Function at 0x4affc0
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x270
call fcn.007081d0
mov eax, dword [0x7d0e44]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x25c], 0
mov dword [ebp - 0x258], 0
jmp 0x4afffc
mov eax, dword [ebp - 0x258]
add eax, 1
mov dword [ebp - 0x258], eax
mov ecx, dword [ebp - 0x258]
cmp ecx, dword [ebp + 0xc]
jge 0x4b003c
mov edx, dword [ebp - 0x258]
mov eax, dword [ebp + 8]
movzx ecx, word [eax + edx*2]
cmp ecx, 0x2f
je 0x4b002b
mov edx, dword [ebp - 0x258]
mov eax, dword [ebp + 8]
movzx ecx, word [eax + edx*2]
cmp ecx, 0x5c
jne 0x4b003a
mov edx, dword [ebp - 0x258]
add edx, 1
mov dword [ebp - 0x25c], edx
jmp 0x4affed
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0x258], eax
jmp 0x4b0059
mov ecx, dword [ebp - 0x258]
add ecx, 1
mov dword [ebp - 0x258], ecx
mov edx, dword [ebp - 0x258]
cmp edx, dword [ebp + 0xc]
jge 0x4b008c
mov eax, dword [ebp - 0x258]
mov ecx, dword [ebp + 8]
movzx edx, word [ecx + eax*2]
cmp edx, 0x2a
je 0x4b0088
mov eax, dword [ebp - 0x258]
mov ecx, dword [ebp + 8]
movzx edx, word [ecx + eax*2]
cmp edx, 0x3f
jne 0x4b008a
jmp 0x4b008c
jmp 0x4b004a
mov eax, dword [ebp - 0x258]
cmp eax, dword [ebp + 0xc]
jne 0x4b009e
xor eax, eax
jmp 0x4b029d
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp + 8]
mov ax, word [edx + ecx*2]
mov word [ebp - 0x268], ax
xor ecx, ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
mov word [eax + edx*2], cx
lea ecx, [ebp - 0x254]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x26c], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
mov dx, word [ebp - 0x268]
mov word [ecx + eax*2], dx
cmp dword [ebp - 0x26c], 0xffffffff
jne 0x4b00f3
xor eax, eax
jmp 0x4b029d
cmp dword [ebp - 0x25c], 0
je 0x4b0124
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x25c]
push eax
mov ecx, dword [ebp + 8]
push ecx
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov dword [ebp - 0x260], eax
jmp 0x4b012e
mov dword [ebp - 0x260], 0
mov edx, 2
imul eax, edx, 0
movzx ecx, word [ebp + eax - 0x228]
cmp ecx, 0x2e
jne 0x4b0184
mov edx, 2
shl edx, 0
movzx eax, word [ebp + edx - 0x228]
test eax, eax
je 0x4b017f
mov ecx, 2
shl ecx, 0
movzx edx, word [ebp + ecx - 0x228]
cmp edx, 0x2e
jne 0x4b0184
mov eax, 2
shl eax, 1
movzx ecx, word [ebp + eax - 0x228]
test ecx, ecx
jne 0x4b0184
jmp 0x4b026f
mov edx, dword [0x7d2024]
add edx, 1
push edx
call fcn.004b02b0
add esp, 4
test eax, eax
jne 0x4b019f
jmp 0x4b028b
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x228]
push eax
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov dword [ebp - 0x270], eax
mov ecx, dword [ebp - 0x260]
add ecx, dword [ebp - 0x270]
push ecx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
add esp, 4
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 0
jne 0x4b01ed
jmp 0x4b028b
cmp dword [ebp - 0x260], 0
je 0x4b0220
push 0
push 0
mov edx, dword [ebp - 0x260]
push edx
mov eax, dword [ebp - 0x264]
push eax
mov ecx, dword [ebp - 0x25c]
push ecx
mov edx, dword [ebp + 8]
push edx
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push 0
push 0
mov eax, dword [ebp - 0x270]
push eax
mov ecx, dword [ebp - 0x264]
add ecx, dword [ebp - 0x260]
push ecx
push 0xffffffffffffffff
lea edx, [ebp - 0x228]
push edx
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov eax, dword [0x7d2024]
mov ecx, dword [0x7d2028]
mov edx, dword [ebp - 0x264]
mov dword [ecx + eax*4], edx
mov eax, dword [0x7d2024]
add eax, 1
mov dword [0x7d2024], eax
lea ecx, [ebp - 0x254]
push ecx
mov edx, dword [ebp - 0x26c]
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x4b012e
mov eax, dword [ebp - 0x26c]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.007081b5
mov esp, ebp
pop ebp
ret