Function at 0x401400
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd48
mov eax, dword [0x428530]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
xor ebx, ebx
push 0x13c
lea eax, [ebp - 0xd40]
push ebx
push eax
mov dword [ebp - 0xd44], ebx
call fcn.00409be0
push 0x3ff
lea ecx, [ebp - 0x803]
push ebx
push ecx
mov byte [ebp - 0x804], bl
call fcn.00409be0
push 0x3ff
lea edx, [ebp - 0xc03]
push ebx
push edx
mov byte [ebp - 0xc04], bl
call fcn.00409be0
lea edx, [ebp - 0x804]
add esp, 0x24
mov eax, esi
sub edx, esi
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x401470
lea edi, [ebp - 0x804]
dec edi
mov al, byte [edi + 1]
inc edi
cmp al, bl
jne 0x401481
mov ax, word [0x421374]
mov word [edi], ax
xor eax, eax
jmp 0x4014a0
mov cl, byte [ebp + eax - 0x804]
mov byte [ebp + eax - 0xc04], cl
inc eax
cmp cl, bl
jne 0x4014a0
lea edi, [ebp - 0xc04]
dec edi
lea ebx, [ebx]
mov al, byte [edi + 1]
inc edi
cmp al, bl
jne 0x4014c0
mov cx, word [0x421370]
mov word [edi], cx
call fcn.00401330
lea edx, [ebp - 0xd44]
push edx
lea eax, [ebp - 0xc04]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0xd48], eax
cmp eax, 0xffffffff
jne 0x401510
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00409bc8
mov esp, ebp
pop ebp
ret
mov ecx, 0x42136c
lea eax, [ebp - 0xd18]
jmp 0x401520
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x401540
cmp dl, bl
je 0x40153c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x401540
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x401520
xor eax, eax
jmp 0x401545
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x401661
mov ecx, 0x421368
lea eax, [ebp - 0xd18]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x401578
cmp dl, bl
je 0x401574
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x401578
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x401558
xor eax, eax
jmp 0x40157d
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x401661
push 0x3ff
lea ecx, [ebp - 0x403]
push ebx
push ecx
mov byte [ebp - 0x404], bl
call fcn.00409be0
add esp, 0xc
xor eax, eax
jmp 0x4015b0
mov cl, byte [ebp + eax - 0x804]
mov byte [ebp + eax - 0x404], cl
inc eax
cmp cl, bl
jne 0x4015b0
lea eax, [ebp - 0xd18]
mov edx, eax
jmp 0x4015d0
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4015d0
lea edi, [ebp - 0x404]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
cmp cl, bl
jne 0x4015e0
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
test byte [ebp - 0xd44], 0x10
rep movsb byte es:[edi], byte [esi]
je 0x401627
mov eax, dword [ebp + 0xc]
cmp eax, ebx
je 0x40161a
push eax
lea edx, [ebp - 0x404]
push edx
call fcn.00401400
add esp, 8
jmp 0x401661
lea esi, [ebp - 0x404]
call fcn.00401330
jmp 0x401661
lea eax, [ebp - 0x404]
push 0x421360
push eax
call fcn.00409fc8
add esp, 8
cmp eax, ebx
jne 0x401658
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
jne 0x401661
lea ecx, [ebp - 0x404]
push ecx
call fcn.004012a0
jmp 0x40165e
push eax
call fcn.00409cc7
add esp, 4
mov esi, dword [ebp - 0xd48]
lea edx, [ebp - 0xd44]
push edx
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x401510
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
mov eax, 1
pop ebx
call fcn.00409bc8
mov esp, ebp
pop ebp
ret