Function at 0x41ce60
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4add13
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x450
mov eax, dword [0x4e3114]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x2c0], 0
mov dword [ebp - 4], 2
mov byte [ebp - 4], 3
push 0xc
lea ecx, [ebp - 0x40]
call fcn.00416410
lea ecx, [ebp - 0x40]
call fcn.004088d0
mov byte [ebp - 4], 4
push 0x4b7c5c
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x34]
push ecx
call fcn.00402400
add esp, 0xc
mov dword [ebp - 0x378], eax
mov byte [ebp - 4], 5
lea edx, [ebp - 0x2b4]
push edx
lea ecx, [ebp - 0x34]
call fcn.00416f90
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 0xffffffff
jne 0x41cf1d
mov eax, dword [0x4e9b80]
add eax, 1
mov ecx, dword [0x4e9b84]
adc ecx, 0
mov dword [0x4e9b80], eax
mov dword [0x4e9b84], ecx
lea edx, [ebp - 0x288]
push edx
lea ecx, [ebp - 0x3e8]
call fcn.004082f0
mov dword [ebp - 0x34c], eax
mov eax, dword [ebp - 0x34c]
mov dword [ebp - 0x2e8], eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x2e8]
mov dword [ebp - 0x2f4], ecx
push 0x4b7c64
mov edx, dword [ebp + 8]
push edx
lea eax, [ebp - 0x3d0]
push eax
call fcn.00402400
add esp, 0xc
mov dword [ebp - 0x2ec], eax
mov ecx, dword [ebp - 0x2ec]
mov dword [ebp - 0x2f0], ecx
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x2f0]
mov dword [ebp - 0x2f8], edx
mov eax, dword [ebp - 0x2f4]
push eax
mov ecx, dword [ebp - 0x2f8]
push ecx
lea edx, [ebp - 0x460]
push edx
call fcn.004022d0
add esp, 0xc
mov dword [ebp - 0x2fc], eax
mov eax, dword [ebp - 0x2fc]
push eax
lea ecx, [ebp - 0x34]
call fcn.0040c9d0
lea ecx, [ebp - 0x460]
call fcn.0040ba40
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x3d0]
call fcn.0040ba40
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x3e8]
call fcn.0040ba40
mov ecx, dword [ebp - 0x2b4]
and ecx, 0x10
jne 0x41d498
mov byte [ebp - 4], 8
push 0x4b7c68
lea ecx, [ebp - 0x34]
call fcn.00416f90
push eax
call fcn.0048d06f
add esp, 8
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 0
jne 0x41d027
mov byte [ebp - 4], 5
jmp 0x41d503
mov edx, dword [ebp - 0x2c8]
push edx
call fcn.0048d2d0
add esp, 4
push 0
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x400]
call fcn.00401c00
mov dword [ebp - 0x300], eax
mov ecx, dword [ebp - 0x300]
mov dword [ebp - 0x304], ecx
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x304]
push edx
call fcn.00419b40
add esp, 4
mov byte [ebp - 0x2b5], al
mov al, byte [ebp - 0x2b5]
mov byte [ebp - 0x2b6], al
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x400]
call fcn.0040c8c0
movzx ecx, byte [ebp - 0x2b6]
test ecx, ecx
je 0x41d101
push 0
lea edx, [ebp - 0x34]
push edx
lea ecx, [ebp - 0x418]
call fcn.00401c00
mov dword [ebp - 0x308], eax
mov eax, dword [ebp - 0x308]
mov dword [ebp - 0x30c], eax
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x30c]
push ecx
call fcn.00419080
add esp, 4
mov dword [ebp - 0x354], eax
mov dword [ebp - 0x350], edx
mov edx, dword [ebp - 0x354]
mov dword [ebp - 0x2e4], edx
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0x2e0], eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x418]
call fcn.0040c8c0
push 0
lea ecx, [ebp - 0x34]
push ecx
lea ecx, [ebp - 0x448]
call fcn.00401c00
mov dword [ebp - 0x310], eax
mov edx, dword [ebp - 0x310]
mov dword [ebp - 0x314], edx
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x318], eax
lea ecx, [ebp - 0x430]
push ecx
mov ecx, dword [ebp - 0x318]
call fcn.00418fc0
mov dword [ebp - 0x31c], eax
mov edx, dword [ebp - 0x31c]
mov dword [ebp - 0x320], edx
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x320]
mov dword [ebp - 0x324], eax
lea ecx, [ebp - 0x64]
push ecx
mov ecx, dword [ebp - 0x324]
call fcn.0041f330
mov dword [ebp - 0x388], eax
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x430]
call fcn.0040c8c0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x448]
call fcn.0040c8c0
push 0xc
lea ecx, [ebp - 0x4c]
call fcn.00416410
lea ecx, [ebp - 0x4c]
call fcn.004088d0
mov byte [ebp - 4], 0x10
cmp dword [ebp - 0x2e0], 0
jl 0x41d27e
jg 0x41d1d0
cmp dword [ebp - 0x2e4], 0x3200000
jbe 0x41d27e
push 0
lea edx, [ebp - 0x34]
push edx
lea ecx, [ebp - 0x3b8]
call fcn.00401c00
mov dword [ebp - 0x38c], eax
mov byte [ebp - 4], 0x11
mov eax, dword [ebp - 0x2c0]
or eax, 1
mov dword [ebp - 0x2c0], eax
lea ecx, [ebp - 0x3b8]
push ecx
call fcn.00419b40
add esp, 4
mov byte [ebp - 0x2b7], al
movzx edx, byte [ebp - 0x2b7]
test edx, edx
je 0x41d27e
push 0x4b7c70
lea eax, [ebp - 0x64]
push eax
call fcn.00402090
add esp, 8
mov byte [ebp - 0x2b8], al
movzx ecx, byte [ebp - 0x2b8]
test ecx, ecx
je 0x41d27e
push 0x4b7c7c
lea edx, [ebp - 0x64]
push edx
call fcn.004020d0
add esp, 8
mov byte [ebp - 0x2b9], al
movzx eax, byte [ebp - 0x2b9]
test eax, eax
je 0x41d27e
push 0
push 0x4b7c80
lea ecx, [ebp - 0x34]
call fcn.00419170
cmp eax, 0xffffffff
jne 0x41d27e
mov dword [ebp - 0x2cc], 1
jmp 0x41d288
mov dword [ebp - 0x2cc], 0
mov cl, byte [ebp - 0x2cc]
mov byte [ebp - 0x2ba], cl
mov dword [ebp - 4], 0x10
mov edx, dword [ebp - 0x2c0]
and edx, 1
je 0x41d2b8
and dword [ebp - 0x2c0], 0xfffffffe
lea ecx, [ebp - 0x3b8]
call fcn.0040c8c0
movzx eax, byte [ebp - 0x2ba]
test eax, eax
je 0x41d44a
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x2e0]
push ecx
mov edx, dword [ebp - 0x2e4]
push edx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x390], esp
lea eax, [ebp + 0x3c]
push eax
call fcn.00407e90
mov dword [ebp - 0x394], eax
mov byte [ebp - 4], 0x13
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x398], esp
lea edx, [ebp + 0x24]
push edx
call fcn.00408200
mov dword [ebp - 0x39c], eax
mov byte [ebp - 4], 0x14
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x368], esp
lea eax, [ebp + 0xc]
push eax
call fcn.00408200
mov dword [ebp - 0x36c], eax
mov byte [ebp - 4], 0x15
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x370], esp
lea edx, [ebp - 0x34]
push edx
call fcn.00408200
mov byte [ebp - 4], 0x12
call fcn.0041a620
add esp, 0x68
jmp 0x41d42f
mov dword [ebp - 4], 0x10
jmp 0x41d441
jmp 0x41d44a
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x4c]
call fcn.0040be20
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x64]
call fcn.0040b9f0
jmp 0x41d486
mov dword [ebp - 4], 5
jmp 0x41d496
jmp 0x41d503
push 0x4b7cdc
lea edx, [ebp - 0x288]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x41d503
push 0x4b7ce0
lea eax, [ebp - 0x288]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x41d503
push 0
push 0x4b7ce8
lea ecx, [ebp - 0x34]
call fcn.00419170
cmp eax, 0xffffffff
jne 0x41d4e4
mov dword [ebp - 0x2d4], 1
jmp 0x41d4ee
mov dword [ebp - 0x2d4], 0
cmp dword [ebp - 0x2d4], 0
je 0x41d503
lea ecx, [ebp - 0x34]
push ecx
lea ecx, [ebp - 0x40]
call fcn.0041e2b0
lea edx, [ebp - 0x2b4]
push edx
mov eax, dword [ebp - 0x2c4]
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x41cf1d
mov ecx, dword [ebp - 0x2c4]
push ecx
call dword [sym.imp.KERNEL32.dll_FindClose]
push 4
lea ecx, [ebp - 0x18]
call fcn.00416410
lea edx, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x40]
call fcn.00416ea0
push 4
lea ecx, [ebp - 0x1c]
call fcn.00416410
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x40]
call fcn.00418d60
jmp 0x41d562
lea ecx, [ebp - 0x18]
call fcn.0040d130
lea ecx, [ebp - 0x1c]
push ecx
lea ecx, [ebp - 0x18]
call fcn.0040ce90
mov byte [ebp - 0x2bb], al
movzx edx, byte [ebp - 0x2bb]
test edx, edx
je 0x41d605
lea ecx, [ebp - 0x18]
call fcn.0040d0f0
mov dword [ebp - 0x338], eax
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x33c], eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x374], esp
lea edx, [ebp + 0x3c]
push edx
call fcn.00407e90
mov dword [ebp - 0x3a0], eax
mov byte [ebp - 4], 0x18
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x37c], esp
lea eax, [ebp + 0x24]
push eax
call fcn.00408200
mov dword [ebp - 0x380], eax
mov byte [ebp - 4], 0x19
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x384], esp
lea edx, [ebp + 0xc]
push edx
call fcn.00408200
mov eax, dword [ebp - 0x33c]
push eax
mov byte [ebp - 4], 5
call fcn.0041ce60
add esp, 0x4c
jmp 0x41d55a
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x34]
call fcn.0040ba40
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
call fcn.0040be20
jmp 0x41d6a2
mov dword [ebp - 4], 2
jmp 0x41d6b4
jmp 0x41d6bf
jmp 0x41d6c8
mov byte [ebp - 4], 1
lea ecx, [ebp + 0xc]
call fcn.0040ba40
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x24]
call fcn.0040ba40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x3c]
call fcn.0040b9f0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0046bb2e
mov esp, ebp
pop ebp
ret