Function at 0x4cfcb7
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push 0x2b0
mov eax, 0x5d901e
call fcn.00506dfb
mov dword [ebp - 0x2b4], ecx
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x29c], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x2a0], eax
and dword [ebp - 4], 0
lea eax, [ebp - 0x298]
push 1
push eax
lea ecx, [ebp + 8]
xor edi, edi
call fcn.00434d0c
mov esi, 0x5f1b04
mov byte [ebp - 4], 1
push esi
mov ecx, eax
call fcn.0042e677
mov ecx, dword [ebp - 0x298]
test eax, eax
mov byte [ebp - 4], 0
setne bl
lea ecx, [ecx - 0x10]
call fcn.00412ac4
test bl, bl
je 0x4cfd2a
push esi
lea ecx, [ebp + 8]
call fcn.0042e473
push 0x250
lea eax, [ebp - 0x290]
push 0
push eax
call fcn.0056b050
push 0x61cfd8
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x2a8]
push eax
call fcn.0042dfbd
add esp, 0x18
lea ecx, [ebp - 0x290]
push ecx
push dword [eax]
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov ecx, dword [ebp - 0x2a8]
mov esi, eax
mov dword [ebp - 0x298], esi
lea ecx, [ecx - 0x10]
call fcn.00412ac4
cmp esi, 0xffffffff
je 0x4cfff5
cmp dword [0x683574], 0
jne 0x4cffec
lea eax, [ebp - 0x264]
push eax
lea ecx, [ebp - 0x294]
call fcn.00413f09
push 0x60ce98
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 2
call fcn.0042e677
test eax, eax
je 0x4cffb0
push 0x60ce9c
lea ecx, [ebp - 0x294]
call fcn.0042e677
test eax, eax
je 0x4cffb0
cmp dword [ebp + 0x14], 0
jne 0x4cfea3
test byte [ebp - 0x290], 0x10
je 0x4cfea3
lea eax, [ebp - 0x294]
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x2ac]
push eax
call fcn.0043910d
push dword [ebp - 0x2a4]
mov ebx, dword [ebp - 0x2a0]
push eax
mov byte [ebp - 4], 3
push dword [ebx + 4]
push dword [ebx]
call fcn.00442d45
mov ecx, dword [ebp - 0x2ac]
add esp, 0x1c
add ecx, 0xfffffff0
mov byte [ebp - 4], 2
mov esi, eax
call fcn.00412ac4
cmp esi, dword [ebx + 4]
jne 0x4cfe73
lea eax, [ebp - 0x294]
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x2b0]
push eax
call fcn.0043910d
add esp, 0xc
push eax
mov ecx, ebx
mov byte [ebp - 4], 4
call fcn.004ff6eb
mov ecx, dword [ebp - 0x2b0]
add ecx, 0xfffffff0
mov byte [ebp - 4], 2
call fcn.00412ac4
push 0
push ebx
push dword [ebp - 0x29c]
push ecx
mov eax, esp
lea ecx, [ebp - 0x294]
push ecx
lea ecx, [ebp + 8]
push ecx
push eax
call fcn.0043910d
mov ecx, dword [ebp - 0x2b4]
add esp, 0xc
call fcn.004cfcb7
jmp 0x4cffaa
cmp dword [0x683574], 0
jne 0x4cffda
mov eax, dword [ebp - 0x294]
cmp dword [eax - 4], 1
jle 0x4cfed0
push dword [eax - 0xc]
lea ecx, [ebp - 0x294]
call fcn.00412624
mov eax, dword [ebp - 0x294]
push eax
lea ecx, [ebp - 0x28]
call fcn.00413f4d
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 5
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.00418c88
push 0
push dword [ebp - 0x29c]
mov byte [ebp - 4], 6
push eax
call fcn.0044cdb2
add esp, 0x14
lea ecx, [ebp - 0x40]
mov bl, al
push 0
push 1
call fcn.00419170
push 0
push 1
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.0041458d
test bl, bl
je 0x4cffb0
lea eax, [ebp - 0x294]
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x2b8]
push eax
call fcn.0043910d
push dword [ebp - 0x2bc]
mov ebx, dword [ebp - 0x2a0]
push eax
mov byte [ebp - 4], 7
push dword [ebx + 4]
push dword [ebx]
call fcn.00442d45
mov ecx, dword [ebp - 0x2b8]
add esp, 0x1c
mov esi, eax
mov byte [ebp - 4], 2
lea ecx, [ecx - 0x10]
call fcn.00412ac4
cmp esi, dword [ebx + 4]
jne 0x4cffa7
lea eax, [ebp - 0x294]
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x2a4]
push eax
call fcn.0043910d
add esp, 0xc
push eax
mov ecx, ebx
mov byte [ebp - 4], 8
call fcn.004ff6eb
mov ecx, dword [ebp - 0x2a4]
lea ecx, [ecx - 0x10]
call fcn.00412ac4
xor edi, edi
inc edi
mov esi, dword [ebp - 0x298]
mov ecx, dword [ebp - 0x294]
mov byte [ebp - 4], 0
lea ecx, [ecx - 0x10]
call fcn.00412ac4
lea eax, [ebp - 0x290]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x4cfd83
jmp 0x4cffee
mov ecx, dword [ebp - 0x294]
xor edi, edi
lea ecx, [ecx - 0x10]
call fcn.00412ac4
jmp 0x4cffee
xor edi, edi
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.00412ac4
mov eax, edi
call fcn.00506da5
ret 0x10