Function at 0x4421cd
Capabilities:
Enumerate files on windows

Disassembly:
push 0x2b4
mov eax, 0x526f27
call fcn.004f1db2
mov eax, dword [ebp + 0xc]
xor ebx, ebx
mov esi, dword [ebp + 8]
mov dword [ebp - 0x2c0], eax
mov dword [ebp - 0x2b4], ebx
mov dword [ebp - 0x2b0], ebx
call fcn.00442a7f
mov dword [ebp - 0x2b4], eax
push str.avcodec_54.dll
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], 4
call fcn.00417260
mov byte [ebp - 4], 5
movzx eax, byte [0x5afcb3]
push eax
lea eax, [ebp - 0x2c]
push eax
push ecx
lea eax, [ebp - 0x2bc]
push eax
lea ecx, [ebp - 0x2b4]
call fcn.00442af3
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 4
call fcn.00417360
push str.avformat_54.dll
lea ecx, [ebp - 0x2c]
call fcn.00417260
mov byte [ebp - 4], 6
movzx eax, byte [0x5afcb3]
push eax
lea eax, [ebp - 0x2c]
push eax
push ecx
lea eax, [ebp - 0x2bc]
push eax
lea ecx, [ebp - 0x2b4]
call fcn.00442af3
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 4
call fcn.00417360
push str.avutil_51.dll
lea ecx, [ebp - 0x2c]
call fcn.00417260
mov byte [ebp - 4], 7
movzx eax, byte [0x5afcb3]
push eax
lea eax, [ebp - 0x2c]
push eax
push ecx
lea eax, [ebp - 0x2bc]
push eax
lea ecx, [ebp - 0x2b4]
call fcn.00442af3
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 4
call fcn.00417360
push str.chrome.dll
lea ecx, [ebp - 0x2c]
call fcn.00417260
mov byte [ebp - 4], 8
movzx eax, byte [0x5afcb3]
push eax
lea eax, [ebp - 0x2c]
push eax
push ecx
lea eax, [ebp - 0x2bc]
push eax
lea ecx, [ebp - 0x2b4]
call fcn.00442af3
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2c]
call fcn.00417360
push str.d3dcompiler_43.dll
lea ecx, [ebp - 0x2c]
call fcn.00417260
mov byte [ebp - 4], 9
movzx eax, byte [0x5afcb3]
push eax
lea eax, [ebp - 0x2c]
push eax
push ecx
lea eax, [ebp - 0x2bc]
push eax
lea ecx, [ebp - 0x2b4]
call fcn.00442af3
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 4
call fcn.00417360
push str.d3dx9_43.dll
lea ecx, [ebp - 0x2c]
call fcn.00417260
mov byte [ebp - 4], 0xa
movzx eax, byte [0x5afcb3]
push eax
lea eax, [ebp - 0x2c]
push eax
push ecx
lea eax, [ebp - 0x2bc]
push eax
lea ecx, [ebp - 0x2b4]
call fcn.00442af3
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 4
call fcn.00417360
push str.gcswf32.dll
lea ecx, [ebp - 0x2c]
call fcn.00417260
mov byte [ebp - 4], 0xb
movzx eax, byte [0x5afcb3]
push eax
lea eax, [ebp - 0x2c]
push eax
push ecx
lea eax, [ebp - 0x2bc]
push eax
lea ecx, [ebp - 0x2b4]
call fcn.00442af3
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 4
call fcn.00417360
push str.icudt.dll
lea ecx, [ebp - 0x2c]
call fcn.00417260
mov byte [ebp - 4], 0xc
movzx eax, byte [0x5afcb3]
push eax
lea eax, [ebp - 0x2c]
push eax
push ecx
lea eax, [ebp - 0x2bc]
push eax
lea ecx, [ebp - 0x2b4]
call fcn.00442af3
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 4
call fcn.00417360
push str.kBrowserUpgrade2.dll
lea ecx, [ebp - 0x2c]
call fcn.00417260
mov byte [ebp - 4], 0xd
movzx eax, byte [0x5afcb3]
push eax
lea eax, [ebp - 0x2c]
push eax
push ecx
lea eax, [ebp - 0x2bc]
push eax
lea ecx, [ebp - 0x2b4]
call fcn.00442af3
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 4
call fcn.00417360
push str.kBUpdateHelper.dll
lea ecx, [ebp - 0x2c]
call fcn.00417260
mov byte [ebp - 4], 0xe
movzx eax, byte [0x5afcb3]
push eax
lea eax, [ebp - 0x2c]
push eax
push ecx
lea eax, [ebp - 0x2bc]
push eax
lea ecx, [ebp - 0x2b4]
call fcn.00442af3
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 4
call fcn.00417360
push str.ktoolupd.dll
lea ecx, [ebp - 0x2c]
call fcn.00417260
mov byte [ebp - 4], 0xf
movzx eax, byte [0x5afcb3]
push eax
lea eax, [ebp - 0x2c]
push eax
push ecx
lea eax, [ebp - 0x2bc]
push eax
lea ecx, [ebp - 0x2b4]
call fcn.00442af3
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 4
call fcn.00417360
push str.libEGL.dll
lea ecx, [ebp - 0x2c]
call fcn.00417260
mov byte [ebp - 4], 0x10
movzx eax, byte [0x5afcb3]
push eax
lea eax, [ebp - 0x2c]
push eax
push ecx
lea eax, [ebp - 0x2bc]
push eax
lea ecx, [ebp - 0x2b4]
call fcn.00442af3
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 4
call fcn.00417360
push str.libGLESv2.dll
lea ecx, [ebp - 0x2c]
call fcn.00417260
mov byte [ebp - 4], 0x11
movzx eax, byte [0x5afcb3]
push eax
lea eax, [ebp - 0x2c]
push eax
push ecx
lea eax, [ebp - 0x2bc]
push eax
lea ecx, [ebp - 0x2b4]
call fcn.00442af3
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 4
call fcn.00417360
push str.metro_driver.dll
lea ecx, [ebp - 0x2c]
call fcn.00417260
mov byte [ebp - 4], 0x12
movzx eax, byte [0x5afcb3]
push eax
lea eax, [ebp - 0x2c]
push eax
push ecx
lea eax, [ebp - 0x2bc]
push eax
lea ecx, [ebp - 0x2b4]
call fcn.00442af3
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 4
call fcn.00417360
push str.MouseGesture.dll
lea ecx, [ebp - 0x2c]
call fcn.00417260
mov byte [ebp - 4], 0x13
movzx eax, byte [0x5afcb3]
push eax
lea eax, [ebp - 0x2c]
push eax
push ecx
lea eax, [ebp - 0x2bc]
push eax
lea ecx, [ebp - 0x2b4]
call fcn.00442af3
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 4
call fcn.00417360
push str.uplive.dll
lea ecx, [ebp - 0x2c]
call fcn.00417260
mov byte [ebp - 4], 0x14
movzx eax, byte [0x5afcb3]
push eax
lea eax, [ebp - 0x2c]
push eax
push ecx
lea eax, [ebp - 0x2bc]
push eax
lea ecx, [ebp - 0x2b4]
call fcn.00442af3
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 4
call fcn.00417360
push str.xinput1_3.dll
lea ecx, [ebp - 0x2c]
call fcn.00417260
mov byte [ebp - 4], 0x15
movzx eax, byte [0x5afcb3]
push eax
lea eax, [ebp - 0x2c]
push eax
push ecx
lea eax, [ebp - 0x2bc]
push eax
lea ecx, [ebp - 0x2b4]
call fcn.00442af3
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 4
call fcn.00417360
push str.zlib1.dll
lea ecx, [ebp - 0x2c]
call fcn.00417260
mov byte [ebp - 4], 0x16
movzx eax, byte [0x5afcb3]
push eax
lea eax, [ebp - 0x2c]
push eax
push ecx
lea eax, [ebp - 0x2bc]
push eax
lea ecx, [ebp - 0x2b4]
call fcn.00442af3
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 4
call fcn.00417360
push esi
lea ecx, [ebp - 0x44]
call fcn.00417260
push 0x55c5b8
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x17
call fcn.004173e0
push 0x24c
lea eax, [ebp - 0x2a8]
mov dword [ebp - 0x2ac], ebx
push ebx
push eax
call fcn.004f28b0
add esp, 0xc
lea ecx, [ebp - 0x2ac]
cmp dword [ebp - 0x30], 8
lea eax, [ebp - 0x44]
cmovae eax, dword [ebp - 0x44]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov edi, eax
cmp edi, 0xffffffff
je 0x4427ee
test byte [ebp - 0x2ac], 0x10
jne 0x4427d1
mov ecx, 0x559ff0
lea eax, [ebp - 0x280]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4426d7
test dx, dx
je 0x4426d3
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4426d7
add eax, 4
add ecx, 4
test dx, dx
jne 0x4426b1
mov eax, ebx
jmp 0x4426dc
sbb eax, eax
or eax, 1
test eax, eax
je 0x4427d1
mov ecx, 0x559ff4
lea eax, [ebp - 0x280]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x442715
test dx, dx
je 0x442711
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x442715
add eax, 4
add ecx, 4
test dx, dx
jne 0x4426ef
mov eax, ebx
jmp 0x44271a
sbb eax, eax
or eax, 1
test eax, eax
je 0x4427d1
lea ecx, [ebp - 0x280]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, bx
jne 0x44272b
sub ecx, edx
sar ecx, 1
cmp ecx, 4
jbe 0x4427d1
lea eax, [ebp - 0x288]
lea eax, [eax + ecx*2]
push str..dll
push eax
call fcn.004f3482
pop ecx
pop ecx
test eax, eax
jne 0x4427d1
lea eax, [ebp - 0x280]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00417260
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x18
mov esi, dword [ebp - 0x2b4]
lea ecx, [ebp - 0x2b4]
push eax
lea eax, [ebp - 0x2b8]
push eax
call fcn.004428ac
lea ecx, [ebp - 0x2c]
cmp dword [eax], esi
mov byte [ebp - 4], 0x17
sete bl
call fcn.00417360
test bl, bl
je 0x4427cf
lea eax, [ebp - 0x280]
push eax
lea ecx, [ebp - 0x5c]
call fcn.00417260
mov ecx, dword [ebp - 0x2c0]
lea eax, [ebp - 0x5c]
push eax
mov byte [ebp - 4], 0x19
call fcn.004174e0
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x17
call fcn.00417360
xor ebx, ebx
lea eax, [ebp - 0x2ac]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x442699
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 4
call fcn.00417360
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2b4]
call fcn.00442883
call fcn.004f1d61
ret 8