Function at 0x413a85
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0xdac
mov dword [esp], 0x8003
mov esi, dword [esp + 0xdc0]
mov bl, byte [esp + 0xdc8]
call sub.KERNEL32.dll_SetErrorMode
push edi
lea ebp, [esp + 0x340]
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0x4245c4
mov dword [esp + 4], 0x204
mov dword [esp], ebp
call fcn.004127a8
inc eax
je 0x413d43
lea edi, [esp + 0x998]
mov dword [esp + 8], ebp
mov dword [esp + 0x14], 0x204
mov dword [esp + 0xc], 0x204
mov dword [esp + 4], 0
mov dword [esp + 0x10], edi
mov dword [esp], 0xfde9
call sub.KERNEL32.dll_MultiByteToWideChar
sub esp, 0x18
lea eax, [esp + 0x748]
mov dword [esp], edi
mov dword [esp + 4], eax
call sub.KERNEL32.dll_FindFirstFileW
cmp eax, 0xffffffff
push ecx
mov ebp, eax
push ecx
je 0x413d43
movzx eax, bl
lea edi, [esp + 0x774]
mov dword [esp + 0x24], eax
mov dword [esp + 4], 0x4245c8
mov dword [esp], edi
call fcn.00412861
test eax, eax
je 0x413d0d
mov dword [esp + 4], 0x4245ca
mov dword [esp], edi
call fcn.00412861
test eax, eax
je 0x413d0d
test byte [esp + 0x748], 0x10
je 0x413c56
lea ebx, [esp + 0x38]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x104
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 0x10], ebx
mov dword [esp + 8], edi
mov dword [esp + 4], 0
mov dword [esp], 0xfde9
call sub.KERNEL32.dll_WideCharToMultiByte
sub esp, 0x20
mov eax, dword [esp + 0x748]
lea edx, [esp + 0x13c]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x10], esi
mov dword [esp + 8], str._d:_s_s_
mov dword [esp + 4], 0x204
mov dword [esp], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x28], edx
call fcn.004127a8
cmp eax, 0xffffffff
je 0x413c0f
mov dword [esp + 8], eax
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0xdc4]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00412458
mov dword [esp + 0x10], ebx
lea ebx, [esp + 0x544]
mov dword [esp + 0xc], esi
mov dword [esp + 8], str._s_s_
mov dword [esp + 4], 0x204
mov dword [esp], ebx
call fcn.004127a8
mov eax, dword [esp + 0x24]
mov dword [esp], ebx
mov dword [esp + 8], eax
mov eax, dword [esp + 0xdc4]
mov dword [esp + 4], eax
call fcn.00413a85
jmp 0x413d0d
lea ebx, [esp + 0x38]
mov ecx, dword [esp + 0x768]
mov edx, dword [esp + 0x764]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], 0x104
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 8], edi
mov dword [esp + 4], 0
mov dword [esp], 0xfde9
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x28], edx
call sub.KERNEL32.dll_WideCharToMultiByte
sub esp, 0x20
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x748]
mov dword [esp + 0x1c], ebx
lea ebx, [esp + 0x13c]
mov dword [esp + 0x18], esi
mov dword [esp + 8], str._d:_I64u:_s_s_
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov dword [esp + 0xc], eax
mov dword [esp + 4], 0x204
mov dword [esp], ebx
call fcn.004127a8
cmp eax, 0xffffffff
je 0x413d0d
mov dword [esp + 8], eax
mov eax, dword [esp + 0xdc4]
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.00412458
lea eax, [esp + 0x748]
mov dword [esp], ebp
mov dword [esp + 4], eax
call sub.KERNEL32.dll_FindNextFileW
test eax, eax
push edx
push edx
je 0x413d3a
mov eax, dword [esp + 0x24]
mov dword [esp], eax
call fcn.00413a0f
test al, al
jne 0x413b38
mov dword [esp], ebp
call sub.KERNEL32.dll_FindClose
push eax
add esp, 0xdac
pop ebx
pop esi
pop edi
pop ebp
ret