Function at 0x241ce80
Capabilities:
Enumerate files on windows
Get disk information
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x24bf2ec
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xabc
push ebx
push ebp
push esi
mov esi, ecx
xor ebp, ebp
cmp esi, ebp
push edi
mov dword [esp + 0x48], edx
je 0x241cfeb
cmp edx, ebp
je 0x241cfeb
mov edi, dword [esp + 0xadc]
cmp edi, ebp
je 0x241cfeb
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], ebp
mov dword [esp + 0x18], ebp
mov dword [esp + 0x1c], ebp
cmp word [esi], bp
mov dword [esp + 0xad4], ebp
jne 0x241d564
call dword [sym.imp.kernel32.dll_GetVersion]
cmp eax, 0x80000000
jae 0x241d092
lea eax, [esp + 0x2cc]
push eax
push 0x3ff
mov word [esp + 0x2d4], bp
call dword [sym.imp.kernel32.dll_GetLogicalDriveStringsW]
cmp eax, ebp
je 0x241d04f
cmp eax, 0x3ff
ja 0x241d04f
mov word [esp + 0xaca], bp
mov word [esp + 0xac8], bp
lea ebx, [esp + 0x2cc]
cmp word [ebx], bp
je 0x241d1e0
cmp dword [esp + 0x18], ebp
jne 0x241cf56
lea ecx, [esp + 0x10]
call fcn.0241e580
jmp 0x241cf86
push 0x40
call fcn.024adc5e
mov edi, eax
add esp, 4
cmp edi, ebp
je 0x241cfa6
lea esi, [edi + 8]
mov ecx, esi
call fcn.0241c660
mov dword [edi], ebp
mov ecx, dword [esp + 0x18]
mov dword [ecx], edi
inc dword [esp + 0x1c]
mov dword [esp + 0x18], edi
mov dword [esp + 0x14], ebp
mov eax, esi
cmp eax, ebp
je 0x241cfa6
mov edx, ebx
mov ecx, eax
call fcn.0247f900
test eax, eax
je 0x241d008
push ebx
call fcn.024adc6c
add esp, 4
lea ebx, [ebx + eax*2 + 2]
jmp 0x241cf3c
mov esi, dword [esp + 0x10]
cmp esi, ebp
mov edx, dword [esp + 0xadc]
mov dword [edx], 8
mov dword [esp + 0xad4], 0xffffffff
je 0x241cfeb
cmp esi, ebp
mov eax, dword [esi]
mov dword [esp + 0x14], eax
je 0x241cfe5
lea ecx, [esi + 8]
call fcn.0241c690
push esi
call fcn.024adc89
mov eax, dword [esp + 0x18]
add esp, 4
cmp eax, ebp
mov esi, eax
jne 0x241cfc6
xor eax, eax
mov ecx, dword [esp + 0xacc]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0xac8
ret 4
mov esi, dword [esp + 0x10]
cmp esi, ebp
mov eax, dword [esp + 0xadc]
mov dword [eax], 8
mov dword [esp + 0xad4], 0xffffffff
je 0x241cfeb
cmp esi, ebp
mov eax, dword [esi]
mov dword [esp + 0x14], eax
je 0x241d047
lea ecx, [esi + 8]
call fcn.0241c690
push esi
call fcn.024adc89
mov eax, dword [esp + 0x18]
add esp, 4
cmp eax, ebp
mov esi, eax
jne 0x241d028
jmp 0x241cfeb
mov esi, dword [esp + 0x10]
cmp esi, ebp
mov dword [edi], 0x70
mov dword [esp + 0xad4], 0xffffffff
je 0x241cfeb
cmp esi, ebp
mov eax, dword [esi]
mov dword [esp + 0x14], eax
je 0x241d087
lea ecx, [esi + 8]
call fcn.0241c690
push esi
call fcn.024adc89
mov eax, dword [esp + 0x18]
add esp, 4
cmp eax, ebp
mov esi, eax
jne 0x241d068
jmp 0x241cfeb
lea ecx, [esp + 0x2cc]
push ecx
push 0x3ff
mov byte [esp + 0x2d4], 0
call dword [sym.imp.kernel32.dll_GetLogicalDriveStringsA]
cmp eax, ebp
je 0x241d51d
cmp eax, 0x3ff
ja 0x241d51d
mov byte [esp + 0x6cb], 0
mov byte [esp + 0x6ca], 0
lea ebx, [esp + 0x2cc]
cmp byte [ebx], 0
je 0x241d1e0
cmp dword [esp + 0x18], ebp
jne 0x241d0f1
lea ecx, [esp + 0x10]
call fcn.0241e580
jmp 0x241d121
push 0x40
call fcn.024adc5e
mov edi, eax
add esp, 4
cmp edi, ebp
je 0x241d144
lea esi, [edi + 8]
mov ecx, esi
call fcn.0241c660
mov dword [edi], ebp
mov edx, dword [esp + 0x18]
mov dword [edx], edi
inc dword [esp + 0x1c]
mov dword [esp + 0x18], edi
mov dword [esp + 0x14], ebp
mov eax, esi
cmp eax, ebp
je 0x241d144
mov edx, eax
mov ecx, ebx
call fcn.0247fc70
test eax, eax
je 0x241d192
or ecx, 0xffffffff
mov edi, ebx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea ebx, [ebx + ecx + 1]
jmp 0x241d0d7
mov esi, dword [esp + 0x10]
cmp esi, ebp
mov eax, dword [esp + 0xadc]
mov dword [eax], 8
mov dword [esp + 0xad4], 0xffffffff
je 0x241cfeb
cmp esi, ebp
mov eax, dword [esi]
mov dword [esp + 0x14], eax
je 0x241d187
lea ecx, [esi + 8]
call fcn.0241c690
push esi
call fcn.024adc89
mov eax, dword [esp + 0x18]
add esp, 4
cmp eax, ebp
mov esi, eax
jne 0x241d168
jmp 0x241cfeb
mov esi, dword [esp + 0x10]
cmp esi, ebp
mov ecx, dword [esp + 0xadc]
mov dword [ecx], 8
mov dword [esp + 0xad4], 0xffffffff
je 0x241cfeb
cmp esi, ebp
mov eax, dword [esi]
mov dword [esp + 0x14], eax
je 0x241d1d5
lea ecx, [esi + 8]
call fcn.0241c690
push esi
call fcn.024adc89
mov eax, dword [esp + 0x18]
add esp, 4
cmp eax, ebp
mov esi, eax
jne 0x241d1b6
jmp 0x241cfeb
mov ecx, dword [esp + 0x10]
cmp ecx, ebp
mov dword [esp + 0x14], ecx
je 0x241dc0c
lea edi, [ecx + 8]
cmp edi, ebp
je 0x241dc0c
mov ebx, dword [sym.imp.kernel32.dll_GetVolumeInformationW]
mov esi, dword [sym.imp.kernel32.dll_GetVersion]
mov ecx, edi
call fcn.0247f850
test eax, eax
je 0x241d365
mov dword [esp + 0x30], ebp
mov ecx, dword [edi + 4]
lea edx, [esp + 0x30]
call fcn.02481f60
test eax, eax
je 0x241d3b3
mov edx, dword [esp + 0x30]
lea eax, [edx - 2]
cmp eax, 4
ja case.default.0x241d23e
jmp dword [eax*4 + 0x241dcd0]
mov byte [edi + 0x18], 2
jmp 0x241d33b
mov byte [edi + 0x18], 3
call esi
cmp eax, 0x80000000
jae 0x241d2ab
mov eax, dword [edi + 4]
push ebp
push ebp
push ebp
push ebp
push ebp
push 0x105
lea ecx, [esp + 0x2e4]
push ecx
push eax
mov word [esp + 0x2ec], bp
call ebx
test eax, eax
jne 0x241d287
mov word [esp + 0x2cc], bp
lea edx, [esp + 0x2cc]
lea ecx, [edi + 8]
mov word [esp + 0x4d4], bp
call fcn.0247f900
test eax, eax
je 0x241d401
jmp 0x241d33b
mov dword [esp + 0x28], ebp
mov dword [esp + 0x2c], ebp
mov ecx, dword [edi + 4]
lea edx, [esp + 0x28]
mov byte [esp + 0xad4], 1
call fcn.0247fbd0
test eax, eax
je 0x241d44f
mov eax, dword [esp + 0x2c]
push ebp
push ebp
push ebp
push ebp
push ebp
push 0x105
lea edx, [esp + 0x64]
push edx
push eax
mov byte [esp + 0x6c], 0
call dword [sym.imp.kernel32.dll_GetVolumeInformationA]
test eax, eax
jne 0x241d2f6
mov byte [esp + 0x4c], al
lea edx, [edi + 8]
lea ecx, [esp + 0x4c]
mov byte [esp + 0x150], 0
call fcn.0247fc70
test eax, eax
je 0x241d4b6
lea ecx, [esp + 0x28]
mov byte [esp + 0xad4], 0
call fcn.024017d0
jmp 0x241d33b
mov byte [edi + 0x18], 4
jmp 0x241d33b
mov byte [edi + 0x18], 5
jmp 0x241d33b
mov byte [edi + 0x18], 6
jmp 0x241d33b
mov byte [edi + 0x18], 7
mov eax, dword [esp + 0x14]
cmp eax, ebp
je 0x241dc08
mov edi, dword [eax]
cmp edi, ebp
mov dword [esp + 0x14], edi
je 0x241dc08
add edi, 8
cmp edi, ebp
je 0x241dc08
jmp 0x241d207
mov esi, dword [esp + 0x10]
cmp esi, ebp
mov ecx, dword [esp + 0xadc]
mov dword [ecx], 1
mov dword [esp + 0xad4], 0xffffffff
je 0x241cfeb
cmp esi, ebp
mov eax, dword [esi]
mov dword [esp + 0x14], eax
je 0x241d3a8
lea ecx, [esi + 8]
call fcn.0241c690
push esi
call fcn.024adc89
mov eax, dword [esp + 0x18]
add esp, 4
cmp eax, ebp
mov esi, eax
jne 0x241d389
jmp 0x241cfeb
mov esi, dword [esp + 0x10]
cmp esi, ebp
mov edx, dword [esp + 0xadc]
mov dword [edx], 8
mov dword [esp + 0xad4], 0xffffffff
je 0x241cfeb
cmp esi, ebp
mov eax, dword [esi]
mov dword [esp + 0x14], eax
je 0x241d3f6
lea ecx, [esi + 8]
call fcn.0241c690
push esi
call fcn.024adc89
mov eax, dword [esp + 0x18]
add esp, 4
cmp eax, ebp
mov esi, eax
jne 0x241d3d7
jmp 0x241cfeb
mov esi, dword [esp + 0x10]
cmp esi, ebp
mov eax, dword [esp + 0xadc]
mov dword [eax], 8
mov dword [esp + 0xad4], 0xffffffff
je 0x241cfeb
cmp esi, ebp
mov eax, dword [esi]
mov dword [esp + 0x14], eax
je 0x241d444
lea ecx, [esi + 8]
call fcn.0241c690
push esi
call fcn.024adc89
mov eax, dword [esp + 0x18]
add esp, 4
cmp eax, ebp
mov esi, eax
jne 0x241d425
jmp 0x241cfeb
mov eax, dword [esp + 0x2c]
cmp eax, ebp
mov ecx, dword [esp + 0xadc]
mov dword [ecx], 8
mov dword [esp + 0x28], ebp
je 0x241d475
push eax
call fcn.024ad03a
add esp, 4
mov dword [esp + 0x2c], ebp
mov esi, dword [esp + 0x10]
cmp esi, ebp
mov dword [esp + 0xad4], 0xffffffff
je 0x241cfeb
cmp esi, ebp
mov eax, dword [esi]
mov dword [esp + 0x14], eax
je 0x241d4ab
lea ecx, [esi + 8]
call fcn.0241c690
push esi
call fcn.024adc89
mov eax, dword [esp + 0x18]
add esp, 4
cmp eax, ebp
mov esi, eax
jne 0x241d48c
jmp 0x241cfeb
mov eax, dword [esp + 0x2c]
cmp eax, ebp
mov edx, dword [esp + 0xadc]
mov dword [edx], 8
mov dword [esp + 0x28], ebp
je 0x241d4dc
push eax
call fcn.024ad03a
add esp, 4
mov dword [esp + 0x2c], ebp
mov esi, dword [esp + 0x10]
cmp esi, ebp
mov dword [esp + 0xad4], 0xffffffff
je 0x241cfeb
cmp esi, ebp
mov eax, dword [esi]
mov dword [esp + 0x14], eax
je 0x241d512
lea ecx, [esi + 8]
call fcn.0241c690
push esi
call fcn.024adc89
mov eax, dword [esp + 0x18]
add esp, 4
cmp eax, ebp
mov esi, eax
jne 0x241d4f3
jmp 0x241cfeb
mov esi, dword [esp + 0x10]
cmp esi, ebp
mov dword [edi], 0x70
mov dword [esp + 0xad4], 0xffffffff
je 0x241cfeb
cmp esi, ebp
mov eax, dword [esi]
mov dword [esp + 0x14], eax
je 0x241d559
lea ecx, [esi + 8]
call fcn.0241c690
push esi
call fcn.024adc89
mov eax, dword [esp + 0x18]
add esp, 4
cmp eax, ebp
mov esi, eax
jne 0x241d53a
jmp 0x241cfeb
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], ebp
mov byte [esp + 0xad4], 2
call dword [sym.imp.kernel32.dll_GetVersion]
cmp eax, 0x80000000
jae 0x241d6e9
xor eax, eax
mov dword [esp + 0x2cc], ebp
mov ecx, 0x93
lea edi, [esp + 0x2d0]
rep stosd dword es:[edi], eax
lea eax, [esp + 0x2cc]
push eax
push esi
call dword [sym.imp.kernel32.dll_FindFirstFileW]
mov esi, eax
or edi, 0xffffffff
cmp esi, edi
mov dword [esp + 0x34], esi
jne 0x241d60f
mov eax, dword [esp + 0x24]
cmp eax, ebp
mov dword [esp + 0x20], ebp
je 0x241d5d1
push eax
call fcn.024ad03a
add esp, 4
mov dword [esp + 0x24], ebp
mov esi, dword [esp + 0x10]
cmp esi, ebp
mov dword [esp + 0xad4], edi
je 0x241d605
cmp esi, ebp
mov eax, dword [esi]
mov dword [esp + 0x14], eax
je 0x241d5ff
lea ecx, [esi + 8]
call fcn.0241c690
push esi
call fcn.024adc89
mov eax, dword [esp + 0x18]
add esp, 4
cmp eax, ebp
mov esi, eax
jne 0x241d5e0
mov eax, 1
jmp 0x241cfed
lea edx, [esp + 0x2f8]
lea ecx, [esp + 0x20]
call fcn.0247f900
test eax, eax
jne 0x241d68d
push esi
call dword [sym.imp.kernel32.dll_FindClose]
mov eax, dword [esp + 0x24]
cmp eax, ebp
mov ecx, dword [esp + 0xadc]
mov dword [ecx], 8
mov dword [esp + 0x20], ebp
je 0x241d650
push eax
call fcn.024ad03a
add esp, 4
mov dword [esp + 0x24], ebp
mov esi, dword [esp + 0x10]
cmp esi, ebp
mov dword [esp + 0xad4], edi
je 0x241cfeb
cmp esi, ebp
mov eax, dword [esi]
mov dword [esp + 0x14], eax
je 0x241d682
lea ecx, [esi + 8]
call fcn.0241c690
push esi
call fcn.024adc89
mov eax, dword [esp + 0x18]
add esp, 4
cmp eax, ebp
mov esi, eax
jne 0x241d663
jmp 0x241cfeb
mov eax, dword [esp + 0x2e4]
mov edx, dword [esp + 0x2e0]
mov ecx, dword [esp + 0x2d0]
mov ebx, dword [esp + 0x2cc]
push 1
push 0
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x2f0]
mov dword [esp + 0x40], edx
mov edx, dword [esp + 0x2dc]
push 0
push eax
mov dword [esp + 0x50], ecx
mov dword [esp + 0x54], edx
call fcn.024ade50
mov ecx, dword [esp + 0x2ec]
mov ebp, edx
mov edi, eax
xor edx, edx
add edi, ecx
adc ebp, edx
jmp 0x241d8dc
mov dword [esp + 0x28], ebp
mov dword [esp + 0x2c], ebp
lea edx, [esp + 0x28]
mov ecx, esi
mov byte [esp + 0xad4], 3
call fcn.0247fbd0
test eax, eax
jne 0x241d771
lea ecx, [esp + 0x28]
mov dword [edi], 8
call fcn.024017d0
mov eax, dword [esp + 0x24]
cmp eax, ebp
mov dword [esp + 0x20], ebp
je 0x241d730
push eax
call fcn.024ad03a
add esp, 4
mov dword [esp + 0x24], ebp
mov esi, dword [esp + 0x10]
cmp esi, ebp
mov dword [esp + 0xad4], 0xffffffff
je 0x241cfeb
cmp esi, ebp
mov eax, dword [esi]
mov dword [esp + 0x14], eax
je 0x241d766
lea ecx, [esi + 8]
call fcn.0241c690
push esi
call fcn.024adc89
mov eax, dword [esp + 0x18]
add esp, 4
cmp eax, ebp
mov esi, eax
jne 0x241d747
jmp 0x241cfeb
xor eax, eax
mov dword [esp + 0x4c], ebp
mov ecx, 0x4f
lea edi, [esp + 0x50]
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x2c]
lea eax, [esp + 0x4c]
push eax
push ecx
call dword [sym.imp.kernel32.dll_FindFirstFileA]
mov esi, eax
or edi, 0xffffffff
cmp esi, edi
mov dword [esp + 0x34], esi
jne 0x241d80f
mov eax, dword [esp + 0x2c]
cmp eax, ebp
mov dword [esp + 0x28], ebp
je 0x241d7b8
push eax
call fcn.024ad03a
add esp, 4
mov dword [esp + 0x2c], ebp
mov eax, dword [esp + 0x24]
cmp eax, ebp
mov dword [esp + 0x20], ebp
je 0x241d7d1
push eax
call fcn.024ad03a
add esp, 4
mov dword [esp + 0x24], ebp
mov esi, dword [esp + 0x10]
cmp esi, ebp
mov dword [esp + 0xad4], edi
je 0x241d805
cmp esi, ebp
mov eax, dword [esi]
mov dword [esp + 0x14], eax
je 0x241d7ff
lea ecx, [esi + 8]
call fcn.0241c690
push esi
call fcn.024adc89
mov eax, dword [esp + 0x18]
add esp, 4
cmp eax, ebp
mov esi, eax
jne 0x241d7e0
mov eax, 1
jmp 0x241cfed
lea edx, [esp + 0x20]
lea ecx, [esp + 0x78]
call fcn.0247fc70
test eax, eax
jne 0x241d889
push esi
call dword [sym.imp.kernel32.dll_FindClose]
mov edx, dword [esp + 0xadc]
lea ecx, [esp + 0x28]
mov dword [edx], 8
call fcn.024017d0
mov eax, dword [esp + 0x24]
cmp eax, ebp
mov dword [esp + 0x20], ebp
je 0x241d856
push eax
call fcn.024ad03a
add esp, 4
mov dword [esp + 0x24], ebp
mov ecx, dword [esp + 0x10]
cmp ecx, ebp
mov dword [esp + 0xad4], edi
je 0x241cfeb
cmp ecx, ebp
mov eax, dword [ecx]
mov dword [esp + 0x14], eax
je 0x241d87e
push 1
call fcn.0241e550
mov eax, dword [esp + 0x14]
cmp eax, ebp
mov ecx, eax
jne 0x241d869
jmp 0x241cfeb
mov ecx, dword [esp + 0x64]
mov eax, dword [esp + 0x60]
mov edx, dword [esp + 0x50]
mov ebx, dword [esp + 0x4c]
push 1
push 0
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x70]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x5c]
push 0
push ecx
mov dword [esp + 0x50], edx
mov dword [esp + 0x54], eax
call fcn.024ade50
mov ebp, edx
mov edx, dword [esp + 0x6c]
mov edi, eax
xor eax, eax
add edi, edx
lea ecx, [esp + 0x28]
adc ebp, eax
mov byte [esp + 0xad4], 2
call fcn.024017d0
mov dword [esp + 0x30], 1
lea ecx, [esp + 0x20]
call fcn.0247f850
test eax, eax
je 0x241d9f6
mov ecx, dword [esp + 0x24]
push 0x24da924
push ecx
call fcn.024ade17
add esp, 8
test eax, eax
je 0x241d9f6
mov edx, dword [esp + 0x24]
push 0x24da920
push edx
call fcn.024ade17
add esp, 8
test eax, eax
je 0x241d9f6
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x241d93e
lea ecx, [esp + 0x10]
call fcn.0241e580
mov esi, eax
jmp 0x241d983
push 0x40
call fcn.024adc5e
mov esi, eax
add esp, 4
test esi, esi
je 0x241db7d
lea ecx, [esi + 8]
mov dword [esp + 0x28], ecx
call fcn.0241c660
mov dword [esi], 0
mov eax, dword [esp + 0x18]
mov dword [eax], esi
mov eax, dword [esp + 0x1c]
inc eax
mov dword [esp + 0x18], esi
mov esi, dword [esp + 0x28]
mov dword [esp + 0x14], 0
mov dword [esp + 0x1c], eax
test esi, esi
je 0x241db7d
lea edx, [esp + 0x20]
mov ecx, esi
call fcn.0247f970
test eax, eax
je 0x241db5f
mov edx, dword [esp + 0x3c]
push 1
mov ecx, ebx
shr ecx, 4
push 0
not cl
push 0
and cl, 1
mov dword [esi + 0x10], edi
push edx
mov byte [esi + 0x18], cl
mov dword [esi + 0x14], ebp
mov dword [esi + 0x30], ebx
call fcn.024ade50
mov ebx, dword [esp + 0x38]
xor ecx, ecx
add eax, ebx
push 1
adc edx, ecx
push ecx
mov dword [esi + 0x28], eax
mov dword [esi + 0x2c], edx
mov edx, dword [esp + 0x4c]
push ecx
push edx
call fcn.024ade50
mov ebx, dword [esp + 0x40]
xor ecx, ecx
add eax, ebx
adc edx, ecx
mov dword [esi + 0x20], eax
mov dword [esi + 0x24], edx
mov esi, dword [esp + 0x34]
call dword [sym.imp.kernel32.dll_GetVersion]
cmp eax, 0x80000000
jae 0x241dab5
lea edx, [esp + 0x2cc]
push edx
xor eax, eax
mov dword [esp + 0x2d0], 0
mov ecx, 0x93
lea edi, [esp + 0x2d4]
push esi
rep stosd dword es:[edi], eax
call dword [sym.imp.kernel32.dll_FindNextFileW]
test eax, eax
mov dword [esp + 0x30], eax
je 0x241db8a
lea edx, [esp + 0x2f8]
lea ecx, [esp + 0x20]
call fcn.0247f900
test eax, eax
je 0x241db6e
mov ecx, dword [esp + 0x2e4]
mov eax, dword [esp + 0x2e0]
mov edx, dword [esp + 0x2d0]
mov ebx, dword [esp + 0x2cc]
push 1
push 0
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x2f0]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x2dc]
push 0
push ecx
mov dword [esp + 0x50], edx
mov dword [esp + 0x54], eax
call fcn.024ade50
mov esi, dword [esp + 0x34]
mov ebp, edx
mov edx, dword [esp + 0x2ec]
mov edi, eax
xor eax, eax
add edi, edx
adc ebp, eax
jmp 0x241d8e4
xor eax, eax
mov dword [esp + 0x18c], 0
mov ecx, 0x4f
lea edi, [esp + 0x190]
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x18c]
push ecx
push esi
call dword [sym.imp.kernel32.dll_FindNextFileA]
test eax, eax
mov dword [esp + 0x30], eax
je 0x241db8a
lea edx, [esp + 0x20]
lea ecx, [esp + 0x1b8]
call fcn.0247fc70
test eax, eax
je 0x241db7d
mov eax, dword [esp + 0x1a4]
mov edx, dword [esp + 0x1a0]
mov ecx, dword [esp + 0x190]
mov ebx, dword [esp + 0x18c]
push 1
push 0
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x1b0]
mov dword [esp + 0x40], edx
mov edx, dword [esp + 0x19c]
push 0
push eax
mov dword [esp + 0x50], ecx
mov dword [esp + 0x54], edx
call fcn.024ade50
mov ecx, dword [esp + 0x1ac]
mov esi, dword [esp + 0x34]
mov ebp, edx
mov edi, eax
xor edx, edx
add edi, ecx
adc ebp, edx
jmp 0x241d8e4
mov ecx, dword [esp + 0xadc]
mov dword [ecx], 8
jmp 0x241db8a
mov edx, dword [esp + 0xadc]
mov dword [edx], 8
jmp 0x241db8a
mov eax, dword [esp + 0xadc]
mov dword [eax], 8
mov ecx, dword [esp + 0x34]
push ecx
call dword [sym.imp.kernel32.dll_FindClose]
mov eax, dword [esp + 0x30]
xor esi, esi
cmp eax, esi
je 0x241dbef
mov eax, dword [esp + 0x24]
cmp eax, esi
mov dword [esp + 0x20], esi
je 0x241dbb8
push eax
call fcn.024ad03a
add esp, 4
mov dword [esp + 0x24], esi
mov ecx, dword [esp + 0x10]
cmp ecx, esi
mov dword [esp + 0xad4], 0xffffffff
je 0x241cfeb
cmp ecx, esi
mov eax, dword [ecx]
mov dword [esp + 0x14], eax
je 0x241dbe4
push 1
call fcn.0241e550
mov eax, dword [esp + 0x14]
cmp eax, esi
mov ecx, eax
jne 0x241dbcf
jmp 0x241cfeb
lea ecx, [esp + 0x20]
mov byte [esp + 0xad4], 0
call fcn.024017d0
mov ecx, dword [esp + 0x10]
xor ebp, ebp
jmp 0x241dc0c
mov ecx, dword [esp + 0x10]
cmp ecx, ebp
mov dword [esp + 0x14], ecx
je 0x241dcb0
lea eax, [ecx + 8]
cmp eax, ebp
je 0x241dcb0
mov edi, dword [esp + 0x48]
xor esi, esi
cmp ecx, ebp
lea edx, [esp + 0x10]
mov dword [esp + 0x14], ecx
je 0x241dc86
lea ebx, [ecx + 8]
cmp ebx, eax
je 0x241dc4c
mov edx, ecx
mov esi, ecx
mov ecx, dword [ecx]
cmp ecx, ebp
mov dword [esp + 0x14], ecx
je 0x241dc86
jmp 0x241dc35
cmp ecx, dword [esp + 0x18]
jne 0x241dc56
mov dword [esp + 0x18], esi
mov eax, dword [ecx]
mov dword [edx], eax
mov ecx, dword [esp + 0x14]
push ecx
mov ecx, edi
call fcn.0241e5e0
mov edx, dword [esp + 0x1c]
dec edx
lea ecx, [esp + 0x10]
mov dword [esp + 0x14], ebp
mov dword [esp + 0x1c], edx
call fcn.0241e540
cmp eax, ebp
je 0x241dcb0
mov ecx, dword [esp + 0x10]
jmp 0x241dc27
mov edx, dword [esp + 0xadc]
lea ecx, [esp + 0x10]
mov dword [esp + 0x14], ebp
mov dword [edx], 1
mov dword [esp + 0xad4], 0xffffffff
call fcn.0241e510
jmp 0x241cfeb
lea ecx, [esp + 0x10]
mov dword [esp + 0xad4], 0xffffffff
call fcn.0241e510
mov eax, 1
jmp 0x241cfed