Function at 0x41aea0
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x48a800
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x268
push ebx
push esi
xor eax, eax
push edi
push 0x14
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x10], eax
call fcn.0046b317
add esp, 4
mov dword [0x24b1808], eax
mov dword [0x24b1888], eax
mov dword [eax + 0xc], 0xffffffff
mov dword [eax + 0x10], 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
mov dword [ebp - 4], 0
cmp dword [0x4af478], 0
je 0x41af7a
mov ecx, 0x4b0de0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41af15
sub ecx, edx
push ecx
push 0x4b0de0
lea ecx, [ebp - 0x68]
call fcn.004235b0
mov esi, dword [eax + 0x14]
mov ecx, esi
mov edx, dword [eax + 0x10]
sub ecx, edx
cmp ecx, 7
jb 0x41af61
lea ecx, [edx + 7]
mov dword [eax + 0x10], ecx
cmp esi, 0x10
jb 0x41af48
mov eax, dword [eax]
push 7
lea esi, [eax + edx]
push 0x4a0990
push esi
call fcn.004686d0
add esp, 0xc
mov byte [esi + 7], 0
jmp 0x41af99
push 7
push 0x4a0990
mov byte [ebp - 0x10], 0
mov ecx, eax
push dword [ebp - 0x10]
push 7
call fcn.00423b80
jmp 0x41af99
mov ecx, 0x4af484
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41af82
sub ecx, edx
push ecx
push 0x4af484
lea ecx, [ebp - 0x68]
call fcn.004235b0
push str..dll
lea edx, [ebp - 0x68]
lea ecx, [ebp - 0x80]
call fcn.00423920
add esp, 4
cmp dword [eax + 0x14], 0x10
jb 0x41afb4
mov eax, dword [eax]
lea ecx, [ebp - 0x270]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov edx, dword [ebp - 0x6c]
mov ebx, eax
mov dword [ebp - 0x50], ebx
cmp edx, 0x10
jb 0x41affb
mov ecx, dword [ebp - 0x80]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41aff1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41b6e2
push edx
push ecx
call fcn.004655c1
add esp, 8
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0xf
mov byte [ebp - 0x80], 0
cmp ebx, 0xffffffff
je 0x41b6a1
mov edi, 0x16
lea ecx, [ebp - 0x244]
mov ebx, 3
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41b030
sub ecx, edx
lea eax, [ebp - 0x247]
mov byte [ebp - 4], 1
add eax, ecx
mov dword [ebp - 0x18], 0
cmp ebx, ecx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
sbb edx, edx
and edx, eax
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41b062
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x28]
call fcn.004235b0
mov byte [ebp - 4], 0
lea edx, [ebp - 0x28]
mov esi, dword [ebp - 0x14]
cmp esi, 0x10
mov ecx, dword [ebp - 0x28]
cmovae edx, ecx
cmp dword [ebp - 0x18], 3
jne 0x41b09f
cmp word [edx], 0x6c64
jne 0x41b09f
cmp byte [edx + 2], 0x6c
jne 0x41b09f
mov bl, 1
jmp 0x41b0a1
xor bl, bl
cmp esi, 0x10
jb 0x41b0d1
lea edx, [esi + 1]
mov eax, ecx
cmp edx, 0x1000
jb 0x41b0c7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41b6e7
push edx
push ecx
call fcn.004655c1
add esp, 8
test bl, bl
je 0x41b688
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
mov byte [ebp - 4], 2
lea eax, [ebp - 0x68]
cmp dword [ebp - 0x54], 0x10
mov ebx, dword [ebp - 0x58]
cmovae eax, dword [ebp - 0x68]
mov dword [ebp - 0x10], eax
cmp ebx, 0xf
ja 0x41b120
push ebx
push eax
lea eax, [ebp - 0x40]
mov dword [ebp - 0x30], ebx
push eax
call fcn.004686d0
mov byte [ebp + ebx - 0x40], 0
mov edi, dword [ebp - 0x40]
jmp 0x41b1a9
cmp ebx, 0x7fffffff
ja 0x41b6f1
mov esi, ebx
or esi, 0xf
cmp esi, 0x7fffffff
jbe 0x41b148
mov ecx, 0x80000000
mov esi, 0x7fffffff
add ecx, 0x23
jmp 0x41b163
cmp esi, 0x16
cmovb esi, edi
lea eax, [esi + 1]
cmp eax, 0x1000
jb 0x41b17f
lea ecx, [eax + 0x23]
cmp ecx, eax
jbe 0x41b6ec
push ecx
call fcn.00465591
add esp, 4
test eax, eax
je 0x41b6e2
lea edi, [eax + 0x23]
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x41b192
test eax, eax
je 0x41b190
push eax
call fcn.00465591
add esp, 4
mov edi, eax
jmp 0x41b192
xor edi, edi
push ebx
push dword [ebp - 0x10]
mov dword [ebp - 0x30], ebx
push edi
mov dword [ebp - 0x2c], esi
call fcn.00467d70
mov byte [edi + ebx], 0
mov dword [ebp - 0x40], edi
mov edx, dword [ebp - 0x2c]
add esp, 0xc
mov ecx, dword [ebp - 0x30]
mov eax, edx
sub eax, ecx
cmp eax, 1
jb 0x41b1d5
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x40]
cmovae eax, edi
mov word [eax + ecx], 0x5c
lea ecx, [ebp - 0x40]
jmp 0x41b1ef
push 1
push 0x4a09a4
mov byte [ebp - 0x48], 0
lea ecx, [ebp - 0x40]
push dword [ebp - 0x48]
push 1
call fcn.00423b80
mov ecx, eax
lea edi, [ebp - 0x244]
lea edx, [edi + 1]
mov al, byte [edi]
inc edi
test al, al
jne 0x41b1f8
mov esi, dword [ecx + 0x14]
sub edi, edx
mov edx, dword [ecx + 0x10]
mov eax, esi
sub eax, edx
cmp edi, eax
ja 0x41b236
lea eax, [edx + edi]
mov dword [ecx + 0x10], eax
cmp esi, 0x10
jb 0x41b21c
mov ecx, dword [ecx]
push edi
lea eax, [ebp - 0x244]
lea esi, [ecx + edx]
push eax
push esi
call fcn.004686d0
add esp, 0xc
mov byte [esi + edi], 0
jmp 0x41b24b
push edi
lea eax, [ebp - 0x244]
mov byte [ebp - 0x4c], 0
push eax
push dword [ebp - 0x4c]
push edi
call fcn.00423b80
sub esp, 8
lea ecx, [ebp - 0x130]
call fcn.00422c80
mov byte [ebp - 4], 3
lea edx, [ebp - 0x40]
cmp dword [ebp - 0x2c], 0x10
lea ecx, [ebp - 0x120]
push dword [ebp - 0x30]
cmovae edx, dword [ebp - 0x40]
call fcn.00425f20
add esp, 4
mov byte [ebp - 4], 4
mov edi, dword [ebp - 0x44]
mov ecx, dword [ebp - 0xdc]
or edi, 4
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x10], edi
test cl, 2
jne 0x41b2c9
mov eax, dword [ebp - 0xf8]
mov edx, dword [eax]
test edx, edx
je 0x41b2c9
mov eax, dword [ebp - 0x108]
cmp edx, dword [ebp - 0xe0]
cmovb edx, dword [ebp - 0xe0]
mov ecx, dword [eax]
sub edx, ecx
push edx
jmp 0x41b2ef
test cl, 4
jne 0x41b2f8
mov eax, dword [ebp - 0xfc]
mov edx, dword [eax]
test edx, edx
je 0x41b2f8
mov eax, dword [ebp - 0x10c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xec]
mov eax, dword [eax]
sub eax, ecx
add eax, edx
push eax
push ecx
lea ecx, [ebp - 0x28]
call fcn.004235b0
and edi, 0xfffffffb
mov dword [ebp - 4], 3
or edi, 3
mov byte [ebp - 4], 5
lea eax, [ebp - 0x28]
cmp dword [ebp - 0x14], 0x10
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.00419590
mov byte [ebp - 4], 3
add esp, 4
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x41b355
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41b34b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41b6e2
push edx
push ecx
call fcn.004655c1
add esp, 8
lea ecx, [ebp - 0x130]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov byte [ebp - 4], 2
call fcn.0041ab40
sub esp, 8
lea ecx, [ebp - 0x130]
call fcn.00422c80
mov edx, 0x4a09a8
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x120]
call fcn.004256c0
mov edx, str.search_plugins
lea ecx, [ebp - 0x120]
call fcn.004256c0
mov edx, 0x4a09c0
lea ecx, [ebp - 0x120]
call fcn.004256c0
push 0x257
lea ecx, [ebp - 0x120]
call fcn.00423cf0
mov edx, 0x4a09c4
lea ecx, [ebp - 0x120]
call fcn.004256c0
mov edx, 0x4a09c8
lea ecx, [ebp - 0x120]
call fcn.004256c0
mov byte [ebp - 4], 7
or edi, 0x20
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x10], edi
test cl, 2
jne 0x41b435
mov eax, dword [ebp - 0xf8]
mov edx, dword [eax]
test edx, edx
je 0x41b435
mov eax, dword [ebp - 0x108]
cmp edx, dword [ebp - 0xe0]
cmovb edx, dword [ebp - 0xe0]
mov ecx, dword [eax]
sub edx, ecx
push edx
jmp 0x41b45b
test cl, 4
jne 0x41b464
mov eax, dword [ebp - 0xfc]
mov edx, dword [eax]
test edx, edx
je 0x41b464
mov eax, dword [ebp - 0x10c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xec]
mov eax, dword [eax]
sub eax, ecx
add eax, edx
push eax
push ecx
lea ecx, [ebp - 0x28]
call fcn.004235b0
and edi, 0xffffffdf
mov dword [ebp - 4], 6
or edi, 0x18
mov dword [ebp - 0x44], edi
mov byte [ebp - 4], 8
lea eax, [ebp - 0x28]
cmp dword [ebp - 0x14], 0x10
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.00419590
mov byte [ebp - 4], 6
add esp, 4
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x41b4c4
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41b4ba
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41b6e2
push edx
push ecx
call fcn.004655c1
add esp, 8
lea ecx, [ebp - 0x130]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov byte [ebp - 4], 2
call fcn.0041ab40
cmp dword [ebp - 0x2c], 0x10
lea eax, [ebp - 0x40]
cmovae eax, dword [ebp - 0x40]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ebx, eax
test ebx, ebx
je 0x41b64f
push 0x4a0a14
push ebx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4af150], eax
test eax, eax
je 0x41b64f
lea ecx, [ebp - 0xf0]
push ecx
call eax
lea ecx, [ebp - 0xec]
add esp, 4
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41b530
sub ecx, edx
lea eax, [ebp - 0xed]
add eax, ecx
cmp byte [eax], 0x20
jne 0x41b57a
nop word [eax + eax]
mov byte [eax], 0
lea eax, [ebp - 0xec]
lea edx, [eax + 1]
nop dword [eax]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b560
sub eax, edx
cmp byte [ebp + eax - 0xed], 0x20
lea eax, [ebp + eax - 0xed]
je 0x41b550
mov edi, dword [0x24b1808]
movzx esi, word [ebp - 0xee]
mov ecx, dword [edi + 0x10]
test ecx, ecx
je 0x41b5ab
push ecx
push esi
lea eax, [ebp - 0xec]
push ebx
push eax
lea edx, [ebp - 0x244]
call fcn.0041acf0
add esp, 0x10
jmp 0x41b64f
push 0x14
call fcn.0046b317
mov dword [edi + 0x10], eax
lea ecx, [ebp - 0x244]
add esp, 4
lea edx, [ecx + 1]
mov dword [eax + 0xc], esi
mov eax, dword [edi + 0x10]
mov dword [eax + 8], ebx
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41b5d0
sub ecx, edx
lea eax, [ecx + 1]
push eax
call fcn.0046b317
mov ecx, dword [edi + 0x10]
add esp, 4
mov dword [ecx], eax
lea ecx, [ebp - 0x244]
mov eax, dword [edi + 0x10]
mov edx, dword [eax]
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [edx], al
lea edx, [edx + 1]
test al, al
jne 0x41b5f5
lea ecx, [ebp - 0xec]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41b610
sub ecx, edx
lea eax, [ecx + 7]
push eax
call fcn.0046b317
mov ecx, dword [edi + 0x10]
add esp, 4
mov dword [ecx + 4], eax
lea eax, [ebp - 0xec]
push eax
mov eax, dword [edi + 0x10]
push 0x4a098c
push dword [eax + 4]
call fcn.0040e260
mov eax, dword [edi + 0x10]
add esp, 0xc
mov dword [eax + 0x10], 0
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x2c]
cmp edx, 0x10
jb 0x41b683
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41b679
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41b6e2
push edx
push ecx
call fcn.004655c1
add esp, 8
mov edi, 0x16
mov ebx, dword [ebp - 0x50]
lea eax, [ebp - 0x270]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x41b01b
mov edx, dword [ebp - 0x54]
cmp edx, 0x10
jb 0x41b6d1
mov ecx, dword [ebp - 0x68]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41b6c7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41b6e7
push edx
push ecx
call fcn.004655c1
add esp, 8
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.004756b4
call fcn.004756b4
call fcn.00419f20
call fcn.00423f40
int3