Function at 0x4267b0
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff920
mov eax, 0x509c30
call fcn.004c58b8
mov word [ebp - 0x54], 0x14
lea eax, [ebp - 4]
call fcn.00401e94
push eax
inc dword [ebp - 0x48]
mov edx, 0x500d5a
lea eax, [ebp - 0x14]
call fcn.004d137c
inc dword [ebp - 0x48]
lea edx, [ebp - 0x14]
push edx
push dword [ebp + 8]
lea eax, [ebp - 0x10]
call fcn.00401e94
push eax
inc dword [ebp - 0x48]
call fcn.004265f0
add esp, 8
lea eax, [ebp - 0x10]
pop edx
pop ecx
call fcn.004d1534
dec dword [ebp - 0x48]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.004d14dc
dec dword [ebp - 0x48]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.004d14dc
mov word [ebp - 0x54], 8
lea ecx, [ebp - 0x1bc]
push ecx
lea eax, [ebp - 4]
call fcn.004019fc
push eax
call sub.KERNEL32.DLL_FindFirstFileA
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x70], 1
mov word [ebp - 0x54], 0x20
lea eax, [ebp - 8]
call fcn.00401e94
inc dword [ebp - 0x48]
mov word [ebp - 0x54], 8
xor edx, edx
mov dword [ebp - 0x7c], edx
mov word [ebp - 0x54], 0x2c
mov edx, 0x500d5c
lea eax, [ebp - 0xc]
call fcn.004d137c
inc dword [ebp - 0x48]
mov word [ebp - 0x54], 8
cmp dword [ebp - 0x70], 0
je 0x426bbb
mov ecx, dword [0x517da8]
mov eax, dword [ecx]
call fcn.004675a4
test byte [ebp - 0x1bc], 0x10
jne 0x426b9f
push 0
lea edx, [ebp - 0x6d0]
push edx
push 0x104
lea ecx, [ebp - 0x190]
push ecx
call sub.KERNEL32.DLL_GetFullPathNameA
mov word [ebp - 0x54], 0x38
lea edx, [ebp - 0x190]
lea eax, [ebp - 0x18]
call fcn.004d137c
inc dword [ebp - 0x48]
lea edx, [ebp - 0x18]
lea eax, [ebp - 8]
call fcn.004d150c
dec dword [ebp - 0x48]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.004d14dc
mov word [ebp - 0x54], 0x44
lea eax, [ebp - 0x1c]
call fcn.00401e94
push eax
inc dword [ebp - 0x48]
lea eax, [ebp - 8]
call fcn.00401ec4
mov edx, eax
add edx, 0xfffffffe
lea eax, [ebp - 8]
mov ecx, 3
call fcn.004d1750
lea edx, [ebp - 0x1c]
lea eax, [ebp - 0xc]
call fcn.004d150c
dec dword [ebp - 0x48]
lea eax, [ebp - 0x1c]
mov edx, 2
call fcn.004d14dc
lea eax, [ebp - 8]
call fcn.00401ec4
cmp eax, 0x14
jne 0x426b9f
mov word [ebp - 0x54], 0x50
mov edx, 0x500d5d
lea eax, [ebp - 0x20]
call fcn.004d137c
inc dword [ebp - 0x48]
lea edx, [ebp - 0x20]
lea eax, [ebp - 0xc]
call fcn.004d15c0
test al, al
setne dl
and edx, 1
push edx
dec dword [ebp - 0x48]
lea eax, [ebp - 0x20]
mov edx, 2
call fcn.004d14dc
pop ecx
test ecx, ecx
je 0x426b9f
mov word [ebp - 0x54], 0x5c
lea eax, [ebp - 0x24]
call fcn.00401e94
push eax
inc dword [ebp - 0x48]
lea eax, [ebp - 8]
mov ecx, 0x10
xor edx, edx
call fcn.004d1750
lea edx, [ebp - 0x24]
lea eax, [ebp - 8]
call fcn.004d150c
dec dword [ebp - 0x48]
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.004d14dc
mov word [ebp - 0x54], 0x68
lea eax, [ebp - 0x28]
call fcn.00401e94
push eax
inc dword [ebp - 0x48]
lea eax, [ebp - 8]
mov ecx, 8
xor edx, edx
call fcn.004d1750
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x2c]
call fcn.00401e94
mov ecx, eax
inc dword [ebp - 0x48]
mov eax, 0x500d61
pop edx
call fcn.004d1884
lea eax, [ebp - 0x2c]
mov eax, dword [eax]
call fcn.004b0c98
mov dword [ebp - 0x78], eax
dec dword [ebp - 0x48]
lea eax, [ebp - 0x2c]
mov edx, 2
call fcn.004d14dc
dec dword [ebp - 0x48]
lea eax, [ebp - 0x28]
mov edx, 2
call fcn.004d14dc
mov word [ebp - 0x54], 0x74
lea eax, [ebp - 0x30]
call fcn.00401e94
push eax
inc dword [ebp - 0x48]
lea eax, [ebp - 8]
mov ecx, 0x10
mov edx, 9
call fcn.004d1750
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x34]
call fcn.00401e94
mov ecx, eax
inc dword [ebp - 0x48]
mov eax, 0x500d64
pop edx
call fcn.004d1884
lea eax, [ebp - 0x34]
mov eax, dword [eax]
call fcn.004b0c98
mov dword [ebp - 0x74], eax
dec dword [ebp - 0x48]
lea eax, [ebp - 0x34]
mov edx, 2
call fcn.004d14dc
dec dword [ebp - 0x48]
lea eax, [ebp - 0x30]
mov edx, 2
call fcn.004d14dc
lea ecx, [ebp - 0x6e0]
push ecx
lea eax, [ebp - 0x1b8]
push eax
call sub.KERNEL32.DLL_FileTimeToSystemTime
push dword [ebp - 0x6d4]
push dword [ebp - 0x6d8]
push dword [ebp - 0x6dc]
push dword [ebp - 0x6e0]
push dword [ebp + 8]
call fcn.004266d0
add esp, 0x14
test al, al
je 0x426b7c
mov word [ebp - 0x54], 0x80
lea eax, [ebp - 0x40]
call fcn.00401e94
push eax
inc dword [ebp - 0x48]
lea edx, [ebp - 0x190]
lea eax, [ebp - 0x3c]
call fcn.004d137c
inc dword [ebp - 0x48]
lea edx, [ebp - 0x3c]
push edx
push dword [ebp + 8]
lea eax, [ebp - 0x38]
call fcn.00401e94
push eax
inc dword [ebp - 0x48]
call fcn.004265f0
add esp, 8
lea eax, [ebp - 0x38]
pop edx
pop ecx
call fcn.004d1534
lea eax, [ebp - 0x40]
mov eax, dword [eax]
call fcn.004d12f0
dec dword [ebp - 0x48]
lea eax, [ebp - 0x40]
mov edx, 2
call fcn.004d14dc
dec dword [ebp - 0x48]
lea eax, [ebp - 0x3c]
mov edx, 2
call fcn.004d14dc
dec dword [ebp - 0x48]
lea eax, [ebp - 0x38]
mov edx, 2
call fcn.004d14dc
lea ecx, [ebp - 0x1bc]
push ecx
push dword [ebp - 0x6c]
call sub.KERNEL32.DLL_FindNextFileA
mov dword [ebp - 0x70], eax
jmp 0x426887
cmp dword [ebp - 0x7c], 0x3e8
jge 0x426b9f
mov eax, dword [ebp - 0x7c]
mov edx, dword [ebp - 0x78]
mov dword [eax*8 + 0x60c734], edx
mov edx, dword [ebp - 0x74]
mov dword [eax*8 + 0x60c738], edx
inc dword [ebp - 0x7c]
lea ecx, [ebp - 0x1bc]
push ecx
push dword [ebp - 0x6c]
call sub.KERNEL32.DLL_FindNextFileA
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jne 0x426891
mov eax, dword [ebp - 0x7c]
push eax
dec dword [ebp - 0x48]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.004d14dc
dec dword [ebp - 0x48]
lea eax, [ebp - 8]
mov edx, 2
call fcn.004d14dc
dec dword [ebp - 0x48]
lea eax, [ebp - 4]
mov edx, 2
call fcn.004d14dc
pop eax
mov edx, dword [ebp - 0x64]
mov dword fs:[0], edx
mov esp, ebp
pop ebp
ret