Function at 0x41d97b
Capabilities:
Enumerate files on windows

Disassembly:
push 0x520
mov eax, 0x46f7e2
call fcn.00454bef
mov edi, ecx
mov dword [ebp - 0x2e4], edi
lea esi, [edi + 0x160]
push str.Posting_log_file
push esi
mov dword [ebp - 0x2d0], edi
call fcn.004087a0
mov bl, byte [ebp + 8]
and dword [ebp - 4], 0
pop ecx
pop ecx
test bl, bl
je 0x41d9cc
push dword [edi + 0x7c]
push str.CorrIDString
push str._s:__d
push esi
call fcn.004087a0
add esp, 0x10
mov byte [ebp - 4], 1
test bl, bl
je 0x41dc8e
lea ecx, [ebp - 0x48]
call fcn.004266fe
push str..rbal
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 2
call fcn.00408710
mov eax, 0x250
push eax
lea eax, [ebp - 0x2cc]
push 0
push eax
call fcn.00454000
add esp, 0xc
cmp dword [ebp - 0x34], 8
lea ecx, [ebp - 0x2cc]
lea eax, [ebp - 0x48]
cmovae eax, dword [ebp - 0x48]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
xor esi, esi
xor ebx, ebx
xor ecx, ecx
mov dword [ebp - 0x2e0], eax
mov dword [ebp - 0x2dc], esi
mov dword [ebp - 0x2d8], ebx
mov dword [ebp - 0x2d4], ecx
mov byte [ebp - 4], 3
cmp eax, 0xffffffff
je 0x41db04
cmp dword [ebp - 0x2cc], 0x10
je 0x41dad1
lea eax, [ebp - 0x2cc]
cmp eax, ebx
jae 0x41da9b
cmp esi, eax
ja 0x41da9b
sub eax, esi
cdq
mov edi, 0x250
idiv edi
mov edi, eax
cmp ebx, ecx
jne 0x41da8b
push ecx
lea ecx, [ebp - 0x2dc]
call fcn.004275aa
mov ebx, dword [ebp - 0x2d8]
mov esi, dword [ebp - 0x2dc]
imul edi, edi, 0x250
add edi, esi
test ebx, ebx
je 0x41dac4
mov esi, edi
jmp 0x41dabb
cmp ebx, ecx
jne 0x41dab1
push ecx
lea ecx, [ebp - 0x2dc]
call fcn.004275aa
mov ebx, dword [ebp - 0x2d8]
test ebx, ebx
je 0x41dac4
lea esi, [ebp - 0x2cc]
mov ecx, 0x94
mov edi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, 0x250
add ebx, eax
mov dword [ebp - 0x2d8], ebx
lea eax, [ebp - 0x2cc]
push eax
push dword [ebp - 0x2e0]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
mov esi, dword [ebp - 0x2dc]
mov ecx, dword [ebp - 0x2d4]
test eax, eax
jne 0x41da4c
mov edi, dword [ebp - 0x2e4]
mov eax, dword [ebp - 0x2e0]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp esi, ebx
je 0x41dc47
mov eax, ebx
sub eax, esi
cdq
mov ecx, 0x250
idiv ecx
push 0x41d95c
mov edx, ebx
mov ecx, esi
push eax
call fcn.0042a43c
pop ecx
pop ecx
lea eax, [esi + 0x2c]
push eax
lea ecx, [ebp - 0x60]
call fcn.00408580
mov ebx, eax
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 4
call fcn.004266fe
push ebx
mov edx, eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 5
call fcn.0040b730
pop ecx
lea ecx, [ebp - 0x78]
call fcn.00408690
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 8
call fcn.00408690
cmp dword [ebp - 0x1c], 8
push ecx
push ecx
lea eax, [ebp - 0x30]
cmovae eax, dword [ebp - 0x30]
push 8
push eax
lea ecx, [ebp - 0x3ac]
call fcn.004269ef
mov edx, str.Info:_RobloxAppLog
lea ecx, [ebp - 0x39c]
mov byte [ebp - 4], 9
call fcn.0040b130
mov ebx, 0x47d814
mov edx, ebx
mov ecx, eax
call fcn.0040b130
mov edx, str.CorrIDString
lea ecx, [ebp - 0x39c]
call fcn.0040b130
mov edx, 0x47c364
mov ecx, eax
call fcn.0040b130
push dword [edi + 0x7c]
mov ecx, eax
call fcn.0042583a
mov edx, ebx
mov ecx, eax
call fcn.0040b130
lea ecx, [ebp - 0x39c]
call fcn.00408050
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 8
call fcn.0041dd26
cmp dword [ebp - 0x1c], 8
push ecx
push ecx
lea eax, [ebp - 0x30]
cmovae eax, dword [ebp - 0x30]
push 0x21
push eax
lea ecx, [ebp - 0x52c]
call fcn.004269ef
lea eax, [edi + 0x160]
push str.Uploading_app_log_file
push eax
mov byte [ebp - 4], 0xa
call fcn.004087a0
pop ecx
pop ecx
lea eax, [ebp - 0x52c]
push eax
mov ecx, edi
call fcn.0041d701
lea ecx, [ebp - 0x52c]
call fcn.0041dd26
lea ecx, [ebp - 0x30]
call fcn.00408690
test esi, esi
je 0x41dc52
push esi
call fcn.0044f82f
pop ecx
lea ecx, [ebp - 0x48]
call fcn.00408690
jmp 0x41dc8e
and dword [ebp - 4], 0
lea esi, [edi + 0x160]
push str.Uploading_install_log_file
push esi
call fcn.004087a0
cmp dword [esi + 0x14], 8
pop ecx
pop ecx
jb 0x41dcad
mov esi, dword [esi]
push ecx
push ecx
push 0x21
push esi
lea ecx, [ebp - 0x46c]
call fcn.004269ef
lea eax, [ebp - 0x46c]
push eax
mov ecx, edi
mov byte [ebp - 4], 0xc
call fcn.0041d701
lea ecx, [ebp - 0x46c]
call fcn.0041dd26
call fcn.00454b41
ret 4