Function at 0x42d906
Capabilities:
Enumerate files on windows

Disassembly:
push 0x6bc
mov eax, 0x52d480
call fcn.0049fba2
mov eax, dword [ebp + 8]
xor edi, edi
mov esi, dword [ebp + 0x14]
mov dword [ebp - 0x674], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x67c], eax
mov dword [ebp - 0x680], esi
cmp dword [ebp + 0xc], edi
je 0x42dba3
test eax, eax
je 0x42dba3
push 0x208
lea eax, [ebp - 0x420]
push edi
push eax
call fcn.004c4160
add esp, 0xc
lea eax, [ebp - 0x420]
push dword [ebp + 0xc]
push 0x104
push eax
call fcn.0041bc76
push 0x5479a4
lea eax, [ebp - 0x420]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push 0x250
lea eax, [ebp - 0x670]
push edi
push eax
call fcn.004c4160
add esp, 0xc
lea eax, [ebp - 0x670]
push eax
lea eax, [ebp - 0x420]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x42dba3
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.004c4160
add esp, 0xc
lea eax, [ebp - 0x218]
push dword [ebp + 0xc]
push 0x104
push eax
call fcn.0041bc76
lea eax, [ebp - 0x644]
push eax
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea ecx, [ebp - 0x6b0]
call fcn.0042ee4c
and dword [ebp - 4], 0
lea ecx, [ebp - 0x6c8]
call fcn.0042ee4c
xor eax, eax
lea ecx, [ebp - 0x6a4]
inc eax
mov byte [ebp - 4], al
call fcn.0042ee4c
lea ecx, [ebp - 0x6bc]
mov byte [ebp - 4], 2
call fcn.0042ee4c
and dword [ebp - 0x678], 0
lea eax, [ebp - 0x678]
push eax
lea eax, [ebp - 0x6bc]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x6a4]
push eax
lea eax, [ebp - 0x6c8]
push eax
lea eax, [ebp - 0x6b0]
push eax
lea eax, [ebp - 0x218]
push eax
push dword [ebp - 0x674]
call fcn.0042d14c
add esp, 0x1c
lea ecx, [ebp - 0x698]
call fcn.0042ee4c
lea ecx, [ebp - 0x68c]
mov byte [ebp - 4], 4
call fcn.0042ee4c
mov eax, 0x104
mov byte [ebp - 4], 5
push eax
push eax
lea ecx, [ebp - 0x698]
call fcn.0042f595
push eax
lea ecx, [ebp - 0x6b0]
call fcn.0042ef3d
push eax
call dword [sym.imp.KERNEL32.dll_GetShortPathNameW]
push 0xffffffffffffffff
lea ecx, [ebp - 0x698]
call fcn.00430032
mov eax, 0x104
lea ecx, [ebp - 0x68c]
push eax
push eax
call fcn.0042f595
push eax
push dword [ebp - 0x67c]
call dword [sym.imp.KERNEL32.dll_GetShortPathNameW]
push 0xffffffffffffffff
lea ecx, [ebp - 0x68c]
call fcn.00430032
lea ecx, [ebp - 0x68c]
call fcn.0042ef3d
push eax
lea ecx, [ebp - 0x698]
call fcn.0042f097
test eax, eax
jne 0x42db34
test esi, esi
je 0x42db18
push esi
lea ecx, [ebp - 0x6a4]
call fcn.0042f097
test eax, eax
jne 0x42db34
lea eax, [ebp - 0x218]
push eax
push dword [ebp - 0x674]
call fcn.0042d8d2
pop ecx
pop ecx
test eax, eax
push 1
pop eax
cmovns edi, eax
lea eax, [ebp - 0x670]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
lea ecx, [ebp - 0x68c]
mov esi, eax
call fcn.0042ee5d
lea ecx, [ebp - 0x698]
call fcn.0042ee5d
lea ecx, [ebp - 0x6bc]
call fcn.0042ee5d
lea ecx, [ebp - 0x6a4]
call fcn.0042ee5d
lea ecx, [ebp - 0x6c8]
call fcn.0042ee5d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6b0]
call fcn.0042ee5d
test esi, esi
mov esi, dword [ebp - 0x680]
jne 0x42d9b2
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, edi
jmp 0x42dba8
mov eax, 0x80004005
call fcn.0049fb4c
ret