Function at 0x418238
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x5c
mov edi, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
mov esi, dword [ebx + 0x14]
mov dword [ebp - 0x48], 0x45e02c
mov dword [ebp - 0x44], 0x463edc
mov dword [ebp - 0x40], ebp
mov dword [ebp - 0x38], esp
mov dword [ebp - 0x40], 0x4181c9
lea eax, [ebp - 0x64]
call fcn.0045ec95
test esi, esi
je 0x417fa2
lea edi, [ebx + 4]
cmp dword [ebx + 0x18], 0xf
ja 0x417fbb
mov eax, edi
jmp 0x417fbe
mov dword [edi + 0x18], 7
mov dword [edi + 0x14], 0
mov word [edi + 4], 0
jmp 0x418199
mov eax, dword [ebx + 4]
mov dword [ebp - 0x5c], 0xffffffff
sub esp, 8
push 0
push 0
push esi
push eax
push 0
push 0xfde9
call sub.KERNEL32.DLL_MultiByteToWideChar
add esp, 8
mov esi, eax
test esi, esi
je 0x418050
mov dword [ebp - 0x10], 7
mov dword [ebp - 0x14], 0
mov word [ebp - 0x24], 0
cmp esi, 0xffffffff
je 0x4181b2
mov dword [ebp - 0x5c], 0xffffffff
sub esp, 4
lea eax, [ebp - 0x28]
push 0
push esi
push eax
call fcn.00402950
add esp, 0x10
test al, al
je 0x418086
mov eax, dword [ebp - 0x10]
cmp eax, 7
ja 0x41808b
lea ecx, [ebp - 0x24]
cmp esi, 1
je 0x418093
mov dword [ebp - 0x5c], 0xffffffff
sub esp, 4
push esi
push 0
push ecx
call fcn.0044d5b5
add esp, 0x10
mov eax, dword [ebp - 0x10]
cmp eax, 7
jbe 0x41809d
mov ecx, dword [ebp - 0x24]
jmp 0x4180a0
mov edi, dword [ebp + 8]
mov dword [edi + 0x18], 7
mov dword [edi + 0x14], 0
mov word [edi + 4], 0
mov dword [ebp - 0x5c], 0xffffffff
sub esp, 4
push 0
push 0x463d2a
push edi
call fcn.0041b87c
add esp, 0x10
jmp 0x418199
mov eax, dword [ebp - 0x10]
jmp 0x4180a9
mov ecx, dword [ebp - 0x24]
cmp esi, 1
jne 0x41802d
mov word [ecx], 0
cmp eax, 7
ja 0x41804b
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x14], esi
mov word [ecx + esi*2], 0
cmp dword [ebx + 0x18], 0xf
mov ecx, dword [ebx + 0x14]
jbe 0x4180b5
mov edi, dword [ebx + 4]
cmp eax, 7
ja 0x4180bf
lea eax, [ebp - 0x24]
jmp 0x4180c2
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x5c], 1
sub esp, 8
push esi
push eax
push ecx
push edi
push 0
push 0xfde9
call sub.KERNEL32.DLL_MultiByteToWideChar
add esp, 8
test eax, eax
mov edi, dword [ebp + 8]
mov dword [edi + 0x18], 7
mov dword [edi + 0x14], 0
mov word [edi + 4], 0
je 0x41812b
lea ecx, [edi + 4]
mov eax, dword [ebp - 0x10]
cmp eax, 7
ja 0x418170
mov edx, dword [ebp - 0x14]
inc edx
je 0x41817c
mov dword [ebp - 0x5c], 3
sub esp, 4
push edx
lea eax, [ebp - 0x24]
push eax
push ecx
call fcn.0044d4e0
add esp, 0x10
mov eax, dword [ebp - 0x10]
mov edi, dword [ebp + 8]
jmp 0x41817c
mov dword [ebp - 0x5c], 2
sub esp, 4
push 0
push 0x463d2a
push edi
call fcn.0041b87c
add esp, 0x10
mov ecx, dword [ebp - 0x10]
cmp ecx, 8
mov edi, dword [ebp + 8]
jb 0x418199
mov eax, dword [ebp - 0x24]
lea ecx, [ecx + ecx + 2]
cmp ecx, 0x1000
jb 0x418162
mov eax, dword [eax - 4]
sub esp, 0xc
push eax
call fcn.00440ea4
add esp, 0x10
jmp 0x418199
mov edx, dword [ebp - 0x24]
mov dword [ecx], edx
mov dword [ebp - 0x24], 0
mov ecx, dword [ebp - 0x14]
mov dword [edi + 0x14], ecx
mov dword [edi + 0x18], eax
mov dword [ebp - 0x10], 7
mov dword [ebp - 0x14], 0
mov word [ebp - 0x24], 0
lea eax, [ebp - 0x64]
sub esp, 0xc
push eax
call fcn.0045ecb6
add esp, 0x10
mov eax, edi
add esp, 0x5c
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x5c], 0xffffffff
sub esp, 0xc
push 0x463dc4
call fcn.00446870
add esp, 0xc
mov eax, dword [ebp - 0x60]
cmp eax, 3
jbe 0x4181d5
or al, 0x68
les edi, [0xaae80046]
out 2, al
add byte [ebx + 0x458b0cc4], al
mov al, byte [0x33d]
add byte [esi + 2], dh
ud2
sub eax, 1
jmp dword [eax*4 + 0x418238]
mov esi, dword [ebp - 0x58]
mov eax, dword [ebp - 0x10]
cmp eax, 8
jb 0x418212
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2c], ecx
lea eax, [eax + eax + 2]
cmp eax, 0x1000
mov eax, dword [ebp - 0x2c]
jb 0x418206
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax - 4]
sub esp, 0xc
push eax
call fcn.00440ea4
add esp, 0x10
mov dword [ebp - 0x5c], 0xffffffff
sub esp, 0xc
push esi
call fcn.0045ec34
add esp, 0xc
mov eax, dword [ebp - 0x54]
sub esp, 0xc
push dword [ebp - 0x58]
call fcn.0040217c
add esp, 0xc
nop
loope 0x4181bb
inc ecx
add cl, ah
add dword [ecx], case.0x4181da.2