Function at 0x42df0c
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x3ec
mov eax, dword [ebp + 8]
mov ecx, eax
mov edx, dword [ebp + 0xc]
mov dword [ebp - 0x48], eax
mov eax, edx
mov byte [ebp - 0x49], 0
mov esi, dword [ebp - 0x48]
mov edi, esp
mov dword [edi], esi
mov dword [ebp - 0x384], edx
mov dword [ebp - 0x388], ecx
mov dword [ebp - 0x38c], eax
call fcn.00421e8c
mov dword [ebp - 0x28], 0x550e90
mov dword [ebp - 0x24], 0x558694
mov eax, ebp
mov dword [ebp - 0x20], eax
mov eax, esp
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x20], 0x42e3f7
mov dword [ebp - 0x3c], 1
lea eax, [ebp - 0x44]
call fcn.00551af9
mov eax, esp
mov ecx, dword [ebp - 0x384]
mov dword [eax + 4], ecx
lea edx, [ebp - 0x84]
mov dword [eax], edx
call fcn.0042db6c
jmp 0x42df8f
mov dword [ebp - 0x3c], 2
mov eax, esp
lea ecx, [ebp - 0x84]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0x68]
mov dword [eax], ecx
mov dword [eax + 8], str._.
call fcn.0042e44c
jmp 0x42dfb4
mov eax, esp
lea ecx, [ebp - 0x84]
mov dword [eax], ecx
call fcn.0040380c
mov eax, esp
lea ecx, [ebp - 0x68]
mov dword [eax], ecx
call fcn.00403828
mov dword [ebp - 0x3c], 3
mov ecx, esp
lea edx, [ebp - 0x2dc]
mov dword [ecx + 4], edx
mov dword [ecx], eax
call sub.KERNEL32.DLL_FindFirstFileW
sub esp, 8
mov dword [ebp - 0x390], eax
jmp 0x42dff3
mov eax, 0xffffffff
mov ecx, dword [ebp - 0x390]
mov dword [ebp - 0x2e0], ecx
cmp dword [ebp - 0x2e0], eax
jne 0x42e09a
mov byte [ebp - 0x49], 1
mov dword [ebp - 0x2e4], 1
jmp 0x42e38c
jmp 0x42e09c
mov eax, dword [ebp - 0x2dc]
and eax, 0x10
cmp eax, 0
jne 0x42e320
lea eax, [ebp - 0x2b0]
mov dword [ebp - 0x3c], 4
mov ecx, esp
mov dword [ecx + 4], eax
lea eax, [ebp - 0x300]
mov dword [ecx], eax
call fcn.0042d654
jmp 0x42e0cf
mov dword [ebp - 0x3c], 5
mov eax, esp
mov ecx, dword [ebp - 0x38c]
mov dword [eax + 4], ecx
lea edx, [ebp - 0x354]
mov dword [eax], edx
call fcn.0042db6c
jmp 0x42e0f0
mov dword [ebp - 0x3c], 6
mov eax, esp
lea ecx, [ebp - 0x354]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0x338]
mov dword [eax], ecx
mov dword [eax + 8], 0x558496
call fcn.0042e44c
jmp 0x42e118
mov dword [ebp - 0x3c], 7
mov eax, esp
lea ecx, [ebp - 0x300]
mov dword [eax + 8], ecx
lea ecx, [ebp - 0x338]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0x31c]
mov dword [eax], ecx
call fcn.0042d728
jmp 0x42e142
mov eax, esp
lea ecx, [ebp - 0x338]
mov dword [eax], ecx
call fcn.0040380c
mov eax, esp
lea ecx, [ebp - 0x354]
mov dword [eax], ecx
call fcn.0040380c
mov dword [ebp - 0x3c], 8
mov eax, esp
lea ecx, [ebp - 0x31c]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0x380]
mov dword [eax], ecx
call fcn.0042d950
jmp 0x42e181
mov eax, esp
lea ecx, [ebp - 0x380]
mov dword [eax], ecx
call fcn.004223d4
mov dword [ebp - 0x3c], 9
mov ecx, esp
mov dword [ecx + 4], eax
lea eax, [ebp - 0x370]
mov dword [ecx], eax
call fcn.004043c0
jmp 0x42e1ab
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x3c], 0xa
mov ecx, esp
lea edx, [ebp - 0x370]
mov dword [ecx + 4], edx
mov dword [ecx], eax
call fcn.0042e4a0
jmp 0x42e1c9
lea eax, [ebp - 0x370]
mov dword [esp], eax
call fcn.00405890
lea eax, [ebp - 0x380]
mov dword [esp], eax
call fcn.00422814
lea eax, [ebp - 0x31c]
mov dword [esp], eax
call fcn.0040380c
lea eax, [ebp - 0x300]
mov dword [esp], eax
call fcn.0040380c
jmp 0x42e320
jmp 0x42e322
mov eax, dword [ebp - 0x2e0]
mov dword [ebp - 0x3c], 0xb
mov ecx, esp
lea edx, [ebp - 0x2dc]
mov dword [ecx + 4], edx
mov dword [ecx], eax
call sub.KERNEL32.DLL_FindNextFileW
sub esp, 8
mov dword [ebp - 0x3dc], eax
jmp 0x42e34c
mov eax, dword [ebp - 0x3dc]
cmp eax, 0
jne 0x42e09c
mov eax, dword [ebp - 0x2e0]
mov dword [ebp - 0x3c], 0xc
mov ecx, esp
mov dword [ecx], eax
call sub.KERNEL32.DLL_FindClose
sub esp, 4
mov dword [ebp - 0x3e0], eax
jmp 0x42e37c
jmp 0x42e37e
mov byte [ebp - 0x49], 1
mov dword [ebp - 0x2e4], 1
lea eax, [ebp - 0x68]
mov dword [esp], eax
call fcn.0040380c
test byte [ebp - 0x49], 1
jne 0x42e3b7
jmp 0x42e3ac
mov eax, dword [ebp - 0x48]
mov dword [esp], eax
call fcn.00416150
jmp 0x42e3c6
lea eax, [ebp - 0x44]
mov dword [esp], eax
call fcn.00551b1a
mov eax, dword [ebp - 0x388]
add esp, 0x3ec
pop esi
pop edi
pop ebx
pop ebp
ret