Function at 0x40767f
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1494
call fcn.00409640
push esi
push edi
push dword [ebp + 8]
lea eax, [ebp - 0xc94]
mov dword [ebp - 4], ecx
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0xc94]
push 0x417120
push eax
call sub.MSVCRT.dll_strcat
lea eax, [ebp - 0xc94]
push eax
lea eax, [ebp - 0x1094]
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x1094]
push 0x418650
push eax
call sub.MSVCRT.dll_strcat
add esp, 0x20
lea eax, [ebp - 0x294]
push eax
lea eax, [ebp - 0x1094]
push eax
call dword [sym.imp.KERNEL32.DLL_FindFirstFileA]
mov dword [ebp + 8], eax
lea eax, [ebp - 0x294]
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
test eax, eax
je 0x407b32
mov eax, dword [ebp - 4]
inc dword [eax + 0xd0]
lea eax, [ebp - 0x268]
push eax
push 0x41864c
call sub.MSVCRT.dll_strcmp
pop ecx
test eax, eax
pop ecx
je 0x4076ef
lea eax, [ebp - 0x268]
push eax
push 0x418648
call sub.MSVCRT.dll_strcmp
pop ecx
test eax, eax
pop ecx
je 0x4076ef
lea eax, [ebp - 0x268]
xor edi, edi
push eax
call sub.MSVCRT.dll_strlen
test eax, eax
pop ecx
jbe 0x407790
movsx eax, byte [ebp + edi - 0x268]
lea esi, [ebp + edi - 0x268]
push eax
call dword [sym.imp.MSVCRT.dll_isalnum]
test eax, eax
pop ecx
jne 0x40777e
mov al, byte [esi]
cmp al, 0x2e
je 0x40777e
cmp al, 0x20
je 0x40777e
cmp al, 0x7e
jne 0x4076ef
lea eax, [ebp - 0x268]
inc edi
push eax
call sub.MSVCRT.dll_strlen
cmp edi, eax
pop ecx
jb 0x407751
mov eax, dword [ebp - 4]
lea esi, [eax + 0xc8]
cmp dword [esi], 0
je 0x4077ab
push 0x3e8
call dword [sym.imp.KERNEL32.DLL_Sleep]
jmp 0x407799
lea eax, [ebp - 0xc94]
push eax
lea eax, [ebp - 0x894]
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x268]
push eax
lea eax, [ebp - 0x894]
push eax
call sub.MSVCRT.dll_strcat
add esp, 0x10
test byte [ebp - 0x294], 0x10
je 0x4077f3
mov ecx, dword [ebp - 4]
lea eax, [ebp - 0x894]
push 0
push eax
call fcn.0040767f
jmp 0x4076ef
lea eax, [ebp - 0x894]
push eax
lea eax, [ebp - 0x394]
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x394]
xor edi, edi
push eax
call sub.MSVCRT.dll_strlen
add esp, 0xc
inc eax
je 0x407844
lea esi, [ebp - 0x494]
mov al, byte [ebp + edi - 0x394]
cmp al, 0x5c
mov byte [esi], al
jne 0x407830
inc esi
mov byte [esi], al
lea eax, [ebp - 0x394]
inc esi
push eax
inc edi
call sub.MSVCRT.dll_strlen
inc eax
pop ecx
cmp edi, eax
jb 0x407820
lea eax, [ebp - 0x268]
push eax
lea eax, [ebp - 0x154]
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x154]
push eax
call dword [sym.imp.MSVCRT.dll__strlwr]
lea eax, [ebp - 0x154]
push eax
call fcn.00401ef7
mov esi, eax
add esp, 0x10
test esi, esi
je 0x4076ef
lea eax, [ebp - 0x154]
push str..jpg
push eax
call fcn.00407b41
pop ecx
test eax, eax
pop ecx
jne 0x407977
lea eax, [ebp - 0x154]
push str..jpeg
push eax
call fcn.00407b41
pop ecx
test eax, eax
pop ecx
jne 0x407977
lea eax, [ebp - 0x154]
push str..mpg
push eax
call fcn.00407b41
pop ecx
test eax, eax
pop ecx
jne 0x407977
lea eax, [ebp - 0x154]
push str..mpeg
push eax
call fcn.00407b41
pop ecx
test eax, eax
pop ecx
jne 0x407977
lea eax, [ebp - 0x154]
push str..avi
push eax
call fcn.00407b41
pop ecx
test eax, eax
pop ecx
jne 0x407977
lea eax, [ebp - 0x154]
push str..tiff
push eax
call fcn.00407b41
pop ecx
test eax, eax
pop ecx
jne 0x407977
lea eax, [ebp - 0x154]
push str..mp3
push eax
call fcn.00407b41
pop ecx
test eax, eax
pop ecx
jne 0x407977
lea eax, [ebp - 0x154]
push str..gif
push eax
call fcn.00407b41
pop ecx
test eax, eax
pop ecx
jne 0x407977
lea eax, [ebp - 0x154]
push str..png
push eax
call fcn.00407b41
pop ecx
test eax, eax
pop ecx
jne 0x407977
lea eax, [ebp - 0x154]
push str..ram
push eax
call fcn.00407b41
pop ecx
test eax, eax
pop ecx
je 0x4076ef
lea eax, [ebp - 0x154]
push str..jpg
push eax
call fcn.00407b41
pop ecx
test eax, eax
pop ecx
je 0x40799e
lea eax, [ebp - 0x54]
push str.JPEG_image
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
lea eax, [ebp - 0x154]
push str..jpeg
push eax
call fcn.00407b41
pop ecx
test eax, eax
pop ecx
je 0x4079c5
lea eax, [ebp - 0x54]
push str.JPEG_image
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
lea eax, [ebp - 0x154]
push str..mpg
push eax
call fcn.00407b41
pop ecx
test eax, eax
pop ecx
je 0x4079ec
lea eax, [ebp - 0x54]
push str.MPEG_movie
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
lea eax, [ebp - 0x154]
push str..mpeg
push eax
call fcn.00407b41
pop ecx
test eax, eax
pop ecx
je 0x407a13
lea eax, [ebp - 0x54]
push str.MPEG_movie
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
lea eax, [ebp - 0x154]
push str..avi
push eax
call fcn.00407b41
pop ecx
test eax, eax
pop ecx
je 0x407a3a
lea eax, [ebp - 0x54]
push str.AVI_movie
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
lea eax, [ebp - 0x154]
push str..tiff
push eax
call fcn.00407b41
pop ecx
test eax, eax
pop ecx
je 0x407a61
lea eax, [ebp - 0x54]
push str.TIFF_image
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
lea eax, [ebp - 0x154]
push str..mp3
push eax
call fcn.00407b41
pop ecx
test eax, eax
pop ecx
je 0x407a88
lea eax, [ebp - 0x54]
push str.MP3_music
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
lea eax, [ebp - 0x154]
push str..gif
push eax
call fcn.00407b41
pop ecx
test eax, eax
pop ecx
je 0x407aaf
lea eax, [ebp - 0x54]
push str.GIF_image
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
lea eax, [ebp - 0x154]
push str..png
push eax
call fcn.00407b41
pop ecx
test eax, eax
pop ecx
je 0x407ad6
lea eax, [ebp - 0x54]
push str.PNG_image
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
lea eax, [ebp - 0x154]
push str..ram
push eax
call fcn.00407b41
pop ecx
test eax, eax
pop ecx
je 0x407afd
lea eax, [ebp - 0x54]
push str.RealTime_movie
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
lea eax, [ebp - 0x268]
push esi
push eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x1494]
push str.file_type:__s__title:__s__contains_word:__s
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
mov ecx, dword [ebp - 4]
add esp, 0x14
lea eax, [ebp - 0x1494]
push eax
call fcn.00407fc5
jmp 0x4076ef
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindClose]
pop edi
pop esi
leave
ret 8