Function at 0x18019b80
Capabilities:
Enumerate files on windows

Disassembly:
sub esp, 0x48c
mov eax, dword [0x1804e020]
xor eax, esp
mov dword [esp + 0x484], eax
push ebp
push edi
mov edi, ecx
mov ecx, 0x7b
mov word [esp + 0xa], cx
mov edx, 0x43
mov word [esp + 0xc], dx
mov ecx, 0x6d
mov edx, ecx
mov eax, 0x24
mov word [esp + 8], ax
mov word [esp + 0x12], dx
mov eax, 0x6f
mov word [esp + 0xe], ax
mov word [esp + 0x14], ax
mov word [esp + 0x10], cx
mov edx, 0x7d
mov word [esp + 0x18], dx
mov eax, 0x5c
mov ecx, 0x6e
mov word [esp + 0x1a], ax
mov edx, 0x6f
mov word [esp + 0x16], cx
mov word [esp + 0x1e], dx
mov eax, 0x64
xor edx, edx
mov ecx, 0x43
push 0x1ea
mov word [esp + 0x24], ax
mov word [esp + 0x20], cx
push edx
lea eax, [esp + 0x2e]
mov ecx, 0x65
push eax
mov word [esp + 0x2e], cx
mov word [esp + 0x30], dx
call sub.MSVCR90.dll_memset
add esp, 0xc
push 0x104
lea ecx, [esp + 0x284]
push ecx
lea edx, [esp + 0x10]
push edx
call sym.HncBL90.dll_HncPathToAbsolute
cmp edi, 0x12
ja case.default.0x18019c56
jmp dword [edi*4 + 0x18019ec8]
push 0x18042710
push 0xa
lea eax, [esp + 0x260]
push eax
jmp 0x18019d91
push 0x18042718
jmp 0x18019d87
push 0x18042720
push 0xa
lea edx, [esp + 0x260]
push edx
jmp 0x18019d91
push 0x18042728
push 0xa
lea eax, [esp + 0x260]
push eax
jmp 0x18019d91
push 0x18042730
jmp 0x18019d87
push 0x18042738
push 0xa
lea edx, [esp + 0x260]
push edx
jmp 0x18019d91
push 0x18042740
push 0xa
lea eax, [esp + 0x260]
push eax
jmp 0x18019d91
push 0x18042748
jmp 0x18019d87
push 0x18042750
push 0xa
lea edx, [esp + 0x260]
push edx
jmp 0x18019d91
push 0x18042758
push 0xa
lea eax, [esp + 0x260]
push eax
jmp 0x18019d91
push 0x18042760
jmp 0x18019d87
push 0x18042768
push 0xa
lea edx, [esp + 0x260]
push edx
jmp 0x18019d91
push str.1361
push 0xa
lea eax, [esp + 0x260]
push eax
jmp 0x18019d91
push 0x1804277c
jmp 0x18019d87
push 0x18042784
push 0xa
lea edx, [esp + 0x260]
push edx
jmp 0x18019d91
push 0x1804278c
push 0xa
lea eax, [esp + 0x260]
push eax
jmp 0x18019d91
push str.9566
jmp 0x18019d87
push 0x180427a0
push 0xa
lea edx, [esp + 0x260]
push edx
jmp 0x18019d91
push 0x180427a8
push 0xa
lea eax, [esp + 0x260]
push eax
jmp 0x18019d91
push 0x180427b0
push 0xa
lea ecx, [esp + 0x260]
push ecx
call dword [sym.imp.MSVCR90.dll_wcscpy_s]
mov eax, dword [esi]
add esp, 0xc
test eax, eax
jne 0x18019e86
lea edx, [esp + 0x258]
push edx
lea eax, [esp + 0x284]
push eax
push str._su_____s.dat
push 0x104
push ebx
call dword [sym.imp.MSVCR90.dll_swprintf_s]
add esp, 0x14
lea ecx, [esp + 8]
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov edi, eax
cmp edi, 0xffffffff
jne 0x18019df4
xor eax, eax
pop edi
pop ebp
mov ecx, dword [esp + 0x484]
xor ecx, esp
call fcn.1802929c
add esp, 0x48c
ret
mov ebp, dword [sym.imp.MSVCR90.dll_iswdigit]
lea ebx, [ebx]
mov eax, dword [esp + 0x36]
mov dx, word [esp + 0x3a]
xor ecx, ecx
push eax
mov dword [esp + 0x270], eax
mov word [esp + 0x274], dx
mov word [esp + 0x276], cx
call ebp
add esp, 4
test eax, eax
je 0x18019e65
mov edx, dword [esp + 0x26e]
push edx
call ebp
add esp, 4
test eax, eax
je 0x18019e65
mov eax, dword [esp + 0x270]
push eax
call ebp
add esp, 4
test eax, eax
je 0x18019e65
lea ecx, [esp + 0x26c]
push ecx
call dword [sym.imp.MSVCR90.dll__wtoi]
add esp, 4
cmp eax, dword [esi]
jle 0x18019e65
mov dword [esi], eax
lea edx, [esp + 8]
push edx
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x18019e00
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [esi]
test eax, eax
je 0x18019ddb
lea ecx, [esp + 0x258]
push ecx
push eax
lea edx, [esp + 0x288]
push edx
push str._su_03d__s.dat
push 0x104
push ebx
call dword [sym.imp.MSVCR90.dll_swprintf_s]
mov ecx, dword [esp + 0x4a4]
add esp, 0x18
pop edi
pop ebp
xor ecx, esp
mov eax, 1
call fcn.1802929c
add esp, 0x48c
ret