Function at 0x407731
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1494
call fcn.004097b0
push esi
push edi
push dword [ebp + 8]
lea eax, [ebp - 0xc94]
mov dword [ebp - 4], ecx
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0xc94]
push 0x429920
push eax
call sub.MSVCRT.dll_strcat
lea eax, [ebp - 0xc94]
push eax
lea eax, [ebp - 0x1094]
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x1094]
push 0x42ae60
push eax
call sub.MSVCRT.dll_strcat
add esp, 0x20
lea eax, [ebp - 0x294]
push eax
lea eax, [ebp - 0x1094]
push eax
call dword [sym.imp.KERNEL32.DLL_FindFirstFileA]
mov dword [ebp + 8], eax
lea eax, [ebp - 0x294]
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
test eax, eax
je 0x407be4
mov eax, dword [ebp - 4]
inc dword [eax + 0xd0]
lea eax, [ebp - 0x268]
push eax
push 0x42ae5c
call sub.MSVCRT.dll_strcmp
pop ecx
test eax, eax
pop ecx
je 0x4077a1
lea eax, [ebp - 0x268]
push eax
push 0x42ae58
call sub.MSVCRT.dll_strcmp
pop ecx
test eax, eax
pop ecx
je 0x4077a1
lea eax, [ebp - 0x268]
xor edi, edi
push eax
call sub.MSVCRT.dll_strlen
test eax, eax
pop ecx
jbe 0x407842
movsx eax, byte [ebp + edi - 0x268]
lea esi, [ebp + edi - 0x268]
push eax
call dword [sym.imp.MSVCRT.dll_isalnum]
test eax, eax
pop ecx
jne 0x407830
mov al, byte [esi]
cmp al, 0x2e
je 0x407830
cmp al, 0x20
je 0x407830
cmp al, 0x7e
jne 0x4077a1
lea eax, [ebp - 0x268]
inc edi
push eax
call sub.MSVCRT.dll_strlen
cmp edi, eax
pop ecx
jb 0x407803
mov eax, dword [ebp - 4]
lea esi, [eax + 0xc8]
cmp dword [esi], 0
je 0x40785d
push 0x3e8
call dword [sym.imp.KERNEL32.DLL_Sleep]
jmp 0x40784b
lea eax, [ebp - 0xc94]
push eax
lea eax, [ebp - 0x894]
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x268]
push eax
lea eax, [ebp - 0x894]
push eax
call sub.MSVCRT.dll_strcat
add esp, 0x10
test byte [ebp - 0x294], 0x10
je 0x4078a5
mov ecx, dword [ebp - 4]
lea eax, [ebp - 0x894]
push 0
push eax
call fcn.00407731
jmp 0x4077a1
lea eax, [ebp - 0x894]
push eax
lea eax, [ebp - 0x394]
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x394]
xor edi, edi
push eax
call sub.MSVCRT.dll_strlen
add esp, 0xc
inc eax
je 0x4078f6
lea esi, [ebp - 0x494]
mov al, byte [ebp + edi - 0x394]
cmp al, 0x5c
mov byte [esi], al
jne 0x4078e2
inc esi
mov byte [esi], al
lea eax, [ebp - 0x394]
inc esi
push eax
inc edi
call sub.MSVCRT.dll_strlen
inc eax
pop ecx
cmp edi, eax
jb 0x4078d2
lea eax, [ebp - 0x268]
push eax
lea eax, [ebp - 0x154]
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x154]
push eax
call dword [sym.imp.MSVCRT.dll__strlwr]
lea eax, [ebp - 0x154]
push eax
call fcn.00401fa9
mov esi, eax
add esp, 0x10
test esi, esi
je 0x4077a1
lea eax, [ebp - 0x154]
push str..jpg
push eax
call fcn.00407bf3
pop ecx
test eax, eax
pop ecx
jne 0x407a29
lea eax, [ebp - 0x154]
push str..jpeg
push eax
call fcn.00407bf3
pop ecx
test eax, eax
pop ecx
jne 0x407a29
lea eax, [ebp - 0x154]
push str..mpg
push eax
call fcn.00407bf3
pop ecx
test eax, eax
pop ecx
jne 0x407a29
lea eax, [ebp - 0x154]
push str..mpeg
push eax
call fcn.00407bf3
pop ecx
test eax, eax
pop ecx
jne 0x407a29
lea eax, [ebp - 0x154]
push str..avi
push eax
call fcn.00407bf3
pop ecx
test eax, eax
pop ecx
jne 0x407a29
lea eax, [ebp - 0x154]
push str..tiff
push eax
call fcn.00407bf3
pop ecx
test eax, eax
pop ecx
jne 0x407a29
lea eax, [ebp - 0x154]
push str..mp3
push eax
call fcn.00407bf3
pop ecx
test eax, eax
pop ecx
jne 0x407a29
lea eax, [ebp - 0x154]
push str..gif
push eax
call fcn.00407bf3
pop ecx
test eax, eax
pop ecx
jne 0x407a29
lea eax, [ebp - 0x154]
push str..png
push eax
call fcn.00407bf3
pop ecx
test eax, eax
pop ecx
jne 0x407a29
lea eax, [ebp - 0x154]
push str..ram
push eax
call fcn.00407bf3
pop ecx
test eax, eax
pop ecx
je 0x4077a1
lea eax, [ebp - 0x154]
push str..jpg
push eax
call fcn.00407bf3
pop ecx
test eax, eax
pop ecx
je 0x407a50
lea eax, [ebp - 0x54]
push str.JPEG_image
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
lea eax, [ebp - 0x154]
push str..jpeg
push eax
call fcn.00407bf3
pop ecx
test eax, eax
pop ecx
je 0x407a77
lea eax, [ebp - 0x54]
push str.JPEG_image
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
lea eax, [ebp - 0x154]
push str..mpg
push eax
call fcn.00407bf3
pop ecx
test eax, eax
pop ecx
je 0x407a9e
lea eax, [ebp - 0x54]
push str.MPEG_movie
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
lea eax, [ebp - 0x154]
push str..mpeg
push eax
call fcn.00407bf3
pop ecx
test eax, eax
pop ecx
je 0x407ac5
lea eax, [ebp - 0x54]
push str.MPEG_movie
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
lea eax, [ebp - 0x154]
push str..avi
push eax
call fcn.00407bf3
pop ecx
test eax, eax
pop ecx
je 0x407aec
lea eax, [ebp - 0x54]
push str.AVI_movie
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
lea eax, [ebp - 0x154]
push str..tiff
push eax
call fcn.00407bf3
pop ecx
test eax, eax
pop ecx
je 0x407b13
lea eax, [ebp - 0x54]
push str.TIFF_image
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
lea eax, [ebp - 0x154]
push str..mp3
push eax
call fcn.00407bf3
pop ecx
test eax, eax
pop ecx
je 0x407b3a
lea eax, [ebp - 0x54]
push str.MP3_music
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
lea eax, [ebp - 0x154]
push str..gif
push eax
call fcn.00407bf3
pop ecx
test eax, eax
pop ecx
je 0x407b61
lea eax, [ebp - 0x54]
push str.GIF_image
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
lea eax, [ebp - 0x154]
push str..png
push eax
call fcn.00407bf3
pop ecx
test eax, eax
pop ecx
je 0x407b88
lea eax, [ebp - 0x54]
push str.PNG_image
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
lea eax, [ebp - 0x154]
push str..ram
push eax
call fcn.00407bf3
pop ecx
test eax, eax
pop ecx
je 0x407baf
lea eax, [ebp - 0x54]
push str.RealTime_movie
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
lea eax, [ebp - 0x268]
push esi
push eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x1494]
push str.file_type:__s__title:__s__contains_word:__s
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
mov ecx, dword [ebp - 4]
add esp, 0x14
lea eax, [ebp - 0x1494]
push eax
call fcn.00408074
jmp 0x4077a1
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindClose]
pop edi
pop esi
leave
ret 8