Function at 0x4024fa
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x288
push esi
mov dword [ebp - 0x288], 0
mov dword [ebp - 8], 0
mov dword [ebp - 4], 0
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.MSVCRT.dll__wcsdup]
add esp, 4
mov dword [ebp + 8], eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.MSVCRT.dll_wcslen]
add esp, 4
mov dword [ebp - 0xc], eax
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp + 8]
xor ecx, ecx
mov cx, word [eax + edx*2 - 2]
cmp ecx, 0x2f
je 0x402560
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp + 8]
xor ecx, ecx
mov cx, word [eax + edx*2 - 2]
cmp ecx, 0x5c
jne 0x402577
mov edx, dword [ebp - 0xc]
sub edx, 1
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp + 8]
mov word [ecx + eax*2], 0
jmp 0x40253c
lea edx, [ebp - 0x280]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.MSVCRT.dll__wstat]
add esp, 8
test eax, eax
je 0x4025a3
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.MSVCRT.dll_free]
add esp, 4
xor eax, eax
jmp 0x4027cd
mov edx, dword [ebp + 0xc]
mov dword [0x405414], edx
mov eax, dword [ebp + 0xc]
push eax
call dword [sym.imp.MSVCRT.dll_wcslen]
add esp, 4
mov dword [0x405418], eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.MSVCRT.dll_wcslen]
add esp, 4
mov esi, eax
mov edx, dword [ebp + 0xc]
push edx
call dword [sym.imp.MSVCRT.dll_wcslen]
add esp, 4
lea eax, [esi + eax + 1]
lea ecx, [eax + eax + 6]
push ecx
call dword [sym.imp.MSVCRT.dll_malloc]
add esp, 4
mov dword [ebp - 4], eax
mov edx, dword [ebp + 0xc]
push edx
xor eax, eax
mov ax, word [0x4053d8]
push eax
mov ecx, dword [ebp + 8]
push ecx
push 0x40537c
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.MSVCRT.dll_swprintf]
add esp, 0x14
lea eax, [ebp - 0x25c]
push eax
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 0xffffffff
je 0x402739
lea edx, [ebp - 0x230]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.00402b73
add esp, 8
push eax
lea ecx, [ebp - 0x230]
push ecx
call fcn.00402a21
add esp, 8
test eax, eax
je 0x402673
lea edx, [ebp - 0x230]
push edx
call dword [sym.imp.MSVCRT.dll__wcsdup]
add esp, 4
mov dword [ebp - 0x288], eax
lea eax, [ebp - 0x25c]
push eax
mov ecx, dword [ebp - 0x284]
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x40272c
lea edx, [ebp - 0x230]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.00402b73
add esp, 8
push eax
lea ecx, [ebp - 0x230]
push ecx
call fcn.00402a21
add esp, 8
test eax, eax
je 0x402727
cmp dword [ebp - 0x288], 0
jne 0x4026d7
lea edx, [ebp - 0x230]
push edx
call dword [sym.imp.MSVCRT.dll__wcsdup]
add esp, 4
mov dword [ebp - 0x288], eax
jmp 0x402727
mov eax, dword [0x405418]
lea ecx, [ebp + eax*2 - 0x22e]
push ecx
mov edx, dword [0x405418]
mov eax, dword [ebp - 0x288]
lea ecx, [eax + edx*2 + 2]
push ecx
call fcn.004027d2
add esp, 8
test eax, eax
jge 0x402727
mov edx, dword [ebp - 0x288]
push edx
call dword [sym.imp.MSVCRT.dll_free]
add esp, 4
lea eax, [ebp - 0x230]
push eax
call dword [sym.imp.MSVCRT.dll__wcsdup]
add esp, 4
mov dword [ebp - 0x288], eax
jmp 0x402673
mov ecx, dword [ebp - 0x284]
push ecx
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [ebp - 0x288], 0
je 0x4027bd
mov edx, dword [ebp - 0x288]
push edx
call dword [sym.imp.MSVCRT.dll_wcslen]
add esp, 4
mov ecx, dword [ebp - 0xc]
lea edx, [ecx + eax + 1]
lea eax, [edx + edx + 2]
push eax
call dword [sym.imp.MSVCRT.dll_malloc]
add esp, 4
mov dword [ebp - 8], eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.MSVCRT.dll_wcscpy]
add esp, 8
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 8]
mov dx, word [0x4053d8]
mov word [ecx + eax*2], dx
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 8]
mov word [ecx + eax*2 + 2], 0
mov edx, dword [ebp - 0x288]
push edx
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.MSVCRT.dll_wcscat]
add esp, 8
mov ecx, dword [ebp - 0x288]
push ecx
call dword [sym.imp.MSVCRT.dll_free]
add esp, 4
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.MSVCRT.dll_free]
add esp, 4
mov eax, dword [ebp - 8]
pop esi
mov esp, ebp
pop ebp
ret