Function at 0x404e10
Capabilities:
Enumerate files on windows
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2da0
call fcn.004055d0
push 0x190
push 0
lea eax, [ebp - 0x2bf0]
push eax
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0x2710
push 0
lea ecx, [ebp - 0x2a30]
push ecx
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0x190
push 0
lea edx, [ebp - 0x190]
push edx
call sub.MSVCR80.dll_memset
add esp, 0xc
lea eax, [ebp - 0x2bf0]
push eax
push 0
push 0
push 0x1a
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
push 0x40d504
lea ecx, [ebp - 0x2bf0]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x40d50c
push 0x80000002
call fcn.00404750
add esp, 8
test eax, eax
je 0x40508f
lea edx, [ebp - 0x2bf0]
push edx
lea eax, [ebp - 0x190]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x40d520
lea ecx, [ebp - 0x190]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea edx, [ebp - 0x2da0]
push edx
lea eax, [ebp - 0x190]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x2c5c], eax
cmp dword [ebp - 0x2c5c], 0xffffffff
jne 0x404ef0
xor eax, eax
jmp 0x405095
cmp dword [ebp - 0x2da0], 0x10
jne 0x405066
push 0x40d524
lea ecx, [ebp - 0x2d74]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
je 0x405066
push 0x40d528
lea edx, [ebp - 0x2d74]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
je 0x405066
push 0x40d52c
lea eax, [ebp - 0x2d74]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
je 0x405066
push 0x40d538
lea ecx, [ebp - 0x2d74]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
je 0x405066
lea edx, [ebp - 0x2bf0]
push edx
lea eax, [ebp - 0x190]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea ecx, [ebp - 0x2d74]
push ecx
lea edx, [ebp - 0x190]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x40d540
lea eax, [ebp - 0x2a30]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x40d574
lea ecx, [ebp - 0x2a30]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x40d590
lea edx, [ebp - 0x2a30]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x40d5ac
lea eax, [ebp - 0x2a30]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea ecx, [ebp - 0x2d74]
push ecx
lea edx, [ebp - 0x2a30]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x40d5c4
lea eax, [ebp - 0x2a30]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x40d5c8
lea ecx, [ebp - 0x2a30]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea edx, [ebp - 0x2c58]
push edx
lea eax, [ebp - 0x190]
push eax
call fcn.00404a80
add esp, 8
lea ecx, [ebp - 0x2c58]
push ecx
call fcn.00404800
add esp, 4
push eax
lea edx, [ebp - 0x320]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea eax, [ebp - 0x320]
push eax
lea ecx, [ebp - 0x2a30]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x40d5e0
lea edx, [ebp - 0x2a30]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea eax, [ebp - 0x2da0]
push eax
mov ecx, dword [ebp - 0x2c5c]
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x404ef0
mov edx, dword [ebp - 0x2c5c]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [ebp - 0x2a30]
mov esp, ebp
pop ebp
ret