Function at 0x402ec8
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x288
push esi
mov dword [ebp - 0x288], 0
mov dword [ebp - 8], 0
mov dword [ebp - 4], 0
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.MSVCRT.dll__wcsdup]
add esp, 4
mov dword [ebp + 8], eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.MSVCRT.dll_wcslen]
add esp, 4
mov dword [ebp - 0xc], eax
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp + 8]
xor ecx, ecx
mov cx, word [eax + edx*2 - 2]
cmp ecx, 0x2f
je 0x402f2e
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp + 8]
xor ecx, ecx
mov cx, word [eax + edx*2 - 2]
cmp ecx, 0x5c
jne 0x402f45
mov edx, dword [ebp - 0xc]
sub edx, 1
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp + 8]
mov word [ecx + eax*2], 0
jmp 0x402f0a
lea edx, [ebp - 0x280]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.MSVCRT.dll__wstat]
add esp, 8
test eax, eax
je 0x402f71
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.MSVCRT.dll_free]
add esp, 4
xor eax, eax
jmp 0x403173
mov edx, dword [ebp + 0xc]
mov dword [0x406618], edx
mov eax, dword [ebp + 0xc]
push eax
call dword [sym.imp.MSVCRT.dll_wcslen]
add esp, 4
mov dword [0x40661c], eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.MSVCRT.dll_wcslen]
add esp, 4
mov esi, eax
mov edx, dword [ebp + 0xc]
push edx
call dword [sym.imp.MSVCRT.dll_wcslen]
add esp, 4
lea eax, [esi + eax + 1]
lea ecx, [eax + eax + 6]
push ecx
call dword [sym.imp.MSVCRT.dll_malloc]
add esp, 4
mov dword [ebp - 4], eax
mov edx, dword [ebp + 0xc]
push edx
xor eax, eax
mov ax, word [str._STATIC]
push eax
mov ecx, dword [ebp + 8]
push ecx
push 0x40650c
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.MSVCRT.dll_swprintf]
add esp, 0x14
lea eax, [ebp - 0x25c]
push eax
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 0xffffffff
je 0x4030e0
lea edx, [ebp - 0x230]
push edx
call fcn.004033c7
add esp, 4
test eax, eax
je 0x40302d
lea eax, [ebp - 0x230]
push eax
call dword [sym.imp.MSVCRT.dll__wcsdup]
add esp, 4
mov dword [ebp - 0x288], eax
lea ecx, [ebp - 0x25c]
push ecx
mov edx, dword [ebp - 0x284]
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x4030d3
lea eax, [ebp - 0x230]
push eax
call fcn.004033c7
add esp, 4
test eax, eax
je 0x4030ce
cmp dword [ebp - 0x288], 0
jne 0x40307d
lea ecx, [ebp - 0x230]
push ecx
call dword [sym.imp.MSVCRT.dll__wcsdup]
add esp, 4
mov dword [ebp - 0x288], eax
jmp 0x4030ce
mov edx, dword [0x40661c]
lea eax, [ebp + edx*2 - 0x22e]
push eax
mov ecx, dword [0x40661c]
mov edx, dword [ebp - 0x288]
lea eax, [edx + ecx*2 + 2]
push eax
call fcn.00403178
add esp, 8
test eax, eax
jge 0x4030ce
mov ecx, dword [ebp - 0x288]
push ecx
call dword [sym.imp.MSVCRT.dll_free]
add esp, 4
lea edx, [ebp - 0x230]
push edx
call dword [sym.imp.MSVCRT.dll__wcsdup]
add esp, 4
mov dword [ebp - 0x288], eax
jmp 0x40302d
mov eax, dword [ebp - 0x284]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [ebp - 0x288], 0
je 0x403163
mov ecx, dword [ebp - 0x288]
push ecx
call dword [sym.imp.MSVCRT.dll_wcslen]
add esp, 4
mov edx, dword [ebp - 0xc]
lea eax, [edx + eax + 1]
lea ecx, [eax + eax + 2]
push ecx
call dword [sym.imp.MSVCRT.dll_malloc]
add esp, 4
mov dword [ebp - 8], eax
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.MSVCRT.dll_wcscpy]
add esp, 8
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
mov ax, word [str._STATIC]
mov word [edx + ecx*2], ax
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
mov word [edx + ecx*2 + 2], 0
mov eax, dword [ebp - 0x288]
push eax
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.MSVCRT.dll_wcscat]
add esp, 8
mov edx, dword [ebp - 0x288]
push edx
call dword [sym.imp.MSVCRT.dll_free]
add esp, 4
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.MSVCRT.dll_free]
add esp, 4
mov eax, dword [ebp - 8]
pop esi
mov esp, ebp
pop ebp
ret