Function at 0x4149e0
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xabc
mov eax, dword [0x5052a0]
xor eax, ebp
mov dword [ebp - 4], eax
push edi
mov dword [ebp - 0xa7c], ecx
xor eax, eax
mov word [ebp - 0x828], ax
push 0x7fe
push 0
lea ecx, [ebp - 0x826]
push ecx
call fcn.0043ef50
add esp, 0xc
mov edx, dword [ebp + 8]
mov dword [ebp - 0xa80], edx
lea eax, [ebp - 0x828]
mov dword [ebp - 0xa84], eax
mov ecx, dword [ebp - 0xa84]
mov dword [ebp - 0xa88], ecx
mov edx, dword [ebp - 0xa80]
mov ax, word [edx]
mov word [ebp - 0xa8a], ax
mov ecx, dword [ebp - 0xa84]
mov dx, word [ebp - 0xa8a]
mov word [ecx], dx
mov eax, dword [ebp - 0xa80]
add eax, 2
mov dword [ebp - 0xa80], eax
mov ecx, dword [ebp - 0xa84]
add ecx, 2
mov dword [ebp - 0xa84], ecx
cmp word [ebp - 0xa8a], 0
jne 0x414a3a
lea edx, [ebp - 0x828]
add edx, 0xfffffffe
mov dword [ebp - 0xa90], edx
mov eax, dword [ebp - 0xa90]
mov cx, word [eax + 2]
mov word [ebp - 0xa92], cx
add dword [ebp - 0xa90], 2
cmp word [ebp - 0xa92], 0
jne 0x414a91
mov edi, dword [ebp - 0xa90]
mov edx, dword [0x4dd878]
mov dword [edi], edx
mov eax, dword [0x4dd87c]
mov dword [edi + 4], eax
mov cx, word [0x4dd880]
mov word [edi + 8], cx
lea edx, [ebp - 0xa78]
push edx
lea eax, [ebp - 0x828]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xffffffff
jne 0x414b05
push 0x4dd884
call fcn.00437af7
add esp, 4
xor eax, eax
jmp 0x414c99
mov dword [ebp - 0xa98], 0x4dd890
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 0xa9c], ecx
mov edx, dword [ebp - 0xa9c]
mov ax, word [edx]
mov word [ebp - 0xa9e], ax
mov ecx, dword [ebp - 0xa98]
cmp ax, word [ecx]
jne 0x414b81
cmp word [ebp - 0xa9e], 0
je 0x414b75
mov edx, dword [ebp - 0xa9c]
mov ax, word [edx + 2]
mov word [ebp - 0xaa0], ax
mov ecx, dword [ebp - 0xa98]
cmp ax, word [ecx + 2]
jne 0x414b81
add dword [ebp - 0xa9c], 4
add dword [ebp - 0xa98], 4
cmp word [ebp - 0xaa0], 0
jne 0x414b1b
mov dword [ebp - 0xaa4], 0
jmp 0x414b8c
sbb edx, edx
sbb edx, 0xffffffff
mov dword [ebp - 0xaa4], edx
mov eax, dword [ebp - 0xaa4]
mov dword [ebp - 0xaa8], eax
cmp dword [ebp - 0xaa8], 0
je 0x414c41
mov dword [ebp - 0xaac], 0x4dd894
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 0xab0], ecx
mov edx, dword [ebp - 0xab0]
mov ax, word [edx]
mov word [ebp - 0xab2], ax
mov ecx, dword [ebp - 0xaac]
cmp ax, word [ecx]
jne 0x414c21
cmp word [ebp - 0xab2], 0
je 0x414c15
mov edx, dword [ebp - 0xab0]
mov ax, word [edx + 2]
mov word [ebp - 0xab4], ax
mov ecx, dword [ebp - 0xaac]
cmp ax, word [ecx + 2]
jne 0x414c21
add dword [ebp - 0xab0], 4
add dword [ebp - 0xaac], 4
cmp word [ebp - 0xab4], 0
jne 0x414bbb
mov dword [ebp - 0xab8], 0
jmp 0x414c2c
sbb edx, edx
sbb edx, 0xffffffff
mov dword [ebp - 0xab8], edx
mov eax, dword [ebp - 0xab8]
mov dword [ebp - 0xabc], eax
cmp dword [ebp - 0xabc], 0
jne 0x414c43
jmp 0x414c71
mov ecx, dword [ebp - 0xa78]
and ecx, 0x10
je 0x414c71
lea edx, [ebp - 0xa4c]
push edx
lea ecx, [ebp - 0x20]
call fcn.00415240
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp + 0xc]
call fcn.00415550
lea ecx, [ebp - 0x20]
call fcn.00415280
lea ecx, [ebp - 0xa78]
push ecx
mov edx, dword [ebp - 0x24]
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x414b05
mov eax, dword [ebp - 0x24]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, 1
pop edi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00434ee7
mov esp, ebp
pop ebp
ret 8