Function at 0x416fc0
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x42a5b9
mov eax, dword fs:[0]
push eax
sub esp, 0x294
mov eax, dword [0x44c264]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x290]
push ecx
mov dword [ebp - 0x274], eax
call dword [sym.imp.QQMusicCommon.dll_class_ATL::CStringT_wchar_t__class_ATL::StrTraitATL_wchar_t__class_ATL::ChTraitsCRT_wchar_t______cdecl_qqmusic::GetAppDataFolder_void_]
push str.CrashDumpQQMusic_
push eax
lea edx, [ebp - 0x264]
push edx
mov dword [ebp - 4], 0
call fcn.00401af0
add esp, 0x10
mov eax, dword [ebp - 0x290]
add eax, 0xfffffff0
mov byte [ebp - 4], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x417046
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push 0x436e54
lea ecx, [ebp - 0x264]
push ecx
lea edx, [ebp - 0x278]
push edx
call fcn.00401af0
add esp, 0xc
mov eax, dword [0x44cc60]
mov edx, dword [eax + 0xc]
mov ecx, 0x44cc60
mov byte [ebp - 4], 3
call edx
lea ebx, [eax + 0x10]
mov dword [ebp - 0x270], ebx
mov eax, dword [0x44cc60]
mov edx, dword [eax + 0xc]
mov ecx, 0x44cc60
mov byte [ebp - 4], 4
call edx
lea esi, [eax + 0x10]
mov dword [ebp - 0x26c], esi
mov ecx, dword [ebp - 0x278]
lea eax, [ebp - 0x260]
push eax
push ecx
mov byte [ebp - 4], 5
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov edi, eax
cmp edi, 0xffffffff
je 0x4173f1
mov bl, 6
mov edi, edi
lea edx, [ebp - 0x234]
push edx
lea ecx, [ebp - 0x268]
call fcn.00401e80
mov esi, dword [ebp - 0x268]
mov byte [ebp - 4], bl
mov ecx, 0x436e4c
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x417108
test dx, dx
je 0x417104
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x417108
add eax, 4
add ecx, 4
test dx, dx
jne 0x4170e2
xor eax, eax
jmp 0x41710d
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sete al
test al, al
jne 0x4173af
mov ecx, 0x430df0
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x417147
test dx, dx
je 0x417143
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x417147
add eax, 4
add ecx, 4
test dx, dx
jne 0x417121
xor eax, eax
jmp 0x41714c
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sete al
test al, al
jne 0x4173af
test byte [ebp - 0x260], 0x10
jne 0x4173af
push 4
lea ecx, [ebp - 0x28c]
push ecx
lea ecx, [ebp - 0x268]
call fcn.00413a70
mov ecx, eax
mov byte [ebp - 4], 7
call fcn.00413a10
push eax
lea ecx, [ebp - 0x268]
call fcn.00401820
mov eax, dword [ebp - 0x28c]
add eax, 0xfffffff0
mov byte [ebp - 4], bl
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4171b6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [ebp - 0x268]
push str..log
push ecx
call fcn.00404b30
add esp, 8
test al, al
je 0x417297
mov edx, dword [ebp - 0x270]
cmp dword [edx - 0xc], 0
jne 0x41722e
mov eax, dword [ebp - 0x24c]
mov ecx, dword [ebp - 0x248]
lea edx, [ebp - 0x234]
mov dword [ebp - 0x280], eax
push edx
lea eax, [ebp - 0x264]
mov dword [ebp - 0x27c], ecx
push eax
lea ecx, [ebp - 0x298]
push ecx
call fcn.00401af0
add esp, 0xc
push eax
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 8
call fcn.00401820
mov eax, dword [ebp - 0x298]
jmp 0x41730a
lea ecx, [ebp - 0x280]
push ecx
lea edx, [ebp - 0x24c]
push edx
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
test eax, eax
jle 0x417393
mov eax, dword [ebp - 0x24c]
mov ecx, dword [ebp - 0x248]
lea edx, [ebp - 0x234]
mov dword [ebp - 0x280], eax
push edx
lea eax, [ebp - 0x264]
mov dword [ebp - 0x27c], ecx
push eax
lea ecx, [ebp - 0x2a0]
push ecx
call fcn.00401af0
add esp, 0xc
push eax
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 9
call fcn.00401820
mov eax, dword [ebp - 0x2a0]
jmp 0x41730a
lea ecx, [ebp - 0x268]
push 0x436e34
push ecx
call fcn.00404b30
add esp, 8
test al, al
je 0x417393
mov edx, dword [ebp - 0x26c]
cmp dword [edx - 0xc], 0
jne 0x41732b
mov eax, dword [ebp - 0x24c]
mov ecx, dword [ebp - 0x248]
lea edx, [ebp - 0x234]
mov dword [ebp - 0x288], eax
push edx
lea eax, [ebp - 0x264]
mov dword [ebp - 0x284], ecx
push eax
lea ecx, [ebp - 0x294]
push ecx
call fcn.00401af0
add esp, 0xc
push eax
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 0xa
call fcn.00401820
mov eax, dword [ebp - 0x294]
add eax, 0xfffffff0
mov byte [ebp - 4], bl
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x417393
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x417393
lea ecx, [ebp - 0x288]
push ecx
lea edx, [ebp - 0x24c]
push edx
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
test eax, eax
jle 0x417393
mov eax, dword [ebp - 0x24c]
mov ecx, dword [ebp - 0x248]
lea edx, [ebp - 0x234]
mov dword [ebp - 0x288], eax
push edx
lea eax, [ebp - 0x264]
mov dword [ebp - 0x284], ecx
push eax
lea ecx, [ebp - 0x29c]
push ecx
call fcn.00401af0
add esp, 0xc
push eax
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 0xb
call fcn.00401820
lea ecx, [ebp - 0x29c]
call fcn.00412f60
mov eax, dword [ebp - 0x268]
add eax, 0xfffffff0
mov byte [ebp - 4], 5
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jmp 0x4173c3
lea eax, [esi - 0x10]
or edx, 0xffffffff
lea ecx, [eax + 0xc]
mov byte [ebp - 4], 5
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4173cf
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [ebp - 0x260]
push ecx
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x4170c0
mov esi, dword [ebp - 0x26c]
mov ebx, dword [ebp - 0x270]
cmp dword [esi - 0xc], 0
je 0x417409
mov ecx, dword [ebp - 0x274]
lea edx, [ebp - 0x26c]
push edx
call fcn.004107a0
cmp dword [ebx - 0xc], 0
je 0x417421
mov ecx, dword [ebp - 0x274]
lea eax, [ebp - 0x270]
push eax
call fcn.004107a0
lea eax, [esi - 0x10]
mov byte [ebp - 4], 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x417441
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea eax, [ebx - 0x10]
mov byte [ebp - 4], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x417461
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x278]
add eax, 0xfffffff0
mov byte [ebp - 4], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x417487
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x264]
add eax, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4174b0
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0042798a
mov esp, ebp
pop ebp
ret 4