Function at 0x407a80
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x45480e
mov eax, dword fs:[0]
push eax
sub esp, 0x3e8
mov eax, dword [0x472008]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
push 0x45ac78
push eax
mov dword [ebp - 0x350], eax
lea eax, [ebp - 0xa0]
push eax
mov dword [ebp - 0x3d0], ebx
call fcn.00404f30
add esp, 0xc
cmp dword [ebp - 0x8c], 8
lea ecx, [ebp - 0x340]
lea eax, [ebp - 0xa0]
mov dword [ebp - 4], 0
cmovae eax, dword [ebp - 0xa0]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
xor esi, esi
mov dword [ebp - 0x354], eax
cmp eax, 0xffffffff
je 0x4084a5
mov edi, dword [sym.imp.SHLWAPI.dll_StrCmpW]
nop word [eax + eax]
lea eax, [ebp - 0x314]
push eax
push 0x45ac80
call edi
test eax, eax
je 0x40847e
lea eax, [ebp - 0x314]
push eax
push 0x45ac84
call edi
test eax, eax
je 0x40847e
inc esi
mov dword [ebp - 0x3d4], esi
push 0
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 1
mov byte [ebp - 0x20], 0
call fcn.00406d10
xor eax, eax
mov byte [ebp - 4], 2
mov dword [ebp - 0x24], 7
mov dword [ebp - 0x28], 0
mov word [ebp - 0x38], ax
cmp word [ebp - 0x314], ax
je 0x407b9f
lea eax, [ebp - 0x314]
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x407b90
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0x314]
push eax
lea ecx, [ebp - 0x38]
call fcn.00403e00
push 0x50
lea eax, [ebp - 0xf0]
mov byte [ebp - 4], 3
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0xf0]
call fcn.00406bf0
cmp dword [ebp - 0x24], 8
lea eax, [ebp - 0x38]
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], 4
cmovae eax, dword [ebp - 0x38]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0040cb20
mov byte [ebp - 0x364], 0
lea ecx, [ebp - 0x35c]
push dword [ebp - 0x364]
xorps xmm0, xmm0
mov byte [ebp - 4], 5
movq qword [ebp - 0x35c], xmm0
call fcn.0040a110
lea eax, [ebp - 0x70]
mov byte [ebp - 0x364], 3
push eax
call fcn.00405d00
mov edi, dword [ebp - 0x3d8]
mov esi, eax
mov dword [ebp - 0x35c], esi
mov dword [ebp - 0x358], edi
sub esp, 0x14
mov byte [ebp - 4], 6
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x407c6a
mov eax, dword [ecx]
jmp 0x407c6c
mov eax, ecx
push 1
push str.ncrwisa
mov byte [eax], 0
call fcn.00403d00
lea ecx, [ebp - 0x20]
call fcn.00407440
mov cl, byte [eax]
mov byte [eax], 3
mov edx, dword [eax + 0xc]
mov byte [ebp - 0x3b8], cl
mov byte [ebp - 0x364], cl
mov ecx, dword [eax + 8]
mov dword [eax + 8], esi
mov dword [eax + 0xc], edi
mov dword [ebp - 0x35c], ecx
mov dword [ebp - 0x358], edx
push dword [ebp - 0x3b8]
lea ecx, [ebp - 0x35c]
mov byte [ebp - 4], 7
call fcn.0040a110
mov ecx, dword [ebp - 0x33c]
mov eax, dword [ebp - 0x338]
add ecx, 0x2ac18000
push 0
push 0x2710
adc eax, 0xfe624e21
push eax
push ecx
call fcn.00424980
xorps xmm0, xmm0
mov byte [ebp - 0x374], 0
mov esi, eax
movq qword [ebp - 0x36c], xmm0
mov edi, edx
push dword [ebp - 0x374]
lea ecx, [ebp - 0x36c]
mov byte [ebp - 4], 8
call fcn.0040a110
mov byte [ebp - 0x374], 5
mov dword [ebp - 0x36c], esi
mov dword [ebp - 0x368], edi
sub esp, 0x18
mov byte [ebp - 4], 9
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x407d53
mov eax, dword [ecx]
jmp 0x407d55
mov eax, ecx
push 1
push 0x45ad40
mov byte [eax], 0
call fcn.00403d00
lea ecx, [ebp - 0x20]
call fcn.00407440
mov cl, byte [eax]
mov byte [eax], 5
mov edx, dword [eax + 0xc]
mov byte [ebp - 0x3bc], cl
mov byte [ebp - 0x374], cl
mov ecx, dword [eax + 8]
mov dword [eax + 8], esi
mov dword [eax + 0xc], edi
mov dword [ebp - 0x36c], ecx
mov dword [ebp - 0x368], edx
push dword [ebp - 0x3bc]
lea ecx, [ebp - 0x36c]
mov byte [ebp - 4], 0xa
call fcn.0040a110
mov ecx, dword [ebp - 0x334]
mov eax, dword [ebp - 0x330]
add ecx, 0x2ac18000
push 0
push 0x2710
adc eax, 0xfe624e21
push eax
push ecx
call fcn.00424980
xorps xmm0, xmm0
mov byte [ebp - 0x384], 0
mov esi, eax
movq qword [ebp - 0x37c], xmm0
mov edi, edx
push dword [ebp - 0x384]
lea ecx, [ebp - 0x37c]
mov byte [ebp - 4], 0xb
call fcn.0040a110
mov byte [ebp - 0x384], 5
mov dword [ebp - 0x37c], esi
mov dword [ebp - 0x378], edi
sub esp, 0x18
mov byte [ebp - 4], 0xc
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x407e3c
mov eax, dword [ecx]
jmp 0x407e3e
mov eax, ecx
push 1
push 0x45ad44
mov byte [eax], 0
call fcn.00403d00
lea ecx, [ebp - 0x20]
call fcn.00407440
mov cl, byte [eax]
mov byte [eax], 5
mov edx, dword [eax + 0xc]
mov byte [ebp - 0x3c0], cl
mov byte [ebp - 0x384], cl
mov ecx, dword [eax + 8]
mov dword [eax + 8], esi
mov dword [eax + 0xc], edi
mov dword [ebp - 0x37c], ecx
mov dword [ebp - 0x378], edx
push dword [ebp - 0x3c0]
lea ecx, [ebp - 0x37c]
mov byte [ebp - 4], 0xd
call fcn.0040a110
mov ecx, dword [ebp - 0x32c]
mov eax, dword [ebp - 0x328]
add ecx, 0x2ac18000
push 0
push 0x2710
adc eax, 0xfe624e21
push eax
push ecx
call fcn.00424980
xorps xmm0, xmm0
mov byte [ebp - 0x394], 0
mov esi, eax
movq qword [ebp - 0x38c], xmm0
mov edi, edx
push dword [ebp - 0x394]
lea ecx, [ebp - 0x38c]
mov byte [ebp - 4], 0xe
call fcn.0040a110
mov byte [ebp - 0x394], 5
mov dword [ebp - 0x38c], esi
mov dword [ebp - 0x388], edi
sub esp, 0x18
mov byte [ebp - 4], 0xf
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x407f25
mov eax, dword [ecx]
jmp 0x407f27
mov eax, ecx
push 1
push 0x45ad48
mov byte [eax], 0
call fcn.00403d00
lea ecx, [ebp - 0x20]
call fcn.00407440
mov cl, byte [eax]
mov byte [eax], 5
mov edx, dword [eax + 0xc]
mov byte [ebp - 0x3c4], cl
mov byte [ebp - 0x394], cl
mov ecx, dword [eax + 8]
mov dword [eax + 8], esi
mov dword [eax + 0xc], edi
mov dword [ebp - 0x38c], ecx
mov dword [ebp - 0x388], edx
push dword [ebp - 0x3c4]
lea ecx, [ebp - 0x38c]
mov byte [ebp - 4], 0x10
call fcn.0040a110
test byte [ebp - 0x340], 0x10
xorps xmm0, xmm0
je 0x4082e0
mov byte [ebp - 0x3a4], 0
movq qword [ebp - 0x39c], xmm0
push dword [ebp - 0x3a4]
lea ecx, [ebp - 0x39c]
mov byte [ebp - 4], 0x11
call fcn.0040a110
xorps xmm0, xmm0
mov byte [ebp - 0x3a4], 5
movlpd qword [ebp - 0x34c], xmm0
mov esi, dword [ebp - 0x34c]
mov edi, dword [ebp - 0x348]
mov dword [ebp - 0x39c], esi
mov dword [ebp - 0x398], edi
sub esp, 0x18
mov byte [ebp - 4], 0x12
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x408009
mov eax, dword [ecx]
jmp 0x40800b
mov eax, ecx
push 1
push 0x45ad4c
mov byte [eax], 0
call fcn.00403d00
lea ecx, [ebp - 0x20]
call fcn.00407440
mov cl, byte [eax]
mov byte [eax], 5
mov edx, dword [eax + 0xc]
mov byte [ebp - 0x3c8], cl
mov byte [ebp - 0x3a4], cl
mov ecx, dword [eax + 8]
mov dword [eax + 8], esi
mov dword [eax + 0xc], edi
mov dword [ebp - 0x39c], ecx
mov dword [ebp - 0x398], edx
push dword [ebp - 0x3c8]
lea ecx, [ebp - 0x39c]
mov byte [ebp - 4], 0x13
call fcn.0040a110
xorps xmm0, xmm0
mov byte [ebp - 0x3b4], 0
movq qword [ebp - 0x3ac], xmm0
push dword [ebp - 0x3b4]
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 0x14
call fcn.0040a110
xorps xmm0, xmm0
mov byte [ebp - 0x3b4], 5
movlpd qword [ebp - 0x34c], xmm0
mov esi, dword [ebp - 0x34c]
mov edi, dword [ebp - 0x348]
mov dword [ebp - 0x3ac], esi
mov dword [ebp - 0x3a8], edi
sub esp, 0x18
mov byte [ebp - 4], 0x15
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x4080e0
mov eax, dword [ecx]
jmp 0x4080e2
mov eax, ecx
push 1
push 0x45ad50
mov byte [eax], 0
call fcn.00403d00
lea ecx, [ebp - 0x20]
call fcn.00407440
mov cl, byte [eax]
mov byte [eax], 5
mov edx, dword [eax + 0xc]
mov byte [ebp - 0x3cc], cl
mov byte [ebp - 0x3b4], cl
mov ecx, dword [eax + 8]
mov dword [eax + 8], esi
mov dword [eax + 0xc], edi
mov dword [ebp - 0x3ac], ecx
mov dword [ebp - 0x3a8], edx
push dword [ebp - 0x3cc]
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 0x16
call fcn.0040a110
mov eax, dword [ebp + 0x10]
mov byte [ebp - 4], 5
test eax, eax
je 0x4083c2
jns 0x408215
sub esp, 8
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
lea eax, [ebp - 0x48]
push eax
call fcn.004097d0
push 0x45a8d4
push dword [ebp - 0x350]
lea eax, [ebp - 0x3f4]
mov byte [ebp - 4], 0x17
push eax
call fcn.00404f30
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x18
push ecx
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.00404e90
add esp, 0x24
lea ecx, [ebp - 0x3f4]
mov byte [ebp - 4], 0x1a
call fcn.00401c60
push 0xffffffffffffffff
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.00407a80
add esp, 0xc
test eax, eax
jle 0x4081f2
sub esp, 0x10
lea eax, [ebp - 0x48]
mov ecx, esp
mov dword [ebp - 0x344], esp
push eax
call fcn.00406680
push 0x45ad54
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x1b
call fcn.00404d60
mov ecx, eax
mov byte [ebp - 4], 0x1a
call fcn.004073c0
lea ecx, [ebp - 0x88]
call fcn.00401c60
push dword [ebp - 0x48]
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x1c
call fcn.0040a110
mov byte [ebp - 4], 5
jmp 0x4083c2
lea esi, [eax - 1]
sub esp, 8
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
lea eax, [ebp - 0x58]
push eax
call fcn.004097d0
push 0x45a8d4
push dword [ebp - 0x350]
lea eax, [ebp - 0x3f4]
mov byte [ebp - 4], 0x1d
push eax
call fcn.00404f30
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x1e
push ecx
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.00404e90
add esp, 0x24
lea ecx, [ebp - 0x3f4]
mov byte [ebp - 4], 0x20
call fcn.00401c60
push esi
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.00407a80
add esp, 0xc
test eax, eax
jle 0x4082bd
sub esp, 0x10
lea eax, [ebp - 0x58]
mov ecx, esp
mov dword [ebp - 0x344], esp
push eax
call fcn.00406680
push 0x45ad54
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x21
call fcn.00404d60
mov ecx, eax
mov byte [ebp - 4], 0x20
call fcn.004073c0
lea ecx, [ebp - 0x88]
call fcn.00401c60
push dword [ebp - 0x58]
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x22
call fcn.0040a110
mov byte [ebp - 4], 5
jmp 0x4083c2
sub esp, 0x10
mov esi, esp
mov dword [ebp - 0x344], esp
mov byte [esi], 0
movq qword [esi + 8], xmm0
movzx eax, byte [esi]
lea ecx, [esi + 8]
push eax
mov byte [ebp - 4], 0x23
call fcn.0040a110
mov byte [esi], 5
mov dword [esi + 8], 1
mov dword [esi + 0xc], 0
sub esp, 0x18
mov byte [ebp - 4], 0x24
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x408343
mov eax, dword [ecx]
jmp 0x408345
mov eax, ecx
push 1
push 0x45ad4c
mov byte [eax], 0
call fcn.00403d00
lea ecx, [ebp - 0x20]
call fcn.00407440
mov ecx, eax
mov byte [ebp - 4], 5
call fcn.004073c0
sub esp, 0x10
xorps xmm0, xmm0
mov edi, esp
mov dword [ebp - 0x348], esp
mov byte [edi], 0
movq qword [edi + 8], xmm0
mov esi, dword [ebp - 0x320]
movzx eax, byte [edi]
lea ecx, [edi + 8]
push eax
mov byte [ebp - 4], 0x25
call fcn.0040a110
mov byte [edi], 6
mov dword [edi + 8], esi
mov dword [edi + 0xc], 0
push 0x45ad50
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x26
call fcn.00404d60
mov ecx, eax
mov byte [ebp - 4], 5
call fcn.004073c0
mov ebx, dword [ebp - 0x3d0]
mov al, byte [ebx]
test al, al
je 0x4083d2
cmp al, 2
je 0x4083f4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
push 2
lea ecx, [ebp - 0x3dc]
mov byte [ebx], 2
call fcn.00406d10
mov eax, dword [ebp - 0x3dc]
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x3d8]
mov dword [ebx + 0xc], eax
mov ecx, dword [ebx + 8]
lea eax, [ebp - 0x20]
push eax
call fcn.0040b690
mov eax, dword [ebp - 0x5c]
cmp eax, 0x10
jb 0x408417
inc eax
push 1
push eax
push dword [ebp - 0x70]
call fcn.004035c0
add esp, 0xc
lea ecx, [ebp - 0xf0]
mov dword [ebp - 0x5c], 0xf
mov dword [ebp - 0x60], 0
mov byte [ebp - 0x70], 0
call fcn.00407190
mov eax, dword [ebp - 0x24]
cmp eax, 8
jb 0x40844b
inc eax
push 2
push eax
push dword [ebp - 0x38]
call fcn.004035c0
add esp, 0xc
xor eax, eax
mov dword [ebp - 0x24], 7
mov dword [ebp - 0x28], 0
mov word [ebp - 0x38], ax
push dword [ebp - 0x20]
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x27
call fcn.0040a110
mov esi, dword [ebp - 0x3d4]
mov edi, dword [sym.imp.SHLWAPI.dll_StrCmpW]
mov byte [ebp - 4], 0
lea eax, [ebp - 0x340]
push eax
push dword [ebp - 0x354]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x407b20
push dword [ebp - 0x354]
call dword [sym.imp.KERNEL32.dll_FindClose]
lea ecx, [ebp - 0xa0]
call fcn.00401c60
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0040219c
mov esp, ebp
pop ebp
ret