Function at 0x441540
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
lea eax, [ebp - 0x2d8]
push ebx
sub esp, 0x2fc
mov dword [ebp - 0x2e0], eax
xor eax, eax
cmp dword [ebp + 8], 0x20
mov dword [ebp - 0x2dc], 0
mov word [ebp - 0x2d8], ax
je 0x441590
xor ebx, ebx
cmp dword [ebp + 8], 0x40
je 0x4419e0
lea esp, [ebp - 0xc]
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret 4
mov dword [esp], ecx
lea ecx, [ebp - 0x2c8]
call fcn.00441060
sub esp, 4
mov dword [esp], 0x726acc
call sub.msvcrt.dll_wcslen
mov edx, 0x3fffffff
sub edx, dword [ebp - 0x2c4]
cmp eax, edx
ja 0x441ce8
lea ecx, [ebp - 0x2c8]
mov dword [esp + 4], eax
mov dword [esp], 0x726acc
call fcn.006c02c0
lea ebx, [ebp - 0x260]
lea edx, [eax + 8]
sub esp, 8
mov dword [ebp - 0x268], ebx
mov ecx, dword [eax]
cmp ecx, edx
je 0x441b96
mov dword [ebp - 0x268], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x260], ecx
mov ecx, dword [eax + 4]
xor edi, edi
mov dword [ebp - 0x264], ecx
mov dword [eax], edx
mov edx, dword [ebp - 0x268]
mov word [eax + 8], di
lea edi, [ebp - 0x268]
mov dword [eax + 4], 0
mov eax, dword [ebp - 0x2e0]
mov dword [ebp - 0x2ec], edi
cmp edx, ebx
je 0x441c00
lea edi, [ebp - 0x2d8]
cmp eax, edi
je 0x441b50
mov dword [ebp - 0x2e0], edx
mov edx, dword [ebp - 0x264]
test eax, eax
mov ecx, dword [ebp - 0x2d8]
mov dword [ebp - 0x2dc], edx
mov edx, dword [ebp - 0x260]
mov dword [ebp - 0x2d8], edx
je 0x441696
mov dword [ebp - 0x268], eax
mov dword [ebp - 0x260], ecx
xor esi, esi
cmp eax, ebx
mov dword [ebp - 0x264], 0
mov word [eax], si
je 0x441696
mov dword [esp], eax
call fcn.006e9880
mov eax, dword [ebp - 0x2c8]
lea edx, [ebp - 0x2c0]
cmp eax, edx
je 0x4416ae
mov dword [esp], eax
call fcn.006e9880
mov eax, dword [ebp - 0x2ec]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2e0]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
sub esp, 8
cmp eax, 0xffffffff
mov dword [ebp - 0x2f0], eax
mov ebx, 0x7d0
jne 0x441758
jmp 0x441943
cmp dword [ebp - 0x2f4], 1
mov ecx, dword [ebp - 0x2b0]
je 0x4417f0
test edx, edx
jne 0x4417ca
xor esi, esi
cmp dword [ebp + 8], 0x20
mov dword [ebp - 0x2ac], edx
mov word [ecx + edx*2], si
je 0x441825
xor esi, esi
cmp dword [ebp + 8], 0x40
je 0x4418b0
lea eax, [ebp - 0x2a8]
cmp ebx, esi
cmovl ebx, esi
cmp ecx, eax
je 0x441734
mov dword [esp], ecx
call fcn.006e9880
mov eax, dword [ebp - 0x2ec]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2f0]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
sub esp, 8
test eax, eax
je 0x441931
test byte [ebp - 0x268], 0x10
jne 0x441734
lea esi, [ebp - 0x23c]
lea eax, [ebp - 0x2a8]
mov dword [esp], esi
mov dword [ebp - 0x2b0], eax
call sub.msvcrt.dll_wcslen
lea edi, [eax + eax]
mov edx, edi
sar edx, 1
cmp edx, 7
mov dword [ebp - 0x2f4], edx
mov dword [ebp - 0x2e4], edx
jbe 0x4416e0
lea eax, [ebp - 0x2e4]
lea ecx, [ebp - 0x2b0]
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.006c0420
mov ecx, eax
mov dword [ebp - 0x2b0], eax
mov eax, dword [ebp - 0x2e4]
sub esp, 8
mov dword [ebp - 0x2a8], eax
mov dword [esp], ecx
mov dword [esp + 8], edi
mov dword [esp + 4], esi
call sub.msvcrt.dll_memcpy
mov edx, dword [ebp - 0x2e4]
mov ecx, dword [ebp - 0x2b0]
jmp 0x4416fb
movzx esi, word [ebp - 0x23c]
xor edi, edi
cmp dword [ebp + 8], 0x20
mov word [ecx], si
mov dword [ebp - 0x2ac], 1
mov word [ecx + eax*2], di
je 0x441c38
cmp dword [ebp + 8], 0x40
je 0x441c7f
xor esi, esi
jmp 0x44171d
cmp edx, 5
jbe 0x441c38
sub edx, 6
mov esi, 3
lea eax, [ecx + 0xc]
cmp edx, 3
lea edi, [ebp - 0x290]
cmova edx, esi
mov esi, eax
add edx, edx
mov dword [ebp - 0x298], edi
add esi, edx
je 0x441863
test eax, eax
jne 0x441863
mov dword [esp], 0x7268c0
call fcn.006de350
mov esi, edx
sar esi, 1
cmp esi, 1
je 0x4419d0
test esi, esi
jne 0x441970
xor ecx, ecx
mov dword [ebp - 0x294], esi
mov dword [esp], edi
mov word [ebp + edx - 0x290], cx
call dword [sym.imp.msvcrt.dll__wtoi]
mov esi, eax
mov eax, dword [ebp - 0x298]
cmp eax, edi
je 0x4418a5
mov dword [esp], eax
call fcn.006e9880
mov ecx, dword [ebp - 0x2b0]
jmp 0x44171d
cmp edx, 9
jbe 0x441c7f
sub edx, 0xa
mov esi, 3
lea eax, [ecx + 0x14]
cmp edx, 3
lea edi, [ebp - 0x278]
cmova edx, esi
mov esi, eax
add edx, edx
mov dword [ebp - 0x280], edi
add esi, edx
je 0x4418ee
test eax, eax
jne 0x4418ee
mov dword [esp], 0x7268c0
call fcn.006de350
mov esi, edx
sar esi, 1
cmp esi, 1
je 0x441b00
test esi, esi
jne 0x4419a0
xor eax, eax
mov dword [ebp - 0x27c], esi
mov dword [esp], edi
mov word [ebp + edx - 0x278], ax
call dword [sym.imp.msvcrt.dll__wtoi]
mov esi, eax
mov eax, dword [ebp - 0x280]
cmp eax, edi
jne 0x44189d
jmp 0x4418a5
mov eax, dword [ebp - 0x2f0]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_FindClose]
sub esp, 4
mov eax, dword [ebp - 0x2e0]
lea edi, [ebp - 0x2d8]
cmp eax, edi
je 0x44157d
mov dword [esp], eax
call fcn.006e9880
lea esp, [ebp - 0xc]
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret 4
test edx, edx
je 0x441878
xor ecx, ecx
mov dword [ebp - 0x2f4], ebx
movzx ebx, byte [eax + ecx]
mov byte [edi + ecx], bl
add ecx, 1
cmp ecx, edx
jb 0x441980
mov ebx, dword [ebp - 0x2f4]
jmp 0x441878
test edx, edx
je 0x441903
xor ecx, ecx
mov dword [ebp - 0x2f4], ebx
movzx ebx, byte [eax + ecx]
mov byte [edi + ecx], bl
add ecx, 1
cmp ecx, edx
jb 0x4419b0
mov ebx, dword [ebp - 0x2f4]
jmp 0x441903
movzx eax, word [ecx + 0xc]
mov word [ebp - 0x290], ax
jmp 0x441878
mov dword [esp], ecx
lea ecx, [ebp - 0x2b0]
call fcn.00441060
sub esp, 4
mov dword [esp], str.SDI_x64_R.exe
call sub.msvcrt.dll_wcslen
mov edx, 0x3fffffff
sub edx, dword [ebp - 0x2ac]
cmp eax, edx
ja 0x441c73
lea ecx, [ebp - 0x2b0]
mov dword [esp + 4], eax
mov dword [esp], str.SDI_x64_R.exe
call fcn.006c02c0
lea ebx, [ebp - 0x260]
lea edx, [eax + 8]
sub esp, 8
mov dword [ebp - 0x268], ebx
mov ecx, dword [eax]
cmp ecx, edx
je 0x441bcb
mov dword [ebp - 0x268], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x260], ecx
mov ecx, dword [eax + 4]
lea edi, [ebp - 0x268]
mov dword [ebp - 0x2ec], edi
mov dword [ebp - 0x264], ecx
mov dword [eax], edx
xor ecx, ecx
mov edx, dword [ebp - 0x268]
mov dword [eax + 4], 0
mov word [eax + 8], cx
mov eax, dword [ebp - 0x2e0]
cmp edx, ebx
je 0x441c1c
lea edi, [ebp - 0x2d8]
cmp eax, edi
je 0x441b73
mov dword [ebp - 0x2e0], edx
mov edx, dword [ebp - 0x264]
test eax, eax
mov ecx, dword [ebp - 0x2d8]
mov dword [ebp - 0x2dc], edx
mov edx, dword [ebp - 0x260]
mov dword [ebp - 0x2d8], edx
je 0x441ae6
mov dword [ebp - 0x268], eax
mov dword [ebp - 0x260], ecx
xor edx, edx
cmp eax, ebx
mov dword [ebp - 0x264], 0
mov word [eax], dx
je 0x441ae6
mov dword [esp], eax
call fcn.006e9880
mov eax, dword [ebp - 0x2b0]
lea edx, [ebp - 0x2a8]
cmp eax, edx
jne 0x4416a6
jmp 0x4416ae
movzx eax, word [ecx + 0x14]
mov word [ebp - 0x278], ax
jmp 0x441903
mov dword [esp], eax
call fcn.006e9880
mov eax, dword [ebp - 0x2e0]
lea edi, [ebp - 0x2d8]
cmp eax, edi
je 0x441b42
mov dword [esp], eax
call fcn.006e9880
mov dword [esp], ebx
call fcn.005d5ce0
lea esi, [esi]
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x2e0], edx
mov dword [ebp - 0x2dc], eax
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0x2d8], eax
jmp 0x441696
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x2e0], edx
mov dword [ebp - 0x2dc], eax
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0x2d8], eax
jmp 0x441ae6
mov edi, dword [eax + 0x10]
mov esi, dword [eax + 0xc]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2ec], edi
mov edi, dword [eax + 0x14]
mov dword [ebp - 0x25c], esi
mov esi, dword [ebp - 0x2ec]
mov dword [ebp - 0x260], ecx
mov dword [ebp - 0x254], edi
mov dword [ebp - 0x258], esi
jmp 0x441601
mov edi, dword [eax + 0x10]
mov esi, dword [eax + 0xc]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2ec], edi
mov edi, dword [eax + 0x14]
mov dword [ebp - 0x25c], esi
mov esi, dword [ebp - 0x2ec]
mov dword [ebp - 0x260], ecx
mov dword [ebp - 0x254], edi
mov dword [ebp - 0x258], esi
jmp 0x441a51
lea ecx, [ebp - 0x2e0]
mov dword [esp], edi
call fcn.006c0360
mov eax, dword [ebp - 0x268]
sub esp, 4
jmp 0x44167b
lea ecx, [ebp - 0x2e0]
mov dword [esp], edi
call fcn.006c0360
mov eax, dword [ebp - 0x268]
sub esp, 4
jmp 0x441acb
mov dword [esp + 0xc], edx
mov dword [esp + 8], 6
mov dword [esp + 4], 0x726b04
mov dword [esp], 0x726b1c
call fcn.006df6e0
mov ebx, eax
mov eax, dword [ebp - 0x2b0]
lea edx, [ebp - 0x2a8]
cmp eax, edx
jne 0x441b22
jmp 0x441b2a
mov dword [esp], 0x72689e
call fcn.006de660
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0xa
mov dword [esp + 4], 0x726b04
mov dword [esp], 0x726b1c
call fcn.006df6e0
mov ebx, eax
mov eax, dword [ebp - 0x2c8]
lea edx, [ebp - 0x2c0]
cmp eax, edx
jne 0x441b22
jmp 0x441b2a
mov dword [esp], 0x72689e
call fcn.006de660
mov ebx, eax
jmp 0x441b2a