Function at 0x440ac0
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x340
mov eax, dword [0x55d68c]
xor eax, ebp
mov dword [ebp - 8], eax
push edi
mov byte [ebp - 0x2d8], 0
push 0x103
push 0
lea eax, [ebp - 0x2d7]
push eax
call fcn.004611e0
add esp, 0xc
mov dword [ebp - 0x148], 0
push 0x13c
push 0
lea ecx, [ebp - 0x144]
push ecx
call fcn.004611e0
add esp, 0xc
mov dword [ebp - 0x2ec], 0
mov byte [ebp - 0x1d0], 0
push 0x87
push 0
lea edx, [ebp - 0x1cf]
push edx
call fcn.004611e0
add esp, 0xc
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x2e8]
call fcn.00427440
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x30c], eax
lea ecx, [ebp - 0x2d8]
mov dword [ebp - 0x310], ecx
mov edx, dword [ebp - 0x310]
mov dword [ebp - 0x314], edx
mov eax, dword [ebp - 0x30c]
mov cl, byte [eax]
mov byte [ebp - 0x315], cl
mov edx, dword [ebp - 0x310]
mov al, byte [ebp - 0x315]
mov byte [edx], al
mov ecx, dword [ebp - 0x30c]
add ecx, 1
mov dword [ebp - 0x30c], ecx
mov edx, dword [ebp - 0x310]
add edx, 1
mov dword [ebp - 0x310], edx
cmp byte [ebp - 0x315], 0
jne 0x440b6b
lea eax, [ebp - 0x2d8]
add eax, 0xffffffff
mov dword [ebp - 0x31c], eax
mov ecx, dword [ebp - 0x31c]
mov dl, byte [ecx + 1]
mov byte [ebp - 0x31d], dl
add dword [ebp - 0x31c], 1
cmp byte [ebp - 0x31d], 0
jne 0x440bbd
mov edi, dword [ebp - 0x31c]
mov eax, dword [str..]
mov dword [edi], eax
mov cl, byte [0x54c8a0]
mov byte [edi + 4], cl
lea edx, [ebp - 0x148]
push edx
lea eax, [ebp - 0x2d8]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 0xffffffff
jne 0x440c37
lea ecx, [ebp - 0x2e8]
push ecx
mov ecx, dword [ebp + 8]
call fcn.00403660
lea ecx, [ebp - 0x2e8]
call fcn.004037c0
mov eax, dword [ebp + 8]
jmp 0x440da7
mov edx, 1
test edx, edx
je 0x440d7d
mov eax, dword [ebp - 0x148]
and eax, 0x10
je 0x440d4f
movsx ecx, byte [ebp - 0x11c]
cmp ecx, 0x2e
je 0x440d4d
lea ecx, [ebp - 0x308]
call fcn.00402b30
mov edx, dword [ebp + 0xc]
mov dword [ebp - 0x324], edx
mov eax, dword [ebp - 0x324]
add eax, 1
mov dword [ebp - 0x328], eax
mov ecx, dword [ebp - 0x324]
mov dl, byte [ecx]
mov byte [ebp - 0x329], dl
add dword [ebp - 0x324], 1
cmp byte [ebp - 0x329], 0
jne 0x440c86
mov eax, dword [ebp - 0x324]
sub eax, dword [ebp - 0x328]
mov dword [ebp - 0x330], eax
mov ecx, dword [ebp - 0x330]
push ecx
mov edx, dword [ebp + 0xc]
push edx
lea ecx, [ebp - 0x308]
call fcn.00403a00
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x334], eax
mov ecx, dword [ebp - 0x334]
add ecx, 1
mov dword [ebp - 0x338], ecx
mov edx, dword [ebp - 0x334]
mov al, byte [edx]
mov byte [ebp - 0x339], al
add dword [ebp - 0x334], 1
cmp byte [ebp - 0x339], 0
jne 0x440ce7
mov ecx, dword [ebp - 0x334]
sub ecx, dword [ebp - 0x338]
mov dword [ebp - 0x340], ecx
mov edx, dword [ebp - 0x340]
push edx
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x308]
call fcn.0040aad0
lea ecx, [ebp - 0x308]
push ecx
lea ecx, [ebp - 0x2e8]
call fcn.00408930
lea ecx, [ebp - 0x308]
call fcn.00402c40
jmp 0x440d58
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
lea eax, [ebp - 0x148]
push eax
mov ecx, dword [ebp - 0x2ec]
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x440d78
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x440d7d
jmp 0x440c37
mov edx, dword [ebp - 0x2ec]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
lea eax, [ebp - 0x2e8]
push eax
mov ecx, dword [ebp + 8]
call fcn.00403660
lea ecx, [ebp - 0x2e8]
call fcn.004037c0
mov eax, dword [ebp + 8]
pop edi
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.00455328
mov esp, ebp
pop ebp
ret