Function at 0x440d90
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
lea eax, [ebp - 0x2d8]
push ebx
sub esp, 0x2fc
mov dword [ebp - 0x2e0], eax
xor eax, eax
cmp dword [ebp + 8], 0x20
mov dword [ebp - 0x2dc], 0
mov word [ebp - 0x2d8], ax
je 0x440de0
xor ebx, ebx
cmp dword [ebp + 8], 0x40
je 0x441230
lea esp, [ebp - 0xc]
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret 4
mov dword [esp], ecx
lea ecx, [ebp - 0x2c8]
call fcn.004408b0
sub esp, 4
mov dword [esp], 0x727b3c
call sub.msvcrt.dll_wcslen
mov edx, 0x3fffffff
sub edx, dword [ebp - 0x2c4]
cmp eax, edx
ja 0x441538
lea ecx, [ebp - 0x2c8]
mov dword [esp + 4], eax
mov dword [esp], 0x727b3c
call fcn.006c1ce0
lea ebx, [ebp - 0x260]
lea edx, [eax + 8]
sub esp, 8
mov dword [ebp - 0x268], ebx
mov ecx, dword [eax]
cmp ecx, edx
je 0x4413e6
mov dword [ebp - 0x268], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x260], ecx
mov ecx, dword [eax + 4]
xor edi, edi
mov dword [ebp - 0x264], ecx
mov dword [eax], edx
mov edx, dword [ebp - 0x268]
mov word [eax + 8], di
lea edi, [ebp - 0x268]
mov dword [eax + 4], 0
mov eax, dword [ebp - 0x2e0]
mov dword [ebp - 0x2ec], edi
cmp edx, ebx
je 0x441450
lea edi, [ebp - 0x2d8]
cmp eax, edi
je 0x4413a0
mov dword [ebp - 0x2e0], edx
mov edx, dword [ebp - 0x264]
test eax, eax
mov ecx, dword [ebp - 0x2d8]
mov dword [ebp - 0x2dc], edx
mov edx, dword [ebp - 0x260]
mov dword [ebp - 0x2d8], edx
je 0x440ee6
mov dword [ebp - 0x268], eax
mov dword [ebp - 0x260], ecx
xor esi, esi
cmp eax, ebx
mov dword [ebp - 0x264], 0
mov word [eax], si
je 0x440ee6
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x2c8]
lea edx, [ebp - 0x2c0]
cmp eax, edx
je 0x440efe
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x2ec]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2e0]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
sub esp, 8
cmp eax, 0xffffffff
mov dword [ebp - 0x2f0], eax
mov ebx, 0x905
jne 0x440fa8
jmp 0x441193
cmp dword [ebp - 0x2f4], 1
mov ecx, dword [ebp - 0x2b0]
je 0x441040
test edx, edx
jne 0x44101a
xor esi, esi
cmp dword [ebp + 8], 0x20
mov dword [ebp - 0x2ac], edx
mov word [ecx + edx*2], si
je 0x441075
xor esi, esi
cmp dword [ebp + 8], 0x40
je 0x441100
lea eax, [ebp - 0x2a8]
cmp ebx, esi
cmovl ebx, esi
cmp ecx, eax
je 0x440f84
mov dword [esp], ecx
call fcn.006eb330
mov eax, dword [ebp - 0x2ec]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2f0]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
sub esp, 8
test eax, eax
je 0x441181
test byte [ebp - 0x268], 0x10
jne 0x440f84
lea esi, [ebp - 0x23c]
lea eax, [ebp - 0x2a8]
mov dword [esp], esi
mov dword [ebp - 0x2b0], eax
call sub.msvcrt.dll_wcslen
lea edi, [eax + eax]
mov edx, edi
sar edx, 1
cmp edx, 7
mov dword [ebp - 0x2f4], edx
mov dword [ebp - 0x2e4], edx
jbe 0x440f30
lea eax, [ebp - 0x2e4]
lea ecx, [ebp - 0x2b0]
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.006c1e40
mov ecx, eax
mov dword [ebp - 0x2b0], eax
mov eax, dword [ebp - 0x2e4]
sub esp, 8
mov dword [ebp - 0x2a8], eax
mov dword [esp], ecx
mov dword [esp + 8], edi
mov dword [esp + 4], esi
call sub.msvcrt.dll_memcpy
mov edx, dword [ebp - 0x2e4]
mov ecx, dword [ebp - 0x2b0]
jmp 0x440f4b
movzx esi, word [ebp - 0x23c]
xor edi, edi
cmp dword [ebp + 8], 0x20
mov word [ecx], si
mov dword [ebp - 0x2ac], 1
mov word [ecx + eax*2], di
je 0x441488
cmp dword [ebp + 8], 0x40
je 0x4414cf
xor esi, esi
jmp 0x440f6d
cmp edx, 5
jbe 0x441488
sub edx, 6
mov esi, 3
lea eax, [ecx + 0xc]
cmp edx, 3
lea edi, [ebp - 0x290]
cmova edx, esi
mov esi, eax
add edx, edx
mov dword [ebp - 0x298], edi
add esi, edx
je 0x4410b3
test eax, eax
jne 0x4410b3
mov dword [esp], 0x727930
call fcn.006dfd70
mov esi, edx
sar esi, 1
cmp esi, 1
je 0x441220
test esi, esi
jne 0x4411c0
xor ecx, ecx
mov dword [ebp - 0x294], esi
mov dword [esp], edi
mov word [ebp + edx - 0x290], cx
call dword [sym.imp.msvcrt.dll__wtoi]
mov esi, eax
mov eax, dword [ebp - 0x298]
cmp eax, edi
je 0x4410f5
mov dword [esp], eax
call fcn.006eb330
mov ecx, dword [ebp - 0x2b0]
jmp 0x440f6d
cmp edx, 9
jbe 0x4414cf
sub edx, 0xa
mov esi, 3
lea eax, [ecx + 0x14]
cmp edx, 3
lea edi, [ebp - 0x278]
cmova edx, esi
mov esi, eax
add edx, edx
mov dword [ebp - 0x280], edi
add esi, edx
je 0x44113e
test eax, eax
jne 0x44113e
mov dword [esp], 0x727930
call fcn.006dfd70
mov esi, edx
sar esi, 1
cmp esi, 1
je 0x441350
test esi, esi
jne 0x4411f0
xor eax, eax
mov dword [ebp - 0x27c], esi
mov dword [esp], edi
mov word [ebp + edx - 0x278], ax
call dword [sym.imp.msvcrt.dll__wtoi]
mov esi, eax
mov eax, dword [ebp - 0x280]
cmp eax, edi
jne 0x4410ed
jmp 0x4410f5
mov eax, dword [ebp - 0x2f0]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_FindClose]
sub esp, 4
mov eax, dword [ebp - 0x2e0]
lea edi, [ebp - 0x2d8]
cmp eax, edi
je 0x440dcd
mov dword [esp], eax
call fcn.006eb330
lea esp, [ebp - 0xc]
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret 4
test edx, edx
je 0x4410c8
xor ecx, ecx
mov dword [ebp - 0x2f4], ebx
movzx ebx, byte [eax + ecx]
mov byte [edi + ecx], bl
add ecx, 1
cmp ecx, edx
jb 0x4411d0
mov ebx, dword [ebp - 0x2f4]
jmp 0x4410c8
test edx, edx
je 0x441153
xor ecx, ecx
mov dword [ebp - 0x2f4], ebx
movzx ebx, byte [eax + ecx]
mov byte [edi + ecx], bl
add ecx, 1
cmp ecx, edx
jb 0x441200
mov ebx, dword [ebp - 0x2f4]
jmp 0x441153
movzx eax, word [ecx + 0xc]
mov word [ebp - 0x290], ax
jmp 0x4410c8
mov dword [esp], ecx
lea ecx, [ebp - 0x2b0]
call fcn.004408b0
sub esp, 4
mov dword [esp], str.SDI_x64_R.exe
call sub.msvcrt.dll_wcslen
mov edx, 0x3fffffff
sub edx, dword [ebp - 0x2ac]
cmp eax, edx
ja 0x4414c3
lea ecx, [ebp - 0x2b0]
mov dword [esp + 4], eax
mov dword [esp], str.SDI_x64_R.exe
call fcn.006c1ce0
lea ebx, [ebp - 0x260]
lea edx, [eax + 8]
sub esp, 8
mov dword [ebp - 0x268], ebx
mov ecx, dword [eax]
cmp ecx, edx
je 0x44141b
mov dword [ebp - 0x268], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x260], ecx
mov ecx, dword [eax + 4]
lea edi, [ebp - 0x268]
mov dword [ebp - 0x2ec], edi
mov dword [ebp - 0x264], ecx
mov dword [eax], edx
xor ecx, ecx
mov edx, dword [ebp - 0x268]
mov dword [eax + 4], 0
mov word [eax + 8], cx
mov eax, dword [ebp - 0x2e0]
cmp edx, ebx
je 0x44146c
lea edi, [ebp - 0x2d8]
cmp eax, edi
je 0x4413c3
mov dword [ebp - 0x2e0], edx
mov edx, dword [ebp - 0x264]
test eax, eax
mov ecx, dword [ebp - 0x2d8]
mov dword [ebp - 0x2dc], edx
mov edx, dword [ebp - 0x260]
mov dword [ebp - 0x2d8], edx
je 0x441336
mov dword [ebp - 0x268], eax
mov dword [ebp - 0x260], ecx
xor edx, edx
cmp eax, ebx
mov dword [ebp - 0x264], 0
mov word [eax], dx
je 0x441336
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x2b0]
lea edx, [ebp - 0x2a8]
cmp eax, edx
jne 0x440ef6
jmp 0x440efe
movzx eax, word [ecx + 0x14]
mov word [ebp - 0x278], ax
jmp 0x441153
mov dword [esp], eax
call fcn.006eb330
mov eax, dword [ebp - 0x2e0]
lea edi, [ebp - 0x2d8]
cmp eax, edi
je 0x441392
mov dword [esp], eax
call fcn.006eb330
mov dword [esp], ebx
call fcn.005d7530
lea esi, [esi]
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x2e0], edx
mov dword [ebp - 0x2dc], eax
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0x2d8], eax
jmp 0x440ee6
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x2e0], edx
mov dword [ebp - 0x2dc], eax
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0x2d8], eax
jmp 0x441336
mov edi, dword [eax + 0x10]
mov esi, dword [eax + 0xc]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2ec], edi
mov edi, dword [eax + 0x14]
mov dword [ebp - 0x25c], esi
mov esi, dword [ebp - 0x2ec]
mov dword [ebp - 0x260], ecx
mov dword [ebp - 0x254], edi
mov dword [ebp - 0x258], esi
jmp 0x440e51
mov edi, dword [eax + 0x10]
mov esi, dword [eax + 0xc]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2ec], edi
mov edi, dword [eax + 0x14]
mov dword [ebp - 0x25c], esi
mov esi, dword [ebp - 0x2ec]
mov dword [ebp - 0x260], ecx
mov dword [ebp - 0x254], edi
mov dword [ebp - 0x258], esi
jmp 0x4412a1
lea ecx, [ebp - 0x2e0]
mov dword [esp], edi
call fcn.006c1d80
mov eax, dword [ebp - 0x268]
sub esp, 4
jmp 0x440ecb
lea ecx, [ebp - 0x2e0]
mov dword [esp], edi
call fcn.006c1d80
mov eax, dword [ebp - 0x268]
sub esp, 4
jmp 0x44131b
mov dword [esp + 0xc], edx
mov dword [esp + 8], 6
mov dword [esp + 4], 0x727b74
mov dword [esp], 0x727b8c
call fcn.006e1100
mov ebx, eax
mov eax, dword [ebp - 0x2b0]
lea edx, [ebp - 0x2a8]
cmp eax, edx
jne 0x441372
jmp 0x44137a
mov dword [esp], 0x72790e
call fcn.006e0080
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0xa
mov dword [esp + 4], 0x727b74
mov dword [esp], 0x727b8c
call fcn.006e1100
mov ebx, eax
mov eax, dword [ebp - 0x2c8]
lea edx, [ebp - 0x2c0]
cmp eax, edx
jne 0x441372
jmp 0x44137a
mov dword [esp], 0x72790e
call fcn.006e0080
mov ebx, eax
jmp 0x44137a