Function at 0x409ef0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0xf0
mov edi, edx
mov esi, ecx
mov ebx, dword [ebp + 8]
xorps xmm0, xmm0
movaps xmmword [esp + 0x50], xmm0
movaps xmmword [esp + 0x40], xmm0
movaps xmmword [esp + 0x30], xmm0
mov dword [esp + 0x2c], 0
push ebx
call sub.api_ms_win_crt_filesystem_l1_1_0.dll__chdir
add esp, 4
test eax, eax
js 0x409ff6
mov dword [esp + 0xc], esi
push 0x48e903
call fcn.004248a0
add esp, 4
test eax, eax
je 0x40a5e6
mov dword [esp + 0x20], eax
push eax
call fcn.00424a60
add esp, 4
test eax, eax
mov dword [esp + 0x18], edi
je 0x40a009
mov esi, eax
xor edi, edi
xor eax, eax
mov dword [esp + 0x14], 0
jmp 0x409fca
mov dword [esp + 0x10], eax
mov ebx, dword [esp + 0x14]
movzx eax, word [esi + 4]
add eax, 3
and eax, 0xfffffffc
push eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
mov dword [esp + 0x14], ebx
mov dword [ebx + edi*4], eax
movzx ecx, word [esi + 4]
push ecx
push esi
push eax
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
add esp, 0xc
add edi, 1
push dword [esp + 0x20]
call fcn.00424a60
add esp, 4
mov esi, eax
test eax, eax
mov eax, dword [esp + 0x10]
je 0x40a013
cmp edi, eax
jne 0x409f80
lea eax, [edi*4 + 0x80]
push eax
mov ebx, dword [esp + 0x18]
push ebx
call sub.api_ms_win_crt_heap_l1_1_0.dll_realloc
add esp, 8
test eax, eax
je 0x40a5ac
lea ecx, [edi + 0x20]
mov dword [esp + 0x10], ecx
mov ebx, eax
jmp 0x409f88
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov esi, dword [eax]
push ebx
push str.while_changing_working_directory_to___s_
jmp 0x40a5f6
mov dword [esp + 0x14], 0
xor edi, edi
push 0x40a820
push 4
push edi
mov ebx, dword [esp + 0x20]
push ebx
call sub.api_ms_win_crt_utility_l1_1_0.dll_qsort
add esp, 0x10
mov eax, dword [esp + 0x20]
push eax
call fcn.00424b70
add esp, 4
mov dword [esp + 0x20], edi
test edi, edi
js 0x40a5e6
mov dword [esp + 0x14], ebx
je 0x40a609
xor esi, esi
jmp 0x40a0a9
mov eax, dword [edi + 8]
mov edx, dword [esp + 0x30]
lea ecx, [ecx + ecx*2]
mov dword [eax + ecx*4], edx
movzx eax, word [esp + 0x34]
mov ecx, dword [edi]
mov edx, dword [edi + 8]
lea ecx, [ecx + ecx*2]
mov word [edx + ecx*4 + 4], ax
mov eax, dword [esp + 0x2c]
mov ecx, dword [edi]
mov edx, dword [edi + 8]
lea ecx, [ecx + ecx*2]
mov dword [edx + ecx*4 + 8], eax
add dword [edi], 1
mov edx, dword [esp + 0x28]
mov eax, dword [ebp + 0x14]
mov dword [eax + 4], edx
mov eax, dword [eax]
mov byte [eax + edx], 0
push dword [ebx + esi*4]
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
add esp, 4
add esi, 1
cmp esi, dword [esp + 0x20]
je 0x40a622
mov edi, dword [ebx + esi*4]
add edi, 8
push 0x48e903
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x40a091
push 0x48e923
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x40a091
lea eax, [esp + 0x30]
push eax
push edi
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__stat32i64]
add esp, 8
test eax, eax
jne 0x40a630
mov dword [esp + 0x10], edi
movzx eax, word [esp + 0x36]
and eax, 0xf000
cmp eax, 0x4000
setne al
cmp word [esp + 0x38], 2
setge cl
and cl, al
mov byte [esp + 0x27], cl
cmp cl, 1
jne 0x40a280
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
test eax, eax
jle 0x40a280
mov ecx, dword [esp + 0x30]
movzx ebx, word [esp + 0x34]
mov edx, dword [ebp + 0x10]
mov edx, dword [edx + 8]
add edx, 8
jmp 0x40a14c
add edx, 0xc
add eax, 0xffffffff
je 0x40a280
cmp dword [edx - 8], ecx
jne 0x40a140
cmp word [edx - 4], bx
jne 0x40a140
mov ebx, dword [edx]
xorps xmm0, xmm0
movaps xmmword [esp + 0xd0], xmm0
movaps xmmword [esp + 0xc0], xmm0
movaps xmmword [esp + 0xb0], xmm0
movaps xmmword [esp + 0xa0], xmm0
movaps xmmword [esp + 0x90], xmm0
movaps xmmword [esp + 0x80], xmm0
movaps xmmword [esp + 0x70], xmm0
movaps xmmword [esp + 0x60], xmm0
lea eax, [esp + 0x60]
push eax
push ebx
push dword [esp + 0x14]
call fcn.0041afb0
add esp, 0xc
test eax, eax
jne 0x40a794
movzx eax, word [esp + 0x60]
and eax, 0xf000
add eax, 0xfffff000
xor ecx, ecx
cmp eax, 0xbfff
ja 0x40a1d1
shr eax, 0xa
mov ecx, dword [eax + 0x48ea54]
push ecx
mov dword [esp + 0x2c], ebx
push ebx
push dword [esp + 0x18]
push dword [esp + 0x24]
mov ebx, dword [esp + 0x1c]
push ebx
call fcn.0041ba40
add esp, 0x14
mov edi, eax
cmp eax, 0x7f2bb726
jne 0x40a243
push dword [esp + 0x18]
push ebx
call fcn.00414c00
add esp, 8
test eax, eax
jne 0x40a7d0
movzx eax, word [esp + 0x60]
and eax, 0xf000
add eax, 0xfffff000
xor ecx, ecx
cmp eax, 0xbfff
ja 0x40a22b
shr eax, 0xa
mov ecx, dword [eax + 0x48ea54]
push ecx
push dword [esp + 0x2c]
push dword [esp + 0x18]
push dword [esp + 0x24]
push ebx
call fcn.0041ba40
add esp, 0x14
mov edi, eax
test edi, edi
jne 0x40a79e
add word [esp + 0x7a], 1
lea eax, [esp + 0x60]
push eax
mov ebx, dword [esp + 0x2c]
push ebx
push dword [esp + 0x14]
call fcn.0041b2f0
add esp, 0xc
test eax, eax
jne 0x40a7b8
mov ebx, dword [esp + 0x14]
jmp 0x40a091
mov ebx, dword [ebp + 0x14]
mov edi, dword [ebx + 4]
push dword [esp + 0x10]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
lea ecx, [edi + eax]
add ecx, 1
mov eax, dword [ebx + 8]
cmp ecx, eax
mov dword [esp + 0x28], edi
jbe 0x40a2c6
add eax, eax
mov dword [ebx + 8], eax
push eax
push dword [ebx]
call sub.api_ms_win_crt_heap_l1_1_0.dll_realloc
add esp, 8
test eax, eax
mov edi, dword [esp + 0xc]
je 0x40a6d6
mov dword [ebx], eax
mov ecx, dword [ebx + 4]
jmp 0x40a2ce
mov eax, dword [ebx]
mov ecx, edi
mov edi, dword [esp + 0xc]
add ecx, eax
sub esp, 0xc
mov eax, dword [esp + 0x1c]
mov dword [esp + 8], eax
mov dword [esp], ecx
call fcn.0040a840
add esp, 0xc
add dword [ebx + 4], eax
cmp dword [ebp + 0x18], 0
je 0x40a31f
mov eax, dword [ebp + 0x18]
mov eax, dword [eax]
test eax, eax
je 0x40a31f
movzx ecx, word [esp + 0x36]
and ecx, 0xf000
push ecx
push dword [ebp + 0xc]
push dword [esp + 0x20]
push dword [esp + 0x1c]
push dword [ebx]
push edi
call eax
add esp, 0x18
test eax, eax
jne 0x40a6a2
movzx eax, word [esp + 0x36]
and eax, 0xf000
add eax, 0xfffff000
shr eax, 0xc
cmp eax, 3
mov dword [esp + 0x1c], esi
jb 0x40a345
je 0x40a36c
cmp eax, 7
jne 0x40a40b
mov ebx, dword [ebp + 0xc]
push ebx
mov esi, dword [esp + 0x14]
push esi
push esi
mov eax, edi
mov edi, dword [esp + 0x24]
push edi
push eax
call fcn.00409870
add esp, 0x14
test eax, eax
je 0x40a430
jmp 0x40a6b2
mov edi, dword [esp + 0x18]
cmp edi, 2
jne 0x40a38a
push str.lostfound
push dword [esp + 0x14]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x40a3a6
push dword [ebp + 0xc]
push dword [esp + 0x14]
push edi
push dword [esp + 0x18]
call fcn.00409790
add esp, 0x10
test eax, eax
jne 0x40a786
lea eax, [esp + 0x2c]
push eax
push dword [esp + 0x14]
push edi
mov esi, dword [ebp + 0xc]
push esi
mov edi, dword [esp + 0x1c]
push edi
call fcn.00428d90
add esp, 0x14
test eax, eax
jne 0x40a74c
mov edx, dword [esp + 0x2c]
mov ecx, edi
push dword [ebp + 0x18]
push ebx
push dword [ebp + 0x10]
push esi
push dword [esp + 0x20]
call fcn.00409ef0
add esp, 0x14
test eax, eax
jne 0x40a759
push 0x48e923
call sub.api_ms_win_crt_filesystem_l1_1_0.dll__chdir
add esp, 4
test eax, eax
mov edi, dword [esp + 0x18]
mov ebx, esi
mov esi, dword [esp + 0x10]
je 0x40a430
jmp 0x40a762
mov esi, dword [esp + 0x10]
push esi
push str.ignoring_entry___s_
push 0
push str.__populate_fs
call fcn.004238e0
add esp, 0x10
mov edi, dword [esp + 0x18]
mov ebx, dword [ebp + 0xc]
nop dword [eax + eax]
lea eax, [esp + 0x2c]
push eax
push esi
push edi
push ebx
push dword [esp + 0x1c]
call fcn.00428d90
add esp, 0x14
test eax, eax
jne 0x40a645
mov eax, dword [esp + 0x2c]
xorps xmm0, xmm0
movaps xmmword [esp + 0xd0], xmm0
movaps xmmword [esp + 0xc0], xmm0
movaps xmmword [esp + 0xb0], xmm0
movaps xmmword [esp + 0xa0], xmm0
movaps xmmword [esp + 0x90], xmm0
movaps xmmword [esp + 0x80], xmm0
movaps xmmword [esp + 0x70], xmm0
movaps xmmword [esp + 0x60], xmm0
lea ebx, [esp + 0x60]
push ebx
mov esi, eax
push eax
push dword [esp + 0x14]
call fcn.0041afb0
add esp, 0xc
test eax, eax
jne 0x40a657
movsx eax, word [esp + 0x3a]
mov word [esp + 0x62], ax
shr eax, 0xf
mov word [esp + 0xd8], ax
movsx eax, word [esp + 0x3c]
mov word [esp + 0x78], ax
shr eax, 0xf
mov word [esp + 0xda], ax
mov eax, dword [esp + 0x60]
mov ecx, 0xfffff000
and eax, ecx
movzx ecx, word [esp + 0x36]
and ecx, 0xfff
or ecx, eax
mov word [esp + 0x60], cx
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x68], eax
mov dword [esp + 0x70], ecx
mov eax, dword [esp + 0x58]
mov dword [esp + 0x6c], eax
push ebx
push esi
push dword [esp + 0x14]
call fcn.0041b2f0
add esp, 0xc
test eax, eax
jne 0x40a661
cmp dword [ebp + 0x18], 0
mov esi, dword [esp + 0x1c]
je 0x40a55f
mov eax, dword [ebp + 0x18]
mov eax, dword [eax + 4]
test eax, eax
je 0x40a55f
movzx ecx, word [esp + 0x36]
and ecx, 0xf000
push ecx
push dword [ebp + 0xc]
push dword [esp + 0x20]
push dword [esp + 0x1c]
mov ecx, dword [ebp + 0x14]
push dword [ecx]
push dword [esp + 0x20]
call eax
add esp, 0x18
test eax, eax
jne 0x40a6a2
cmp byte [esp + 0x27], 0
mov ebx, dword [esp + 0x14]
mov edx, dword [esp + 0x28]
je 0x40a085
mov edi, dword [ebp + 0x10]
mov ecx, dword [edi]
cmp ecx, dword [edi + 4]
jne 0x40a04f
lea eax, [ecx + ecx*2]
lea eax, [eax*4 + 0x30]
push eax
push dword [edi + 8]
call sub.api_ms_win_crt_heap_l1_1_0.dll_realloc
add esp, 8
test eax, eax
je 0x40a6f3
mov dword [edi + 8], eax
add dword [edi + 4], 4
mov ecx, dword [edi]
jmp 0x40a052
test ebx, ebx
je 0x40a629
test edi, edi
je 0x40a5d1
nop word cs:[eax + eax]
nop
push dword [ebx + edi*4 - 4]
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
add esp, 4
add edi, 0xffffffff
jne 0x40a5c0
push ebx
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
add esp, 4
push dword [esp + 0x20]
call fcn.00424b70
add esp, 4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov esi, dword [eax]
push dword [ebp + 8]
push str.while_scanning_directory___s_
push esi
push str.__populate_fs
call fcn.004238e0
add esp, 0x10
jmp 0x40a742
xor esi, esi
mov dword [esp + 0xc], 0
cmp esi, dword [esp + 0x20]
jge 0x40a732
jmp 0x40a717
xor esi, esi
jmp 0x40a736
xor ebx, ebx
jmp 0x40a028
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov eax, dword [eax]
push edi
push str.while_lstat___s_
mov dword [esp + 0x14], eax
push eax
jmp 0x40a689
mov ecx, dword [esp + 0x10]
push ecx
push str.while_looking_up___s_
mov dword [esp + 0x14], eax
push eax
push ecx
jmp 0x40a6c2
mov edi, eax
push esi
push str.while_reading_inode__u
jmp 0x40a669
mov edi, eax
push esi
push str.while_writing_inode__u
push edi
push str.set_inode_extra
call fcn.004238e0
add esp, 0x10
mov esi, dword [esp + 0x1c]
push dword [esp + 0x10]
push str.while_setting_inode_for___s_
mov dword [esp + 0x14], edi
push edi
push str.__populate_fs
call fcn.004238e0
add esp, 0x10
cmp esi, dword [esp + 0x20]
jge 0x40a732
jmp 0x40a717
mov dword [esp + 0xc], eax
cmp esi, dword [esp + 0x20]
jge 0x40a732
jmp 0x40a717
push esi
push str.while_writing_file___s_
mov dword [esp + 0x14], eax
push eax
push str.__populate_fs
call fcn.004238e0
add esp, 0x10
mov esi, dword [esp + 0x1c]
cmp esi, dword [esp + 0x20]
jge 0x40a732
jmp 0x40a717
push dword [esp + 0x10]
push str.while_appending__s
push 0x7f2bb746
push str.__populate_fs
call fcn.004238e0
add esp, 0x10
jmp 0x40a709
push str.while_saving_inode_data
push 0x7f2bb746
push dword [esp + 0x18]
call fcn.004238e0
add esp, 0xc
mov dword [esp + 0xc], 0x7f2bb746
cmp esi, dword [esp + 0x20]
jge 0x40a732
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x20]
nop
push dword [edi + esi*4]
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
add esp, 4
add esi, 1
cmp ebx, esi
jne 0x40a720
mov esi, dword [esp + 0xc]
push dword [esp + 0x14]
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
add esp, 4
mov eax, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
push 0
mov dword [esp + 0x10], eax
push eax
push dword [esp + 0x18]
jmp 0x40a779
mov dword [esp + 0xc], eax
jmp 0x40a6ca
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov eax, dword [eax]
push str.while_changing_directory
mov dword [esp + 0x10], eax
push eax
push str.__populate_fs
call fcn.004238e0
add esp, 0xc
jmp 0x40a6ca
push dword [esp + 0x10]
push str.while_making_dir___s_
jmp 0x40a63e
mov edi, eax
push ebx
push str.while_reading_inode__u
jmp 0x40a7c0
mov ebx, dword [esp + 0x10]
push ebx
push str.while_linking___s_
push edi
push str.add_link
call fcn.004238e0
add esp, 0x10
jmp 0x40a7e9
mov edi, eax
push ebx
push str.while_writing_inode__u
push edi
push str.add_link
call fcn.004238e0
add esp, 0x10
jmp 0x40a7e5
mov edi, eax
push str.while_expanding_directory
push eax
push str.add_link
call fcn.004238e0
add esp, 0xc
mov ebx, dword [esp + 0x10]
push ebx
push str.while_linking__s
jmp 0x40a684