Function at 0x411468
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov dword [ebp - 4], 0
push 0x34
call fcn.004b7848
add esp, 4
mov dword [ebp - 8], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 0xd
rep stosd dword es:[edi], eax
add ebx, 4
push ebx
push 8
call fcn.004b7848
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
pop ebx
add ebx, 4
push ebx
push 8
call fcn.004b7848
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
pop ebx
add ebx, 4
push ebx
push 8
call fcn.004b7848
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
pop ebx
add ebx, 0x14
push ebx
push 0x210
call fcn.004b7848
add esp, 4
pop ebx
mov dword [ebx], eax
mov edi, eax
mov esi, 0x5d43c8
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
xor eax, eax
mov ecx, 0x82
rep stosd dword es:[edi], eax
add ebx, 4
push ebx
push 0x24
call fcn.004b7848
add esp, 4
pop ebx
mov dword [ebx], eax
mov edi, eax
mov esi, 0x5d43d0
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
xor eax, eax
mov ecx, 7
rep stosd dword es:[edi], eax
mov dword [ebp - 0xc], 0
push 0x5d4480
mov ebx, dword [ebp + 8]
push dword [ebx]
mov ecx, 2
call fcn.004016eb
add esp, 8
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
lea eax, [ebp - 0x10]
push eax
call fcn.00412048
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x41159d
push ebx
call fcn.004b784e
add esp, 4
mov dword [ebp - 0x1c], esp
mov eax, dword [ebp - 8]
push eax
push 0x25c
call fcn.004b7848
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x208
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x1c
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x411692
add eax, 8
push eax
call sub.KERNEL32.DLL_FindFirstFileW
cmp dword [ebp - 0x1c], esp
je 0x4116b4
push 0x6b
push 0x417fd9a
push 6
call fcn.004b785a
add esp, 0xc
push eax
mov ebx, dword [ebp - 0x20]
push ebx
mov edi, dword [ebp - 0x24]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 8
pop edi
add edi, 4
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 8
pop edi
add edi, 4
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 8
pop edi
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.004b7842
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x411786
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x411784
imul eax, dword [edi]
jmp 0x411779
mov ecx, eax
cmp ecx, 0x208
jle 0x411793
mov ecx, 0x208
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x208
push ebx
push edi
push 1
mov eax, 2
call fcn.004b7842
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x4117d1
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x4117cf
imul eax, dword [edi]
jmp 0x4117c4
mov ecx, eax
cmp ecx, 0x1c
jle 0x4117db
mov ecx, 0x1c
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x1c
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
call fcn.004b784e
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x411821
push ebx
call fcn.004b784e
add esp, 4
mov eax, dword [ebp - 0x28]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jle 0x411fc5
mov ebx, dword [ebp - 8]
add ebx, 0x20
mov dword [ebp - 0x10], ebx
push 0xa0000101
push 0
mov ebx, dword [ebp - 0x10]
push dword [ebx]
push 1
mov ebx, 0x4b93a0
call fcn.004b7854
add esp, 0x10
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
call fcn.004121ec
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x411877
push ebx
call fcn.004b784e
add esp, 4
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x41188b
push ebx
call fcn.004b784e
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push dword [ebp - 0xc]
push 0x5d447c
mov ebx, dword [ebp + 8]
push dword [ebx]
mov ecx, 3
call fcn.004016eb
add esp, 0xc
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
call fcn.00412574
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4118c8
push ebx
call fcn.004b784e
add esp, 4
cmp dword [ebp - 0x14], 1
jne 0x41190b
push 0x5d4484
push dword [ebp - 0xc]
call fcn.0040182c
add esp, 8
cmp eax, 0
je 0x41190b
push 0x5d4488
push dword [ebp - 0xc]
call fcn.0040182c
add esp, 8
cmp eax, 0
je 0x41190b
mov eax, 1
jmp 0x411910
mov eax, 0
test eax, eax
je 0x411aaa
cmp dword [ebp + 0x10], 1
jne 0x4119e0
push dword [ebp - 0xc]
push 0x5d447c
mov ebx, dword [ebp + 8]
push dword [ebx]
mov ecx, 3
call fcn.004016eb
add esp, 0xc
mov dword [ebp - 0x10], eax
push dword [ebp + 0xc]
push 4
mov eax, 2
call fcn.004b7842
add esp, 8
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
mov dword [ebp - 0x18], ebx
call fcn.00403718
mov dword [ebp - 0x1c], ecx
mov edi, dword [ebp - 0x18]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x411983
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x1c]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x18]
call fcn.004b7866
add esp, 8
mov ebx, dword [ebp + 0xc]
mov dword [ebx], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x1c]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x14]
push edi
test eax, eax
je 0x4119c8
push eax
mov ebx, eax
call fcn.00401680
inc eax
push eax
call fcn.004b7848
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4119db
push ebx
call fcn.004b784e
add esp, 4
jmp 0x411a6c
push dword [ebp + 0xc]
push 4
mov eax, 2
call fcn.004b7842
add esp, 8
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
mov dword [ebp - 0x14], ebx
call fcn.00403718
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x411a24
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.004b7866
add esp, 8
mov ebx, dword [ebp + 0xc]
mov dword [ebx], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x411a69
push eax
mov ebx, eax
call fcn.00401680
inc eax
push eax
call fcn.004b7848
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
push dword [ebp - 0xc]
push 0x5d447c
mov ebx, dword [ebp + 8]
push dword [ebx]
mov ecx, 3
call fcn.004016eb
add esp, 0xc
mov dword [ebp - 0x10], eax
push 1
push dword [ebp + 0xc]
lea eax, [ebp - 0x10]
push eax
call fcn.00411468
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x411aaa
push ebx
call fcn.004b784e
add esp, 4
mov dword [ebp - 0x10], esp
mov eax, dword [ebp - 8]
push eax
push 0x25c
call fcn.004b7848
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x208
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x1c
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push dword [ebp - 4]
call sub.KERNEL32.DLL_FindNextFileW
cmp dword [ebp - 0x10], esp
je 0x411bb9
push 0x45f
push 0x417fd9a
push 6
call fcn.004b785a
add esp, 0xc
push eax
mov ebx, dword [ebp - 0x14]
push ebx
mov edi, dword [ebp - 0x18]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 8
pop edi
add edi, 4
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 8
pop edi
add edi, 4
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 8
pop edi
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.004b7842
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x411c8b
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x411c89
imul eax, dword [edi]
jmp 0x411c7e
mov ecx, eax
cmp ecx, 0x208
jle 0x411c98
mov ecx, 0x208
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x208
push ebx
push edi
push 1
mov eax, 2
call fcn.004b7842
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x411cd6
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x411cd4
imul eax, dword [edi]
jmp 0x411cc9
mov ecx, eax
cmp ecx, 0x1c
jle 0x411ce0
mov ecx, 0x1c
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x1c
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
call fcn.004b784e
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jne 0x411f9e
mov ebx, dword [ebp - 8]
add ebx, 0x20
mov dword [ebp - 0x10], ebx
push 0xa0000101
push 0
mov ebx, dword [ebp - 0x10]
push dword [ebx]
push 1
mov ebx, 0x4b93a0
call fcn.004b7854
add esp, 0x10
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
call fcn.004121ec
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x411d66
push ebx
call fcn.004b784e
add esp, 4
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x411d7a
push ebx
call fcn.004b784e
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push dword [ebp - 0xc]
push 0x5d447c
mov ebx, dword [ebp + 8]
push dword [ebx]
mov ecx, 3
call fcn.004016eb
add esp, 0xc
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
call fcn.00412574
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x411db7
push ebx
call fcn.004b784e
add esp, 4
cmp dword [ebp - 0x14], 1
jne 0x411dfa
push 0x5d4484
push dword [ebp - 0xc]
call fcn.0040182c
add esp, 8
cmp eax, 0
je 0x411dfa
push 0x5d4488
push dword [ebp - 0xc]
call fcn.0040182c
add esp, 8
cmp eax, 0
je 0x411dfa
mov eax, 1
jmp 0x411dff
mov eax, 0
test eax, eax
je 0x411f99
cmp dword [ebp + 0x10], 1
jne 0x411ecf
push dword [ebp - 0xc]
push 0x5d447c
mov ebx, dword [ebp + 8]
push dword [ebx]
mov ecx, 3
call fcn.004016eb
add esp, 0xc
mov dword [ebp - 0x10], eax
push dword [ebp + 0xc]
push 4
mov eax, 2
call fcn.004b7842
add esp, 8
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
mov dword [ebp - 0x18], ebx
call fcn.00403718
mov dword [ebp - 0x1c], ecx
mov edi, dword [ebp - 0x18]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x411e72
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x1c]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x18]
call fcn.004b7866
add esp, 8
mov ebx, dword [ebp + 0xc]
mov dword [ebx], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x1c]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x14]
push edi
test eax, eax
je 0x411eb7
push eax
mov ebx, eax
call fcn.00401680
inc eax
push eax
call fcn.004b7848
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x411eca
push ebx
call fcn.004b784e
add esp, 4
jmp 0x411f5b
push dword [ebp + 0xc]
push 4
mov eax, 2
call fcn.004b7842
add esp, 8
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
mov dword [ebp - 0x14], ebx
call fcn.00403718
mov dword [ebp - 0x18], ecx
mov edi, dword [ebp - 0x14]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x411f13
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x18]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x14]
call fcn.004b7866
add esp, 8
mov ebx, dword [ebp + 0xc]
mov dword [ebx], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x18]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x10]
push edi
test eax, eax
je 0x411f58
push eax
mov ebx, eax
call fcn.00401680
inc eax
push eax
call fcn.004b7848
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
push dword [ebp - 0xc]
push 0x5d447c
mov ebx, dword [ebp + 8]
push dword [ebx]
mov ecx, 3
call fcn.004016eb
add esp, 0xc
mov dword [ebp - 0x10], eax
push 1
push dword [ebp + 0xc]
lea eax, [ebp - 0x10]
push eax
call fcn.00411468
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x411f99
push ebx
call fcn.004b784e
add esp, 4
jmp 0x411aaa
mov dword [ebp - 0x10], esp
push dword [ebp - 4]
call sub.KERNEL32.DLL_FindClose
cmp dword [ebp - 0x10], esp
je 0x411fc5
push 0x78e
push 0x417fd9a
push 6
call fcn.004b785a
add esp, 0xc
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
call fcn.00406fc4
jmp 0x411fd4
push eax
mov ebx, dword [ebp - 8]
push ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.004b784e
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.004b784e
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.004b784e
add esp, 4
pop ebx
add ebx, 0x14
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.004b784e
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.004b784e
add esp, 4
pop ebx
call fcn.004b784e
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x412041
push ebx
call fcn.004b784e
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 0xc