Function at 0x403dab
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x178
push esi
mov dword [ebp - 0x178], 0
mov dword [ebp - 8], 0
mov dword [ebp - 4], 0
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.MSVCRT.dll__strdup]
add esp, 4
mov dword [ebp + 8], eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0040460a
add esp, 4
mov dword [ebp - 0xc], eax
mov edx, dword [ebp + 8]
add edx, dword [ebp - 0xc]
movsx eax, byte [edx - 1]
movsx ecx, byte [0x4065b0]
cmp eax, ecx
jne 0x403e15
mov edx, dword [ebp - 0xc]
sub edx, 1
mov dword [ebp - 0xc], edx
mov eax, dword [ebp + 8]
add eax, dword [ebp - 0xc]
mov byte [eax], 0
jmp 0x403dec
lea ecx, [ebp - 0x170]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.MSVCRT.dll__stat]
add esp, 8
test eax, eax
je 0x403e41
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.MSVCRT.dll_free]
add esp, 4
xor eax, eax
jmp 0x403fdb
mov ecx, dword [ebp + 8]
push ecx
call fcn.0040460a
add esp, 4
mov esi, eax
mov edx, dword [ebp + 0xc]
push edx
call fcn.0040460a
add esp, 4
lea eax, [esi + eax + 4]
push eax
call dword [sym.imp.MSVCRT.dll_malloc]
add esp, 4
mov dword [ebp - 4], eax
mov ecx, dword [ebp + 0xc]
push ecx
movsx edx, byte [0x4065b0]
push edx
mov eax, dword [ebp + 8]
push eax
push str._s_c_s_
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x14
mov edx, dword [ebp + 0xc]
push edx
call fcn.0040460a
add esp, 4
mov dword [0x40662c], eax
lea eax, [ebp - 0x14c]
push eax
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0xffffffff
je 0x403f55
lea edx, [ebp - 0x120]
push edx
call dword [sym.imp.MSVCRT.dll__strdup]
add esp, 4
mov dword [ebp - 0x178], eax
lea eax, [ebp - 0x14c]
push eax
mov ecx, dword [ebp - 0x174]
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
je 0x403f48
lea edx, [ebp - 0x120]
mov dword [ebp - 4], edx
mov eax, dword [0x40662c]
mov ecx, dword [ebp - 4]
lea edx, [ecx + eax + 1]
push edx
mov eax, dword [0x40662c]
mov ecx, dword [ebp - 0x178]
lea edx, [ecx + eax + 1]
push edx
call fcn.00403fe0
add esp, 8
test eax, eax
jge 0x403f46
mov eax, dword [ebp - 0x178]
push eax
call dword [sym.imp.MSVCRT.dll_free]
add esp, 4
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.MSVCRT.dll__strdup]
add esp, 4
mov dword [ebp - 0x178], eax
jmp 0x403ed9
mov edx, dword [ebp - 0x174]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [ebp - 0x178], 0
je 0x403fcb
mov eax, dword [ebp - 0x178]
push eax
call fcn.0040460a
add esp, 4
mov ecx, dword [ebp - 0xc]
lea edx, [ecx + eax + 2]
push edx
call dword [sym.imp.MSVCRT.dll_malloc]
add esp, 4
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 8]
push ecx
call fcn.0040461c
add esp, 8
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0xc]
mov al, byte [0x4065b0]
mov byte [edx], al
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 0xc]
mov byte [ecx + 1], 0
mov edx, dword [ebp - 0x178]
push edx
mov eax, dword [ebp - 8]
push eax
call fcn.00404616
add esp, 8
mov ecx, dword [ebp - 0x178]
push ecx
call dword [sym.imp.MSVCRT.dll_free]
add esp, 4
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.MSVCRT.dll_free]
add esp, 4
mov eax, dword [ebp - 8]
pop esi
mov esp, ebp
pop ebp
ret