Function at 0x402ff2
Capabilities:
Enumerate files on windows

Disassembly:
push 0xeac
mov eax, 0x5a938e
call fcn.00553ddb
mov dword [ebp - 0xeb8], ecx
xor ebx, ebx
mov esi, ebx
mov dword [ebp - 0xeb4], ebx
mov dword [ebp - 0xeb0], esi
mov dword [ebp - 0xeac], ebx
xor eax, eax
mov edi, 0x206
push edi
mov word [ebp - 0x628], ax
lea eax, [ebp - 0x626]
push ebx
push eax
mov dword [ebp - 4], ebx
call fcn.005534a0
xor eax, eax
push edi
mov word [ebp - 0xa38], ax
lea eax, [ebp - 0xa36]
push ebx
push eax
call fcn.005534a0
add esp, 0x18
push str.Dict
call fcn.004036f5
mov ecx, eax
call fcn.0040e275
push eax
lea eax, [ebp - 0x628]
push 0x5bf410
push eax
call fcn.00554d64
xor eax, eax
push edi
mov word [ebp - 0x420], ax
lea eax, [ebp - 0x41e]
push ebx
push eax
call fcn.005534a0
xor eax, eax
push edi
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push ebx
push eax
call fcn.005534a0
xor eax, eax
push edi
mov word [ebp - 0x830], ax
lea eax, [ebp - 0x82e]
push ebx
push eax
call fcn.005534a0
lea eax, [ebp - 0x628]
push eax
lea eax, [ebp - 0x830]
push str._s.
push eax
call fcn.00554d64
add esp, 0x40
lea eax, [ebp - 0xea8]
push eax
lea eax, [ebp - 0x830]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov edi, eax
cmp edi, 0xffffffff
je 0x403263
push 0x2e
pop esi
lea eax, [ebp - 0xea8]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x403257
cmp word [ebp - 0xe7c], si
je 0x4030fb
cmp word [ebp - 0xe7a], 0
je 0x4030fb
cmp word [ebp - 0xe7a], si
jne 0x403137
cmp word [ebp - 0xe78], 0
je 0x4030fb
test byte [ebp - 0xea8], 0x10
jne 0x4030fb
lea eax, [ebp - 0xe7c]
push eax
lea eax, [ebp - 0x420]
push 0x5bf428
push eax
call fcn.00554d64
lea eax, [ebp - 0x420]
push eax
call fcn.005549ee
lea eax, [ebp - 0x420]
push str..dcel
push eax
call fcn.00554557
add esp, 0x18
test eax, eax
je 0x4030fb
xor eax, eax
push 0x206
mov word [ebp - 0xc40], ax
lea eax, [ebp - 0xc3e]
push ebx
push eax
call fcn.005534a0
lea eax, [ebp - 0xc40]
push eax
lea eax, [ebp - 0x420]
push eax
call fcn.00410171
lea eax, [ebp - 0xc40]
push str..dcel
push eax
call fcn.00553cb5
add esp, 0x1c
test eax, eax
jne 0x4030fb
lea eax, [ebp - 0xe7c]
push eax
lea eax, [ebp - 0x218]
push 0x5bf428
push eax
call fcn.00554d64
xor eax, eax
add esp, 0xc
mov dword [ebp - 0xc44], 7
mov dword [ebp - 0xc48], ebx
mov word [ebp - 0xc58], ax
cmp word [ebp - 0x218], ax
jne 0x40320b
mov eax, ebx
jmp 0x403218
lea eax, [ebp - 0x218]
push eax
call fcn.00553cf3
pop ecx
push eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0xc58]
call fcn.00402120
lea eax, [ebp - 0xc58]
push eax
lea ecx, [ebp - 0xeb4]
mov byte [ebp - 4], 1
call fcn.00403a92
push ebx
push 1
lea ecx, [ebp - 0xc58]
mov byte [ebp - 4], bl
call fcn.00402004
jmp 0x4030fb
mov esi, dword [ebp - 0xeb0]
mov ebx, dword [ebp - 0xeb4]
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp ebx, esi
je 0x4032b1
mov edi, dword [ebp - 0xeb8]
cmp dword [ebx + 0x14], 8
jb 0x40327e
mov eax, dword [ebx]
jmp 0x403280
mov eax, ebx
push eax
lea eax, [ebp - 0x628]
push eax
lea eax, [ebp - 0xa38]
push 0x5bf43c
push eax
call fcn.00554d64
add esp, 0x10
lea eax, [ebp - 0xa38]
push eax
mov ecx, edi
call fcn.00402932
add ebx, 0x18
cmp ebx, esi
jne 0x403274
lea ecx, [ebp - 0xeb4]
call fcn.004038cb
call fcn.00553d8a
ret