Function at 0x48de2d
Capabilities:
Enumerate files on windows

Disassembly:
push 0x350
mov eax, 0x52bec5
call fcn.005066d0
mov eax, dword [ebp + 8]
mov ebx, ecx
mov dword [ebp - 0x2ac], ebx
mov dword [ebp - 0x2a8], eax
call fcn.0040dbda
mov al, byte [eax]
test al, al
jne 0x48deb5
lea eax, [ebp - 0x35c]
push eax
call fcn.0040d9e1
and dword [ebp - 4], 0
lea eax, [ebp - 0x354]
push str.CFFConfig::GetNextFFProfile
push eax
call fcn.0040c0a0
pop ecx
pop ecx
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x35c]
call fcn.0040bf31
lea edi, [ebp - 0x50]
mov byte [ebp - 4], 1
call fcn.0040ba4e
push 0
push 1
mov esi, edi
call fcn.0040dac5
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x35c]
call fcn.0040c22b
jmp 0x48dfee
lea eax, [ebp - 0x354]
push eax
mov dword [ebp - 4], 2
call fcn.0040b935
mov byte [ebp - 4], 3
call fcn.0040dbda
lea ecx, [ebp - 0x2d0]
call fcn.0040b84b
mov byte [ebp - 4], 4
cmp dword [eax + 0x18], 8
jb 0x48deeb
mov esi, dword [eax + 4]
jmp 0x48deee
lea esi, [eax + 4]
lea eax, [ebp - 0x354]
push 0x54331c
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push esi
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543314
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push str.CFFConfig::GetNextFFProfile
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0
push 1
lea esi, [ebp - 0x2d0]
mov byte [ebp - 4], 3
call fcn.0040dac5
lea eax, [ebp - 0x2b4]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp - 0x2b4]
mov byte [ebp - 4], 5
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x48df96
lea eax, [ebp - 0x2d0]
push eax
lea ecx, [ebp - 0x354]
call fcn.0040b831
push 0x5a
push str..FFConfig.cpp
push eax
push esi
lea ecx, [ebp - 0x2b4]
mov byte [ebp - 4], 6
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push 0
push 1
lea esi, [ebp - 0x2d0]
call fcn.0040dac5
lea ecx, [ebp - 0x2b4]
mov byte [ebp - 4], 3
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 2
call fcn.0040b8a0
or dword [ebp - 4], 0xffffffff
jmp 0x48dfee
push 0x54323c
push dword [ebp - 0x2a8]
call fcn.0040b7ed
lea eax, [ebp - 0x34]
push eax
call fcn.0048d8fa
mov dword [ebp - 4], 9
lea eax, [ebp - 0x34]
mov dword [esp], 0x548724
push eax
call fcn.0040b547
mov eax, dword [ebx]
test eax, eax
jne 0x48e06d
cmp dword [ebp - 0x1c], 8
mov eax, dword [ebp - 0x30]
jae 0x48e030
lea eax, [ebp - 0x30]
lea ecx, [ebp - 0x2a4]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebx], eax
cmp dword [ebx], 0xffffffff
je 0x48e07f
cmp word [ebp - 0x278], 0x2e
je 0x48e058
test byte [ebp - 0x2a4], 0x10
jne 0x48e0a3
lea eax, [ebp - 0x2a4]
push eax
push dword [ebx]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x48e045
jmp 0x48e07f
lea ecx, [ebp - 0x2a4]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x48e040
mov eax, dword [ebp - 0x2ac]
push dword [eax]
xor bl, bl
call dword [sym.imp.KERNEL32.dll_FindClose]
push 0
push 1
lea esi, [ebp - 0x34]
call fcn.0040dac5
mov al, bl
call fcn.0050672c
ret
lea eax, [ebp - 0x278]
push eax
push dword [ebp - 0x2a8]
call fcn.0040b7ed
mov bl, 1
jmp 0x48e08f