Function at 0x41aebb
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x160
mov eax, dword [0x5385d0]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 0x14]
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
xor esi, esi
push 0x13c
mov dword [ebp - 0x15c], eax
lea eax, [ebp - 0x148]
push esi
push eax
mov dword [ebp - 0x14c], esi
call fcn.004b7880
add esp, 0xc
mov edx, edi
mov dword [ebp - 0x154], esi
call fcn.0047ebaf
test eax, eax
je 0x41af1c
xor eax, eax
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004b7140
leave
ret
push 1
mov ebx, 0x71c
push ebx
call fcn.004b66ca
mov esi, eax
test esi, esi
pop ecx
pop ecx
mov dword [ebp - 0x150], esi
je 0x41af0b
push 1
push ebx
call fcn.004b66ca
test eax, eax
pop ecx
pop ecx
mov dword [ebp - 0x158], eax
jne 0x41af54
push esi
call fcn.004b651e
pop ecx
jmp 0x41af0b
push edi
mov ecx, ebx
mov eax, esi
call fcn.0047ebe1
pop ecx
mov edx, esi
call fcn.0047f68c
call fcn.0047f72c
push 0x22
mov edi, esi
call fcn.0047f566
pop ecx
push esi
call fcn.0041c6ac
test eax, eax
pop ecx
je 0x41afb6
mov edi, 0x4d6ddc
push edi
push esi
call fcn.004b6b90
test eax, eax
pop ecx
pop ecx
jne 0x41afb6
push esi
call fcn.004b68f0
cmp byte [eax + esi - 1], 0x5c
pop ecx
je 0x41afad
push 0x4e1ce8
mov eax, ebx
call fcn.0047ecb1
pop ecx
push edi
mov eax, ebx
call fcn.0047ecb1
pop ecx
lea eax, [ebp - 0x14c]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp eax, 0xffffffff
mov dword [ebp - 0x160], eax
jne 0x41afeb
xor edi, edi
push esi
call fcn.004b651e
pop ecx
push dword [ebp - 0x158]
call fcn.004b651e
pop ecx
mov eax, edi
jmp 0x41af0d
mov edi, 0x104
lea edx, [ebp - 0x120]
call fcn.0047ebaf
test eax, eax
jne 0x41b092
cmp byte [ebp - 0x120], 0x2e
je 0x41b092
cmp dword [ebp + 0xc], eax
je 0x41b01e
test byte [ebp - 0x14c], 2
jne 0x41b092
test byte [ebp - 0x14c], 0x10
jne 0x41b092
inc dword [ebp - 0x154]
cmp dword [ebp - 0x15c], 0
je 0x41b092
mov esi, dword [ebp - 0x158]
lea eax, [ebp - 0x120]
push eax
mov ecx, ebx
mov eax, esi
call fcn.0047ebe1
pop ecx
push dword [ebp - 0x150]
mov ecx, edi
lea eax, [ebp - 0x120]
call fcn.0047ebe1
pop ecx
call fcn.0047ef21
mov edx, eax
mov ecx, esi
call fcn.0047f16b
push esi
mov ecx, edi
lea eax, [ebp - 0x120]
call fcn.0047ebe1
pop ecx
push dword [ebp + 0x18]
lea eax, [ebp - 0x14c]
push eax
call dword [ebp - 0x15c]
test eax, eax
je 0x41b0b3
lea eax, [ebp - 0x14c]
push eax
push dword [ebp - 0x160]
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x41aff0
mov esi, dword [ebp - 0x158]
push dword [ebp - 0x160]
mov ebx, dword [sym.imp.KERNEL32.dll_FindClose]
call ebx
cmp dword [ebp + 0x10], 0
je 0x41b180
push dword [ebp - 0x150]
push esi
call fcn.004b6c20
mov eax, esi
call fcn.0047ef21
push 0x4d6ddc
push esi
call fcn.004b6c30
add esp, 0x10
lea eax, [ebp - 0x14c]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov edi, eax
cmp edi, 0xffffffff
je 0x41b180
lea edx, [ebp - 0x120]
call fcn.0047ebaf
test eax, eax
jne 0x41b16b
cmp byte [ebp - 0x120], 0x2e
je 0x41b16b
cmp dword [ebp + 0xc], eax
je 0x41b127
test byte [ebp - 0x14c], 2
jne 0x41b16b
test byte [ebp - 0x14c], 0x10
je 0x41b16b
push dword [ebp - 0x150]
push esi
call fcn.004b6c20
lea eax, [ebp - 0x120]
push eax
mov ecx, esi
call fcn.0047f054
add esp, 0xc
push dword [ebp + 0x18]
push dword [ebp - 0x15c]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push esi
call fcn.0041aebb
add esp, 0x14
add dword [ebp - 0x154], eax
lea eax, [ebp - 0x14c]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x41b101
push edi
call ebx
mov edi, dword [ebp - 0x154]
mov esi, dword [ebp - 0x150]
jmp 0x41afd1