [sym.imp.MSVCR90.dll_wcslen]
add esp, 4
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 3
jne 0x414149
mov dword [ebp - 0x28c], 0
mov dword [ebp - 0x290], 0
push 3
push 0x430058
mov eax, dword [ebp - 0x280]
push eax
call dword [sym.imp.MSVCR90.dll__wcsnicmp]
add esp, 0xc
test eax, eax
je 0x413e7a
push 3
push 0x430060
mov ecx, dword [ebp - 0x280]
push ecx
call dword [sym.imp.MSVCR90.dll__wcsnicmp]
add esp, 0xc
test eax, eax
je 0x413e7a
push 3
push 0x430068
mov edx, dword [ebp - 0x280]
push edx
call dword [sym.imp.MSVCR90.dll__wcsnicmp]
add esp, 0xc
test eax, eax
jne 0x413e86
mov dword [ebp - 0x28c], 1
jmp 0x413ee1
push 3
push 0x430070
mov eax, dword [ebp - 0x280]
push eax
call dword [sym.imp.MSVCR90.dll__wcsnicmp]
add esp, 0xc
test eax, eax
je 0x413ed7
push 3
push 0x430078
mov ecx, dword [ebp - 0x280]
push ecx
call dword [sym.imp.MSVCR90.dll__wcsnicmp]
add esp, 0xc
test eax, eax
je 0x413ed7
push 3
push 0x430080
mov edx, dword [ebp - 0x280]
push edx
call dword [sym.imp.MSVCR90.dll__wcsnicmp]
add esp, 0xc
test eax, eax
jne 0x413ee1
mov dword [ebp - 0x290], 1
cmp dword [ebp - 0x28c], 0
je 0x414011
push 0x38
call fcn.0042d288
add esp, 4
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 0
je 0x413f1a
mov ecx, dword [ebp - 0x2bc]
call fcn.00414c00
mov dword [ebp - 0x300], eax
jmp 0x413f24
mov dword [ebp - 0x300], 0
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x294], eax
lea ecx, [ebp - 0x24c]
push ecx
lea edx, [ebp - 8]
push edx
lea eax, [ebp - 0x2c0]
push eax
call fcn.00414fb0
push eax
mov ecx, dword [ebp - 0x294]
add ecx, 0x34
call fcn.00401960
lea ecx, [ebp - 0x2c0]
call fcn.00401a20
mov ecx, dword [ebp - 0x294]
add ecx, 4
push ecx
mov ecx, dword [ebp - 0x294]
add ecx, 0x34
call fcn.0040f230
push eax
call fcn.00413b30
add esp, 8
mov edx, dword [ebp - 0x294]
mov dword [edx + 0x2c], eax
mov eax, dword [ebp - 0x294]
cmp dword [eax + 0x2c], 0
je 0x413fc5
mov ecx, dword [ebp - 0x294]
push ecx
push 0
mov edx, dword [ebp - 0x2fc]
mov eax, dword [edx + 8]
push eax
mov ecx, dword [ebp - 0x2fc]
mov edx, dword [ecx + 0xc]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
jmp 0x41400c
mov ecx, dword [ebp - 0x294]
mov dword [ebp - 0x2c8], ecx
mov edx, dword [ebp - 0x2c8]
mov dword [ebp - 0x2c4], edx
cmp dword [ebp - 0x2c4], 0
je 0x414002
push 1
mov eax, dword [ebp - 0x2c4]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x2c4]
mov eax, dword [edx]
call eax
mov dword [ebp - 0x304], eax
jmp 0x41400c
mov dword [ebp - 0x304], 0
jmp 0x414149
cmp dword [ebp - 0x290], 0
je 0x414149
push 0x38
call fcn.0042d288
add esp, 4
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 0
je 0x41404a
mov ecx, dword [ebp - 0x2cc]
call fcn.00414c00
mov dword [ebp - 0x308], eax
jmp 0x414054
mov dword [ebp - 0x308], 0
mov ecx, dword [ebp - 0x308]
mov dword [ebp - 0x298], ecx
lea edx, [ebp - 0x24c]
push edx
lea eax, [ebp - 8]
push eax
lea ecx, [ebp - 0x2d0]
push ecx
call fcn.00414fb0
push eax
mov ecx, dword [ebp - 0x298]
add ecx, 0x34
call fcn.00401960
lea ecx, [ebp - 0x2d0]
call fcn.00401a20
mov edx, dword [ebp - 0x298]
add edx, 4
push edx
mov ecx, dword [ebp - 0x298]
add ecx, 0x34
call fcn.0040f230
push eax
call fcn.004146f0
add esp, 8
mov ecx, dword [ebp - 0x298]
mov dword [ecx + 0x2c], eax
mov edx, dword [ebp - 0x298]
mov dword [edx + 0x30], 1
mov eax, dword [ebp - 0x298]
cmp dword [eax + 0x2c], 0
je 0x414102
mov ecx, dword [ebp - 0x298]
push ecx
push 1
mov edx, dword [ebp - 0x2fc]
mov eax, dword [edx + 8]
push eax
mov ecx, dword [ebp - 0x2fc]
mov edx, dword [ecx + 0xc]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
jmp 0x414149
mov ecx, dword [ebp - 0x298]
mov dword [ebp - 0x2d8], ecx
mov edx, dword [ebp - 0x2d8]
mov dword [ebp - 0x2d4], edx
cmp dword [ebp - 0x2d4], 0
je 0x41413f
push 1
mov eax, dword [ebp - 0x2d4]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x2d4]
mov eax, dword [edx]
call eax
mov dword [ebp - 0x30c], eax
jmp 0x414149
mov dword [ebp - 0x30c], 0
lea ecx, [ebp - 0x278]
push ecx
mov edx, dword [ebp - 0x20]
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
mov dword [ebp - 0x1c], eax
jmp 0x413d32
mov eax, dword [ebp - 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [ebp - 0x2fc]
cmp dword [ecx + 0x10], 0
jne 0x41418d
lea ecx, [ebp - 0x18]
call fcn.00401a20
lea ecx, [ebp - 8]
call fcn.00401a20
jmp 0x4146dd
mov ecx, dword [ebp - 0x2fc]
add ecx, 0x14
call fcn.0040f230
push eax
mov ecx, dword [ebp - 0x2fc]
add ecx, 0x18
call fcn.00414de0
test eax, eax
jne 0x4141c3
lea ecx, [ebp - 0x18]
call fcn.00401a20
lea ecx, [ebp - 8]
call fcn.00401a20
jmp 0x4146dd
mov ecx, dword [ebp - 0x2fc]
add ecx, 0x18
call fcn.0040f230
mov dword [ebp - 0x10], eax
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.MSVCR90.dll_wcslen]
add esp, 4
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x14], 0
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x10]
movzx edx, word [ecx + eax*2 - 2]
cmp edx, 0x5c
je 0x414204
mov eax, dword [ebp - 0x14]
add eax, 1
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x2fc]
add ecx, 0x18
push ecx
lea ecx, [ebp - 8]
call fcn.00401960
cmp dword [ebp - 0x14], 0
je 0x414229
push 0x430088
lea ecx, [ebp - 8]
call fcn.00414db0
lea edx, [ebp - 8]
push edx
lea ecx, [ebp - 0x18]
call fcn.00401960
push 0x43008c
lea ecx, [ebp - 0x18]
call fcn.00414db0
push 0x250
push 0
lea eax, [ebp - 0x278]
push eax
call sub.MSVCR90.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x278]
push ecx
lea ecx, [ebp - 0x18]
call fcn.0040f230
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xffffffff
jne 0x41428c
lea ecx, [ebp - 0x18]
call fcn.00401a20
lea ecx, [ebp - 8]
call fcn.00401a20
jmp 0x4146dd
mov dword [ebp - 0x1c], 1
mov edx, dword [ebp - 0x2fc]
cmp dword [edx + 0x10], 0
je 0x4146c3
cmp dword [ebp - 0x1c], 0
je 0x4146c3
mov eax, dword [ebp - 0x278]
and eax, 0x20
je 0x4146aa
lea ecx, [ebp - 0x24c]
test ecx, ecx
je 0x4146aa
push 0x2e
lea edx, [ebp - 0x24c]
push edx
call fcn.00414c90
add esp, 8
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 0
je 0x4146aa
mov eax, dword [ebp - 0x29c]
lea ecx, [ebp - 0x24c]
cmp eax, ecx
je 0x4146aa
mov edx, dword [ebp - 0x29c]
sub edx, 2
mov dword [ebp - 0x2a4], edx
mov eax, dword [ebp - 0x29c]
add eax, 2
mov dword [ebp - 0x2a0], eax
mov ecx, dword [ebp - 0x2a4]
lea edx, [ebp - 0x24c]
cmp ecx, edx
jb 0x4146aa
mov eax, dword [ebp - 0x2a4]
movzx ecx, word [eax]
cmp ecx, 0x5c
je 0x4146aa
cmp dword [ebp - 0x2a0], 0
je 0x4146aa
mov edx, dword [ebp - 0x2a0]
push edx
call dword [sym.imp.MSVCR90.dll_wcslen]
add esp, 4
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 3
jne 0x4146aa
mov dword [ebp - 0x2ac], 0
mov dword [ebp - 0x2b0], 0
push 3
push 0x430094
mov eax, dword [ebp - 0x2a0]
push eax
call dword [sym.imp.MSVCR90.dll__wcsnicmp]
add esp, 0xc
test eax, eax
je 0x4143db
push 3
push 0x43009c
mov ecx, dword [ebp - 0x2a0]
push ecx
call dword [sym.imp.MSVCR90.dll__wcsnicmp]
add esp, 0xc
test eax, eax
je 0x4143db
push 3
push 0x4300a4
mov edx, dword [ebp - 0x2a0]
push edx
call dword [sym.imp.MSVCR90.dll__wcsnicmp]
add esp, 0xc
test eax, eax
jne 0x4143e7
mov dword [ebp - 0x2ac], 1
jmp 0x414442
push 3
push 0x4300ac
mov eax, dword [ebp - 0x2a0]
push eax
call dword [sym.imp.MSVCR90.dll__wcsnicmp]
add esp, 0xc
test eax, eax
je 0x414438
push 3
push 0x4300b4
mov ecx, dword [ebp - 0x2a0]
push ecx
call dword [sym.imp.MSVCR90.dll__wcsnicmp]
add esp, 0xc
test eax, eax
je 0x414438
push 3
push 0x4300bc
mov edx, dword [ebp - 0x2a0]
push edx
call dword [sym.imp.MSVCR90.dll__wcsnicmp]
add esp, 0xc
test eax, eax
jne 0x414442
mov dword [ebp - 0x2b0], 1
cmp dword [ebp - 0x2ac], 0
je 0x414572
push 0x38
call fcn.0042d288
add esp, 4
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 0
je 0x41447b
mov ecx, dword [ebp - 0x2dc]
call fcn.00414c00
mov dword [ebp - 0x310], eax
jmp 0x414485
mov dword [ebp - 0x310], 0
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0x2b4], eax
lea ecx, [ebp - 0x24c]
push ecx
lea edx, [ebp - 8]
push edx
lea eax, [ebp - 0x2e0]
push eax
call fcn.00414fb0
push eax
mov ecx, dword [ebp - 0x2b4]
add ecx, 0x34
call fcn.00401960
lea ecx, [ebp - 0x2e0]
call fcn.00401a20
mov ecx, dword [ebp - 0x2b4]
add ecx, 4
push ecx
mov ecx, dword [ebp - 0x2b4]
add ecx, 0x34
call fcn.0040f230
push eax
call fcn.00413b30
add esp, 8
mov edx, dword [ebp - 0x2b4]
mov dword [edx + 0x2c], eax
mov eax, dword [ebp - 0x2b4]
cmp dword [eax + 0x2c], 0
je 0x414526
mov ecx, dword [ebp - 0x2b4]
push ecx
push 0
mov edx, dword [ebp - 0x2fc]
mov eax, dword [edx + 8]
push eax
mov ecx, dword [ebp - 0x2fc]
mov edx, dword [ecx + 0xc]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
jmp 0x41456d
mov ecx, dword [ebp - 0x2b4]
mov dword [ebp - 0x2e8], ecx
mov edx, dword [ebp - 0x2e8]
mov dword [ebp - 0x2e4], edx
cmp dword [ebp - 0x2e4], 0
je 0x414563
push 1
mov eax, dword [ebp - 0x2e4]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x2e4]
mov eax, dword [edx]
call eax
mov dword [ebp - 0x314], eax
jmp 0x41456d
mov dword [ebp - 0x314], 0
jmp 0x4146aa
cmp dword [ebp - 0x2b0], 0
je 0x4146aa
push 0x38
call fcn.0042d288
add esp, 4
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 0
je 0x4145ab
mov ecx, dword [ebp - 0x2ec]
call fcn.00414c00
mov dword [ebp - 0x318], eax
jmp 0x4145b5
mov dword [ebp - 0x318], 0
mov ecx, dword [ebp - 0x318]
mov dword [ebp - 0x2b8], ecx
lea edx, [ebp - 0x24c]
push edx
lea eax, [ebp - 8]
push eax
lea ecx, [ebp - 0x2f0]
push ecx
call fcn.00414fb0
push eax
mov ecx, dword [ebp - 0x2b8]
add ecx, 0x34
call fcn.00401960
lea ecx, [ebp - 0x2f0]
call fcn.00401a20
mov edx, dword [ebp - 0x2b8]
add edx, 4
push edx
mov ecx, dword [ebp - 0x2b8]
add ecx, 0x34
call fcn.0040f230
push eax
call fcn.004146f0
add esp, 8
mov ecx, dword [ebp - 0x2b8]
mov dword [ecx + 0x2c], eax
mov edx, dword [ebp - 0x2b8]
mov dword [edx + 0x30], 1
mov eax, dword [ebp - 0x2b8]
cmp dword [eax + 0x2c], 0
je 0x414663
mov ecx, dword [ebp - 0x2b8]
push ecx
push 0
mov edx, dword [ebp - 0x2fc]
mov eax, dword [edx + 8]
push eax
mov ecx, dword [ebp - 0x2fc]
mov edx, dword [ecx + 0xc]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
jmp 0x4146aa
mov ecx, dword [ebp - 0x2b8]
mov dword [ebp - 0x2f8], ecx
mov edx, dword [ebp - 0x2f8]
mov dword [ebp - 0x2f4], edx
cmp dword [ebp - 0x2f4], 0
je 0x4146a0
push 1
mov eax, dword [ebp - 0x2f4]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x2f4]
mov eax, dword [edx]
call eax
mov dword [ebp - 0x31c], eax
jmp 0x4146aa
mov dword [ebp - 0x31c], 0
lea ecx, [ebp - 0x278]
push ecx
mov edx, dword [ebp - 0x20]
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
mov dword [ebp - 0x1c], eax
jmp 0x414293
mov eax, dword [ebp - 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
lea ecx, [ebp - 0x18]
call fcn.00401a20
lea ecx, [ebp - 8]
call fcn.00401a20
mov ecx, dword [ebp - 0x24]
xor ecx, ebp
call fcn.0042d238
mov esp, ebp
pop ebp
ret