Function at 0x40bc80
Capabilities:
Enumerate files on windows
Enumerate files recursively
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x284
mov eax, dword [0x46af24]
xor eax, esp
mov dword [esp + 0x280], eax
mov eax, dword [ebp + 0x10]
push ebx
mov ebx, dword [ebp + 8]
xor ecx, ecx
push esi
push edi
mov edi, dword [ebp + 0xc]
mov dword [esp + 0x20], ebx
mov dword [esp + 0x2c], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x18], ecx
cmp ebx, ecx
jne 0x40bcda
mov eax, 0x5604
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x280]
xor ecx, esp
call fcn.004534b8
mov esp, ebp
pop ebp
ret
mov edx, dword [ebx + 0x1024]
cmp dword [edx], ecx
je 0x40bd58
mov eax, dword [ebx]
mov dword [esp + 0x1c], eax
cmp eax, ecx
jne 0x40bd08
mov eax, 0x5603
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x280]
xor ecx, esp
call fcn.004534b8
mov esp, ebp
pop ebp
ret
mov eax, dword [ebx + 8]
mov ecx, dword [ebx + 0xc]
mov esi, dword [ebx + 0x18]
mov dword [esp + 0x24], eax
call fcn.00442343
cmp dword [ebp + 0x24], 0
jne 0x40bd6f
mov ecx, dword [esp + 0x1c]
mov edx, dword [ecx + 0x97c]
mov eax, dword [edi + 0xd0]
push esi
push edx
push eax
call fcn.00449eb4
add esp, 0xc
test eax, eax
je 0x40bd6f
mov ecx, dword [edi + 0xd0]
mov edx, dword [esp + 0x24]
push ecx
push pe_nt_image_headers32
push edx
call fcn.00402980
add esp, 0xc
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x280]
xor ecx, esp
call fcn.004534b8
mov esp, ebp
pop ebp
ret
mov eax, dword [esp + 0x1c]
add eax, 0x98c
push eax
mov dword [esp + 0x38], eax
call fcn.004446d6
add esp, 4
mov dword [esp + 0xc], eax
test eax, eax
jne 0x40bdae
mov dword [esp + 0x14], 0x5602
mov eax, dword [esp + 0x14]
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x280]
xor ecx, esp
call fcn.004534b8
mov esp, ebp
pop ebp
ret
mov eax, dword [ebx]
add eax, 0x980
push eax
call fcn.00444405
add esp, 4
mov dword [esp + 0x28], eax
test eax, eax
jne 0x40bdd3
mov dword [esp + 0x14], 0x5602
jmp 0x40c41d
mov eax, dword [edi + 0xcc]
mov esi, dword [esp + 0x24]
call fcn.00402b30
mov ecx, dword [edi + 0xc8]
push ecx
call fcn.0044cdd2
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp + 0x1c]
push edx
push eax
mov ecx, ebx
push ecx
call fcn.0040aec0
mov edx, dword [edi + 0xc8]
push edx
mov dword [esp + 0x28], eax
call fcn.0044cda5
mov eax, dword [edi + 0xc8]
mov ebx, dword [esp + 0x3c]
push 0x8000
push eax
add ebx, 4
push ebx
call dword [sym.imp.MSVCR100.dll_wcsncpy]
mov ecx, dword [esp + 0x4c]
push ecx
push 0x8000
push ebx
call fcn.0044cd4b
mov eax, dword [ebp + 0x18]
add esp, 0x2c
and eax, 1
mov dword [esp + 0x30], eax
je 0x40c114
lea edx, [esp + 0x38]
push edx
push ebx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, dword [esp + 0x18]
mov dword [esp + 0x10], eax
cmp dword [esp + 0x10], 0xffffffff
je 0x40c0dd
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 0x1024]
cmp dword [ecx], 0
je 0x40c40b
mov ecx, 0x460ed8
lea eax, [esp + 0x64]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x40beac
test dx, dx
je 0x40bea8
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x40beac
add eax, 4
add ecx, 4
test dx, dx
jne 0x40be86
xor eax, eax
jmp 0x40beb1
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x40c0c3
mov ecx, 0x461018
lea eax, [esp + 0x64]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x40bee8
test dx, dx
je 0x40bee4
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x40bee8
add eax, 4
add ecx, 4
test dx, dx
jne 0x40bec2
xor eax, eax
jmp 0x40beed
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x40c0c3
mov edx, dword [esp + 0x1c]
cmp dword [edx + 0xb20], 0
mov eax, dword [esp + 0x38]
je 0x40bf11
test eax, 0x1000
jne 0x40c0c3
test al, 0x10
je 0x40bf29
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x38]
push edx
mov esi, 1
push eax
jmp 0x40c0cd
mov ecx, dword [esp + 0xc]
push ecx
call fcn.00444552
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x5c]
mov dword [edx + 0xb4], eax
mov ecx, dword [edi + 0x7c]
mov edx, dword [esp + 0x10]
mov dword [edx + 0x7c], ecx
mov eax, dword [edi + 0x70]
mov ecx, dword [esp + 0x10]
mov dword [ecx + 0x70], eax
mov edx, dword [edi + 0x88]
mov eax, dword [esp + 0x10]
mov dword [eax + 0x88], edx
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x3c]
xor eax, eax
mov dword [ecx + 0xb8], edx
cmp dword [edi + 0x7c], eax
mov edx, dword [edi + 0xc8]
sete al
lea ecx, [esp + 0x68]
push eax
mov eax, dword [esp + 0x14]
push ecx
push edx
push eax
call fcn.0044b0e5
add esp, 0x14
mov dword [esp + 0x14], eax
test eax, eax
jne 0x40c40b
test dword [esp + 0x38], 0x400
je 0x40bfd6
mov ecx, dword [esp + 0x1c]
cmp dword [ecx + 0xb74], eax
jne 0x40bfd6
mov edx, dword [esp + 0xc]
mov dword [edx + 0x3c], 1
mov eax, dword [esp + 0xc]
mov dword [eax + 4], edi
mov ecx, dword [esp + 0xc]
push ecx
call fcn.00449bd1
add esp, 4
cmp dword [ebp + 0x14], 0
mov eax, dword [esp + 0xc]
jne 0x40c02b
cmp dword [eax + 0x3c], 0
jne 0x40c02b
mov edx, dword [esp + 0x54]
mov dword [eax + 0xfc], edx
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x58]
mov dword [eax + 0xf8], ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0xfc]
mov eax, dword [eax + 0xf8]
mov ecx, dword [esp + 0x1c]
mov ecx, dword [ecx + 0x9c4]
push edx
push eax
call fcn.00441ee7
mov edx, dword [edi + 0x38]
mov eax, dword [esp + 0xc]
mov dword [eax + 0x38], edx
jmp 0x40c046
mov dword [eax + 0x38], 1
mov ecx, dword [edi + 0x94]
mov edx, dword [esp + 0xc]
push ecx
push edx
call fcn.0044a326
add esp, 8
mov eax, dword [edi + 0x78]
mov ecx, dword [esp + 0xc]
mov dword [ecx + 0x78], eax
mov edx, dword [edi + 0x7c]
mov eax, dword [esp + 0xc]
mov dword [eax + 0x7c], edx
mov ecx, dword [edi + 0x70]
mov edx, dword [esp + 0xc]
mov dword [edx + 0x70], ecx
mov eax, dword [edi + 0x3c]
mov ecx, dword [esp + 0xc]
mov dword [ecx + 0x3c], eax
mov edx, dword [edi + 0x88]
mov eax, dword [esp + 0xc]
mov dword [eax + 0x88], edx
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x20]
lea edx, [esp + 0xc]
push edx
mov edx, dword [ebp + 0x1c]
mov dword [ecx + 4], edi
mov ecx, dword [ebp + 0x20]
push eax
call fcn.0040bb20
add esp, 8
mov dword [esp + 0x14], eax
cmp eax, 0x5602
je 0x40c40b
cmp eax, 0x55f1
je 0x40c40b
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x38]
push ecx
push edx
jmp 0x40c0cd
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x38]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x40be5f
jmp 0x40c110
mov dword [esp + 0x18], esi
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, dword [esp + 0x24]
mov ecx, dword [esi + 8]
push eax
call fcn.00443a1e
push eax
push 0xb
lea edx, [edi + 0xa0]
push edx
call fcn.00402730
mov eax, edi
mov ecx, esi
call fcn.00403260
mov esi, dword [esp + 0x18]
test esi, esi
jne 0x40c11f
cmp dword [esp + 0x30], 0
jne 0x40c40b
cmp dword [esp + 0x10], 0
je 0x40c139
mov eax, dword [esp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov dword [esp + 0x10], 0
test byte [ebp + 0x18], 2
je 0x40c40b
lea ecx, [esp + 0x38]
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov ebx, dword [esp + 0x2c]
mov dword [esp + 0x10], eax
cmp dword [esp + 0x10], 0xffffffff
je 0x40c40b
mov edx, dword [esp + 0x20]
mov eax, dword [edx + 0x1024]
cmp dword [eax], 0
je 0x40c40b
mov ecx, 0x460ed8
lea eax, [esp + 0x64]
mov edi, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x40c1a6
test dx, dx
je 0x40c1a2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x40c1a6
add eax, 4
add ecx, 4
test dx, dx
jne 0x40c180
xor eax, eax
jmp 0x40c1ab
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x40c3f3
mov ecx, 0x461018
lea eax, [esp + 0x64]
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x40c1e6
test dx, dx
je 0x40c1e2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x40c1e6
add eax, 4
add ecx, 4
test dx, dx
jne 0x40c1c0
xor eax, eax
jmp 0x40c1eb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x40c3f3
mov ecx, dword [esp + 0x1c]
cmp dword [ecx + 0xb20], 0
je 0x40c219
test dword [esp + 0x38], 0x1000
je 0x40c219
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x38]
push edx
push eax
jmp 0x40c3fd
mov ecx, dword [edi + 0x7c]
mov edx, dword [esp + 0xc]
mov dword [edx + 0x7c], ecx
mov eax, dword [edi + 0x70]
mov ecx, dword [esp + 0xc]
mov dword [ecx + 0x70], eax
mov edx, dword [edi + 0x38]
mov eax, dword [esp + 0xc]
mov dword [eax + 0x38], edx
mov ecx, dword [edi + 0x88]
mov edx, dword [esp + 0xc]
mov dword [edx + 0x88], ecx
mov eax, dword [esp + 0xc]
mov dword [eax + 4], edi
test byte [esp + 0x38], 0x10
je 0x40c2a6
mov ecx, dword [esp + 0xc]
push ecx
call fcn.00444552
mov ecx, dword [edi + 0xc8]
xor edx, edx
cmp dword [edi + 0x7c], edx
lea eax, [esp + 0x68]
sete dl
push edx
mov edx, dword [esp + 0x14]
push eax
push ecx
push edx
call fcn.0044b14d
add esp, 0x14
mov dword [esp + 0x14], eax
test eax, eax
jne 0x40c40b
mov ecx, dword [esp + 0x38]
test ecx, 0x400
je 0x40c2ff
mov eax, dword [esp + 0x1c]
cmp dword [eax + 0xb74], 0
je 0x40c2b5
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x38]
push ecx
push edx
jmp 0x40c3fd
mov eax, dword [esp + 0xc]
mov dword [eax + 0xb8], ecx
mov ecx, dword [esp + 0xc]
mov dword [ecx + 0x3c], 1
mov edx, dword [esp + 0xc]
mov dword [edx + 4], edi
mov eax, dword [esp + 0xc]
push eax
call fcn.00449bd1
mov ecx, dword [esp + 0x10]
push ecx
mov dword [esp + 0x1c], eax
call fcn.00449c44
add esp, 8
test eax, eax
je 0x40c36a
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x38]
push edx
push eax
jmp 0x40c3fd
cmp dword [ebp + 0x14], 0
mov eax, dword [esp + 0xc]
jne 0x40c31e
cmp dword [eax + 0x3c], 0
jne 0x40c31e
mov ecx, dword [edi + 0x3c]
mov dword [eax + 0x3c], ecx
mov edx, dword [esp + 0xc]
mov dword [edx + 4], edi
jmp 0x40c36a
mov dword [eax + 0xb8], ecx
mov eax, dword [esp + 0xc]
mov dword [eax + 4], edi
mov ecx, dword [esp + 0xc]
push ecx
call fcn.00449c44
add esp, 4
test eax, eax
je 0x40c34b
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x38]
push edx
push eax
jmp 0x40c3fd
mov ecx, dword [esp + 0xc]
mov dword [ecx + 0x38], 1
mov edx, dword [edi + 0x94]
mov eax, dword [esp + 0xc]
push edx
push eax
call fcn.0044a326
add esp, 8
mov ecx, dword [edi + 0x7c]
mov edx, dword [esp + 0xc]
mov dword [edx + 0x7c], ecx
mov eax, dword [edi + 0x70]
mov ecx, dword [esp + 0xc]
mov dword [ecx + 0x70], eax
mov edx, dword [edi + 0x38]
mov eax, dword [esp + 0xc]
mov dword [eax + 0x38], edx
mov ecx, dword [edi + 0x88]
mov edx, dword [esp + 0xc]
mov dword [edx + 0x88], ecx
mov eax, dword [esp + 0xc]
mov dword [eax + 4], edi
mov ecx, dword [esp + 0xc]
mov edx, dword [ecx + 0xd0]
push edx
call fcn.00441c19
mov ecx, dword [esp + 0x10]
mov edx, dword [ebp + 0x20]
push 0
push edx
mov dword [ecx + 0x78], eax
mov eax, dword [ebp + 0x1c]
mov ecx, dword [ebp + 0x14]
mov edx, dword [esp + 0x18]
push eax
mov eax, dword [esp + 0x30]
push 3
push ecx
push ebx
push edx
push eax
call fcn.0040bc80
mov ecx, dword [esp + 0x30]
push ecx
mov dword [esp + 0x3c], eax
call fcn.00444552
mov eax, dword [esp + 0x38]
add esp, 0x28
lea edx, [esp + 0x38]
push edx
push eax
jmp 0x40c3fd
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x38]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x40c157
cmp dword [esp + 0x10], 0
je 0x40c41d
mov edx, dword [esp + 0x10]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [esp + 0xc]
test eax, eax
je 0x40c437
push 1
push 0
push eax
mov eax, dword [esp + 0x40]
push eax
call fcn.00444612
add esp, 0x10
mov eax, dword [esp + 0x28]
test eax, eax
je 0x40c44c
mov ecx, dword [esp + 0x20]
push ecx
call fcn.0040dd80
add esp, 4
mov ecx, dword [esp + 0x28c]
mov eax, dword [esp + 0x14]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.004534b8
mov esp, ebp
pop ebp
ret