Function at 0x4011c0
Capabilities:
Enumerate files on windows

Disassembly:
sub esp, 0x2b8
push ebx
push ebp
push esi
push edi
mov dword [esp + 0x10], edx
mov esi, ecx
push 0x124
call fcn.0076d5a7
mov ebp, eax
mov ecx, 0x49
xor eax, eax
mov edi, ebp
rep stosd dword es:[edi], eax
mov edi, esi
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x88]
mov eax, ecx
mov esi, edi
mov edi, edx
push 0x2e
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x8c]
push ecx
call fcn.0076d580
xor ebx, ebx
add esp, 0xc
cmp eax, ebx
je 0x401225
mov byte [eax], bl
mov edi, str..idx
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x84]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
lea eax, [esp + 0x84]
and ecx, 3
push eax
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x24]
call fcn.00468b70
lea ecx, [esp + 0x20]
push ebx
call fcn.00468dc0
test al, al
je 0x401506
lea ecx, [esp + 0x84]
push 0x2e
push ecx
call fcn.0076d580
add esp, 8
cmp eax, ebx
je 0x401292
mov byte [eax], 0
mov edi, str..bag
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x84]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0x64
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.0076d5a7
add esp, 4
cmp eax, ebx
je 0x4012e2
lea ecx, [esp + 0x84]
push ecx
mov ecx, eax
call fcn.00468b70
jmp 0x4012e4
xor eax, eax
mov dword [ebp + 0x10c], eax
mov edx, dword [eax]
push ebx
mov ecx, eax
call dword [edx + 0x14]
test al, al
je 0x401506
push 1
lea ecx, [esp + 0x24]
call fcn.00468e40
mov ecx, dword [ebp + 0x10c]
push 1
mov eax, dword [ecx]
call dword [eax + 0x1c]
lea ecx, [esp + 0x14]
push 0xc
push ecx
lea ecx, [esp + 0x28]
call fcn.00468c80
cmp eax, 0xc
jne 0x401506
mov edx, dword [esp + 0x1c]
mov dword [ebp + 4], edx
mov eax, dword [esp + 0x1c]
cmp eax, ebx
jle 0x4013ab
lea eax, [eax + eax*8]
shl eax, 2
push eax
call fcn.0076d5a7
mov edi, eax
mov eax, dword [ebp + 4]
mov dword [ebp], edi
add esp, 4
lea ecx, [eax + eax*8]
xor eax, eax
shl ecx, 2
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
cmp dword [esp + 0x18], 1
jne 0x4014de
mov eax, dword [ebp + 4]
xor edi, edi
cmp eax, ebx
jle 0x4013ab
xor esi, esi
mov ecx, dword [ebp]
mov eax, esi
add eax, ecx
push 0x20
push eax
lea ecx, [esp + 0x28]
call fcn.00468c80
cmp eax, 0x20
jne 0x401506
mov ecx, dword [ebp]
inc edi
mov dword [esi + ecx + 0x20], ebx
mov eax, dword [ebp + 4]
add esi, 0x24
cmp edi, eax
jl 0x40137d
mov ecx, dword [ebp + 4]
mov edx, dword [ebp]
push fcn.0076d4b0
push 0x24
push ecx
push edx
call fcn.0076d2e0
mov eax, dword [esp + 0x20]
add esp, 0x10
cmp eax, ebx
mov dword [ebp + 0x114], ebx
je 0x4014a8
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
lea ebx, [ebp + 8]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, ebx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, ebx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
cmp byte [ecx + ebp + 8], 0x5c
jne 0x401419
mov edi, ebx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov byte [ecx + ebp + 8], al
lea ecx, [esp + 0x188]
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x401469
test byte [esp + 0x188], 0x10
jne 0x401458
mov edi, dword [sym.imp.KERNEL32.dll_FindNextFileA]
lea edx, [esp + 0x188]
push edx
push esi
call edi
test eax, eax
je 0x401462
test byte [esp + 0x188], 0x10
je 0x40143f
mov dword [ebp + 0x114], 1
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov edi, ebx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
cmp byte [ecx + ebp + 8], 0x5c
je 0x4014a6
mov edi, 0x7b78d4
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edx, ecx
mov edi, ebx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
xor ebx, ebx
lea ecx, [esp + 0x74]
mov dword [esp + 0x20], vtable.CCFileClass.0
mov dword [esp + 0x80], ebx
call fcn.00438290
lea ecx, [esp + 0x20]
mov dword [esp + 0x20], vtable.CDFileClass.0
call fcn.0042f250
mov eax, ebp
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2b8
ret
mov eax, dword [ebp + 4]
lea ecx, [esp + 0x20]
lea edx, [eax + eax*8]
mov eax, dword [ebp]
shl edx, 2
push edx
push eax
call fcn.00468c80
mov ecx, dword [ebp + 4]
lea ecx, [ecx + ecx*8]
shl ecx, 2
cmp eax, ecx
je 0x4013ab
cmp ebp, ebx
je 0x401543
mov ecx, dword [ebp + 0x10c]
cmp ecx, ebx
je 0x40151a
mov edx, dword [ecx]
push 1
call dword [edx]
mov ecx, dword [ebp + 0x110]
cmp ecx, ebx
je 0x40152a
mov eax, dword [ecx]
push 1
call dword [eax]
mov eax, dword [ebp]
cmp eax, ebx
je 0x40153a
push eax
call fcn.0076d2d5
add esp, 4
push ebp
call fcn.0076d2d5
add esp, 4
lea ecx, [esp + 0x74]
mov dword [esp + 0x20], vtable.CCFileClass.0
mov dword [esp + 0x80], ebx
call fcn.00438290
lea ecx, [esp + 0x20]
mov dword [esp + 0x20], vtable.CDFileClass.0
call fcn.0042f250
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2b8
ret