Function at 0x42aaf3
Capabilities:
Enumerate files on windows

Disassembly:
push 0x288
mov eax, 0x512dc7
call fcn.004d8af2
mov edi, edx
mov esi, ecx
mov dword [ebp - 0x278], esi
mov dword [ebp - 0x274], esi
mov eax, dword [ebp + 0xc]
xor ebx, ebx
mov dword [ebp - 0x274], esi
mov dword [ebp - 0x270], eax
mov dword [ebp - 0x268], ebx
lea eax, [ebp + 0x10]
mov dword [ebp - 4], 1
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x26c]
call fcn.0040a037
pop ecx
lea eax, [ebp - 0x260]
mov byte [ebp - 4], 2
push eax
push dword [ebp - 0x26c]
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x264], eax
cmp eax, 0xffffffff
jne 0x42abc6
call fcn.00406710
cmp eax, 0x80070002
jne 0x42aba2
and dword [esi], ebx
lea ecx, [esi + 8]
and dword [esi + 4], ebx
call fcn.0040687a
mov ecx, dword [ebp - 0x26c]
lea ecx, [ecx - 0x10]
call fcn.00407189
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.00407189
mov ecx, dword [ebp + 0x10]
add ecx, 0xfffffff0
jmp 0x42ad9d
push 0x3eb
push eax
push ecx
lea eax, [ebp + 8]
mov ecx, esp
push eax
mov edx, str.Could_not_open_directory
call fcn.004093b4
pop ecx
mov ecx, esi
call fcn.00406620
jmp 0x42ad7e
mov esi, dword [ebp - 0x270]
test byte [ebp - 0x260], 0x10
je 0x42aca4
lea eax, [ebp - 0x234]
push eax
push 0x5444e0
call fcn.004e370b
pop ecx
pop ecx
test eax, eax
je 0x42ad40
lea eax, [ebp - 0x234]
push eax
push 0x5444e8
call fcn.004e370b
pop ecx
pop ecx
test eax, eax
je 0x42ad40
test edi, edi
je 0x42ad40
cmp byte [ebp + 0x14], 0
lea eax, [ebp - 0x234]
je 0x42ac41
push ecx
mov ecx, esp
push eax
call fcn.00406fea
lea ecx, [ebp - 0x27c]
call fcn.004297db
pop ecx
mov byte [ebp - 4], 3
or ebx, 2
jmp 0x42ac55
push eax
lea ecx, [ebp - 0x270]
call fcn.00406fea
push 4
pop ecx
mov dword [ebp - 4], ecx
or ebx, ecx
push eax
lea eax, [ebp - 0x28c]
mov dword [ebp - 0x268], ebx
push eax
mov ecx, edi
call fcn.004b0ee5
test bl, 4
je 0x42ac86
mov ecx, dword [ebp - 0x270]
and ebx, 0xfffffffb
mov dword [ebp - 0x268], ebx
lea ecx, [ecx - 0x10]
call fcn.00407189
mov dword [ebp - 4], 2
test bl, 2
je 0x42ad40
mov ecx, dword [ebp - 0x27c]
and ebx, 0xfffffffd
jmp 0x42ad32
test esi, esi
je 0x42ad46
cmp byte [ebp + 0x14], 0
lea eax, [ebp - 0x234]
je 0x42acd6
push ecx
mov ecx, esp
push eax
call fcn.00406fea
lea ecx, [ebp - 0x274]
call fcn.004297db
pop ecx
mov byte [ebp - 4], 5
or ebx, 8
jmp 0x42acec
push eax
lea ecx, [ebp - 0x280]
call fcn.00406fea
mov dword [ebp - 4], 6
or ebx, 0x10
push eax
lea eax, [ebp - 0x294]
mov dword [ebp - 0x268], ebx
push eax
mov ecx, esi
call fcn.004b0ee5
test bl, 0x10
je 0x42ad1d
mov ecx, dword [ebp - 0x280]
and ebx, 0xffffffef
mov dword [ebp - 0x268], ebx
lea ecx, [ecx - 0x10]
call fcn.00407189
mov dword [ebp - 4], 2
test bl, 8
je 0x42ad40
mov ecx, dword [ebp - 0x274]
and ebx, 0xfffffff7
lea ecx, [ecx - 0x10]
mov dword [ebp - 0x268], ebx
call fcn.00407189
mov eax, dword [ebp - 0x264]
lea ecx, [ebp - 0x260]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
mov eax, dword [ebp - 0x264]
jne 0x42abcc
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov esi, dword [ebp - 0x278]
and dword [esi], 0
lea ecx, [esi + 8]
and dword [esi + 4], 0
call fcn.0040687a
mov ecx, dword [ebp - 0x26c]
lea ecx, [ecx - 0x10]
call fcn.00407189
mov ecx, dword [ebp + 8]
lea ecx, [ecx - 0x10]
call fcn.00407189
mov ecx, dword [ebp + 0x10]
lea ecx, [ecx - 0x10]
call fcn.00407189
mov eax, esi
call fcn.004d8aa1
ret