Function at 0x41aacf
Capabilities:
Enumerate files on windows

Disassembly:
push 0x2e0
mov eax, 0x430212
call fcn.004148fb
xor edi, edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x2e0], edi
mov dword [ebp - 0x2dc], edi
mov dword [ebp - 0x2d8], edi
mov dword [ebp - 0x2d4], edi
lea eax, [ebp + 8]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x2e4]
call fcn.0042ad38
cmp dword [ebp - 0x2d4], edi
je 0x41ad1e
mov bl, byte [ebp + 0x40]
mov ecx, dword [ebp - 0x2d8]
cmp dword [ebp - 0x2dc], ecx
ja 0x41ab31
sub ecx, dword [ebp - 0x2dc]
mov eax, dword [ebp - 0x2e0]
push dword [eax + ecx*4]
lea ecx, [ebp - 0x48]
call fcn.0040b470
lea ecx, [ebp - 0x2e4]
mov byte [ebp - 4], 3
call fcn.00429500
push 0x2a
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.00419377
add esp, 0xc
cmp dword [eax + 0x18], 8
lea ecx, [eax + 4]
jb 0x41ab6e
mov ecx, dword [ecx]
lea eax, [ebp - 0x2d0]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, eax
mov dword [ebp - 0x2e8], esi
push edi
push 1
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 4
call fcn.0040b613
cmp esi, 0xffffffff
je 0x41ad02
xor eax, eax
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
lea ecx, [ebp - 0x2c]
lea eax, [ebp - 0x2a4]
mov dword [ebp - 0x18], edi
push eax
call fcn.0040b660
push 0x404d4c
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 5
call fcn.00426ccf
test eax, eax
je 0x41acd6
push 0x404d50
lea ecx, [ebp - 0x2c]
call fcn.00426ccf
test eax, eax
je 0x41acd6
cmp dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x28]
mov edi, ecx
jae 0x41ac8c
lea edi, [ebp - 0x28]
mov edx, edi
mov eax, dword [ebp - 0x18]
lea eax, [edx + eax*2]
jae 0x41ac08
lea ecx, [ebp - 0x28]
push dword [sym.imp.msvcrt.dll_towupper]
push edi
push eax
push ecx
lea eax, [ebp - 0x2ec]
push eax
call fcn.00416472
mov eax, dword [ebp - 0x2d0]
test al, 0x10
je 0x41ac93
test bl, bl
je 0x41ac93
cmp dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x28]
jae 0x41ac37
lea ecx, [ebp - 0x28]
mov eax, dword [ebp - 0x18]
cmp word [ecx + eax*2 - 2], 0x5c
je 0x41ac4f
push 0x4061b8
lea ecx, [ebp - 0x2c]
call fcn.0040e12d
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x64]
push eax
call fcn.0040e0d5
add esp, 0xc
push eax
lea ecx, [ebp - 0x2e4]
mov byte [ebp - 4], 6
call fcn.0042ad38
xor edi, edi
mov byte [ebp - 4], 5
push edi
push 1
lea ecx, [ebp - 0x64]
call fcn.0040b613
mov eax, dword [ebp - 0x2d0]
jmp 0x41ac95
mov edx, ecx
jmp 0x41abfd
xor edi, edi
test al, 0x10
jne 0x41acd6
lea eax, [ebp + 0x24]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.0042dc40
test al, al
je 0x41acd6
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x64]
push eax
call fcn.0040e0d5
add esp, 0xc
mov ecx, dword [ebp + 0x44]
push eax
mov byte [ebp - 4], 7
call fcn.0042afd1
push edi
push 1
lea ecx, [ebp - 0x64]
call fcn.0040b613
push edi
push 1
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 4
call fcn.0040b613
lea eax, [ebp - 0x2d0]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x41ab9c
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
push edi
push 1
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 2
call fcn.0040b613
cmp dword [ebp - 0x2d4], 0
jne 0x41ab1d
lea ecx, [ebp - 0x2e4]
call fcn.00424cdb
push edi
push 1
lea ecx, [ebp + 8]
call fcn.0040b613
push edi
push 1
lea ecx, [ebp + 0x24]
call fcn.0040b613
call fcn.004148aa
ret 0x40