Function at 0x42dc20
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2cc
mov eax, dword [0x4d9b30]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 8]
call fcn.0042d0d0
lea ecx, [ebp - 8]
call fcn.004306f0
push 0x4bf828
lea ecx, [ebp - 8]
call fcn.00430720
lea ecx, [ebp - 8]
call fcn.00430ac0
movzx eax, al
test eax, eax
je 0x42dc93
mov dword [ebp - 0x2cc], 0
mov dword [ebp - 0x2c8], 0
lea ecx, [ebp - 8]
call fcn.00401910
mov eax, dword [ebp - 0x2cc]
mov edx, dword [ebp - 0x2c8]
jmp 0x42dece
push 1
lea eax, [ebp - 0xc]
push eax
lea ecx, [ebp - 8]
call fcn.00430810
lea eax, [ebp - 0xc]
push eax
push 0x4cf314
call fcn.00430a10
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x42dcde
lea eax, [ebp - 0xc]
push eax
push 0x4ce094
call fcn.00430a10
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x42dcde
push 0x4cf314
lea ecx, [ebp - 8]
call fcn.00430250
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0
lea ecx, [ebp - 0x18]
call fcn.0042d0a0
push 0x250
push 0
lea eax, [ebp - 0x268]
push eax
call fcn.004586e0
add esp, 0xc
lea eax, [ebp - 0x268]
push eax
push 0x4bf820
lea ecx, [ebp - 8]
push ecx
lea edx, [ebp - 0x2c4]
push edx
call fcn.00430970
add esp, 0xc
mov ecx, eax
call fcn.00401930
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x26c], eax
lea ecx, [ebp - 0x2c4]
call fcn.00401910
cmp dword [ebp - 0x26c], 0xffffffff
je 0x42de98
lea eax, [ebp - 0x23c]
push eax
lea ecx, [ebp - 0x18]
call fcn.004019a0
push 0x4bf81c
lea ecx, [ebp - 0x18]
call fcn.00430280
test eax, eax
je 0x42de6f
push 0x4bf814
lea ecx, [ebp - 0x18]
call fcn.00430280
test eax, eax
je 0x42de6f
mov eax, dword [ebp - 0x268]
and eax, 0x10
je 0x42ddfe
cmp dword [ebp + 0x10], 0
jle 0x42dda7
mov eax, dword [ebp + 0xc]
cmp dword [eax], 0
jg 0x42ddac
jmp 0x42de8b
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 8]
push ecx
lea edx, [ebp - 0x2c0]
push edx
call fcn.00430900
add esp, 0xc
push eax
lea ecx, [ebp - 0x18]
call fcn.004301a0
lea ecx, [ebp - 0x2c0]
call fcn.00401910
mov eax, dword [ebp + 0x10]
sub eax, 1
push eax
mov ecx, dword [ebp + 0xc]
push ecx
lea edx, [ebp - 0x18]
push edx
call fcn.0042dc20
add esp, 0xc
add eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x10]
adc ecx, edx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], ecx
jmp 0x42de6f
mov eax, dword [ebp + 0xc]
cmp dword [eax], 0
jg 0x42de0b
jmp 0x42de8b
mov eax, dword [ebp - 0x24c]
xor ecx, ecx
mov dword [ebp - 0x274], eax
mov dword [ebp - 0x270], ecx
mov eax, dword [ebp - 0x274]
mov edx, dword [ebp - 0x270]
mov cl, 0x20
call fcn.00458b60
mov dword [ebp - 0x274], eax
mov dword [ebp - 0x270], edx
mov eax, dword [ebp - 0x248]
xor ecx, ecx
add eax, dword [ebp - 0x274]
mov edx, dword [ebp - 0x270]
adc edx, ecx
add eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x10]
adc ecx, edx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
sub ecx, 1
mov edx, dword [ebp + 0xc]
mov dword [edx], ecx
lea eax, [ebp - 0x268]
push eax
mov ecx, dword [ebp - 0x26c]
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x42dd55
mov eax, dword [ebp - 0x26c]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2bc], eax
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x2b8], ecx
lea ecx, [ebp - 0x18]
call fcn.00401910
lea ecx, [ebp - 0xc]
call fcn.00401910
lea ecx, [ebp - 8]
call fcn.00401910
mov eax, dword [ebp - 0x2bc]
mov edx, dword [ebp - 0x2b8]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0045875a
mov esp, ebp
pop ebp
ret