Function at 0x440052
Capabilities:
Enumerate files on windows

Disassembly:
push 0x294
mov eax, 0x4b4792
call fcn.0047a6c1
mov esi, ecx
mov dword [ebp - 0x290], esi
push 0x250
xor ebx, ebx
lea eax, [ebp - 0x260]
push ebx
push eax
call fcn.0047bc10
mov dword [ebp - 0x28c], ebx
mov dword [ebp - 0x288], ebx
mov dword [ebp - 0x284], ebx
lea eax, [esi + 8]
mov dword [ebp - 4], ebx
push 0x4b9c64
push eax
lea eax, [ebp - 0x294]
push eax
call fcn.0043fc21
add esp, 0x18
lea eax, [ebp - 0x260]
inc ebx
push eax
push dword [ebp - 0x294]
mov byte [ebp - 4], bl
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov edi, eax
cmp edi, 0xffffffff
je 0x440363
xor eax, eax
mov dword [ebp - 0x280], eax
mov dword [ebp - 0x27c], eax
mov dword [ebp - 0x278], eax
mov dword [ebp - 0x274], eax
mov dword [ebp - 0x270], eax
mov dword [ebp - 0x26c], eax
mov byte [ebp - 4], 3
test byte [ebp - 0x260], 0x10
jne 0x4401f5
push str..manifest
lea eax, [ebp - 0x234]
mov ecx, esi
push eax
call fcn.0043ff1d
test al, al
lea eax, [ebp - 0x234]
je 0x440177
push eax
lea ecx, [ebp - 0x264]
call fcn.00430da3
mov esi, dword [ebp - 0x27c]
mov byte [ebp - 4], 4
cmp esi, dword [ebp - 0x278]
je 0x44015c
mov eax, dword [ebp - 0x264]
add eax, 0xfffffff0
push eax
call fcn.004113eb
add eax, 0x10
mov dword [esi], eax
add dword [ebp - 0x27c], 4
pop ecx
jmp 0x44016f
lea eax, [ebp - 0x264]
push eax
push esi
lea ecx, [ebp - 0x280]
call fcn.0043f8c8
mov ecx, dword [ebp - 0x264]
jmp 0x4401e3
push str..policy
push eax
mov ecx, esi
call fcn.0043ff1d
test al, al
je 0x4401f5
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp - 0x268]
call fcn.00430da3
mov esi, dword [ebp - 0x270]
mov byte [ebp - 4], 5
cmp esi, dword [ebp - 0x26c]
je 0x4401ca
mov eax, dword [ebp - 0x268]
add eax, 0xfffffff0
push eax
call fcn.004113eb
add eax, 0x10
mov dword [esi], eax
add dword [ebp - 0x270], 4
pop ecx
jmp 0x4401dd
lea eax, [ebp - 0x268]
push eax
push esi
lea ecx, [ebp - 0x274]
call fcn.0043f8c8
mov ecx, dword [ebp - 0x268]
lea ecx, [ecx - 0x10]
mov byte [ebp - 4], 3
call fcn.00411bc2
mov esi, dword [ebp - 0x290]
lea eax, [ebp - 0x260]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x4400f6
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [ebp - 0x27c]
mov esi, dword [ebp - 0x280]
sub eax, esi
mov edi, dword [ebp - 0x274]
sar eax, 2
cmp eax, ebx
jb 0x4402d4
mov eax, dword [ebp - 0x270]
sub eax, edi
sar eax, 2
cmp eax, ebx
jb 0x4402d4
lea ecx, [ebp - 0x2a0]
call fcn.0043fafd
mov eax, dword [ebp - 0x290]
lea ecx, [ebp - 0x2a0]
add eax, 8
mov byte [ebp - 4], 6
push eax
call fcn.00410e20
push dword [ebp - 0x280]
lea ecx, [ebp - 0x29c]
call fcn.00410e20
push dword [ebp - 0x274]
lea ecx, [ebp - 0x298]
call fcn.00410e20
mov eax, dword [ebp - 0x288]
lea ecx, [ebp - 0x2a0]
push ecx
cmp eax, dword [ebp - 0x284]
je 0x4402b1
mov ecx, eax
call fcn.0043fa96
push 0xc
pop eax
add dword [ebp - 0x288], eax
jmp 0x4402bd
push eax
lea ecx, [ebp - 0x28c]
call fcn.0043f819
lea ecx, [ebp - 0x2a0]
call fcn.0043fb4e
mov esi, dword [ebp - 0x280]
mov edi, dword [ebp - 0x274]
test edi, edi
je 0x440327
mov esi, dword [ebp - 0x270]
cmp edi, esi
je 0x4402f9
mov ecx, dword [edi]
sub ecx, 0x10
call fcn.00411bc2
add edi, 4
cmp edi, esi
jne 0x4402e2
mov edi, dword [ebp - 0x274]
mov eax, dword [ebp - 0x26c]
sub eax, edi
and eax, 0xfffffffc
push eax
push edi
call fcn.00410907
mov esi, dword [ebp - 0x280]
xor eax, eax
pop ecx
pop ecx
mov dword [ebp - 0x274], eax
mov dword [ebp - 0x270], eax
mov dword [ebp - 0x26c], eax
mov byte [ebp - 4], bl
test esi, esi
je 0x440363
mov edi, dword [ebp - 0x27c]
cmp esi, edi
je 0x44034f
mov ecx, dword [esi]
sub ecx, 0x10
call fcn.00411bc2
add esi, 4
cmp esi, edi
jne 0x440338
mov esi, dword [ebp - 0x280]
mov eax, dword [ebp - 0x278]
sub eax, esi
and eax, 0xfffffffc
push eax
push esi
call fcn.00410907
pop ecx
pop ecx
mov eax, dword [ebp - 0x288]
sub eax, dword [ebp - 0x28c]
push 0xc
pop ecx
cdq
idiv ecx
push eax
push str.CInstallAssembly::Install__count_d
call fcn.004336ac
mov edi, dword [ebp - 0x288]
xor bh, bh
mov esi, dword [ebp - 0x28c]
mov bl, 1
pop ecx
pop ecx
jmp 0x4403ca
mov ecx, dword [ebp - 0x290]
push esi
call fcn.0043ff5b
mov bh, al
test bl, bl
je 0x4403ae
test bh, bh
je 0x4403ae
mov bl, 1
jmp 0x4403b0
xor bl, bl
movzx eax, bh
push eax
movzx eax, bl
push eax
push str.CInstallAssembly::Install__bx_d__bo_d
call fcn.004336ac
add esp, 0xc
push 0xc
pop eax
add esi, eax
cmp esi, edi
jne 0x440394
movzx eax, bh
push eax
movzx eax, bl
push eax
push str.CInstallAssembly::Install__end:_bx_d__bo_d
call fcn.004336ac
add esp, 0xc
test bh, bh
je 0x4403f0
test bl, bl
je 0x4403f0
xor ebx, ebx
inc ebx
jmp 0x4403f2
xor bl, bl
mov ecx, dword [ebp - 0x294]
lea ecx, [ecx - 0x10]
call fcn.00411bc2
mov esi, dword [ebp - 0x28c]
test esi, esi
je 0x440478
mov edi, dword [ebp - 0x288]
cmp esi, edi
je 0x44042a
mov ecx, esi
call fcn.0043fb4e
push 0xc
pop eax
add esi, eax
cmp esi, edi
jne 0x440414
mov esi, dword [ebp - 0x28c]
mov eax, dword [ebp - 0x284]
sub eax, esi
mov dword [ebp - 0x268], esi
push 0xc
cdq
pop ecx
idiv ecx
imul eax, eax, 0xc
mov dword [ebp - 0x264], eax
cmp eax, 0x1000
jb 0x44046f
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x268]
push eax
call fcn.00411cec
mov esi, dword [ebp - 0x268]
mov eax, dword [ebp - 0x264]
pop ecx
pop ecx
push eax
push esi
call fcn.00479ff8
pop ecx
pop ecx
mov al, bl
call fcn.0047a67f
ret