Function at 0x4babe0
Capabilities:
Enumerate files on windows

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x72c4ae
push eax
mov dword fs:[0], esp
sub esp, 0x250
push ebx
push ebp
push esi
push edi
mov edi, ecx
mov ecx, dword [esp + 0x270]
lea eax, [edi + 0xb270]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [edi + 0xae60]
call fcn.004f1ab0
mov ebx, eax
test ebx, ebx
je 0x4bac7a
mov ecx, dword [edi + 0xae60]
mov esi, dword [ebx]
push ebx
call fcn.004d4270
test esi, esi
mov ebx, eax
je 0x4bac76
mov ecx, esi
call fcn.004b4940
test eax, eax
je 0x4bac76
mov ecx, dword [edi + 0xae60]
call fcn.004f1ab0
test eax, eax
je 0x4bac69
cmp esi, dword [eax]
mov ecx, dword [edi + 0xae60]
push eax
je 0x4bacab
call fcn.004d4270
test eax, eax
jne 0x4bac55
push str.DataHandler:_internal_error
call fcn.00477400
add esp, 4
test ebx, ebx
jne 0x4bac27
xor esi, esi
mov dword [esp + 0x10], esi
lea eax, [edi + 0xb270]
push eax
lea edx, [esp + 0x20]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, esi
sub eax, 0
je 0x4baccb
dec eax
je 0x4bacbf
dec eax
jne 0x4bacdb
push str..es_.map
lea eax, [esp + 0x20]
push eax
jmp 0x4bacd5
call fcn.004d41a0
mov ecx, esi
call fcn.004b4140
push esi
call fcn.00727530
jmp 0x4bac73
push str..esp
lea ecx, [esp + 0x20]
push ecx
jmp 0x4bacd5
push str..esm
lea edx, [esp + 0x20]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea eax, [esp + 0x120]
push eax
lea ecx, [esp + 0x20]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp eax, 0xffffffff
mov dword [esp + 0x14], eax
je 0x4bae82
mov eax, dword [esp + 0x13c]
test eax, eax
jne 0x4bad15
mov eax, dword [esp + 0x140]
test eax, eax
je 0x4bae5c
mov ecx, dword [edi + 0xae60]
call fcn.004f1ab0
lea edx, [esp + 0x14c]
test edx, edx
mov esi, eax
je 0x4bad68
test esi, esi
je 0x4bad68
mov ebx, dword [esi]
lea eax, [ebx + 0xc]
push eax
lea ecx, [esp + 0x150]
push ecx
call dword [sym.imp.MSVCRT.dll__stricmp]
add esp, 8
test eax, eax
je 0x4bad60
mov ecx, dword [edi + 0xae60]
push esi
call fcn.004d4270
mov esi, eax
test esi, esi
jne 0x4bad31
jmp 0x4bad68
test ebx, ebx
jne 0x4bae5c
push 0x574
mov dword [0x7c952c], 0x7a6564
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [esp + 0x18], eax
xor ebp, ebp
cmp eax, ebp
mov dword [esp + 0x268], ebp
je 0x4badaa
mov ecx, dword [esp + 0x270]
push ebp
lea edx, [esp + 0x150]
push edx
push ecx
mov ecx, eax
call fcn.004b3f10
mov ebp, eax
mov ecx, dword [edi + 0xae60]
mov dword [esp + 0x268], 0xffffffff
call fcn.004f1ab0
mov esi, eax
test esi, esi
je 0x4bae50
mov ebx, dword [esi]
mov ecx, ebx
call fcn.004b6190
test al, al
je 0x4bade2
mov ecx, ebp
call fcn.004b6190
test al, al
jne 0x4badf8
mov ecx, ebx
call fcn.004b6190
test al, al
jne 0x4bae13
mov ecx, ebp
call fcn.004b6190
test al, al
jne 0x4bae13
lea edx, [esp + 0x134]
push edx
add ebx, 0x280
push ebx
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
test eax, eax
jge 0x4bae32
jmp 0x4bae1e
mov ecx, ebp
call fcn.004b6190
test al, al
jne 0x4bae32
mov ecx, dword [edi + 0xae60]
push esi
call fcn.004d4270
mov esi, eax
test esi, esi
jne 0x4badca
jmp 0x4bae50
mov ecx, dword [edi + 0xae60]
push ebp
push esi
call fcn.004d3fe0
mov ecx, dword [edi + 0xae60]
push eax
push esi
call fcn.004d4050
test esi, esi
jne 0x4bae5c
mov ecx, dword [edi + 0xae60]
push ebp
call fcn.004d3fc0
mov esi, dword [esp + 0x14]
lea eax, [esp + 0x120]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x4bacfb
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov esi, dword [esp + 0x10]
inc esi
cmp esi, 3
mov dword [esp + 0x10], esi
jb 0x4bac80
mov ecx, dword [edi + 0xae60]
call fcn.004f1ab0
mov ecx, dword [edi + 0xae60]
mov esi, eax
mov dword [esp + 0x10], 0
call fcn.004ee8b0
test eax, eax
jbe 0x4baf60
test esi, esi
je 0x4baf60
mov ebx, dword [esi]
lea ecx, [ebx + 0x110]
push ecx
lea edx, [esp + 0x20]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea eax, [ebx + 0xc]
push eax
lea ecx, [esp + 0x20]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea edx, [esp + 0x120]
push edx
lea eax, [esp + 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov ebp, eax
cmp ebp, 0xffffffff
jne 0x4baf2f
mov ecx, dword [edi + 0xae60]
push esi
mov ebp, esi
call fcn.004d4270
mov ecx, dword [edi + 0xae60]
push ebp
mov esi, eax
call fcn.004d41a0
test ebx, ebx
je 0x4baf44
mov ecx, ebx
call fcn.004b4140
push ebx
call fcn.00727530
add esp, 4
jmp 0x4baf44
mov ecx, dword [edi + 0xae60]
push esi
call fcn.004d4270
push ebp
mov esi, eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ebx, dword [esp + 0x10]
mov ecx, dword [edi + 0xae60]
inc ebx
mov dword [esp + 0x10], ebx
call fcn.004ee8b0
cmp ebx, eax
jb 0x4baeb8
mov ecx, dword [esp + 0x260]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
mov dword fs:[0], ecx
add esp, 0x25c
ret 4