Function at 0x411120
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4c0
mov eax, dword [0x447150]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov esi, ecx
push str.SearchFile_n
mov dword [ebp - 0x458], esi
call fcn.00401740
add esp, 4
mov ecx, esi
xor edi, edi
call fcn.0041c240
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x454], eax
test ebx, ebx
je 0x4117af
mov ecx, esi
call fcn.0041b630
test bl, 4
je 0x41117d
cmp dword [0x447da8], 0xa
jne 0x41117d
or ebx, 0x30
push 2
push 0xffffffffffffffff
push 0x100c
push dword [esi + 0x34]
call dword [sym.imp.USER32.dll_SendMessageA]
add eax, 1
je 0x4117af
push 2
lea esi, [eax - 1]
mov dword [ebp - 0x48c], 4
mov eax, dword [ebp - 0x458]
push esi
push 0x100c
mov dword [ebp - 0x484], edi
push dword [eax + 0x34]
call dword [sym.imp.USER32.dll_SendMessageA]
lea eax, [ebp - 0x48c]
mov dword [ebp - 0x488], esi
mov esi, dword [ebp - 0x458]
push eax
push 0
push 0x1005
push dword [esi + 0x34]
call dword [sym.imp.USER32.dll_SendMessageA]
lea eax, [ebp - 0x20c]
mov dword [ebp - 0x4b8], edi
mov dword [ebp - 0x4ac], eax
lea eax, [ebp - 0x4c0]
push eax
push dword [ebp - 0x488]
mov dword [ebp - 0x4a8], 0x103
push 0x102d
push dword [esi + 0x34]
call dword [sym.imp.USER32.dll_SendMessageA]
cmp dword [ebp - 0x46c], 1
jne 0x4112d5
mov eax, dword [0x447db8]
sub eax, 0
je 0x41124b
sub eax, 1
je 0x411244
sub eax, 1
jne 0x41124b
mov eax, 0x43c9a4
jmp 0x411250
mov eax, 0x43c9a0
jmp 0x411250
mov eax, 0x43c99c
push eax
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x310]
push str._s._s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea eax, [ebp - 0x450]
push eax
lea eax, [ebp - 0x310]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x458], eax
cmp eax, 0xffffffff
je 0x4117af
cmp dword [0x447db8], 1
lea eax, [ebp - 0x20c]
push ebx
push eax
lea eax, [ebp - 0x424]
mov ecx, esi
push eax
jne 0x4112b1
call fcn.0040f670
jmp 0x4112b6
call fcn.0040fd90
or edi, eax
lea eax, [ebp - 0x450]
push eax
push dword [ebp - 0x458]
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
cmp eax, 1
je 0x411290
jmp 0x411450
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x108]
push str._sdata
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
mov eax, dword [0x447db8]
add esp, 0xc
sub eax, 0
je 0x411313
sub eax, 1
je 0x41130c
sub eax, 1
jne 0x411313
mov eax, 0x43c9a4
jmp 0x411318
mov eax, 0x43c9a0
jmp 0x411318
mov eax, 0x43c99c
push eax
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x310]
push str._sdata._s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea eax, [ebp - 0x450]
push eax
lea eax, [ebp - 0x310]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x458], eax
cmp eax, 0xffffffff
je 0x4117af
nop dword [eax + eax]
cmp dword [0x447db8], 1
lea eax, [ebp - 0x108]
push ebx
push eax
lea eax, [ebp - 0x424]
mov ecx, esi
push eax
jne 0x411381
call fcn.0040f670
jmp 0x411386
call fcn.0040fd90
or edi, eax
lea eax, [ebp - 0x450]
push eax
push dword [ebp - 0x458]
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
cmp eax, 1
je 0x411360
push dword [ebp - 0x458]
call dword [sym.imp.KERNEL32.dll_FindClose]
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x108]
push 0x43d024
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
push dword [0x447db8]
call fcn.00412130
push eax
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x310]
push str._sevent._s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x20
lea eax, [ebp - 0x450]
push eax
lea eax, [ebp - 0x310]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x458], eax
cmp eax, 0xffffffff
je 0x4117af
cmp dword [0x447db8], 1
lea eax, [ebp - 0x108]
push ebx
push eax
lea eax, [ebp - 0x424]
mov ecx, esi
push eax
jne 0x411431
call fcn.0040f670
jmp 0x411436
call fcn.0040fd90
or edi, eax
lea eax, [ebp - 0x450]
push eax
push dword [ebp - 0x458]
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
cmp eax, 1
je 0x411410
push dword [ebp - 0x458]
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [ebp + 0xc], 0
je 0x41177e
cmp ebx, edi
je 0x41177e
not edi
and ebx, edi
mov edi, dword [sym.imp.USER32.dll_MessageBoxA]
test bl, 1
je 0x4114d4
push 0
push 0
push str.STRING
push str.IDS_OK
mov ecx, 0x4482b8
call fcn.00402e40
push eax
lea eax, [ebp - 0x108]
push 0x104
push eax
call fcn.0042cd27
add esp, 0xc
lea eax, [ebp - 0x108]
mov ecx, 0x4482b8
push 0x40
push eax
push 0
push 0
push str.IDD_EVENTDLG
push str.IDC_NORMAL
call fcn.00402e40
push eax
push dword [ebp - 0x454]
call edi
test bl, 2
je 0x411530
push 0
push 0
push str.STRING
push str.IDS_OK
mov ecx, 0x4482b8
call fcn.00402e40
push eax
lea eax, [ebp - 0x108]
push 0x104
push eax
call fcn.0042cd27
add esp, 0xc
lea eax, [ebp - 0x108]
mov ecx, 0x4482b8
push 0x40
push eax
push 0
push 0
push str.IDD_EVENTDLG
push str.IDC_EMERGENCY
call fcn.00402e40
push eax
push dword [ebp - 0x454]
call edi
test bl, 4
je 0x41159e
cmp dword [0x447da8], 0xa
jne 0x411547
mov eax, ebx
and eax, 0x30
cmp al, 0x30
jne 0x41159e
push 0
push 0
push str.STRING
push str.IDS_OK
mov ecx, 0x4482b8
call fcn.00402e40
push eax
lea eax, [ebp - 0x108]
push 0x104
push eax
call fcn.0042cd27
add esp, 0xc
lea eax, [ebp - 0x108]
mov ecx, 0x4482b8
push 0x40
push eax
push 0
push 0
push str.IDD_EVENTDLG
push str.IDC_IMPACT
call fcn.00402e40
push eax
push dword [ebp - 0x454]
call edi
test bl, 8
je 0x4115fa
push 0
push 0
push str.STRING
push str.IDS_OK
mov ecx, 0x4482b8
call fcn.00402e40
push eax
lea eax, [ebp - 0x108]
push 0x104
push eax
call fcn.0042cd27
add esp, 0xc
lea eax, [ebp - 0x108]
mov ecx, 0x4482b8
push 0x40
push eax
push 0
push 0
push str.IDD_EVENTDLG
push str.IDC_OVERSPEED
call fcn.00402e40
push eax
push dword [ebp - 0x454]
call edi
test bl, 0x10
je 0x41165f
cmp dword [0x447da8], 0xa
je 0x41165f
push 0
push 0
push str.STRING
push str.IDS_OK
mov ecx, 0x4482b8
call fcn.00402e40
push eax
lea eax, [ebp - 0x108]
push 0x104
push eax
call fcn.0042cd27
add esp, 0xc
lea eax, [ebp - 0x108]
mov ecx, 0x4482b8
push 0x40
push eax
push 0
push 0
push str.IDD_EVENTDLG
push str.IDC_STOP
call fcn.00402e40
push eax
push dword [ebp - 0x454]
call edi
test bl, 0x20
je 0x4116c4
cmp dword [0x447da8], 0xa
je 0x4116c4
push 0
push 0
push str.STRING
push str.IDS_OK
mov ecx, 0x4482b8
call fcn.00402e40
push eax
lea eax, [ebp - 0x108]
push 0x104
push eax
call fcn.0042cd27
add esp, 0xc
lea eax, [ebp - 0x108]
mov ecx, 0x4482b8
push 0x40
push eax
push 0
push 0
push str.IDD_EVENTDLG
push str.IDC_FAST
call fcn.00402e40
push eax
push dword [ebp - 0x454]
call edi
test bl, 0x40
je 0x411720
push 0
push 0
push str.STRING
push str.IDS_OK
mov ecx, 0x4482b8
call fcn.00402e40
push eax
lea eax, [ebp - 0x108]
push 0x104
push eax
call fcn.0042cd27
add esp, 0xc
lea eax, [ebp - 0x108]
mov ecx, 0x4482b8
push 0x40
push eax
push 0
push 0
push str.IDD_EVENTDLG
push str.IDD_PARKING
call fcn.00402e40
push eax
push dword [ebp - 0x454]
call edi
test bl, bl
jns 0x41177e
push 0
push 0
push str.STRING
push str.IDS_OK
mov ecx, 0x4482b8
call fcn.00402e40
push eax
lea eax, [ebp - 0x108]
push 0x104
push eax
call fcn.0042cd27
add esp, 0xc
lea eax, [ebp - 0x108]
mov ecx, 0x4482b8
push 0x40
push eax
push 0
push 0
push str.IDD_EVENTDLG
push str.IDD_MOTION
call fcn.00402e40
mov ebx, dword [ebp - 0x454]
push eax
push ebx
call edi
jmp 0x411784
mov ebx, dword [ebp - 0x454]
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0
push 0x1004
push dword [esi + 0x30]
call edi
test eax, eax
jne 0x4117a3
mov ecx, esi
call fcn.004117d0
push 0
push 0
push 0x7ec
push ebx
call edi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004271bb
mov esp, ebp
pop ebp
ret 8