Function at 0x41f117
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push 0x278
mov eax, 0x475aef
call fcn.00472eab
mov dword [ebp - 0x27c], edx
mov eax, ecx
mov dword [ebp - 0x280], eax
mov ecx, dword [ebp + 8]
xor edi, edi
mov dword [ebp - 0x26c], ecx
mov dword [ebp - 0x274], edi
and dword [ebp - 4], edi
and dword [ebp - 0x268], edi
or esi, 0xffffffff
mov dword [ebp - 0x278], esi
mov byte [ebp - 4], 2
test eax, eax
jne 0x41f170
mov ebx, 0x80070057
mov ecx, ebx
call fcn.00427566
jmp 0x41f4c3
lea ecx, [ebp - 0x274]
mov edx, 0x409e50
push ecx
push 0
mov ecx, eax
call fcn.004268f1
mov edi, dword [ebp - 0x274]
mov ebx, eax
test ebx, ebx
js 0x41f4b8
push 0x250
lea eax, [ebp - 0x264]
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0x264]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
push eax
lea ecx, [ebp - 0x278]
call fcn.00416a04
mov esi, dword [ebp - 0x278]
test esi, esi
je 0x41f4a9
cmp esi, 0xffffffff
je 0x41f4a9
mov ecx, 0x407ef8
lea eax, [ebp - 0x238]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x41f20d
test dx, dx
je 0x41f209
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x41f20d
add eax, 4
add ecx, 4
test dx, dx
jne 0x41f1e7
xor eax, eax
jmp 0x41f212
sbb eax, eax
or eax, 1
test eax, eax
je 0x41f472
mov ecx, 0x407a68
lea eax, [ebp - 0x238]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x41f24b
test dx, dx
je 0x41f247
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x41f24b
add eax, 4
add ecx, 4
test dx, dx
jne 0x41f225
xor eax, eax
jmp 0x41f250
sbb eax, eax
or eax, 1
test eax, eax
je 0x41f472
mov eax, dword [ebp - 0x268]
test eax, eax
je 0x41f270
mov ecx, eax
call fcn.00427347
and dword [ebp - 0x268], 0
mov ecx, dword [ebp - 0x280]
lea eax, [ebp - 0x268]
push eax
push 0
lea edx, [ebp - 0x238]
call fcn.004268f1
mov ebx, eax
test ebx, ebx
js 0x41f4b8
mov ecx, dword [ebp - 0x268]
xor edx, edx
call fcn.0041e750
test eax, eax
jns 0x41f2c5
mov eax, dword [0x479b84]
test eax, eax
je 0x41f2b3
cmp eax, 0xffffffff
jne 0x41f2b5
xor eax, eax
push dword [ebp - 0x268]
push 0x409e54
jmp 0x41f423
test byte [ebp - 0x264], 0x10
mov ecx, dword [ebp - 0x268]
je 0x41f3e3
mov edx, dword [ebp - 0x27c]
lea eax, [ebp - 0x284]
push eax
lea eax, [ebp - 0x270]
push eax
push dword [ebp - 0x26c]
call fcn.0041ef3c
mov ebx, eax
test ebx, ebx
js 0x41f4b8
cmp dword [ebp - 0x270], 0
mov eax, dword [0x479b84]
je 0x41f38e
test eax, eax
je 0x41f318
cmp eax, 0xffffffff
jne 0x41f31a
xor eax, eax
push dword [ebp - 0x268]
push 0x409e88
push dword [0x47c110]
push eax
call fcn.0041704b
add esp, 0x10
cmp dword [ebp - 0x284], 0
je 0x41f472
mov eax, dword [0x479b84]
test eax, eax
je 0x41f34f
cmp eax, 0xffffffff
jne 0x41f351
xor eax, eax
mov ebx, dword [ebp - 0x268]
push ebx
push 0x409ec0
push dword [0x47c110]
push eax
call fcn.0041704b
mov edx, dword [ebp - 0x27c]
add esp, 0x10
mov ecx, ebx
push dword [ebp - 0x26c]
call fcn.0041f117
mov ebx, eax
test ebx, ebx
js 0x41f4b8
jmp 0x41f472
test eax, eax
je 0x41f397
cmp eax, 0xffffffff
jne 0x41f399
xor eax, eax
push dword [ebp - 0x268]
push 0x409f00
push dword [0x47c110]
push eax
call fcn.0041704b
mov ecx, dword [ebp - 0x268]
add esp, 0x10
call fcn.0041ea8e
test eax, eax
jns 0x41f472
mov eax, dword [0x479b84]
test eax, eax
je 0x41f3d4
cmp eax, 0xffffffff
jne 0x41f3d6
xor eax, eax
push dword [ebp - 0x268]
push 0x409f34
jmp 0x41f423
mov edx, dword [ebp - 0x26c]
lea eax, [ebp - 0x270]
push eax
call fcn.0041f073
mov ebx, eax
test ebx, ebx
js 0x41f4b8
cmp dword [ebp - 0x270], 0
je 0x41f434
mov eax, dword [0x479b84]
test eax, eax
je 0x41f416
cmp eax, 0xffffffff
jne 0x41f418
xor eax, eax
push dword [ebp - 0x268]
push 0x409f6c
push dword [0x47c110]
push eax
call fcn.0041704b
add esp, 0x10
jmp 0x41f472
mov ecx, dword [ebp - 0x268]
call fcn.0041ebb3
mov ebx, eax
test ebx, ebx
jns 0x41f472
mov eax, dword [0x479b84]
test eax, eax
je 0x41f453
cmp eax, 0xffffffff
jne 0x41f455
xor eax, eax
push dword [ebp - 0x268]
push ebx
push 0x409fa0
push dword [0x47c110]
push eax
call fcn.0041704b
add esp, 0x14
xor ebx, ebx
push 0x250
lea eax, [ebp - 0x264]
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0x264]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x41f1dc
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x12
je 0x41f4bf
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.0042754e
mov ebx, eax
mov ecx, ebx
call fcn.00427566
test ebx, ebx
jns 0x41f4ed
mov eax, dword [0x479b84]
test eax, eax
je 0x41f4d1
cmp eax, 0xffffffff
jne 0x41f4d3
xor eax, eax
push ebx
push 0x409fe4
push 0x406d68
push dword [0x47c110]
push eax
call fcn.0041704b
add esp, 0x14
mov ecx, ebx
call fcn.0042757e
test esi, esi
je 0x41f504
cmp esi, 0xffffffff
je 0x41f504
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [ebp - 0x268]
test eax, eax
je 0x41f515
mov ecx, eax
call fcn.00427347
test edi, edi
je 0x41f520
mov ecx, edi
call fcn.00427347
mov eax, ebx
call fcn.00472e69
ret 4