Function at 0x4022d0
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
lea ebp, [esp - 4]
enter 0x714, 0
push ebx
push ecx
push edx
lea eax, [ebp - 0x104]
push eax
call fcn.00405920
mov byte [0x40a2dd], 0
call fcn.00403f40
cmp eax, 1
jle 0x40231c
lea eax, [ebp - 0x104]
push eax
push 2
call fcn.00403bd0
lea esi, [ebp - 0x104]
mov edi, 0x4073d5
call fcn.00403b00
mov byte [0x40a2dd], al
mov dword [0x40be78], 0x40bd71
mov dword [0x40be70], 0x40bb71
mov dword [0x40be74], 0x40bc71
call fcn.00403fa0
mov dword [0x40bb60], 0x10
mov dword [ebp - 8], 0xc
mov dword [0x40bb64], 0xffffffff
inc dword [0x40bb64]
imul eax, dword [0x40bb64], 0x100
mov esi, 0x4074fd
lea edi, [ebp - 0x108]
call fcn.00401b30
imul ebx, dword [0x40bb64], 0x100
lea esi, [ebx + 0x407628]
call fcn.00401af0
lea edi, [eax + 0x407628]
lea esi, [ebp - 0x108]
call fcn.00401940
dec dword [ebp - 8]
jne 0x40235a
mov esi, 0x4074fd
lea edi, [ebp - 0x208]
call fcn.00401b30
mov esi, 0x409e3d
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x108]
call fcn.00401b30
mov esi, 0x4073dc
call fcn.00401af0
mov edi, 0x407828
lea esi, [ebp - 0x108]
call fcn.00401940
mov esi, 0x4074fd
lea edi, [ebp - 0x208]
call fcn.00401b30
mov esi, 0x409d3d
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x108]
call fcn.00401b30
mov esi, 0x4073de
call fcn.00401af0
mov edi, 0x407928
lea esi, [ebp - 0x108]
call fcn.00401940
mov eax, dword [0x40bb60]
sub eax, 0xb
jle 0x40248d
mov dword [ebp - 0xc], eax
mov dword [0x40bb64], 0xb
inc dword [0x40bb64]
imul eax, dword [0x40bb64], 0x100
mov esi, 0x409c3d
lea edi, [ebp - 0x10c]
call fcn.00401b30
imul ebx, dword [0x40bb64], 0x100
lea esi, [ebx + 0x407628]
call fcn.00401af0
lea edi, [eax + 0x407628]
lea esi, [ebp - 0x10c]
call fcn.00401940
dec dword [ebp - 0xc]
jne 0x402440
call fcn.00403f40
test eax, eax
jle 0x4024b9
lea eax, [ebp - 0x10c]
push eax
push 1
call fcn.00403bd0
mov edi, 0x40b324
lea esi, [ebp - 0x10c]
call fcn.00401940
jmp 0x4026f7
mov esi, 0x4074fd
lea edi, [ebp - 0x20c]
call fcn.00401b30
mov esi, 0x4073e0
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x10c]
call fcn.00401b30
mov esi, 0x4073ed
call fcn.00401af0
mov edi, 0x40b324
lea esi, [ebp - 0x10c]
call fcn.00401940
push 0x40ba18
push 0x40b325
call sub.kernel32.dll_FindFirstFileA
mov dword [0x40ba00], eax
cmp eax, 0xffffffff
je 0x4025a2
push eax
call sub.kernel32.dll_FindClose
mov esi, 0x4074fd
lea edi, [ebp - 0x20c]
call fcn.00401b30
mov esi, 0x4073ef
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x10c]
call fcn.00401b30
mov esi, 0x4073fa
call fcn.00401af0
mov edi, 0x40b324
lea esi, [ebp - 0x10c]
call fcn.00401940
push 0x40ba18
push 0x40b325
call sub.kernel32.dll_FindFirstFileA
mov dword [0x40ba00], eax
cmp eax, 0xffffffff
je 0x40258e
push eax
call sub.kernel32.dll_FindClose
mov edi, 0x40b324
mov esi, 0x4073fc
call fcn.00401940
jmp 0x40259d
mov edi, 0x40b324
mov esi, 0x407400
call fcn.00401940
jmp 0x4026f7
mov esi, 0x4074fd
lea edi, [ebp - 0x20c]
call fcn.00401b30
mov esi, 0x407404
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x10c]
call fcn.00401b30
mov esi, 0x40740f
call fcn.00401af0
mov edi, 0x40b324
lea esi, [ebp - 0x10c]
call fcn.00401940
push 0x40ba18
push 0x40b325
call sub.kernel32.dll_FindFirstFileA
mov dword [0x40ba00], eax
cmp eax, 0xffffffff
je 0x402688
push eax
call sub.kernel32.dll_FindClose
mov esi, 0x4074fd
lea edi, [ebp - 0x20c]
call fcn.00401b30
mov esi, 0x407411
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x10c]
call fcn.00401b30
mov esi, 0x40741d
call fcn.00401af0
mov edi, 0x40b324
lea esi, [ebp - 0x10c]
call fcn.00401940
push 0x40ba18
push 0x40b325
call sub.kernel32.dll_FindFirstFileA
mov dword [0x40ba00], eax
cmp eax, 0xffffffff
je 0x402677
push eax
call sub.kernel32.dll_FindClose
mov edi, 0x40b324
mov esi, 0x40741f
call fcn.00401940
jmp 0x402686
mov edi, 0x40b324
mov esi, 0x407423
call fcn.00401940
jmp 0x4026f7
mov esi, 0x4074fd
lea edi, [ebp - 0x20c]
call fcn.00401b30
mov esi, 0x407427
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x10c]
call fcn.00401b30
mov esi, 0x407433
call fcn.00401af0
mov edi, 0x40b324
lea esi, [ebp - 0x10c]
call fcn.00401940
push 0x40ba18
push 0x40b325
call sub.kernel32.dll_FindFirstFileA
mov dword [0x40ba00], eax
cmp eax, 0xffffffff
je 0x4026f7
push eax
call sub.kernel32.dll_FindClose
mov edi, 0x40b324
mov esi, 0x407435
call fcn.00401940
lea eax, [ebp - 0x10c]
push eax
push 0x40b324
call fcn.00403b50
lea ebx, [ebp - 0x10c]
push ebx
push 0x40b324
call fcn.00403b20
mov edi, 0x40b324
lea esi, [ebp - 0x10c]
call fcn.00401940
mov edi, 0x40b424
mov esi, 0x40b324
call fcn.00401940
mov edi, 0x407439
call fcn.00403b00
test al, al
je 0x40278c
mov esi, 0x4074fd
lea edi, [ebp - 0x20c]
call fcn.00401b30
mov esi, 0x40743d
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x10c]
call fcn.00401b30
mov esi, 0x40744c
call fcn.00401af0
mov edi, 0x40b324
lea esi, [ebp - 0x10c]
call fcn.00401940
jmp 0x40284d
mov edi, 0x40744e
call fcn.00403b00
test al, al
jne 0x4027a8
mov edi, 0x407452
call fcn.00403b00
test al, al
je 0x4027eb
mov esi, 0x4074fd
lea edi, [ebp - 0x20c]
call fcn.00401b30
mov esi, 0x407456
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x10c]
call fcn.00401b30
mov esi, 0x407464
call fcn.00401af0
mov edi, 0x40b324
lea esi, [ebp - 0x10c]
call fcn.00401940
jmp 0x40284d
mov esi, 0x40b324
mov edi, 0x407466
call fcn.00403b00
test al, al
je 0x402841
mov esi, 0x4074fd
lea edi, [ebp - 0x20c]
call fcn.00401b30
mov esi, 0x40746a
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x10c]
call fcn.00401b30
mov esi, 0x407478
call fcn.00401af0
mov edi, 0x40b324
lea esi, [ebp - 0x10c]
call fcn.00401940
jmp 0x40284d
mov edi, esi
mov esi, 0x40747a
call fcn.00401940
push 0x40ba18
push 0x40b325
call sub.kernel32.dll_FindFirstFileA
mov dword [0x40ba00], eax
cmp eax, 0xffffffff
je 0x40291e
push eax
call sub.kernel32.dll_FindClose
push 0x40b724
push 0x40b324
call fcn.00401e60
push 0x40b724
call fcn.00401ee0
push 0x40b724
call fcn.00403600
test al, al
jne 0x402914
push 0x40b724
push 0xff
push 0x40b324
call fcn.00403a80
call fcn.00403560
mov esi, 0x40b324
mov edi, 0x407491
call fcn.00403b00
test al, al
je 0x40290f
push 0x40b724
push 0xff
push 0x408628
call fcn.00403a80
call fcn.00403560
inc dword [0x40bb60]
mov esi, 0x408628
lea edi, [ebp - 0x10c]
call fcn.00401b30
mov esi, 0x408728
call fcn.00401af0
mov edi, esi
lea esi, [ebp - 0x10c]
call fcn.00401940
inc dword [0x40bb60]
jmp 0x402889
push 0x40b724
call fcn.00401d90
push 0x40b892
mov esi, 0x4074fd
lea edi, [ebp - 0x20c]
call fcn.00401b30
mov esi, 0x407498
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x10c]
call fcn.00401b30
mov esi, 0x40b424
call fcn.00401af0
mov eax, edi
push eax
call fcn.00401e60
push 0x40b892
call fcn.00401210
mov eax, 0
mov ebx, dword [0x40bb60]
sub ebx, eax
jl 0x4029d6
inc ebx
mov dword [ebp - 0x10], ebx
mov dword [0x40bb64], eax
jmp 0x402987
inc dword [0x40bb64]
push 0x40b892
imul eax, dword [0x40bb64], 0x100
lea eax, [eax + 0x408928]
push eax
push 0
call fcn.00403010
push 5
push 0x4074a0
push 0
call fcn.004030a0
imul eax, dword [0x40bb64], 0x100
lea eax, [eax + 0x407628]
push eax
push 0
call fcn.00403010
call fcn.00402e90
dec dword [ebp - 0x10]
jne 0x402981
push 0x40b892
push 0x1f
push 0x4074a5
push 0
call fcn.004030a0
call fcn.00402e90
mov eax, 0
mov ebx, dword [0x40bb60]
sub ebx, eax
jl 0x402dcb
inc ebx
mov dword [ebp - 0x14], ebx
mov dword [0x40bb64], eax
jmp 0x402a13
inc dword [0x40bb64]
push 0x40b892
push 3
push 0x4074c4
push 0
call fcn.004030a0
imul eax, dword [0x40bb64], 0x100
lea eax, [eax + 0x408928]
push eax
push 0
call fcn.00403010
call fcn.00402e90
imul ebx, dword [0x40bb64], 0x100
lea esi, [ebx + 0x407628]
lea edi, [ebp - 0x214]
call fcn.00401b30
mov esi, 0x4074c7
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x114]
call fcn.00401b30
mov esi, 0x4074cb
call fcn.00401af0
mov edi, 0x40b324
lea esi, [ebp - 0x114]
call fcn.00401940
push 0x40ba18
push 0x40b325
call sub.kernel32.dll_FindFirstFileA
mov dword [0x40ba00], eax
cmp eax, 0xffffffff
je 0x402dc2
lea ebx, [ebp - 0x114]
push ebx
push 0x40ba44
call fcn.00403510
lea esi, [ebp - 0x114]
mov edi, 0x4074cd
call fcn.00403540
test al, al
je 0x402c24
lea eax, [ebp - 0x214]
push eax
push 0x40ba44
call fcn.00403510
lea esi, [ebp - 0x214]
mov edi, 0x4074cf
call fcn.00403540
test al, al
je 0x402c24
cmp dword [0x40ba18], 0x10
je 0x402c24
push 0x40b892
lea eax, [ebp - 0x314]
push eax
push 0x40ba44
call fcn.00403510
lea ebx, [ebp - 0x314]
push ebx
push 0
call fcn.00403010
call fcn.00402e90
push 0x40bb58
push 0x40ba2c
call sub.kernel32.dll_FileTimeToLocalFileTime
push 0x40ba04
push 0x40bb58
call sub.kernel32.dll_FileTimeToSystemTime
push 0x40b892
push 0x40b892
sub esp, 8
mov esi, 0x40ba2c
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0
call fcn.00403100
push 1
push 0x4074d2
push 0
call fcn.004030a0
movzx eax, word [0x40ba0a]
push eax
push 2
call fcn.00402f70
push 1
push 0x4074d3
push 0
call fcn.004030a0
movzx eax, word [0x40ba06]
push eax
push 2
call fcn.00402f70
push 1
push 0x4074d4
push 0
call fcn.004030a0
movzx eax, word [0x40ba04]
push eax
push 0
call fcn.00402f70
push 1
push 0x4074d5
push 0
call fcn.004030a0
movzx eax, word [0x40ba0c]
push eax
push 2
call fcn.00402f70
push 1
push 0x4074d6
push 0
call fcn.004030a0
movzx eax, word [0x40ba0e]
push eax
push 2
call fcn.00402f70
push 1
push 0x4074d7
push 0
call fcn.004030a0
movzx eax, word [0x40ba10]
push eax
push 2
call fcn.00402f70
call fcn.00402e90
push 0x40ba18
push dword [0x40ba00]
call sub.kernel32.dll_FindNextFileA
test al, al
je 0x402db7
lea eax, [ebp - 0x314]
push eax
push 0x40ba44
call fcn.00403510
lea esi, [ebp - 0x314]
mov edi, 0x4074d8
call fcn.00403540
test al, al
je 0x402db2
lea eax, [ebp - 0x414]
push eax
push 0x40ba44
call fcn.00403510
lea esi, [ebp - 0x414]
mov edi, 0x4074da
call fcn.00403540
test al, al
je 0x402db2
cmp dword [0x40ba18], 0x10
je 0x402db2
push 0x40b892
lea eax, [ebp - 0x514]
push eax
push 0x40ba44
call fcn.00403510
lea ebx, [ebp - 0x514]
push ebx
push 0
call fcn.00403010
call fcn.00402e90
push 0x40bb58
push 0x40ba2c
call sub.kernel32.dll_FileTimeToLocalFileTime
push 0x40ba04
push 0x40bb58
call sub.kernel32.dll_FileTimeToSystemTime
push 0x40b892
push 0x40b892
sub esp, 8
mov esi, 0x40ba2c
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0
call fcn.00403100
push 1
push 0x4074dd
push 0
call fcn.004030a0
movzx eax, word [0x40ba0a]
push eax
push 2
call fcn.00402f70
push 1
push 0x4074de
push 0
call fcn.004030a0
movzx eax, word [0x40ba06]
push eax
push 2
call fcn.00402f70
push 1
push 0x4074df
push 0
call fcn.004030a0
movzx eax, word [0x40ba04]
push eax
push 0
call fcn.00402f70
push 1
push 0x4074e0
push 0
call fcn.004030a0
movzx eax, word [0x40ba0c]
push eax
push 2
call fcn.00402f70
push 1
push 0x4074e1
push 0
call fcn.004030a0
movzx eax, word [0x40ba0e]
push eax
push 2
call fcn.00402f70
push 1
push 0x4074e2
push 0
call fcn.004030a0
movzx eax, word [0x40ba10]
push eax
push 2
call fcn.00402f70
call fcn.00402e90
jmp 0x402c24
push dword [0x40ba00]
call sub.kernel32.dll_FindClose
dec dword [ebp - 0x14]
jne 0x402a0d
push 0x40b892
call fcn.00401d90
mov esi, 0x4074fd
lea edi, [ebp - 0x714]
call fcn.00401b30
mov esi, 0x4074e3
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x614]
call fcn.00401b30
mov esi, 0x40b424
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x514]
call fcn.00401b30
mov esi, 0x4074eb
call fcn.00401af0
mov eax, edi
push eax
call fcn.00402e30
pop edx
pop ecx
pop ebx
leave
pop ebp
ret