Function at 0x40c160
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x436bee
mov eax, dword fs:[0]
push eax
sub esp, 0x214
mov eax, dword [0x45906c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x28]
call fcn.004036e0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x21c]
push ecx
lea ecx, [ebp - 0x28]
call fcn.0040eb50
mov ecx, eax
call fcn.0040ea80
movsx edx, byte [eax]
cmp edx, 0x5c
je 0x40c1e7
lea eax, [ebp - 0x220]
push eax
lea ecx, [ebp - 0x28]
call fcn.0040eb50
mov ecx, eax
call fcn.0040ea80
movsx ecx, byte [eax]
cmp ecx, 0x2f
je 0x40c1e7
push 0x44c9d0
lea ecx, [ebp - 0x28]
call fcn.004034c0
push 0x44c9d4
lea ecx, [ebp - 0x28]
call fcn.004034c0
lea edx, [ebp - 0x1f8]
push edx
lea ecx, [ebp - 0x28]
call fcn.00403470
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0xffffffff
jne 0x40c23a
mov byte [ebp - 0x1f9], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.00403550
mov al, byte [ebp - 0x1f9]
jmp 0x40c41c
lea ecx, [ebp - 0x58]
call fcn.00403690
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x40]
call fcn.00403690
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x1f8]
and eax, 0x10
je 0x40c325
mov ecx, 1
imul edx, ecx, 0
movsx eax, byte [ebp + edx - 0x1cc]
cmp eax, 0x2e
jne 0x40c298
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x40]
call fcn.00403550
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x58]
call fcn.00403550
jmp 0x40c3d7
lea ecx, [ebp - 0x28]
call fcn.00403b50
sub eax, 3
push eax
push 0
lea ecx, [ebp - 0x88]
push ecx
lea ecx, [ebp - 0x28]
call fcn.0040eb00
mov dword [ebp - 0x204], eax
mov edx, dword [ebp - 0x204]
mov dword [ebp - 0x208], edx
mov byte [ebp - 4], 3
lea eax, [ebp - 0x1cc]
push eax
mov ecx, dword [ebp - 0x208]
push ecx
lea edx, [ebp - 0x70]
push edx
call fcn.004104f0
add esp, 0xc
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp - 0x20c]
push eax
lea ecx, [ebp - 0x58]
call fcn.00407f30
lea ecx, [ebp - 0x70]
call fcn.00403550
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x88]
call fcn.00403550
lea ecx, [ebp - 0x1cc]
push ecx
lea ecx, [ebp - 0x40]
call fcn.00403530
jmp 0x40c3b3
lea ecx, [ebp - 0x28]
call fcn.00403b50
sub eax, 3
push eax
push 0
lea edx, [ebp - 0xb8]
push edx
lea ecx, [ebp - 0x28]
call fcn.0040eb00
mov dword [ebp - 0x210], eax
mov eax, dword [ebp - 0x210]
mov dword [ebp - 0x214], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1cc]
push ecx
mov edx, dword [ebp - 0x214]
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.004104f0
add esp, 0xc
mov dword [ebp - 0x218], eax
mov ecx, dword [ebp - 0x218]
push ecx
lea ecx, [ebp - 0x58]
call fcn.00407f30
lea ecx, [ebp - 0xa0]
call fcn.00403550
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xb8]
call fcn.00403550
lea edx, [ebp - 0x1cc]
push edx
lea ecx, [ebp - 0x40]
call fcn.00403530
lea eax, [ebp - 0x40]
push eax
mov ecx, dword [ebp + 0xc]
call fcn.0040c440
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x40]
call fcn.00403550
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x58]
call fcn.00403550
lea ecx, [ebp - 0x1f8]
push ecx
mov edx, dword [ebp - 0x200]
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x40c23a
mov eax, dword [ebp - 0x200]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov byte [ebp - 0x1fa], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.00403550
mov al, byte [ebp - 0x1fa]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004151bc
mov esp, ebp
pop ebp
ret