Function at 0x441900
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
lea esp, [esp - 0x1a8]
push ebx
push esi
push edi
mov dword [ebp - 4], eax
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x178], 0
mov dword [ebp - 0x1a8], 0
mov dword [ebp - 0x1a4], 0
mov dword [ebp - 0x1a0], 0
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x194], 0
xor eax, eax
push fcn.00441890
push ebp
push 0x414a60
push dword fs:[eax]
mov dword fs:[eax], esp
mov ecx, dword [0x725160]
mov edx, 1
mov eax, 0x750f20
call fcn.0042cef0
mov dword [ebp - 0x164], eax
mov ebx, 0x750fa0
lea eax, [ebp - 0x194]
mov edx, 0x750fa0
call fcn.0040cf40
mov dword [ebp - 0x198], 4
lea eax, [ebp - 0x198]
push eax
mov edx, 0x750fa0
mov ecx, 1
lea eax, [ebp - 0x194]
call fcn.0040d060
lea eax, [ebp - 0x19c]
push eax
mov eax, dword [0x7229c0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x7229c0]
mov eax, 0x747e58
call fcn.004268c0
mov edx, dword [ebp - 0x19c]
mov eax, dword [ebp - 0x194]
call fcn.00408bc0
lea eax, [ebp - 0x19c]
push eax
mov eax, dword [0x7229d0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x7229d0]
mov eax, 0x747e58
call fcn.004268c0
mov edx, dword [ebp - 0x19c]
mov eax, dword [ebp - 0x194]
lea eax, [eax + 4]
call fcn.00408bc0
lea eax, [ebp - 0x19c]
push eax
mov eax, dword [0x7229e0]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x7229e0]
mov eax, 0x747e58
call fcn.004268c0
mov edx, dword [ebp - 0x19c]
mov eax, dword [ebp - 0x194]
lea eax, [eax + 8]
call fcn.00408bc0
lea eax, [ebp - 0x19c]
push eax
mov eax, dword [str._D_v_f]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [str._D_v_f]
mov eax, 0x747e58
call fcn.004268c0
mov edx, dword [ebp - 0x19c]
mov eax, dword [ebp - 0x194]
lea eax, [eax + 0xc]
call fcn.00408bc0
mov edx, dword [ebp - 0x194]
mov eax, dword [ebp - 0x164]
lea eax, [eax + 8]
mov ecx, ebx
call fcn.0040d040
mov ecx, dword [0x725220]
mov edx, 1
mov eax, 0x750f20
call fcn.0042cef0
mov dword [ebp - 0x168], eax
mov ebx, 0x750fa0
lea eax, [ebp - 0x194]
mov edx, 0x750fa0
call fcn.0040cf40
mov dword [ebp - 0x198], 3
lea eax, [ebp - 0x198]
push eax
mov edx, 0x750fa0
mov ecx, 1
lea eax, [ebp - 0x194]
call fcn.0040d060
lea eax, [ebp - 0x19c]
push eax
mov eax, dword [str._4_rd]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [str._4_rd]
mov eax, 0x747e58
call fcn.004268c0
mov edx, dword [ebp - 0x19c]
mov eax, dword [ebp - 0x194]
call fcn.00408bc0
lea eax, [ebp - 0x19c]
push eax
mov eax, dword [str._2_v_tg_]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [str._2_v_tg_]
mov eax, 0x747e58
call fcn.004268c0
mov edx, dword [ebp - 0x19c]
mov eax, dword [ebp - 0x194]
lea eax, [eax + 4]
call fcn.00408bc0
lea eax, [ebp - 0x19c]
push eax
mov eax, dword [0x722a20]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x722a20]
mov eax, 0x747e58
call fcn.004268c0
mov edx, dword [ebp - 0x19c]
mov eax, dword [ebp - 0x194]
lea eax, [eax + 8]
call fcn.00408bc0
mov edx, dword [ebp - 0x194]
mov eax, dword [ebp - 0x168]
lea eax, [eax + 8]
mov ecx, ebx
call fcn.0040d040
mov ecx, dword [0x725240]
mov edx, 1
mov eax, 0x750f20
call fcn.0042cef0
mov dword [ebp - 0x16c], eax
mov ebx, 0x750fa0
lea eax, [ebp - 0x194]
mov edx, 0x750fa0
call fcn.0040cf40
mov dword [ebp - 0x198], 2
lea eax, [ebp - 0x198]
push eax
mov edx, 0x750fa0
mov ecx, 1
lea eax, [ebp - 0x194]
call fcn.0040d060
lea eax, [ebp - 0x19c]
push eax
mov eax, dword [0x722a30]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x722a30]
mov eax, 0x747e58
call fcn.004268c0
mov edx, dword [ebp - 0x19c]
mov eax, dword [ebp - 0x194]
call fcn.00408bc0
lea eax, [ebp - 0x19c]
push eax
mov eax, dword [0x722a40]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x722a40]
mov eax, 0x747e58
call fcn.004268c0
mov edx, dword [ebp - 0x19c]
mov eax, dword [ebp - 0x194]
lea eax, [eax + 4]
call fcn.00408bc0
mov edx, dword [ebp - 0x194]
mov eax, dword [ebp - 0x16c]
lea eax, [eax + 8]
mov ecx, ebx
call fcn.0040d040
mov ecx, dword [0x725250]
mov edx, 1
mov eax, 0x750f20
call fcn.0042cef0
mov dword [ebp - 0x170], eax
mov ebx, 0x750fa0
lea eax, [ebp - 0x194]
mov edx, 0x750fa0
call fcn.0040cf40
mov dword [ebp - 0x198], 4
lea eax, [ebp - 0x198]
push eax
mov edx, 0x750fa0
mov ecx, 1
lea eax, [ebp - 0x194]
call fcn.0040d060
lea eax, [ebp - 0x19c]
push eax
mov eax, dword [0x722a50]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x722a50]
mov eax, 0x747e58
call fcn.004268c0
mov edx, dword [ebp - 0x19c]
mov eax, dword [ebp - 0x194]
call fcn.00408bc0
lea eax, [ebp - 0x19c]
push eax
mov eax, dword [0x722a60]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x722a60]
mov eax, 0x747e58
call fcn.004268c0
mov edx, dword [ebp - 0x19c]
mov eax, dword [ebp - 0x194]
lea eax, [eax + 4]
call fcn.00408bc0
lea eax, [ebp - 0x19c]
push eax
mov eax, dword [0x722a70]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x722a70]
mov eax, 0x747e58
call fcn.004268c0
mov edx, dword [ebp - 0x19c]
mov eax, dword [ebp - 0x194]
lea eax, [eax + 8]
call fcn.00408bc0
lea eax, [ebp - 0x19c]
push eax
mov eax, dword [str.U7x]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [str.U7x]
mov eax, 0x747e58
call fcn.004268c0
mov edx, dword [ebp - 0x19c]
mov eax, dword [ebp - 0x194]
lea eax, [eax + 0xc]
call fcn.00408bc0
mov edx, dword [ebp - 0x194]
mov eax, dword [ebp - 0x170]
lea eax, [eax + 8]
mov ecx, ebx
call fcn.0040d040
mov ecx, 0x1000000
mov edx, 1
mov eax, 0x750f20
call fcn.0042cef0
mov dword [ebp - 0x174], eax
mov ebx, 0x750fa0
lea eax, [ebp - 0x194]
mov edx, 0x750fa0
call fcn.0040cf40
mov dword [ebp - 0x198], 1
lea eax, [ebp - 0x198]
push eax
mov edx, 0x750fa0
mov ecx, 1
lea eax, [ebp - 0x194]
call fcn.0040d060
lea eax, [ebp - 0x19c]
push eax
mov eax, dword [str.PB]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [str.PB]
mov eax, 0x747e58
call fcn.004268c0
mov edx, dword [ebp - 0x19c]
mov eax, dword [ebp - 0x194]
call fcn.00408bc0
mov edx, dword [ebp - 0x194]
mov eax, dword [ebp - 0x174]
lea eax, [eax + 8]
mov ecx, ebx
call fcn.0040d040
mov byte [ebp - 0x18c], 1
mov ebx, 0x751dd0
lea eax, [ebp - 0x1a0]
mov edx, 0x751dd0
call fcn.0040cf40
mov dword [ebp - 0x198], 5
lea eax, [ebp - 0x198]
push eax
mov edx, 0x751dd0
mov ecx, 1
lea eax, [ebp - 0x1a0]
call fcn.0040d060
mov edx, dword [ebp - 0x1a0]
mov eax, dword [ebp - 0x164]
mov dword [edx], eax
mov eax, dword [ebp - 0x1a0]
mov edx, dword [ebp - 0x168]
mov dword [eax + 4], edx
mov eax, dword [ebp - 0x1a0]
mov edx, dword [ebp - 0x16c]
mov dword [eax + 8], edx
mov eax, dword [ebp - 0x1a0]
mov edx, dword [ebp - 0x170]
mov dword [eax + 0xc], edx
mov eax, dword [ebp - 0x1a0]
mov edx, dword [ebp - 0x174]
mov dword [eax + 0x10], edx
mov edx, dword [ebp - 0x1a0]
lea eax, [ebp - 0x178]
mov ecx, ebx
call fcn.0040d040
lea eax, [ebp - 0x15c]
push eax
mov eax, dword [0x721970]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x721970]
mov eax, 0x747e58
call fcn.004268c0
lea eax, [ebp - 0x158]
push eax
mov eax, dword [ebp - 0x15c]
test eax, eax
jne 0x441f59
mov eax, 0x7a22f0
push eax
call sub.kernel32.dll_FindFirstFileA
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xffffffff
jne 0x441f6d
jmp 0x4420e8
mov byte [ebp - 0x190], 1
jmp 0x4420d6
push 1
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x12c]
mov cx, 0
mov edx, 0x103
call fcn.004095b0
mov esi, dword [ebp - 0x178]
test esi, esi
je 0x441fad
mov esi, dword [esi - 4]
add esi, 1
sub esi, 1
mov dword [ebp - 0x10], 0xffffffff
nop
mov eax, dword [ebp - 0x10]
lea eax, [eax + 1]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x178]
mov edx, dword [ebp - 0x10]
mov eax, dword [eax + edx*4]
mov ebx, dword [eax + 8]
test ebx, ebx
je 0x441fda
mov ebx, dword [ebx - 4]
add ebx, 1
sub ebx, 1
mov dword [ebp - 0x14], 0xffffffff
lea esi, [esi]
mov eax, dword [ebp - 0x14]
lea eax, [eax + 1]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x19c]
call fcn.00403d00
push 0
mov eax, dword [ebp - 0x160]
lea edx, [ebp - 0x1a4]
call fcn.00466480
mov edi, dword [ebp - 0x1a4]
lea eax, [ebp - 0x1a8]
push eax
mov eax, dword [0x721600]
call fcn.0040cf30
mov ecx, eax
mov edx, dword [0x721600]
mov eax, 0x747e58
call fcn.004268c0
mov edx, dword [ebp - 0x1a8]
lea eax, [ebp - 0x19c]
mov ecx, edi
call fcn.00408cc0
mov edx, dword [ebp - 0x19c]
lea ecx, [ebp - 0x188]
mov eax, 0x750d50
call fcn.0042b3e0
lea edx, [ebp - 0x188]
lea ecx, [ebp - 0x1a8]
mov eax, 0x750d50
call fcn.0042b350
mov edx, dword [ebp - 0x1a8]
mov ecx, dword [ebp - 0x178]
mov eax, dword [ebp - 0x10]
mov eax, dword [ecx + eax*4]
mov eax, dword [eax + 8]
mov ecx, dword [ebp - 0x14]
mov eax, dword [eax + ecx*4]
call fcn.00409780
test eax, 0xffffffff
je 0x4420a0
jmp 0x4420a8
mov byte [ebp - 8], 0
jmp 0x4420f9
cmp ebx, dword [ebp - 0x14]
jbe 0x4420b2
jmp 0x441fe8
cmp esi, dword [ebp - 0x10]
jbe 0x4420bc
jmp 0x441fb8
lea eax, [ebp - 0x158]
push eax
push dword [ebp - 0x18]
call sub.kernel32.dll_FindNextFileA
or eax, eax
setne al
mov byte [ebp - 0x190], al
cmp byte [ebp - 0x190], 0
jne 0x441f80
jmp 0x4420e5
lea esi, [esi]
push dword [ebp - 0x18]
call sub.kernel32.dll_FindClose
mov al, byte [ebp - 0x18c]
mov byte [ebp - 8], al
xor edx, edx
pop eax
add esp, 0xc
mov dword fs:[edx], eax
mov eax, ebp
call fcn.00441890
mov al, byte [ebp - 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret