Function at 0x407c41
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1494
call fcn.00409bf0
push esi
push edi
push dword [ebp + 8]
lea eax, [ebp - 0xc94]
mov dword [ebp - 4], ecx
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0xc94]
push 0x411130
push eax
call sub.MSVCRT.dll_strcat
lea eax, [ebp - 0xc94]
push eax
lea eax, [ebp - 0x1094]
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x1094]
push 0x4430e0
push eax
call sub.MSVCRT.dll_strcat
add esp, 0x20
lea eax, [ebp - 0x294]
push eax
lea eax, [ebp - 0x1094]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp + 8], eax
lea eax, [ebp - 0x294]
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
je 0x4080f4
mov eax, dword [ebp - 4]
inc dword [eax + 0xd0]
lea eax, [ebp - 0x268]
push eax
push 0x4430dc
call sub.MSVCRT.dll_strcmp
pop ecx
test eax, eax
pop ecx
je 0x407cb1
lea eax, [ebp - 0x268]
push eax
push 0x4430d8
call sub.MSVCRT.dll_strcmp
pop ecx
test eax, eax
pop ecx
je 0x407cb1
lea eax, [ebp - 0x268]
xor edi, edi
push eax
call sub.MSVCRT.dll_strlen
test eax, eax
pop ecx
jbe 0x407d52
movsx eax, byte [ebp + edi - 0x268]
lea esi, [ebp + edi - 0x268]
push eax
call dword [sym.imp.MSVCRT.dll_isalnum]
test eax, eax
pop ecx
jne 0x407d40
mov al, byte [esi]
cmp al, 0x2e
je 0x407d40
cmp al, 0x20
je 0x407d40
cmp al, 0x7e
jne 0x407cb1
lea eax, [ebp - 0x268]
inc edi
push eax
call sub.MSVCRT.dll_strlen
cmp edi, eax
pop ecx
jb 0x407d13
mov eax, dword [ebp - 4]
lea esi, [eax + 0xc8]
cmp dword [esi], 0
je 0x407d6d
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x407d5b
lea eax, [ebp - 0xc94]
push eax
lea eax, [ebp - 0x894]
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x268]
push eax
lea eax, [ebp - 0x894]
push eax
call sub.MSVCRT.dll_strcat
add esp, 0x10
test byte [ebp - 0x294], 0x10
je 0x407db5
mov ecx, dword [ebp - 4]
lea eax, [ebp - 0x894]
push 0
push eax
call fcn.00407c41
jmp 0x407cb1
lea eax, [ebp - 0x894]
push eax
lea eax, [ebp - 0x394]
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x394]
xor edi, edi
push eax
call sub.MSVCRT.dll_strlen
add esp, 0xc
inc eax
je 0x407e06
lea esi, [ebp - 0x494]
mov al, byte [ebp + edi - 0x394]
cmp al, 0x5c
mov byte [esi], al
jne 0x407df2
inc esi
mov byte [esi], al
lea eax, [ebp - 0x394]
inc esi
push eax
inc edi
call sub.MSVCRT.dll_strlen
inc eax
pop ecx
cmp edi, eax
jb 0x407de2
lea eax, [ebp - 0x268]
push eax
lea eax, [ebp - 0x154]
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x154]
push eax
call dword [sym.imp.MSVCRT.dll__strlwr]
lea eax, [ebp - 0x154]
push eax
call fcn.004024b9
mov esi, eax
add esp, 0x10
test esi, esi
je 0x407cb1
lea eax, [ebp - 0x154]
push str..jpg
push eax
call fcn.00408103
pop ecx
test eax, eax
pop ecx
jne 0x407f39
lea eax, [ebp - 0x154]
push str..jpeg
push eax
call fcn.00408103
pop ecx
test eax, eax
pop ecx
jne 0x407f39
lea eax, [ebp - 0x154]
push str..mpg
push eax
call fcn.00408103
pop ecx
test eax, eax
pop ecx
jne 0x407f39
lea eax, [ebp - 0x154]
push str..mpeg
push eax
call fcn.00408103
pop ecx
test eax, eax
pop ecx
jne 0x407f39
lea eax, [ebp - 0x154]
push str..avi
push eax
call fcn.00408103
pop ecx
test eax, eax
pop ecx
jne 0x407f39
lea eax, [ebp - 0x154]
push str..tiff
push eax
call fcn.00408103
pop ecx
test eax, eax
pop ecx
jne 0x407f39
lea eax, [ebp - 0x154]
push str..mp3
push eax
call fcn.00408103
pop ecx
test eax, eax
pop ecx
jne 0x407f39
lea eax, [ebp - 0x154]
push str..gif
push eax
call fcn.00408103
pop ecx
test eax, eax
pop ecx
jne 0x407f39
lea eax, [ebp - 0x154]
push str..png
push eax
call fcn.00408103
pop ecx
test eax, eax
pop ecx
jne 0x407f39
lea eax, [ebp - 0x154]
push str..ram
push eax
call fcn.00408103
pop ecx
test eax, eax
pop ecx
je 0x407cb1
lea eax, [ebp - 0x154]
push str..jpg
push eax
call fcn.00408103
pop ecx
test eax, eax
pop ecx
je 0x407f60
lea eax, [ebp - 0x54]
push str.JPEG_image
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
lea eax, [ebp - 0x154]
push str..jpeg
push eax
call fcn.00408103
pop ecx
test eax, eax
pop ecx
je 0x407f87
lea eax, [ebp - 0x54]
push str.JPEG_image
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
lea eax, [ebp - 0x154]
push str..mpg
push eax
call fcn.00408103
pop ecx
test eax, eax
pop ecx
je 0x407fae
lea eax, [ebp - 0x54]
push str.MPEG_movie
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
lea eax, [ebp - 0x154]
push str..mpeg
push eax
call fcn.00408103
pop ecx
test eax, eax
pop ecx
je 0x407fd5
lea eax, [ebp - 0x54]
push str.MPEG_movie
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
lea eax, [ebp - 0x154]
push str..avi
push eax
call fcn.00408103
pop ecx
test eax, eax
pop ecx
je 0x407ffc
lea eax, [ebp - 0x54]
push str.AVI_movie
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
lea eax, [ebp - 0x154]
push str..tiff
push eax
call fcn.00408103
pop ecx
test eax, eax
pop ecx
je 0x408023
lea eax, [ebp - 0x54]
push str.TIFF_image
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
lea eax, [ebp - 0x154]
push str..mp3
push eax
call fcn.00408103
pop ecx
test eax, eax
pop ecx
je 0x40804a
lea eax, [ebp - 0x54]
push str.MP3_music
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
lea eax, [ebp - 0x154]
push str..gif
push eax
call fcn.00408103
pop ecx
test eax, eax
pop ecx
je 0x408071
lea eax, [ebp - 0x54]
push str.GIF_image
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
lea eax, [ebp - 0x154]
push str..png
push eax
call fcn.00408103
pop ecx
test eax, eax
pop ecx
je 0x408098
lea eax, [ebp - 0x54]
push str.PNG_image
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
lea eax, [ebp - 0x154]
push str..ram
push eax
call fcn.00408103
pop ecx
test eax, eax
pop ecx
je 0x4080bf
lea eax, [ebp - 0x54]
push str.RealTime_movie
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
lea eax, [ebp - 0x268]
push esi
push eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x1494]
push str.file_type:__s__title:__s__contains_word:__s
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
mov ecx, dword [ebp - 4]
add esp, 0x14
lea eax, [ebp - 0x1494]
push eax
call fcn.00408587
jmp 0x407cb1
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_FindClose]
pop edi
pop esi
leave
ret 8