Function at 0x4084d5
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x539476
mov eax, dword fs:[0]
push eax
sub esp, 0x268
mov eax, dword [0x589c40]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
xor esi, esi
push eax
lea ecx, [ebp - 0x268]
mov dword [ebp - 0x26c], esi
call fcn.00409de0
lea ebx, [ebp - 0x268]
mov dword [ebp - 4], esi
call fcn.00408a10
mov eax, dword [ebp - 0x268]
cmp dword [eax - 0xc], 0
je 0x408409
push 1
lea ecx, [ebp - 0x270]
push ecx
lea ecx, [ebp - 0x268]
call fcn.00408e00
or dword [ebp - 0x26c], 1
mov eax, dword [eax]
mov ecx, 0x5682b0
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4083f7
test dx, dx
je 0x4083f3
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4083f7
add eax, 4
add ecx, 4
test dx, dx
jne 0x4083d1
xor eax, eax
jmp 0x4083fc
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sete al
test al, al
je 0x408409
mov bl, 1
jmp 0x40840b
xor bl, bl
test byte [ebp - 0x26c], 1
je 0x40843d
mov eax, dword [ebp - 0x270]
and dword [ebp - 0x26c], 0xfffffffe
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x40843d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test bl, bl
je 0x408516
mov edx, dword [ebp - 0x268]
mov eax, dword [edx - 0xc]
lea esi, [eax - 1]
mov edi, 1
test esi, esi
jns 0x40845c
xor esi, esi
cmp esi, 0x7ffffffe
jg 0x4084f8
lea ecx, [esi + 1]
cmp ecx, eax
jle 0x40847b
mov edi, eax
sub edi, esi
test edi, edi
jle 0x4083a3
mov ebx, eax
sub eax, esi
sub eax, edi
inc eax
sub ebx, edi
cmp dword [edx - 4], 1
mov dword [ebp - 0x274], eax
jle 0x40849f
mov ecx, dword [edx - 0xc]
push ecx
lea ecx, [ebp - 0x268]
call fcn.0040a5e0
mov eax, dword [ebp - 0x274]
mov ecx, dword [ebp - 0x268]
add eax, eax
push eax
lea edx, [esi + edi]
lea edx, [ecx + edx*2]
push edx
push eax
lea eax, [ecx + esi*2]
push eax
call fcn.005127e0
add esp, 0x10
cmp eax, 0x50
ja case.0x4084ce.1
movzx ecx, byte [eax + 0x408758]
jmp dword [ecx*4 + 0x408748]
test ebx, ebx
js 0x40850c
mov eax, dword [ebp - 0x268]
cmp ebx, dword [eax - 8]
jg 0x40850c
mov dword [eax - 0xc], ebx
mov eax, dword [ebp - 0x268]
xor edx, edx
mov word [eax + ebx*2], dx
jmp 0x4083a3
push 0x80070216
call fcn.0040ab10
call fcn.0041dbcd
call fcn.0041dc05
push 0x80070057
call fcn.0040ab10
push 4
push 0x568908
lea ecx, [ebp - 0x268]
call fcn.0040a410
mov edx, dword [ebp - 0x268]
lea ecx, [ebp - 0x264]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x270], eax
cmp eax, 0xffffffff
jne 0x408573
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x268]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40856c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
xor eax, eax
jmp 0x40872b
mov bl, 0x10
mov esi, dword [ebp - 0x268]
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
call eax
cmp dword [esi - 4], 0
lea ecx, [esi - 4]
jl 0x4085a1
cmp eax, dword [esi - 0x10]
jne 0x4085a1
lea edi, [esi - 0x10]
mov edx, 1
lock xadd dword [ecx], edx
jmp 0x4085d9
mov ecx, dword [esi - 0xc]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x4086d8
mov eax, dword [esi - 0xc]
mov dword [edi + 4], eax
mov eax, dword [esi - 0xc]
lea ecx, [eax + eax + 2]
push ecx
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.005124df
add esp, 0x10
add edi, 0x10
mov dword [ebp - 0x26c], edi
lea eax, [ebp - 0x238]
mov byte [ebp - 4], 1
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4085f0
sub eax, edx
sar eax, 1
push eax
lea ecx, [ebp - 0x238]
push ecx
lea ecx, [ebp - 0x26c]
call fcn.0040a410
mov edi, dword [ebp - 0x26c]
test byte [ebp - 0x264], bl
je 0x408635
cmp word [ebp - 0x238], 0x2e
je 0x408697
push edi
call fcn.00408350
add esp, 4
jmp 0x408697
push 4
lea edx, [ebp - 0x274]
push edx
lea ecx, [ebp - 0x26c]
call fcn.00408e00
mov esi, dword [ebp - 0x274]
push esi
push 0x568914
call fcn.005135a1
add esp, 8
test eax, eax
jne 0x40867b
lea ecx, [ebp - 0x238]
call fcn.004087b0
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp - 4], 1
lea eax, [esi - 0x10]
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x408697
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov esi, dword [ebp - 0x270]
lea ecx, [ebp - 0x264]
push ecx
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
mov byte [ebp - 4], 0
lea eax, [edi - 0x10]
je 0x4086dd
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x408575
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x408575
call fcn.0040a670
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4086f6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x268]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x408726
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.005121e3
mov esp, ebp
pop ebp
ret