Function at 0x41c120
Capabilities:
Enumerate files on windows

Disassembly:
enter 0x78c, 0
push ebx
push ecx
push edx
mov esi, dword [ebp + 8]
lea edi, [ebp - 0x108]
call fcn.00401940
mov eax, 0
mov dword [0x42f3b4], eax
lea esi, [ebp - 0x108]
lea edi, [ebp - 0x78c]
call fcn.00401b30
mov esi, 0x42f3b8
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x68c]
call fcn.00401b30
mov esi, 0x42f3bb
call fcn.00401af0
lea edi, [ebp - 0x48c]
lea esi, [ebp - 0x68c]
call fcn.00401940
lea eax, [ebp - 0x248]
push eax
lea ebx, [ebp - 0x48b]
push ebx
call sub.kernel32.dll_FindFirstFileA
mov dword [ebp - 0x38c], eax
lea ebx, [ebp - 0x68c]
push ebx
lea eax, [ebp - 0x21c]
push eax
call fcn.00402b90
lea edi, [ebp - 0x58c]
lea esi, [ebp - 0x68c]
call fcn.00401940
push 0x42f3bd
mov eax, edi
push eax
call fcn.004033b0
test eax, eax
jle 0x41c1d5
jmp 0x41c314
mov eax, dword [ebp - 0x248]
and eax, 0x10
cmp eax, 0x10
jne 0x41c1e8
jmp 0x41c314
movzx eax, byte [ebp - 0x58c]
cmp byte [ebp + eax - 0x58c], 0x10
ja 0x41c210
push 0xff
lea ebx, [ebp - 0x58c]
push ebx
movzx ecx, al
push ecx
push 1
call fcn.00404fd0
push 0x42f3c0
lea eax, [ebp - 0x58c]
push eax
call fcn.004033b0
test eax, eax
jle 0x41c246
push 0xff
lea eax, [ebp - 0x58c]
push eax
push 1
push 0x42f3c2
push eax
call fcn.004033b0
push eax
call fcn.00404fd0
jmp 0x41c256
lea edi, [ebp - 0x58c]
mov esi, 0x42f3c4
call fcn.00401940
push 0x43074c
push 0x18
push 0x42f3c5
push 0
call fcn.00403350
movzx eax, byte [ebp - 0x58c]
push eax
push 0
call fcn.00404040
push 1
push 0x42f3dd
push 0
call fcn.00403350
lea eax, [ebp - 0x58c]
push eax
push 0
call fcn.00402790
push 1
push 0x42f3de
push 0
call fcn.00403350
movzx eax, byte [ebp - 0x58b]
push eax
push 0
call fcn.00404040
call fcn.00403330
lea esi, [ebp - 0x58c]
mov edi, 0x42f3df
call fcn.004066c0
test al, al
je 0x41c314
cmp dword [0x42f3b4], 0x20
jge 0x41c2d9
inc dword [0x42f3b4]
imul eax, dword [0x42f3b4], 0x100
mov dword [ebp - 0x590], eax
lea ebx, [ebp - 0x690]
push ebx
lea eax, [ebp - 0x58c]
push eax
call fcn.004117f0
mov eax, dword [ebp - 0x590]
lea edi, [eax + 0x46fdbf]
lea esi, [ebp - 0x690]
call fcn.00401940
lea eax, [ebp - 0x248]
push eax
push dword [ebp - 0x38c]
call sub.kernel32.dll_FindNextFileA
test al, al
je 0x41c446
lea eax, [ebp - 0x68c]
push eax
lea ebx, [ebp - 0x21c]
push ebx
call fcn.00402b90
lea edi, [ebp - 0x58c]
lea esi, [ebp - 0x68c]
call fcn.00401940
push 0x42f3e0
mov eax, edi
push eax
call fcn.004033b0
test eax, eax
jle 0x41c365
jmp 0x41c314
mov eax, dword [ebp - 0x248]
and eax, 0x10
cmp eax, 0x10
jne 0x41c375
jmp 0x41c314
movzx eax, byte [ebp - 0x58c]
cmp byte [ebp + eax - 0x58c], 0x10
ja 0x41c39d
push 0xff
lea ebx, [ebp - 0x58c]
push ebx
movzx ecx, al
push ecx
push 1
call fcn.00404fd0
push 0x42f3e3
lea eax, [ebp - 0x58c]
push eax
call fcn.004033b0
test eax, eax
jle 0x41c3d3
push 0xff
lea eax, [ebp - 0x58c]
push eax
push 1
push 0x42f3e5
push eax
call fcn.004033b0
push eax
call fcn.00404fd0
jmp 0x41c3e3
lea edi, [ebp - 0x58c]
mov esi, 0x42f3e7
call fcn.00401940
lea esi, [ebp - 0x58c]
mov edi, 0x42f3e8
call fcn.004066c0
test al, al
je 0x41c441
cmp dword [0x42f3b4], 0x20
jge 0x41c406
inc dword [0x42f3b4]
imul eax, dword [0x42f3b4], 0x100
mov dword [ebp - 0x590], eax
lea ebx, [ebp - 0x690]
push ebx
lea eax, [ebp - 0x58c]
push eax
call fcn.004117f0
mov eax, dword [ebp - 0x590]
lea edi, [eax + 0x46fdbf]
lea esi, [ebp - 0x690]
call fcn.00401940
jmp 0x41c314
push dword [ebp - 0x38c]
call sub.kernel32.dll_FindClose
pop edx
pop ecx
pop ebx
leave
ret 4