Function at 0x405a00
Capabilities:
Enumerate files on windows

Disassembly:
push 0xffffffffffffffff
push 0x41990b
mov eax, dword fs:[0]
push eax
sub esp, 0x99c
mov eax, dword [0x420a50]
xor eax, esp
mov dword [esp + 0x998], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x420a50]
xor eax, esp
push eax
lea eax, [esp + 0x9b0]
mov dword fs:[0], eax
mov ebx, dword [esp + 0x9c0]
lea ecx, [esp + 0x14]
mov dword [esp + 0x18], ebx
call fcn.00406470
xor eax, eax
mov dword [esp + 0x9b8], eax
jmp 0x405a60
mov cl, byte [eax + 0x4223a0]
mov byte [esp + eax + 0x2a0], cl
add eax, 1
test cl, cl
jne 0x405a60
lea eax, [esp + 0x2a0]
add eax, 0xffffffff
mov edi, edi
mov cl, byte [eax + 1]
add eax, 1
test cl, cl
jne 0x405a80
mov ecx, dword [str..kbl]
mov dx, word [0x41ae10]
mov ebp, dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [eax], ecx
mov cl, byte [0x41ae12]
mov word [eax + 4], dx
lea edx, [esp + 0x20]
mov byte [eax + 6], cl
push edx
lea eax, [esp + 0x2a4]
push eax
call ebp
cmp eax, 0xffffffff
mov dword [esp + 0x1c], eax
je 0x405f4d
xor eax, eax
lea ebx, [ebx]
mov cl, byte [eax + 0x4223a0]
mov byte [esp + eax + 0x2a0], cl
add eax, 1
test cl, cl
jne 0x405ad0
lea edi, [esp + 0x2a0]
add edi, 0xffffffff
mov edi, edi
mov al, byte [edi + 1]
add edi, 1
test al, al
jne 0x405af0
mov cx, word [0x41a9a0]
lea eax, [esp + 0x4c]
mov word [edi], cx
mov edx, eax
lea ebx, [ebx]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x405b10
lea edi, [esp + 0x2a0]
sub eax, edx
add edi, 0xffffffff
mov cl, byte [edi + 1]
add edi, 1
test cl, cl
jne 0x405b25
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
xor eax, eax
mov cl, byte [esp + eax + 0x4c]
mov byte [esp + eax + 0x4a8], cl
add eax, 1
test cl, cl
jne 0x405b41
lea edx, [esp + 0x4a8]
push 0x2e
push edx
call fcn.00407a70
mov byte [eax], 0
lea eax, [esp + 0x4b0]
add esp, 8
add eax, 0xffffffff
mov cl, byte [eax + 1]
add eax, 1
test cl, cl
jne 0x405b72
mov ecx, dword [str..bmp]
mov dl, byte [0x41a9a8]
mov dword [eax], ecx
mov byte [eax + 4], dl
xor eax, eax
nop
mov cl, byte [eax + 0x4223a0]
mov byte [esp + eax + 0x3a4], cl
add eax, 1
test cl, cl
jne 0x405b90
lea edi, [esp + 0x3a4]
add edi, 0xffffffff
mov edi, edi
mov al, byte [edi + 1]
add edi, 1
test al, al
jne 0x405bb0
mov ax, word [0x41a9a0]
mov word [edi], ax
lea eax, [esp + 0x4a8]
mov esi, eax
lea esp, [esp]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x405bd0
lea edi, [esp + 0x3a4]
sub eax, esi
add edi, 0xffffffff
mov cl, byte [edi + 1]
add edi, 1
test cl, cl
jne 0x405be5
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x160]
push ecx
lea edx, [esp + 0x3a8]
push edx
call ebp
cmp eax, 0xffffffff
je 0x405c9c
lea eax, [esp + 0x2a0]
push eax
lea ecx, [esp + 0x18]
call fcn.004024a0
test eax, eax
jg 0x405c6b
lea ecx, [esp + 0x2a0]
push ecx
lea edx, [esp + 0x5b0]
push str.Skipping_the_file__n_s_nas_it_contains_no_data.
push edx
call fcn.004079c0
add esp, 0xc
push 0x30
push str.Warning
lea eax, [esp + 0x5b4]
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0x14]
call fcn.00402140
jmp 0x405cd7
mov edx, dword [0x422e38]
lea ecx, [esp + 0x4c]
push ecx
push eax
push edx
lea eax, [esp + 0x20]
push eax
push ebx
call fcn.00405110
add esp, 0x14
test eax, eax
je 0x405c91
add dword [0x422e38], 1
lea ecx, [esp + 0x14]
call fcn.00402140
jmp 0x405cd7
lea ecx, [esp + 0x2a0]
push ecx
lea edx, [esp + 0x4ac]
push edx
lea eax, [esp + 0x5b4]
push str.Cannot_find_the_bitmap_file_n_s_ncorresponding_to_the_keyboard_layout_file_n_s._nSkipping_file.
push eax
call fcn.004079c0
add esp, 0x10
push 0x30
push str.Warning
lea ecx, [esp + 0x5b4]
push ecx
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
mov eax, dword [esp + 0x1c]
mov ebp, dword [sym.imp.KERNEL32.dll_FindNextFileA]
lea edx, [esp + 0x20]
push edx
push eax
call ebp
test eax, eax
je 0x405f4d
xor eax, eax
jmp 0x405d00
mov cl, byte [eax + 0x4223a0]
mov byte [esp + eax + 0x2a0], cl
add eax, 1
test cl, cl
jne 0x405d00
lea edi, [esp + 0x2a0]
add edi, 0xffffffff
mov edi, edi
mov al, byte [edi + 1]
add edi, 1
test al, al
jne 0x405d20
mov bx, word [0x41a9a0]
lea eax, [esp + 0x4c]
mov word [edi], bx
mov ecx, eax
lea ebx, [ebx]
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x405d40
lea edi, [esp + 0x2a0]
sub eax, ecx
mov esi, ecx
add edi, 0xffffffff
mov cl, byte [edi + 1]
add edi, 1
test cl, cl
jne 0x405d57
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
xor eax, eax
jmp 0x405d80
mov cl, byte [eax + 0x4223a0]
mov byte [esp + eax + 0x3a4], cl
add eax, 1
test cl, cl
jne 0x405d80
lea edi, [esp + 0x3a4]
add edi, 0xffffffff
mov edi, edi
mov al, byte [edi + 1]
add edi, 1
test al, al
jne 0x405da0
lea eax, [esp + 0x4c]
mov word [edi], bx
mov ecx, eax
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x405db3
lea edi, [esp + 0x3a4]
sub eax, ecx
mov esi, ecx
add edi, 0xffffffff
lea ebx, [ebx]
mov cl, byte [edi + 1]
add edi, 1
test cl, cl
jne 0x405dd0
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x3a4]
push 0x2e
push ecx
call fcn.00407a70
mov byte [eax], 0
lea eax, [esp + 0x3ac]
add esp, 8
add eax, 0xffffffff
mov cl, byte [eax + 1]
add eax, 1
test cl, cl
jne 0x405e07
mov edx, dword [str..bmp]
mov cl, byte [0x41a9a8]
mov dword [eax], edx
lea edx, [esp + 0x160]
mov byte [eax + 4], cl
push edx
lea eax, [esp + 0x3a8]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp eax, 0xffffffff
je 0x405edd
cmp dword [0x422e38], 0x64
jge 0x405f32
lea ecx, [esp + 0x2a0]
push ecx
lea ecx, [esp + 0x18]
call fcn.004024a0
test eax, eax
jg 0x405ea8
lea edx, [esp + 0x2a0]
push edx
lea eax, [esp + 0x5b0]
push str.Skipping_the_file__n_s_nas_it_contains_no_data.
push eax
call fcn.004079c0
mov edx, dword [esp + 0x24]
add esp, 0xc
push 0x30
push str.Warning
lea ecx, [esp + 0x5b4]
push ecx
push edx
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0x14]
call fcn.00402140
jmp 0x405f1c
mov edx, dword [0x422e38]
lea ecx, [esp + 0x4c]
push ecx
mov ecx, dword [esp + 0x1c]
push eax
push edx
lea eax, [esp + 0x20]
push eax
push ecx
call fcn.00405110
add esp, 0x14
test eax, eax
je 0x405ed2
add dword [0x422e38], 1
lea ecx, [esp + 0x14]
call fcn.00402140
jmp 0x405f1c
lea edx, [esp + 0x2a0]
push edx
lea eax, [esp + 0x4ac]
push eax
lea ecx, [esp + 0x5b4]
push str.Cannot_find_the_bitmap_file_n_s_ncorresponding_to_the_keyboard_layout_file_n_s._nSkipping_file.
push ecx
call fcn.004079c0
mov eax, dword [esp + 0x28]
add esp, 0x10
push 0x30
push str.Warning
lea edx, [esp + 0x5b4]
push edx
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
mov edx, dword [esp + 0x1c]
lea ecx, [esp + 0x20]
push ecx
push edx
call ebp
test eax, eax
jne 0x405cf1
jmp 0x405f49
mov eax, dword [esp + 0x18]
push 0x40
push str.Alert
push str.More_than_100_valid_.kbl_files_have_been_found._nOnly_the_first_one_hundred_will_be_taken.
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ebx, dword [esp + 0x18]
cmp dword [0x422e38], 0
jg 0x405f69
push 0x30
push str.KeyboardTest___Error
push str.No_valid_keyboard_layout__.kbl__files_have_been_nfound_in_the_KeyboardTest_directory._n_nAt_least_one_.kbl_file_is_required_to_run_KeyboardTest.
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
mov esi, dword [0x422e38]
lea ecx, [esp + 0x14]
mov dword [esp + 0x9b8], 0xffffffff
call fcn.00406480
mov eax, esi
mov ecx, dword [esp + 0x9b0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x998]
xor ecx, esp
call fcn.00407a57
add esp, 0x9a8
ret