Function at 0x41cc96
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x370
push edi
mov dword [ebp - 0x370], 0
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x264], 0
mov dword [ebp - 4], 0
mov byte [ebp - 0x10c], 0
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x10b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [0x437f8c]
mov dword [ebp - 0x36c], eax
mov ecx, dword [0x437f90]
mov dword [ebp - 0x368], ecx
mov edx, dword [0x437f94]
mov dword [ebp - 0x364], edx
mov al, byte [0x437f98]
mov byte [ebp - 0x360], al
mov ecx, 0x3d
xor eax, eax
lea edi, [ebp - 0x35f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [ebp - 8], 0
mov dword [ebp - 0x268], 0xffffffff
mov dword [ebp - 0x25c], 0
mov ecx, 0x4f
xor eax, eax
lea edi, [ebp - 0x258]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x260], 0
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x114], 0
lea ecx, [ebp - 0x10c]
push ecx
push 0x104
push 0x437f9c
call fcn.00405071
add esp, 0xc
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0
jne 0x41cd9d
jmp 0x41d06d
push 0
push 0xa7
push 3
push 0
push 1
push 0x80000000
lea edx, [ebp - 0x10c]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0xffffffff
je 0x41cdf5
lea eax, [ebp - 0x114]
push eax
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x10c]
push edx
call fcn.0041c876
add esp, 0xc
mov eax, dword [ebp - 0x268]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x10c]
push ecx
push 0x104
push 0x437fac
call fcn.00405071
add esp, 0xc
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0
jne 0x41ce22
jmp 0x41d06b
lea edx, [ebp - 0x25c]
push edx
lea eax, [ebp - 0x10c]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0xffffffff
je 0x41cea5
mov ecx, dword [ebp - 0x25c]
and ecx, 0x10
test ecx, ecx
je 0x41ce4e
jmp 0x41ce7f
lea edx, [ebp - 0x36c]
push edx
lea eax, [ebp - 0x230]
push eax
call dword [sym.imp.MSVCRT.dll__stricmp]
add esp, 8
test eax, eax
jle 0x41ce7f
lea ecx, [ebp - 0x230]
push ecx
lea edx, [ebp - 0x36c]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
lea eax, [ebp - 0x25c]
push eax
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x41ce3f
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov dword [ebp - 8], 0xffffffff
lea eax, [ebp - 0x10c]
push eax
push 0x104
lea ecx, [ebp - 0x36c]
push ecx
call fcn.00405071
add esp, 0xc
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0
jne 0x41ced4
jmp 0x41d069
mov byte [ebp - 0x364], 0
lea edx, [ebp - 0x369]
push edx
call fcn.0041fe90
add esp, 4
mov dword [ebp - 0x264], eax
mov byte [ebp - 0x364], 0x2e
mov eax, dword [ebp - 0x264]
mov dword [ebp - 4], eax
mov ecx, 1
test ecx, ecx
je 0x41cf79
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
lea eax, [ebp - 0x10c]
push eax
mov ecx, dword [ebp - 4]
push ecx
call fcn.0041cbd4
add esp, 8
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0
jne 0x41cf77
mov edx, dword [ebp - 4]
sub edx, 1
cmp edx, dword [ebp - 0x264]
jne 0x41cf5f
lea eax, [ebp - 0x10c]
push eax
push 0x104
lea ecx, [ebp - 0x36c]
push ecx
call fcn.00405071
add esp, 0xc
jmp 0x41cf75
lea edx, [ebp - 0x10c]
push edx
mov eax, dword [ebp - 4]
sub eax, 1
push eax
call fcn.0041cbd4
add esp, 8
jmp 0x41cf79
jmp 0x41cf00
lea ecx, [ebp - 0x118]
push ecx
lea edx, [ebp - 0x260]
push edx
lea eax, [ebp - 0x10c]
push eax
call fcn.0041c876
add esp, 0xc
mov dword [ebp - 0x110], eax
mov ecx, dword [ebp - 0x260]
cmp ecx, dword [ebp - 0x11c]
jae 0x41cfc4
mov edx, dword [ebp - 0x11c]
mov dword [ebp - 0x260], edx
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x118], eax
jmp 0x41cff8
mov ecx, dword [ebp - 0x260]
cmp ecx, dword [ebp - 0x11c]
jne 0x41cff8
mov edx, dword [ebp - 0x118]
cmp edx, dword [ebp - 0x114]
jae 0x41cff8
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x260], eax
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 0x118], ecx
mov edx, dword [ebp - 0x118]
shr edx, 0x10
push edx
mov eax, dword [ebp - 0x260]
and eax, 0xffff
push eax
mov ecx, dword [ebp - 0x260]
shr ecx, 0x10
push ecx
push str._d._d._d
push 0x439c7c
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x14
mov dword [0x439cec], 1
cmp dword [ebp + 8], 0
je 0x41d046
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x260]
mov dword [edx], eax
cmp dword [ebp + 0xc], 0
je 0x41d057
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x118]
mov dword [ecx], edx
mov dword [ebp - 0x370], 1
mov eax, dword [ebp - 0x370]
jmp 0x41d06f
jmp 0x41d061
jmp 0x41d061
jmp 0x41d061
pop edi
mov esp, ebp
pop ebp
ret