Function at 0x4107a0
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x414e61
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1b8
push edi
mov dword [ebp - 0x1a8], ecx
call sub.MFC71.DLL_AfxGetModuleState
mov eax, dword [eax + 4]
mov dword [ebp - 0x168], eax
mov ecx, dword [ebp - 0x1a8]
mov edx, dword [ecx + 0x68]
mov dword [ebp - 0x160], edx
mov eax, dword [ebp - 0x160]
mov ecx, dword [eax + 0x54]
mov dword [ebp - 0x158], ecx
mov edx, dword [ebp - 0x158]
mov eax, dword [edx + 0x2a0]
mov dword [ebp - 0x164], eax
lea ecx, [ebp - 0x15c]
push ecx
mov ecx, dword [ebp - 0x158]
call fcn.00407bf0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x10]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT_3]
mov byte [ebp - 4], 1
lea edx, [ebp - 0x178]
push edx
mov ecx, dword [ebp - 0x158]
call fcn.00407b40
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x1b0], eax
mov byte [ebp - 4], 2
push 0x4182dc
mov ecx, dword [ebp - 0x1b0]
call dword [sym.imp.MFC71.DLL_ATL::CSimpleStringT::operator_char_const_]
push eax
lea ecx, [ebp - 0x15c]
call dword [sym.imp.MFC71.DLL_ATL::CSimpleStringT::operator_char_const_]
push eax
push 0x4168cf
push 0x104
lea ecx, [ebp - 0x10]
call dword [sym.imp.MFC71.DLL_ATL::CSimpleStringT::GetBuffer]
push eax
call dword [sym.imp.MSVCR71.dll__makepath]
add esp, 0x14
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x178]
call dword [0x41610c]
push 0xffffffffffffffff
lea ecx, [ebp - 0x10]
call dword [sym.imp.MFC71.DLL_ATL::CSimpleStringT::ReleaseBuffer]
mov dword [ebp - 0x154], 0
mov ecx, 0x4f
xor eax, eax
lea edi, [ebp - 0x150]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x174], 0
lea ecx, [ebp - 0x154]
push ecx
lea ecx, [ebp - 0x10]
call dword [sym.imp.MFC71.DLL_ATL::CSimpleStringT::operator_char_const_]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0xffffffff
je 0x410944
mov edx, dword [ebp - 0x154]
and edx, 0x10
neg edx
sbb edx, edx
neg edx
je 0x410904
jmp 0x41091f
lea eax, [ebp - 0x128]
push eax
push 0
push 0x143
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x20]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
lea eax, [ebp - 0x154]
push eax
mov ecx, dword [ebp - 0x174]
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x4108f1
mov edx, dword [ebp - 0x174]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
lea eax, [ebp - 0x17c]
push eax
mov ecx, dword [ebp - 0x158]
call fcn.00407b40
mov dword [ebp - 0x1b4], eax
mov ecx, dword [ebp - 0x1b4]
mov dword [ebp - 0x1b8], ecx
mov byte [ebp - 4], 3
push str..BAK
mov edx, dword [ebp - 0x1b8]
push edx
lea eax, [ebp - 0x170]
push eax
call fcn.00402330
add esp, 0xc
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x17c]
call dword [0x41610c]
lea ecx, [ebp - 0x170]
call dword [sym.imp.MFC71.DLL_ATL::CSimpleStringT::operator_char_const_]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x194], 0xffffffff
mov ecx, dword [ebp - 0x190]
push ecx
mov edx, dword [ebp - 0x194]
push edx
push 0x14c
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x20]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0xffffffff
je 0x4109fd
push 0
mov edx, dword [ebp - 0x16c]
push edx
push 0x144
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x20]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
lea edx, [ebp - 0x184]
push edx
mov ecx, dword [ebp - 0x158]
call fcn.00407950
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x198], eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x198]
call dword [sym.imp.MFC71.DLL_ATL::CSimpleStringT::operator_char_const_]
push eax
lea ecx, [ebp - 0x15c]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::Compare]
neg eax
sbb eax, eax
inc eax
mov byte [ebp - 0x17d], al
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x184]
call dword [0x41610c]
movzx ecx, byte [ebp - 0x17d]
test ecx, ecx
je 0x410b19
lea edx, [ebp - 0x188]
push edx
mov ecx, dword [ebp - 0x158]
call fcn.00407a30
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x1c4], eax
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x1c4]
push ecx
lea ecx, [ebp - 0x170]
call dword [0x416110]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x188]
call dword [0x41610c]
lea ecx, [ebp - 0x170]
call dword [sym.imp.MFC71.DLL_ATL::CSimpleStringT::operator_char_const_]
mov dword [ebp - 0x19c], eax
mov dword [ebp - 0x1a0], 0xffffffff
mov edx, dword [ebp - 0x19c]
push edx
mov eax, dword [ebp - 0x1a0]
push eax
push 0x14c
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x20]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0xffffffff
je 0x410b19
push 0
mov eax, dword [ebp - 0x16c]
push eax
push 0x144
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x20]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov dword [ebp - 0x1a4], 0
push 0
mov eax, dword [ebp - 0x1a4]
push eax
push 0x14e
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x20]
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0
push 0x146
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x20]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov dword [ebp - 0x18c], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x170]
call dword [0x41610c]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x10]
call dword [0x41610c]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x15c]
call dword [0x41610c]
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
mov esp, ebp
pop ebp
ret 4