Function at 0x4260f0
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x496410
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x43c
push ebx
push esi
mov ebx, ecx
push edi
lea ecx, [ebp - 0x308]
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x14], ebx
call fcn.00401d20
lea ecx, [ebp - 0x2d0]
mov dword [ebp - 4], 0
call fcn.00401d20
lea ecx, [ebp - 0x298]
mov byte [ebp - 4], 1
call fcn.00401d20
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 2
call fcn.00401d20
lea esi, [ebx + 0x2c8]
push esi
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 3
call fcn.00401d90
push esi
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 4
call fcn.00401d90
push esi
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 5
call fcn.00401d90
push esi
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 6
call fcn.00401d90
push 0x4ad13c
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 7
call fcn.00402ed0
test al, al
jne 0x4261c2
push 0x4ad13c
lea ecx, [ebp - 0x100]
call fcn.00402ca0
push 0x4ad13c
lea ecx, [ebp - 0x90]
call fcn.00402ed0
test al, al
jne 0x4261e6
push 0x4ad13c
lea ecx, [ebp - 0x90]
call fcn.00402ca0
push 0x4ad13c
lea ecx, [ebp - 0xc8]
call fcn.00402ed0
test al, al
jne 0x42620a
push 0x4ad13c
lea ecx, [ebp - 0xc8]
call fcn.00402ca0
push 0x4ad13c
lea ecx, [ebp - 0x138]
call fcn.00402ed0
test al, al
jne 0x42622e
push 0x4ad13c
lea ecx, [ebp - 0x138]
call fcn.00402ca0
push str.mclassiclayouts_
lea ecx, [ebp - 0x100]
call fcn.00402ca0
push str.mtenlayouts_
lea ecx, [ebp - 0x90]
call fcn.00402ca0
push str.maddictionlayouts_
lea ecx, [ebp - 0xc8]
call fcn.00402ca0
push str.mfreecelllayouts_
lea ecx, [ebp - 0x138]
call fcn.00402ca0
push str..dat
lea eax, [ebp - 0x100]
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0040da60
add esp, 0xc
push eax
lea ecx, [ebp - 0x308]
mov byte [ebp - 4], 8
call fcn.00402ab0
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 7
call fcn.00402380
push str..dat
lea edx, [ebp - 0x90]
push edx
lea eax, [ebp - 0x58]
push eax
call fcn.0040da60
add esp, 0xc
push eax
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 4], 9
call fcn.00402ab0
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 7
call fcn.00402380
push str..dat
lea ecx, [ebp - 0xc8]
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0040da60
add esp, 0xc
push eax
lea ecx, [ebp - 0x298]
mov byte [ebp - 4], 0xa
call fcn.00402ab0
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 7
call fcn.00402380
push str..dat
lea eax, [ebp - 0x138]
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0040da60
add esp, 0xc
push eax
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 0xb
call fcn.00402ab0
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 7
call fcn.00402380
push 0xa
lea ecx, [ebp - 0x174]
call fcn.0040c630
push 0xa
lea ecx, [ebp - 0x228]
mov byte [ebp - 4], 0xc
call fcn.0040c630
push 0xa
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 4], 0xd
call fcn.0040c630
push 0xa
lea ecx, [ebp - 0x1ec]
mov byte [ebp - 4], 0xe
call fcn.0040c630
mov eax, dword [ebp - 0x2dc]
test eax, eax
mov byte [ebp - 4], 0xf
jne 0x426391
mov eax, 0x4adaa0
lea edx, [ebp - 0x448]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov edi, eax
cmp edi, 0xffffffff
mov dword [ebp - 0x18], edi
je 0x426483
lea ecx, [ecx]
test byte [ebp - 0x448], 0x12
jne 0x42645c
lea eax, [ebp - 0x41c]
push eax
lea ecx, [ebp - 0x100]
push ecx
lea edx, [ebp - 0x58]
push edx
mov byte [ebp - 4], 0x10
call fcn.0040da60
add esp, 0xc
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0x58]
mov bl, 0x11
push eax
mov byte [ebp - 4], bl
call fcn.004252e0
test al, al
je 0x42643d
push 0x38
call fcn.0047d184
mov ecx, eax
add esp, 4
mov dword [ebp - 0x1c], ecx
test ecx, ecx
mov byte [ebp - 4], 0x12
je 0x426417
push 0
push str.mclassiclayouts_
call fcn.00401e30
mov esi, eax
jmp 0x426419
xor esi, esi
lea ecx, [ebp - 0x41c]
push ecx
mov ecx, esi
mov byte [ebp - 4], bl
call fcn.004026d0
push esi
lea ecx, [ebp - 0x174]
call fcn.0040c810
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 4]
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x10
call fcn.00402380
jmp 0x42645c
lea ecx, [ebp - 0x448]
push ecx
push edi
mov dword [ebp - 4], 0xf
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x4263b0
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ebx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x26c]
test eax, eax
jne 0x426492
mov eax, 0x4adaa0
lea edx, [ebp - 0x448]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov edi, eax
cmp edi, 0xffffffff
mov dword [ebp - 0x18], edi
je 0x426583
mov edi, edi
test byte [ebp - 0x448], 0x12
jne 0x42655c
lea eax, [ebp - 0x41c]
push eax
lea ecx, [ebp - 0xc8]
push ecx
lea edx, [ebp - 0x58]
push edx
mov byte [ebp - 4], 0x14
call fcn.0040da60
add esp, 0xc
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0x58]
mov bl, 0x15
push eax
mov byte [ebp - 4], bl
call fcn.004252e0
test al, al
je 0x42653d
push 0x38
call fcn.0047d184
mov ecx, eax
add esp, 4
mov dword [ebp - 0x20], ecx
test ecx, ecx
mov byte [ebp - 4], 0x16
je 0x426517
push 0
push str.maddictionlayouts_
call fcn.00401e30
mov esi, eax
jmp 0x426519
xor esi, esi
lea ecx, [ebp - 0x41c]
push ecx
mov ecx, esi
mov byte [ebp - 4], bl
call fcn.004026d0
push esi
lea ecx, [ebp - 0x1b0]
call fcn.0040c810
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 4]
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x14
call fcn.00402380
jmp 0x42655c
lea ecx, [ebp - 0x448]
push ecx
push edi
mov dword [ebp - 4], 0xf
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x4264b0
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ebx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x2a4]
test eax, eax
jne 0x426592
mov eax, 0x4adaa0
lea edx, [ebp - 0x448]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov edi, eax
cmp edi, 0xffffffff
mov dword [ebp - 0x18], edi
je 0x426683
mov edi, edi
test byte [ebp - 0x448], 0x12
jne 0x42665c
lea eax, [ebp - 0x41c]
push eax
lea ecx, [ebp - 0x90]
push ecx
lea edx, [ebp - 0x58]
push edx
mov byte [ebp - 4], 0x18
call fcn.0040da60
add esp, 0xc
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0x58]
mov bl, 0x19
push eax
mov byte [ebp - 4], bl
call fcn.004252e0
test al, al
je 0x42663d
push 0x38
call fcn.0047d184
mov ecx, eax
add esp, 4
mov dword [ebp - 0x20], ecx
test ecx, ecx
mov byte [ebp - 4], 0x1a
je 0x426617
push 0
push str.mtenlayouts_
call fcn.00401e30
mov esi, eax
jmp 0x426619
xor esi, esi
lea ecx, [ebp - 0x41c]
push ecx
mov ecx, esi
mov byte [ebp - 4], bl
call fcn.004026d0
push esi
lea ecx, [ebp - 0x228]
call fcn.0040c810
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 4]
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x18
call fcn.00402380
jmp 0x42665c
lea ecx, [ebp - 0x448]
push ecx
push edi
mov dword [ebp - 4], 0xf
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x4265b0
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ebx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x234]
test eax, eax
jne 0x426692
mov eax, 0x4adaa0
lea edx, [ebp - 0x448]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov edi, eax
cmp edi, 0xffffffff
mov dword [ebp - 0x18], edi
je 0x426783
mov edi, edi
test byte [ebp - 0x448], 0x12
jne 0x42675c
lea eax, [ebp - 0x41c]
push eax
lea ecx, [ebp - 0x138]
push ecx
lea edx, [ebp - 0x58]
push edx
mov byte [ebp - 4], 0x1c
call fcn.0040da60
add esp, 0xc
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0x58]
mov bl, 0x1d
push eax
mov byte [ebp - 4], bl
call fcn.004252e0
test al, al
je 0x42673d
push 0x38
call fcn.0047d184
mov ecx, eax
add esp, 4
mov dword [ebp - 0x20], ecx
test ecx, ecx
mov byte [ebp - 4], 0x1e
je 0x426717
push 0
push str.mfreecelllayouts_
call fcn.00401e30
mov esi, eax
jmp 0x426719
xor esi, esi
lea ecx, [ebp - 0x41c]
push ecx
mov ecx, esi
mov byte [ebp - 4], bl
call fcn.004026d0
push esi
lea ecx, [ebp - 0x1ec]
call fcn.0040c810
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 4]
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x1c
call fcn.00402380
jmp 0x42675c
lea ecx, [ebp - 0x448]
push ecx
push edi
mov dword [ebp - 4], 0xf
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x4266b0
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ebx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x148]
lea ecx, [ebx + 0x11ac]
push edx
call fcn.00401a40
mov eax, dword [ebp - 0x148]
xor esi, esi
test eax, eax
jle 0x4267d6
mov edi, dword [ebx + 0x11d8]
lea eax, [esi*4]
push esi
lea ecx, [ebp - 0x174]
add edi, eax
call fcn.00423450
mov dword [edi], eax
mov eax, dword [ebx + 0x11d8]
mov ecx, dword [eax + esi*4]
mov edx, dword [ecx]
call dword [edx]
mov eax, dword [ebp - 0x148]
inc esi
cmp esi, eax
jl 0x4267a1
lea eax, [ebx + 0x11ac]
push eax
call fcn.0040faa0
mov eax, dword [ebp - 0x184]
add esp, 4
lea ecx, [ebx + 0x1178]
push eax
call fcn.00401a40
mov eax, dword [ebp - 0x184]
xor esi, esi
test eax, eax
jle 0x426845
jmp 0x426810
mov edi, dword [ebx + 0x11a4]
lea eax, [esi*4]
push esi
lea ecx, [ebp - 0x1b0]
add edi, eax
call fcn.00423450
mov dword [edi], eax
mov ecx, dword [ebx + 0x11a4]
mov ecx, dword [ecx + esi*4]
mov edx, dword [ecx]
call dword [edx]
mov eax, dword [ebp - 0x184]
inc esi
cmp esi, eax
jl 0x426810
lea eax, [ebx + 0x1178]
push eax
call fcn.0040faa0
mov eax, dword [ebp - 0x1fc]
add esp, 4
lea ecx, [ebx + 0x11e0]
push eax
call fcn.00401a40
mov eax, dword [ebp - 0x1fc]
xor esi, esi
test eax, eax
jle 0x4268a7
mov edi, dword [ebx + 0x120c]
lea eax, [esi*4]
push esi
lea ecx, [ebp - 0x228]
add edi, eax
call fcn.00423450
mov dword [edi], eax
mov ecx, dword [ebx + 0x120c]
mov ecx, dword [ecx + esi*4]
mov edx, dword [ecx]
call dword [edx]
mov eax, dword [ebp - 0x1fc]
inc esi
cmp esi, eax
jl 0x426872
lea eax, [ebx + 0x11e0]
push eax
call fcn.0040faa0
mov eax, dword [ebp - 0x1c0]
add esp, 4
lea ecx, [ebx + 0x1214]
push eax
mov dword [ebp - 0x18], ecx
call fcn.00401a40
mov eax, dword [ebp - 0x1c0]
xor esi, esi
test eax, eax
jle 0x42691b
jmp 0x4268e0
mov ecx, dword [ebp - 0x14]
mov edi, dword [ecx + 0x1240]
lea ebx, [esi*4]
push esi
lea ecx, [ebp - 0x1ec]
add edi, ebx
call fcn.00423450
mov edx, dword [ebp - 0x14]
mov dword [edi], eax
mov eax, dword [edx + 0x1240]
mov ecx, dword [ebx + eax]
mov edx, dword [ecx]
call dword [edx]
mov eax, dword [ebp - 0x1c0]
inc esi
cmp esi, eax
jl 0x4268e0
mov eax, dword [ebp - 0x18]
push eax
call fcn.0040faa0
add esp, 4
lea ecx, [ebp - 0x1ec]
mov byte [ebp - 4], 0xe
call fcn.0040c6f0
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 4], 0xd
call fcn.0040c6f0
lea ecx, [ebp - 0x228]
mov byte [ebp - 4], 0xc
call fcn.0040c6f0
lea ecx, [ebp - 0x174]
mov byte [ebp - 4], 7
call fcn.0040c6f0
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 6
call fcn.00402380
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 5
call fcn.00402380
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 4
call fcn.00402380
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 3
call fcn.00402380
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 2
call fcn.00402380
lea ecx, [ebp - 0x298]
mov byte [ebp - 4], 1
call fcn.00402380
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 4], 0
call fcn.00402380
lea ecx, [ebp - 0x308]
mov dword [ebp - 4], 0xffffffff
call fcn.00402380
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret