Function at 0x4013e4
Capabilities:
Enumerate files on windows

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x210
movabs rax, 8
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [0x004070e8]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
movabs rax, 0x18
mov r10, rax
mov rcx, r10
call sub.msvcrt.dll_malloc
mov qword [0x004070e8], rax
mov rax, qword [0x004070e8]
lea rcx, [0x0040545e]
mov qword [rax], rcx
mov rax, qword [0x004070e8]
add rax, 8
movabs rcx, 4
mov r10, rcx
mov qword [rbp - 8], rax
mov rcx, r10
call sub.msvcrt.dll_malloc
mov rcx, qword [rbp - 8]
mov qword [rcx], rax
mov rax, qword [0x004070e8]
add rax, 8
mov rcx, qword [rax]
movd xmm0, dword [0x00405464]
movd dword [rcx], xmm0
mov rax, qword [0x004070e8]
add rax, 0x10
mov ecx, 1
mov dword [rax], ecx
lea rax, [rbp - 0x148]
mov r11, rax
lea rax, [0x00405468]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.kernel32.dll_FindFirstFileA
mov qword [rbp - 0x150], rax
mov rax, qword [rbp - 0x150]
cmp rax, 0xffffffffffffffff
jne 0x4014ce
jmp 0x401842
mov eax, 1
mov dword [rbp - 0x154], eax
mov eax, dword [rbp - 0x148]
and eax, 0x10
cmp eax, 0
je 0x4014f0
jmp 0x4017e7
movsx eax, byte [rbp - 0x11c]
cmp eax, 0x2e
je 0x4017e7
mov eax, 0
mov byte [rbp - 0x1b8], al
movabs rax, 0x63
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x1b7]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
lea rax, [rbp - 0x11c]
mov r8, rax
lea rax, str.filters_s
mov r11, rax
lea rax, [rbp - 0x1b8]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_sprintf
lea rax, [0x0040547d]
mov r11, rax
lea rax, [rbp - 0x1b8]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_fopen
mov qword [rbp - 0x1c0], rax
mov rax, qword [rbp - 0x1c0]
cmp rax, 0
je 0x40159a
jmp 0x40159f
jmp 0x4017e7
mov eax, 0
mov dword [rbp - 0x1c4], eax
lea rax, [rbp - 0x1c8]
mov r8, rax
lea rax, [0x0040547f]
mov r11, rax
mov rax, qword [rbp - 0x1c0]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_fscanf
cmp eax, 1
jne 0x4015f0
mov eax, dword [rbp - 0x1c4]
mov rcx, rax
add eax, 1
mov dword [rbp - 0x1c4], eax
jmp 0x4015aa
mov eax, 0
mov r8, rax
mov eax, 0
mov r11, rax
mov rax, qword [rbp - 0x1c0]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_fseek
mov eax, dword [rbp - 0x1c4]
movsxd rax, eax
shl rax, 2
mov r10, rax
mov rcx, r10
call sub.msvcrt.dll_malloc
mov qword [rbp - 0x1d0], rax
mov eax, 0
mov dword [rbp - 0x1d4], eax
mov eax, dword [rbp - 0x1d4]
mov rcx, rax
add eax, 1
mov dword [rbp - 0x1d4], eax
movsxd rcx, ecx
shl rcx, 2
mov rax, qword [rbp - 0x1d0]
add rax, rcx
mov r8, rax
lea rax, [0x00405482]
mov r11, rax
mov rax, qword [rbp - 0x1c0]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_fscanf
cmp eax, 1
jne 0x40168f
jmp 0x40163f
mov eax, dword [rbp - 0x1c4]
mov r8, rax
lea rax, [rbp - 0x11c]
mov r11, rax
lea rax, str.loaded__s__d_taps__n
mov r10, rax
mov rcx, r10
mov rdx, r11
call section..text
mov rax, qword [rbp - 0x1c0]
mov r10, rax
mov rcx, r10
call sub.msvcrt.dll_fclose
mov eax, dword [rbp - 0x154]
movsxd rax, eax
shl rax, 3
lea rcx, [0x004070e8]
add rcx, rax
movabs rax, 0x18
mov r10, rax
mov qword [rbp - 0x1e0], rcx
mov rcx, r10
call sub.msvcrt.dll_malloc
mov rcx, qword [rbp - 0x1e0]
mov qword [rcx], rax
mov eax, dword [rbp - 0x154]
movsxd rax, eax
shl rax, 3
lea rcx, [0x004070e8]
add rcx, rax
mov rax, qword [rcx]
lea rcx, [rbp - 0x1b8]
mov r10, rcx
mov qword [rbp - 0x1e8], rax
mov rcx, r10
call sub.msvcrt.dll_strlen
add rax, 1
mov r10, rax
mov rcx, r10
call sub.msvcrt.dll_malloc
mov rcx, qword [rbp - 0x1e8]
mov qword [rcx], rax
mov eax, dword [rbp - 0x154]
movsxd rax, eax
shl rax, 3
lea rcx, [0x004070e8]
add rcx, rax
mov rax, qword [rcx]
lea rcx, [rbp - 0x11c]
mov r11, rcx
mov rcx, qword [rax]
mov r10, rcx
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_strcpy
mov eax, dword [rbp - 0x154]
movsxd rax, eax
shl rax, 3
lea rcx, [0x004070e8]
add rcx, rax
mov rax, qword [rcx]
add rax, 8
mov rcx, qword [rbp - 0x1d0]
mov qword [rax], rcx
mov eax, dword [rbp - 0x154]
movsxd rax, eax
shl rax, 3
lea rcx, [0x004070e8]
add rcx, rax
mov rax, qword [rcx]
add rax, 0x10
mov ecx, dword [rbp - 0x1c4]
mov dword [rax], ecx
mov eax, dword [rbp - 0x154]
mov rcx, rax
add eax, 1
mov dword [rbp - 0x154], eax
lea rax, [rbp - 0x148]
mov r11, rax
mov rax, qword [rbp - 0x150]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.kernel32.dll_FindNextFileA
cmp eax, 0
jne 0x4014d9
mov rax, qword [rbp - 0x150]
mov r10, rax
mov rcx, r10
call sub.kernel32.dll_FindClose
mov eax, dword [rbp - 0x154]
sub eax, 1
mov r11, rax
lea rax, str.loaded__d_filters__n
mov r10, rax
mov rcx, r10
mov rdx, r11
call section..text
leave
ret