Function at 0x41d216
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
sub esp, 0x288
lea ebp, [esp - 4]
mov eax, dword [0x493350]
xor eax, ebp
mov dword [ebp + 0x288], eax
push 0x210
mov eax, 0x46f217
call fcn.00451210
mov edi, ecx
lea esi, [edi + 0x1ac]
push str.Posting_log_file
mov dword [ebp - 0x14], edi
call fcn.00406fa0
and dword [ebp - 4], 0
cmp byte [ebp + 0x294], 0
pop ecx
mov eax, str.CorrIDString
je 0x41d279
push dword [edi + 0x98]
push eax
push str._s:__d
call fcn.00406fa0
add esp, 0xc
cmp byte [ebp + 0x294], 0
mov byte [ebp - 4], 1
je 0x41d51c
lea esi, [ebp + 0x250]
call fcn.004267f1
mov eax, esi
push eax
mov eax, str..rbal
mov byte [ebp - 4], 2
call fcn.00406ea0
mov ebx, 0x250
push ebx
xor esi, esi
lea eax, [ebp]
push esi
push eax
call fcn.00450ab0
mov eax, dword [ebp + 0x254]
add esp, 0xc
cmp dword [ebp + 0x268], 8
jae 0x41d2d0
lea eax, [ebp + 0x254]
lea ecx, [ebp]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
push 4
mov edi, eax
call fcn.0044d0eb
pop ecx
cmp eax, esi
je 0x41d2f0
lea ecx, [ebp - 0x2c]
mov dword [eax], ecx
jmp 0x41d2f2
xor eax, eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], esi
mov byte [ebp - 4], 4
cmp edi, 0xffffffff
je 0x41d328
cmp dword [ebp], 0x10
je 0x41d319
lea eax, [ebp]
push eax
lea esi, [ebp - 0x2c]
call fcn.00426b4d
lea eax, [ebp]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x41d307
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [ebp - 0x1c]
mov eax, ecx
sub eax, dword [ebp - 0x20]
mov esi, ebx
cdq
idiv esi
test eax, eax
je 0x41d4de
mov ebx, ecx
cmp dword [ebp - 0x20], ecx
jbe 0x41d350
call fcn.0044d2b8
mov edi, dword [ebp - 0x20]
mov esi, dword [ebp - 0x2c]
cmp edi, dword [ebp - 0x1c]
jbe 0x41d360
call fcn.0044d2b8
test esi, esi
je 0x41d369
cmp esi, dword [ebp - 0x2c]
je 0x41d36e
call fcn.0044d2b8
mov eax, ebx
sub eax, edi
cdq
mov esi, 0x250
mov ecx, esi
idiv ecx
push 0x41d1f9
push eax
push ebx
push edi
call fcn.0042bd61
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x20]
add esp, 0x10
cdq
idiv esi
test eax, eax
ja 0x41d39e
call fcn.0044d2b8
mov eax, dword [ebp - 0x20]
add eax, 0x2c
lea ecx, [ebp - 0x50]
call fcn.00406dd0
mov edi, eax
lea esi, [ebp - 0x6c]
mov byte [ebp - 4], 5
call fcn.004267f1
push edi
push eax
lea edi, [ebp + 0x26c]
mov byte [ebp - 4], 6
call fcn.00409530
pop ecx
pop ecx
call fcn.00406e40
lea esi, [ebp - 0x50]
mov byte [ebp - 4], 9
call fcn.00406e40
cmp dword [ebp + 0x284], 8
mov eax, dword [ebp + 0x270]
jae 0x41d3f3
lea eax, [ebp + 0x270]
push 8
push eax
lea eax, [ebp - 0xfc]
push eax
call fcn.00426a37
lea eax, [ebp - 0xf4]
push str.Info:_RobloxAppLog
push eax
mov byte [ebp - 4], 0xa
call fcn.00409180
pop ecx
pop ecx
mov esi, 0x47581c
push esi
push eax
call fcn.00409180
pop ecx
pop ecx
mov eax, str.CorrIDString
push eax
lea eax, [ebp - 0xf4]
push eax
call fcn.00409180
pop ecx
pop ecx
push 0x474650
push eax
call fcn.00409180
mov edi, dword [ebp - 0x14]
pop ecx
pop ecx
push dword [edi + 0x98]
push eax
call fcn.00425730
push esi
push eax
call fcn.00409180
pop ecx
pop ecx
lea esi, [ebp - 0xf4]
call fcn.00406ef0
lea eax, [ebp - 0xfc]
mov byte [ebp - 4], 9
call fcn.0041d602
cmp dword [ebp + 0x284], 8
mov eax, dword [ebp + 0x270]
jae 0x41d48f
lea eax, [ebp + 0x270]
push 0x21
push eax
lea eax, [ebp - 0x21c]
push eax
call fcn.00426a37
push str.Uploading_app_log_file
lea esi, [edi + 0x1ac]
mov byte [ebp - 4], 0xb
call fcn.00406fa0
pop ecx
lea eax, [ebp - 0x21c]
push eax
call fcn.0041cfdf
lea eax, [ebp - 0x21c]
mov byte [ebp - 4], 9
call fcn.0041d602
lea esi, [ebp + 0x26c]
call fcn.00406e40
mov ebx, 0x250
mov byte [ebp - 4], 2
cmp dword [ebp - 0x20], 0
je 0x41d4fd
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x1c]
je 0x41d4f4
add eax, ebx
jmp 0x41d4eb
push dword [ebp - 0x20]
call fcn.0044cce2
pop ecx
push dword [ebp - 0x2c]
xor eax, eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], eax
call fcn.0044cce2
pop ecx
lea esi, [ebp + 0x250]
call fcn.00406e40
and dword [ebp - 4], 0
mov edi, dword [ebp - 0x14]
lea esi, [edi + 0x1ac]
push str.Uploading_install_log_file
call fcn.00406fa0
cmp dword [esi + 0x18], 8
pop ecx
jb 0x41d569
mov esi, dword [esi + 4]
jmp 0x41d56c
add esi, 4
push 0x21
push esi
lea eax, [ebp - 0x18c]
push eax
call fcn.00426a37
lea eax, [ebp - 0x18c]
push eax
mov byte [ebp - 4], 0xd
call fcn.0041cfdf
lea eax, [ebp - 0x18c]
mov byte [ebp - 4], 0
call fcn.0041d602
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x288]
xor ecx, ebp
call fcn.0044cced
add ebp, 0x28c
leave
ret 4