Function at 0x41160c
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x54
push 0
push 0
dec ecx
jne 0x411615
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
lea eax, [ebp - 4]
call fcn.00404150
lea eax, [ebp - 8]
call fcn.00404150
lea eax, [ebp - 0xc]
call fcn.00404150
xor eax, eax
push ebp
push 0x41195e
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x268]
mov ecx, 0x411978
mov edx, dword [ebp - 4]
call fcn.00403e14
mov eax, dword [ebp - 0x268]
call fcn.00403d98
push eax
call sub.kernel32.dll_FindFirstFileW
mov dword [ebp - 0x14], eax
push dword [ebp - 4]
push 0x411988
lea eax, [ebp - 0x270]
lea edx, [ebp - 0x238]
mov ecx, 0x104
call fcn.00403d6c
push dword [ebp - 0x270]
push 0x411988
mov eax, dword [0x41b180]
push dword [eax]
lea eax, [ebp - 0x26c]
mov edx, 5
call fcn.00403e78
mov eax, dword [ebp - 0x26c]
call fcn.0040776c
test al, al
je 0x4118a6
xor eax, eax
push ebp
push 0x41189c
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [ebp + 8], 0
jne 0x4117b2
push dword [ebp - 4]
push 0x411988
lea eax, [ebp - 0x280]
lea edx, [ebp - 0x238]
mov ecx, 0x104
call fcn.00403d6c
push dword [ebp - 0x280]
push 0x411988
mov eax, dword [0x41b180]
push dword [eax]
lea eax, [ebp - 0x27c]
mov edx, 5
call fcn.00403e78
mov eax, dword [ebp - 0x27c]
lea edx, [ebp - 0x278]
call fcn.00411034
mov edx, dword [ebp - 0x278]
lea eax, [ebp - 0x274]
call fcn.0040377c
mov eax, dword [ebp - 0x274]
push eax
push dword [ebp - 0xc]
push 0x411988
push dword [ebp - 8]
push 0x411990
lea eax, [ebp - 0x28c]
lea edx, [ebp - 0x238]
mov ecx, 0x104
call fcn.00403d6c
push dword [ebp - 0x28c]
push 0x411998
lea eax, [ebp - 0x288]
mov edx, 6
call fcn.00403e78
mov edx, dword [ebp - 0x288]
lea eax, [ebp - 0x284]
call fcn.0040377c
mov edx, dword [ebp - 0x284]
pop eax
call fcn.0040e6d4
cmp dword [ebp + 8], 0
jne 0x411892
push dword [ebp - 4]
push 0x411988
lea eax, [ebp - 0x29c]
lea edx, [ebp - 0x238]
mov ecx, 0x104
call fcn.00403d6c
push dword [ebp - 0x29c]
push 0x411988
mov eax, dword [0x41b180]
push dword [eax]
lea eax, [ebp - 0x298]
mov edx, 5
call fcn.00403e78
mov eax, dword [ebp - 0x298]
lea edx, [ebp - 0x294]
call fcn.004112d0
mov edx, dword [ebp - 0x294]
lea eax, [ebp - 0x290]
call fcn.0040377c
mov eax, dword [ebp - 0x290]
push eax
push dword [ebp - 0xc]
push 0x411988
push dword [ebp - 8]
push 0x411990
lea eax, [ebp - 0x2a8]
lea edx, [ebp - 0x238]
mov ecx, 0x104
call fcn.00403d6c
push dword [ebp - 0x2a8]
push 0x411990
push 0x4119a8
push 0x4119a8
push 0x411998
lea eax, [ebp - 0x2a4]
mov edx, 9
call fcn.00403e78
mov edx, dword [ebp - 0x2a4]
lea eax, [ebp - 0x2a0]
call fcn.0040377c
mov edx, dword [ebp - 0x2a0]
pop eax
call fcn.0040e6d4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4118a6
lea eax, [ebp - 0x264]
push eax
mov eax, dword [ebp - 0x14]
push eax
call sub.kernel32.dll_FindNextFileW
test eax, eax
jne 0x411680
mov eax, dword [ebp - 0x14]
push eax
call sub.kernel32.dll_FindClose
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x411968
lea eax, [ebp - 0x2a8]
mov edx, 2
call fcn.00403bf4
lea eax, [ebp - 0x2a0]
call fcn.004034e4
lea eax, [ebp - 0x29c]
mov edx, 3
call fcn.00403bf4
lea eax, [ebp - 0x290]
call fcn.004034e4
lea eax, [ebp - 0x28c]
mov edx, 2
call fcn.00403bf4
lea eax, [ebp - 0x284]
call fcn.004034e4
lea eax, [ebp - 0x280]
mov edx, 3
call fcn.00403bf4
lea eax, [ebp - 0x274]
call fcn.004034e4
lea eax, [ebp - 0x270]
mov edx, 3
call fcn.00403bf4
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00403bf4
ret