Function at 0x4756a4
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x5b
push 0
push 0
dec ecx
jne 0x4756ac
push ecx
push ebx
push esi
push edi
xor eax, eax
push ebp
push 0x475c3e
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x462374]
call fcn.0046367c
mov ebx, eax
lea eax, [ebx + 0x34]
mov edx, 0x475c5c
call fcn.00407154
lea eax, [ebx + 0x3c]
mov edx, dword [ebp + 8]
mov edx, dword [edx - 4]
mov edx, dword [edx + 4]
call fcn.00407154
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov ecx, dword [eax + 8]
mov edx, 0x475c7c
mov eax, ebx
call fcn.004635b4
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
movzx eax, byte [eax + 0xc]
sub al, 1
jb 0x475720
je 0x475733
dec al
je 0x475746
dec al
je 0x475759
jmp 0x47576a
mov ecx, 0x475c94
mov edx, 0x475cb0
mov eax, ebx
call fcn.004635b4
jmp 0x47576a
mov ecx, 0x475cd8
mov edx, 0x475cb0
mov eax, ebx
call fcn.004635b4
jmp 0x47576a
mov ecx, 0x475cf0
mov edx, 0x475cb0
mov eax, ebx
call fcn.004635b4
jmp 0x47576a
mov ecx, 0x475d08
mov edx, 0x475cb0
mov eax, ebx
call fcn.004635b4
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
cmp byte [eax + 0x128], 0
je 0x475791
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov ecx, dword [eax + 0x12c]
mov edx, 0x475d24
mov eax, ebx
call fcn.00463620
lea edx, [ebp - 4]
mov eax, 0x475d44
call fcn.00454500
lea eax, [ebp - 8]
mov ecx, 0x475d60
mov edx, dword [ebp - 4]
call fcn.00407610
lea eax, [ebp - 0x25c]
push eax
mov eax, dword [ebp - 8]
call fcn.004071e0
push eax
call sub.kernel32.dll_FindFirstFileW_1
mov edi, eax
cmp edi, 0xffffffff
je 0x475995
xor esi, esi
lea edx, [ebp - 0x260]
mov eax, esi
call fcn.00410384
mov ecx, dword [ebp - 0x260]
lea eax, [ebp - 0xc]
mov edx, 0x475da0
call fcn.00407610
lea eax, [ebp - 0x264]
lea edx, [ebp - 0x230]
mov ecx, 0x104
call fcn.0040733c
mov eax, dword [ebp - 0x264]
push eax
lea eax, [ebp - 0x268]
mov ecx, 0x475dc4
mov edx, dword [ebp - 0xc]
call fcn.00407610
mov edx, dword [ebp - 0x268]
mov eax, ebx
pop ecx
call fcn.004635b4
lea eax, [ebp - 0x278]
lea edx, [ebp - 0x230]
mov ecx, 0x104
call fcn.0040733c
mov ecx, dword [ebp - 0x278]
lea eax, [ebp - 0x274]
mov edx, dword [ebp - 4]
call fcn.00407610
mov eax, dword [ebp - 0x274]
lea edx, [ebp - 0x270]
call fcn.00456098
mov edx, dword [ebp - 0x270]
lea eax, [ebp - 0x26c]
call fcn.00407358
mov eax, dword [ebp - 0x26c]
push eax
lea eax, [ebp - 0x27c]
mov ecx, 0x475ddc
mov edx, dword [ebp - 0xc]
call fcn.00407610
mov edx, dword [ebp - 0x27c]
mov eax, ebx
pop ecx
call fcn.004635b4
jmp 0x47597a
inc esi
lea edx, [ebp - 0x280]
mov eax, esi
call fcn.00410384
mov ecx, dword [ebp - 0x280]
lea eax, [ebp - 0xc]
mov edx, 0x475da0
call fcn.00407610
lea eax, [ebp - 0x284]
lea edx, [ebp - 0x230]
mov ecx, 0x104
call fcn.0040733c
mov eax, dword [ebp - 0x284]
push eax
lea eax, [ebp - 0x288]
mov ecx, 0x475dc4
mov edx, dword [ebp - 0xc]
call fcn.00407610
mov edx, dword [ebp - 0x288]
mov eax, ebx
pop ecx
call fcn.004635b4
lea eax, [ebp - 0x298]
lea edx, [ebp - 0x230]
mov ecx, 0x104
call fcn.0040733c
mov ecx, dword [ebp - 0x298]
lea eax, [ebp - 0x294]
mov edx, dword [ebp - 4]
call fcn.00407610
mov eax, dword [ebp - 0x294]
lea edx, [ebp - 0x290]
call fcn.00456098
mov edx, dword [ebp - 0x290]
lea eax, [ebp - 0x28c]
call fcn.00407358
mov eax, dword [ebp - 0x28c]
push eax
lea eax, [ebp - 0x29c]
mov ecx, 0x475ddc
mov edx, dword [ebp - 0xc]
call fcn.00407610
mov edx, dword [ebp - 0x29c]
mov eax, ebx
pop ecx
call fcn.004635b4
lea eax, [ebp - 0x25c]
push eax
push edi
call sub.kernel32.dll_FindNextFileW
test eax, eax
jne 0x4758a7
push edi
call sub.kernel32.dll_FindClose_1
lea eax, [ebp - 4]
mov edx, 0x475df4
call fcn.00407550
lea eax, [ebp - 8]
mov ecx, 0x475e24
mov edx, dword [ebp - 4]
call fcn.00407610
lea eax, [ebp - 0x25c]
push eax
mov eax, dword [ebp - 8]
call fcn.004071e0
push eax
call sub.kernel32.dll_FindFirstFileW_1
mov edi, eax
cmp edi, 0xffffffff
je 0x475b99
xor esi, esi
lea edx, [ebp - 0x2a0]
mov eax, esi
call fcn.00410384
mov ecx, dword [ebp - 0x2a0]
lea eax, [ebp - 0xc]
mov edx, 0x475e5c
call fcn.00407610
lea eax, [ebp - 0x2a4]
lea edx, [ebp - 0x230]
mov ecx, 0x104
call fcn.0040733c
mov eax, dword [ebp - 0x2a4]
push eax
lea eax, [ebp - 0x2a8]
mov ecx, 0x475dc4
mov edx, dword [ebp - 0xc]
call fcn.00407610
mov edx, dword [ebp - 0x2a8]
mov eax, ebx
pop ecx
call fcn.004635b4
lea eax, [ebp - 0x2b8]
lea edx, [ebp - 0x230]
mov ecx, 0x104
call fcn.0040733c
mov ecx, dword [ebp - 0x2b8]
lea eax, [ebp - 0x2b4]
mov edx, dword [ebp - 4]
call fcn.00407610
mov eax, dword [ebp - 0x2b4]
lea edx, [ebp - 0x2b0]
call fcn.00456098
mov edx, dword [ebp - 0x2b0]
lea eax, [ebp - 0x2ac]
call fcn.00407358
mov eax, dword [ebp - 0x2ac]
push eax
lea eax, [ebp - 0x2bc]
mov ecx, 0x475ddc
mov edx, dword [ebp - 0xc]
call fcn.00407610
mov edx, dword [ebp - 0x2bc]
mov eax, ebx
pop ecx
call fcn.004635b4
jmp 0x475b7e
inc esi
lea edx, [ebp - 0x2c0]
mov eax, esi
call fcn.00410384
mov ecx, dword [ebp - 0x2c0]
lea eax, [ebp - 0xc]
mov edx, 0x475e5c
call fcn.00407610
lea eax, [ebp - 0x2c4]
lea edx, [ebp - 0x230]
mov ecx, 0x104
call fcn.0040733c
mov eax, dword [ebp - 0x2c4]
push eax
lea eax, [ebp - 0x2c8]
mov ecx, 0x475dc4
mov edx, dword [ebp - 0xc]
call fcn.00407610
mov edx, dword [ebp - 0x2c8]
mov eax, ebx
pop ecx
call fcn.004635b4
lea eax, [ebp - 0x2d8]
lea edx, [ebp - 0x230]
mov ecx, 0x104
call fcn.0040733c
mov ecx, dword [ebp - 0x2d8]
lea eax, [ebp - 0x2d4]
mov edx, dword [ebp - 4]
call fcn.00407610
mov eax, dword [ebp - 0x2d4]
lea edx, [ebp - 0x2d0]
call fcn.00456098
mov edx, dword [ebp - 0x2d0]
lea eax, [ebp - 0x2cc]
call fcn.00407358
mov eax, dword [ebp - 0x2cc]
push eax
lea eax, [ebp - 0x2dc]
mov ecx, 0x475ddc
mov edx, dword [ebp - 0xc]
call fcn.00407610
mov edx, dword [ebp - 0x2dc]
mov eax, ebx
pop ecx
call fcn.004635b4
lea eax, [ebp - 0x25c]
push eax
push edi
call sub.kernel32.dll_FindNextFileW
test eax, eax
jne 0x475aab
push edi
call sub.kernel32.dll_FindClose_1
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 4]
mov eax, ebx
call fcn.00405038
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x475c48
lea eax, [ebp - 0x2dc]
mov edx, 3
call fcn.0040714c
lea eax, [ebp - 0x2d0]
call fcn.004062b8
lea eax, [ebp - 0x2cc]
mov edx, 7
call fcn.0040714c
lea eax, [ebp - 0x2b0]
call fcn.004062b8
lea eax, [ebp - 0x2ac]
mov edx, 7
call fcn.0040714c
lea eax, [ebp - 0x290]
call fcn.004062b8
lea eax, [ebp - 0x28c]
mov edx, 7
call fcn.0040714c
lea eax, [ebp - 0x270]
call fcn.004062b8
lea eax, [ebp - 0x26c]
mov edx, 4
call fcn.0040714c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.0040714c
ret