Function at 0x40949c
Capabilities:
Enumerate files on windows
Enumerate files recursively
Set file attributes

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x39
push 0
push 0
dec ecx
jne 0x4094a4
push ecx
push ebx
push esi
push edi
mov ebx, edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.00403520
lea esi, [ebp - 0x144]
xor eax, eax
push ebp
push 0x409ab2
push dword fs:[eax]
mov dword fs:[eax], esp
test bl, bl
jne 0x4094e4
mov eax, dword [ebp - 4]
call fcn.004093b4
test al, al
je 0x409a8c
mov dword [esi], 0x27
push esi
lea edx, [ebp - 0x14c]
mov eax, 0x409ac0
call fcn.00404748
mov ecx, dword [ebp - 0x14c]
lea eax, [ebp - 0x148]
mov edx, dword [ebp - 4]
call fcn.0040337c
mov eax, dword [ebp - 0x148]
call fcn.00403530
push eax
call sub.kernel32.dll_FindFirstFileA
mov edi, eax
cmp edi, 0xffffffff
je 0x4095ad
test byte [esi], 1
je 0x40956a
push 0
lea eax, [ebp - 0x154]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.00403318
mov ecx, dword [ebp - 0x154]
lea eax, [ebp - 0x150]
mov edx, dword [ebp - 4]
call fcn.0040337c
mov eax, dword [ebp - 0x150]
call fcn.00403530
push eax
call sub.kernel32.dll_SetFileAttributesA
lea eax, [ebp - 0x15c]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.00403318
mov ecx, dword [ebp - 0x15c]
lea eax, [ebp - 0x158]
mov edx, dword [ebp - 4]
call fcn.0040337c
mov eax, dword [ebp - 0x158]
call fcn.004091d8
push esi
push edi
call sub.kernel32.dll_FindNextFileA
test eax, eax
jne 0x40952b
push edi
call sub.kernel32.dll_FindClose
mov dword [esi], 0x16
push esi
lea eax, [ebp - 0x160]
mov ecx, 0x409ae4
mov edx, dword [ebp - 4]
call fcn.0040337c
mov eax, dword [ebp - 0x160]
call fcn.00403530
push eax
call sub.kernel32.dll_FindFirstFileA
mov edi, eax
cmp edi, 0xffffffff
je 0x409a8c
test byte [esi], 0x10
je 0x409a77
lea eax, [ebp - 0x164]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.00403318
mov eax, dword [ebp - 0x164]
mov edx, 0x409af0
call fcn.0040347c
je 0x409a77
lea eax, [ebp - 0x168]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.00403318
mov eax, dword [ebp - 0x168]
mov edx, 0x409afc
call fcn.0040347c
je 0x409a77
lea eax, [ebp - 0x16c]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.00403318
mov eax, dword [ebp - 0x16c]
mov edx, 0x409b08
call fcn.004046ac
test eax, eax
je 0x409a77
lea eax, [ebp - 0x170]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.00403318
mov eax, dword [ebp - 0x170]
mov edx, 0x409b18
call fcn.004046ac
test eax, eax
je 0x409a77
lea eax, [ebp - 0x174]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.00403318
mov eax, dword [ebp - 0x174]
mov edx, 0x409b2c
call fcn.004046ac
test eax, eax
je 0x409a77
lea eax, [ebp - 0x178]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.00403318
mov eax, dword [ebp - 0x178]
mov edx, 0x409b3c
call fcn.004046ac
test eax, eax
je 0x409a77
lea eax, [ebp - 0x17c]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.00403318
mov eax, dword [ebp - 0x17c]
mov edx, 0x409b5c
call fcn.004046ac
test eax, eax
je 0x409a77
lea eax, [ebp - 0x180]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.00403318
mov eax, dword [ebp - 0x180]
mov edx, 0x409b80
call fcn.004046ac
test eax, eax
je 0x409a77
lea eax, [ebp - 0x184]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.00403318
mov eax, dword [ebp - 0x184]
mov edx, 0x409b94
call fcn.004046ac
test eax, eax
je 0x409a77
lea eax, [ebp - 0x188]
push eax
mov eax, dword [ebp - 4]
call fcn.00403330
mov edx, eax
sub edx, 0xf
inc edx
mov ecx, 0xf
mov eax, dword [ebp - 4]
call fcn.00403590
mov eax, dword [ebp - 0x188]
mov edx, 0x409ba4
call fcn.004046ac
test eax, eax
jne 0x409a22
lea eax, [ebp - 0x18c]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.00403318
mov eax, dword [ebp - 0x18c]
mov edx, 0x409bbc
call fcn.004046ac
test eax, eax
je 0x409a77
lea eax, [ebp - 0x190]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.00403318
mov eax, dword [ebp - 0x190]
mov edx, 0x409bd0
call fcn.004046ac
test eax, eax
je 0x409a77
lea eax, [ebp - 0x194]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.00403318
mov eax, dword [ebp - 0x194]
mov edx, 0x409be8
call fcn.004046ac
test eax, eax
je 0x409a77
lea eax, [ebp - 0x198]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.00403318
mov eax, dword [ebp - 0x198]
mov edx, 0x409c08
call fcn.004046ac
test eax, eax
je 0x409a77
lea eax, [ebp - 0x19c]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.00403318
mov eax, dword [ebp - 0x19c]
mov edx, 0x409c20
call fcn.004046ac
test eax, eax
je 0x409a77
lea eax, [ebp - 0x1a0]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.00403318
mov eax, dword [ebp - 0x1a0]
mov edx, 0x409c3c
call fcn.004046ac
test eax, eax
je 0x409a77
lea eax, [ebp - 0x1a4]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.00403318
mov eax, dword [ebp - 0x1a4]
mov edx, 0x409c5c
call fcn.004046ac
test eax, eax
je 0x409a77
lea eax, [ebp - 0x1a8]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.00403318
mov eax, dword [ebp - 0x1a8]
mov edx, 0x409c70
call fcn.004046ac
test eax, eax
je 0x409a77
lea eax, [ebp - 0x1ac]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.00403318
mov eax, dword [ebp - 0x1ac]
mov edx, 0x409c88
call fcn.004046ac
test eax, eax
je 0x409a77
lea eax, [ebp - 0x1b0]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.00403318
mov eax, dword [ebp - 0x1b0]
mov edx, 0x409c9c
call fcn.004046ac
test eax, eax
je 0x409a77
lea eax, [ebp - 0x1b4]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.00403318
mov eax, dword [ebp - 0x1b4]
mov edx, 0x409cb8
call fcn.004046ac
test eax, eax
je 0x409a77
lea eax, [ebp - 0x1b8]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.00403318
mov eax, dword [ebp - 0x1b8]
mov edx, 0x409ce8
call fcn.004046ac
test eax, eax
je 0x409a77
lea eax, [ebp - 0x1bc]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.00403318
mov eax, dword [ebp - 0x1bc]
mov edx, 0x409cf4
call fcn.004046ac
test eax, eax
je 0x409a77
lea eax, [ebp - 0x1c0]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.00403318
mov eax, dword [ebp - 0x1c0]
mov edx, 0x409d10
call fcn.004046ac
test eax, eax
je 0x409a77
lea eax, [ebp - 0x1c4]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.00403318
mov eax, dword [ebp - 0x1c4]
mov edx, 0x409d24
call fcn.004046ac
test eax, eax
je 0x409a77
mov eax, dword [ebp - 4]
call fcn.00403330
cmp eax, 3
jg 0x409a39
push 0x4e20
call sub.kernel32.dll_Sleep
push dword [ebp - 4]
lea eax, [ebp - 0x1cc]
lea edx, [esi + 0x2c]
mov ecx, 0x104
call fcn.00403318
push dword [ebp - 0x1cc]
push 0x409d3c
lea eax, [ebp - 0x1c8]
mov edx, 3
call fcn.004033f0
mov eax, dword [ebp - 0x1c8]
mov edx, ebx
call fcn.0040949c
push esi
push edi
call sub.kernel32.dll_FindNextFileA
test eax, eax
jne 0x4095e3
push edi
call sub.kernel32.dll_FindClose
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x409ab9
lea eax, [ebp - 0x1cc]
mov edx, 0x22
call fcn.00403140
lea eax, [ebp - 4]
call fcn.0040311c
ret