Function at 0x419868
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffae8
mov dword [ebp - 0x58], edx
mov dword [ebp - 0x54], eax
mov eax, 0x6f3364
call fcn.0066d220
mov edx, dword [ebp - 0x54]
mov ecx, dword [edx + 0x33c]
mov dword [ebp - 0x5c], ecx
push dword [ebp - 0x58]
push 0x833750
call fcn.0066ce08
add esp, 8
push 0x5c
push 0x833750
call fcn.0066cf45
add esp, 8
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x88]
test eax, eax
jne 0x419937
mov dl, byte [0x833750]
test dl, dl
je 0x419937
push 0x833750
push 0x6efa33
lea ecx, [ebp - 0x1c4]
push ecx
call fcn.006712b0
add esp, 0xc
mov eax, dword [0x6eba14]
test eax, eax
jne 0x419988
mov dword [0x6eba10], 1
mov word [ebp - 0x40], 8
lea edx, [ebp - 0x1c4]
lea eax, [ebp - 4]
call fcn.0067d2d0
inc dword [ebp - 0x34]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x54]
mov eax, dword [ecx + 0x464]
call fcn.0063a394
dec dword [ebp - 0x34]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0067d4bc
xor ecx, ecx
mov dword [0x6eba10], ecx
jmp 0x419988
mov eax, dword [0x6eba14]
test eax, eax
jne 0x419988
mov dword [0x6eba10], 1
mov word [ebp - 0x40], 0x14
mov edx, 0x833750
lea eax, [ebp - 8]
call fcn.0067d2d0
inc dword [ebp - 0x34]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x54]
mov eax, dword [ecx + 0x464]
call fcn.0063a394
dec dword [ebp - 0x34]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0067d4bc
xor ecx, ecx
mov dword [0x6eba10], ecx
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax + 0x22c]
call fcn.00659b4c
mov edx, dword [ebp - 0x5c]
mov eax, dword [edx + 0x22c]
call fcn.00659b2c
xor edx, edx
mov dword [0x6ed0bc], edx
mov ecx, dword [ebp - 0x58]
mov al, byte [ecx]
test al, al
jne 0x419cb5
mov edx, dword [ebp - 0x54]
mov eax, dword [edx + 0x338]
call fcn.00655944
call fcn.006539a4
mov dword [ebp - 0x80], eax
mov edx, dword [ebp - 0x80]
test edx, edx
je 0x419c2b
mov ecx, dword [ebp - 0x5c]
mov eax, dword [ecx + 0x22c]
call fcn.006599dc
mov dword [ebp - 0x60], eax
mov word [ebp - 0x40], 0x20
mov edx, dword [ebp - 0x80]
add edx, 8
lea eax, [ebp - 0xc]
call fcn.0067d308
inc dword [ebp - 0x34]
mov edx, dword [eax]
mov eax, dword [ebp - 0x60]
call fcn.0065944c
dec dword [ebp - 0x34]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.0067d4bc
mov ecx, dword [ebp - 0x80]
mov edx, dword [ecx + 0xc]
mov eax, dword [ebp - 0x60]
call fcn.006594fc
mov ecx, dword [ebp - 0x80]
mov eax, dword [ecx + 0xc]
mov edx, dword [eax]
sub edx, 1
jb 0x419a4a
je 0x419a7c
dec edx
je 0x419aad
sub edx, 3
je 0x419adf
jmp 0x419c15
mov ecx, dword [0x6eb994]
test ecx, ecx
je 0x419a68
mov ecx, 0x10
xor edx, edx
mov eax, dword [ebp - 0x60]
call fcn.00659634
jmp 0x419c15
mov ecx, 3
xor edx, edx
mov eax, dword [ebp - 0x60]
call fcn.00659634
jmp 0x419c15
mov eax, dword [0x6eb994]
test eax, eax
je 0x419a99
mov ecx, 0x11
xor edx, edx
mov eax, dword [ebp - 0x60]
call fcn.00659634
jmp 0x419c15
mov ecx, 4
xor edx, edx
mov eax, dword [ebp - 0x60]
call fcn.00659634
jmp 0x419c15
mov edx, dword [0x6eb994]
test edx, edx
je 0x419acb
mov ecx, 0x12
xor edx, edx
mov eax, dword [ebp - 0x60]
call fcn.00659634
jmp 0x419c15
mov ecx, 5
xor edx, edx
mov eax, dword [ebp - 0x60]
call fcn.00659634
jmp 0x419c15
push dword [0x833738]
mov ecx, dword [ebp - 0x60]
add ecx, 0x24
mov dword [ebp - 0xa4], ecx
mov eax, dword [ebp - 0xa4]
mov edx, dword [eax]
test edx, edx
je 0x419b07
mov ecx, dword [ebp - 0xa4]
mov eax, dword [ecx]
jmp 0x419b0c
mov eax, 0x6efa37
push eax
call fcn.0066d004
add esp, 8
test eax, eax
jne 0x419b4b
mov edx, dword [0x6eb994]
test edx, edx
je 0x419b37
mov ecx, 0x13
xor edx, edx
mov eax, dword [ebp - 0x60]
call fcn.00659634
jmp 0x419c15
mov ecx, 6
xor edx, edx
mov eax, dword [ebp - 0x60]
call fcn.00659634
jmp 0x419c15
push dword [0x833740]
mov ecx, dword [ebp - 0x60]
add ecx, 0x24
mov dword [ebp - 0xa8], ecx
mov eax, dword [ebp - 0xa8]
mov edx, dword [eax]
test edx, edx
je 0x419b73
mov ecx, dword [ebp - 0xa8]
mov eax, dword [ecx]
jmp 0x419b78
mov eax, 0x6efa38
push eax
call fcn.0066d004
add esp, 8
test eax, eax
jne 0x419bb1
mov edx, dword [0x6eb994]
test edx, edx
je 0x419ba0
mov ecx, 0xe
xor edx, edx
mov eax, dword [ebp - 0x60]
call fcn.00659634
jmp 0x419c15
mov ecx, 7
xor edx, edx
mov eax, dword [ebp - 0x60]
call fcn.00659634
jmp 0x419c15
push dword [0x83373c]
mov ecx, dword [ebp - 0x60]
add ecx, 0x24
mov dword [ebp - 0xac], ecx
mov eax, dword [ebp - 0xac]
mov edx, dword [eax]
test edx, edx
je 0x419bd9
mov ecx, dword [ebp - 0xac]
mov eax, dword [ecx]
jmp 0x419bde
mov eax, 0x6efa39
push eax
call fcn.0066d004
add esp, 8
test eax, eax
jne 0x419c15
mov edx, dword [0x6eb994]
test edx, edx
je 0x419c06
mov ecx, 0x14
xor edx, edx
mov eax, dword [ebp - 0x60]
call fcn.00659634
jmp 0x419c15
mov ecx, 8
xor edx, edx
mov eax, dword [ebp - 0x60]
call fcn.00659634
mov eax, dword [ebp - 0x80]
call fcn.00653894
mov dword [ebp - 0x80], eax
mov edx, dword [ebp - 0x80]
test edx, edx
jne 0x4199da
mov ecx, dword [ebp - 0x5c]
mov eax, dword [ecx + 0x22c]
call fcn.00659d28
push 0x560b
call fcn.00402b9c
pop ecx
push eax
push dword [0x833734]
push str._s_0__s__0_KB
lea edx, [ebp - 0x1c4]
push edx
call fcn.006712b0
add esp, 0x10
mov word [ebp - 0x40], 0x2c
lea edx, [ebp - 0x1c4]
lea eax, [ebp - 0x10]
call fcn.0067d2d0
inc dword [ebp - 0x34]
push dword [eax]
mov ecx, dword [ebp - 0x54]
mov eax, dword [ecx + 0x3b4]
mov eax, dword [eax + 0x208]
mov edx, 2
call fcn.0065222c
pop edx
call fcn.00652188
dec dword [ebp - 0x34]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.0067d4bc
mov eax, dword [ebp - 0x50]
mov dword fs:[0], eax
jmp 0x41a2cc
push dword [ebp - 0x58]
lea ecx, [ebp - 0x408]
push ecx
call fcn.0066ce08
add esp, 8
lea eax, [ebp - 0x408]
push eax
call fcn.0066ce38
pop ecx
mov dword [ebp - 0x8c], eax
mov edx, dword [ebp - 0x8c]
movsx ecx, byte [ebp + edx - 0x409]
cmp ecx, 0x5c
je 0x419d01
push 0x6efa48
lea eax, [ebp - 0x408]
push eax
call fcn.0066cd2c
add esp, 8
push 0x6efa4a
lea edx, [ebp - 0x408]
push edx
call fcn.0066cd2c
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x90], ecx
xor eax, eax
mov dword [ebp - 0x94], eax
push 1
call sub.KERNEL32.DLL_SetErrorMode
mov dword [ebp - 0x9c], eax
lea edx, [ebp - 0x304]
push edx
lea ecx, [ebp - 0x408]
push ecx
call sub.KERNEL32.DLL_FindFirstFileA
mov dword [ebp - 0x6c], eax
cmp eax, 0xffffffff
je 0x41a16e
mov dword [ebp - 0xa0], 1
mov edx, dword [ebp - 0xa0]
test edx, edx
jne 0x419d9f
push 0x140
push 1
lea ecx, [ebp - 0x304]
push ecx
call fcn.0066cc88
add esp, 0xc
lea eax, [ebp - 0x304]
push eax
push dword [ebp - 0x6c]
call sub.KERNEL32.DLL_FindNextFileA
mov dword [ebp - 0xa0], eax
mov edx, dword [ebp - 0xa0]
cmp edx, 0x12
je 0x41a166
mov ecx, dword [ebp - 0xa0]
test ecx, ecx
jne 0x419dba
mov eax, dword [ebp - 0x304]
cmp eax, 0x20
jne 0x41a166
jmp 0x419d5b
xor edx, edx
mov dword [ebp - 0xa0], edx
lea ecx, [ebp - 0x2d8]
push ecx
call fcn.00451168
pop ecx
test eax, eax
jne 0x419d5b
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax + 0x22c]
call fcn.006599dc
mov dword [ebp - 0x60], eax
mov word [ebp - 0x40], 0x38
lea edx, [ebp - 0x2d8]
lea eax, [ebp - 0x14]
call fcn.0067d2d0
inc dword [ebp - 0x34]
mov edx, dword [eax]
mov eax, dword [ebp - 0x60]
call fcn.0065944c
dec dword [ebp - 0x34]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.0067d4bc
mov ecx, dword [0x6ed0bc]
mov eax, dword [0x6ed0c0]
cmp ecx, eax
jge 0x419e39
mov edx, dword [0x6ed0bc]
mov ecx, dword [edx*4 + 0x8340a8]
mov dword [ebp - 0x98], ecx
jmp 0x419e5a
push 0x18
call fcn.0066c62c
pop ecx
mov edx, dword [0x6ed0bc]
mov dword [edx*4 + 0x8340a8], eax
mov dword [ebp - 0x98], eax
inc dword [0x6ed0c0]
inc dword [0x6ed0bc]
test byte [ebp - 0x304], 0x10
je 0x419eb9
mov ecx, dword [ebp - 0x98]
mov dword [ecx], 1
mov eax, dword [ebp - 0x98]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov ecx, 2
xor edx, edx
mov eax, dword [ebp - 0x60]
call fcn.00659634
mov byte [ebp - 0x1c4], 0
push dword [0x833728]
lea edx, [ebp - 0x518]
push edx
call fcn.0066ce08
add esp, 8
jmp 0x419f70
mov ecx, dword [ebp - 0x98]
xor eax, eax
mov dword [ecx], eax
lea edx, [ebp - 0x84]
push edx
push 1
lea ecx, [ebp - 0x518]
lea edx, [ebp - 0x2d8]
mov eax, dword [ebp - 0x54]
call fcn.0040497c
mov ecx, dword [ebp - 0x84]
xor edx, edx
mov eax, dword [ebp - 0x60]
call fcn.00659634
mov ecx, dword [ebp - 0x2e4]
mov eax, dword [ebp - 0x98]
mov dword [eax + 0x10], ecx
mov edx, dword [ebp - 0x2e8]
mov ecx, dword [ebp - 0x98]
mov dword [ecx + 0x14], edx
mov eax, dword [ebp - 0x98]
mov edx, dword [eax + 0x10]
mov dword [ebp - 0x7c], edx
mov edx, dword [eax + 0x14]
mov dword [ebp - 0x78], edx
lea ecx, [ebp - 0x1c4]
push ecx
push dword [ebp - 0x78]
push dword [ebp - 0x7c]
call fcn.00413d6c
add esp, 0xc
inc dword [ebp - 0x90]
push 0
push 2
push 0
push 0x800
mov edx, dword [ebp - 0x98]
mov eax, dword [edx + 0x10]
mov edx, dword [edx + 0x14]
add eax, 0x800
adc edx, 0
sub eax, 1
sbb edx, 0
call fcn.00674923
call fcn.00674900
add dword [ebp - 0x94], eax
mov edx, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x2f0]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0x2ec]
mov dword [edx + 8], ecx
mov edx, dword [ebp - 0x98]
mov eax, dword [ebp - 0x60]
call fcn.006594fc
mov ecx, dword [ebp - 0x60]
add ecx, 8
mov dword [ebp - 0xb0], ecx
mov word [ebp - 0x40], 0x44
lea edx, [ebp - 0x1c4]
lea eax, [ebp - 0x18]
call fcn.0067d2d0
inc dword [ebp - 0x34]
mov edx, dword [eax]
mov eax, dword [ebp - 0xb0]
mov eax, dword [eax]
mov ecx, dword [eax]
call dword [ecx + 0x38]
dec dword [ebp - 0x34]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.0067d4bc
mov ecx, dword [ebp - 0x60]
add ecx, 8
mov dword [ebp - 0xb4], ecx
mov word [ebp - 0x40], 0x50
lea edx, [ebp - 0x518]
lea eax, [ebp - 0x1c]
call fcn.0067d2d0
inc dword [ebp - 0x34]
mov edx, dword [eax]
mov eax, dword [ebp - 0xb4]
mov eax, dword [eax]
mov ecx, dword [eax]
call dword [ecx + 0x38]
dec dword [ebp - 0x34]
lea eax, [ebp - 0x1c]
mov edx, 2
call fcn.0067d4bc
test byte [ebp - 0x304], 2
je 0x41a066
mov ecx, dword [ebp - 0x60]
add ecx, 8
mov dword [ebp - 0xb8], ecx
mov word [ebp - 0x40], 0x5c
mov edx, 0x6efa4e
lea eax, [ebp - 0x20]
call fcn.0067d2d0
inc dword [ebp - 0x34]
mov edx, dword [eax]
mov eax, dword [ebp - 0xb8]
mov eax, dword [eax]
mov ecx, dword [eax]
call dword [ecx + 0x38]
dec dword [ebp - 0x34]
lea eax, [ebp - 0x20]
mov edx, 2
call fcn.0067d4bc
jmp 0x41a0a7
mov ecx, dword [ebp - 0x60]
add ecx, 8
mov dword [ebp - 0xbc], ecx
mov word [ebp - 0x40], 0x68
mov edx, 0x6efa50
lea eax, [ebp - 0x24]
call fcn.0067d2d0
inc dword [ebp - 0x34]
mov edx, dword [eax]
mov eax, dword [ebp - 0xbc]
mov eax, dword [eax]
mov ecx, dword [eax]
call dword [ecx + 0x38]
dec dword [ebp - 0x34]
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.0067d4bc
push 0x6efa52
lea ecx, [ebp - 0x1c4]
push ecx
call fcn.006712b0
add esp, 8
lea eax, [ebp - 0x74]
push eax
lea edx, [ebp - 0x2f0]
push edx
call sub.KERNEL32.DLL_FileTimeToLocalFileTime
test eax, eax
je 0x41a11f
lea ecx, [ebp - 0x418]
push ecx
lea eax, [ebp - 0x74]
push eax
call sub.KERNEL32.DLL_FileTimeToSystemTime
test eax, eax
je 0x41a11f
movzx edx, word [ebp - 0x40e]
push edx
movzx ecx, word [ebp - 0x410]
push ecx
movzx eax, word [ebp - 0x412]
push eax
movzx edx, word [ebp - 0x416]
push edx
movzx ecx, word [ebp - 0x418]
push ecx
push 0x6efa63
lea eax, [ebp - 0x1c4]
push eax
call fcn.006712b0
add esp, 0x1c
mov edx, dword [ebp - 0x60]
add edx, 8
mov dword [ebp - 0xc0], edx
mov word [ebp - 0x40], 0x74
lea edx, [ebp - 0x1c4]
lea eax, [ebp - 0x28]
call fcn.0067d2d0
inc dword [ebp - 0x34]
mov edx, dword [eax]
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax]
mov ecx, dword [eax]
call dword [ecx + 0x38]
dec dword [ebp - 0x34]
lea eax, [ebp - 0x28]
mov edx, 2
call fcn.0067d4bc
jmp 0x419d5b
push dword [ebp - 0x6c]
call sub.KERNEL32.DLL_FindClose
push dword [ebp - 0x9c]
call sub.KERNEL32.DLL_SetErrorMode
mov eax, dword [ebp - 0x5c]
call fcn.0065cea4
mov edx, dword [ebp - 0x5c]
mov eax, dword [edx + 0x22c]
call fcn.00659d28
mov edx, dword [ebp - 0x94]
cmp edx, 0x2710
jl 0x41a249
mov ecx, dword [ebp - 0x94]
add ecx, 0x3ff
test ecx, ecx
jns 0x41a1b7
add ecx, 0x3ff
sar ecx, 0xa
mov dword [ebp - 0x94], ecx
mov eax, dword [ebp - 0x94]
cmp eax, 0x2710
jl 0x41a215
mov edx, dword [ebp - 0x94]
add edx, 0x3ff
test edx, edx
jns 0x41a1e3
add edx, 0x3ff
sar edx, 0xa
push edx
push 0x560b
call fcn.00402b9c
pop ecx
push eax
push dword [ebp - 0x90]
push dword [0x833734]
push str._s__d__s___d_GB
lea ecx, [ebp - 0x1c4]
push ecx
call fcn.006712b0
add esp, 0x18
jmp 0x41a27b
push dword [ebp - 0x94]
push 0x560b
call fcn.00402b9c
pop ecx
push eax
push dword [ebp - 0x90]
push dword [0x833734]
push str._s__d__s___d_MB
lea eax, [ebp - 0x1c4]
push eax
call fcn.006712b0
add esp, 0x18
jmp 0x41a27b
push dword [ebp - 0x94]
push 0x560b
call fcn.00402b9c
pop ecx
push eax
push dword [ebp - 0x90]
push dword [0x833734]
push str._s__d__s___d_KB
lea edx, [ebp - 0x1c4]
push edx
call fcn.006712b0
add esp, 0x18
mov word [ebp - 0x40], 0x80
lea edx, [ebp - 0x1c4]
lea eax, [ebp - 0x2c]
call fcn.0067d2d0
inc dword [ebp - 0x34]
push dword [eax]
mov ecx, dword [ebp - 0x54]
mov eax, dword [ecx + 0x3b4]
mov eax, dword [eax + 0x208]
mov edx, 2
call fcn.0065222c
pop edx
call fcn.00652188
dec dword [ebp - 0x34]
lea eax, [ebp - 0x2c]
mov edx, 2
call fcn.0067d4bc
mov eax, dword [ebp - 0x50]
mov dword fs:[0], eax
mov esp, ebp
pop ebp
ret