Function at 0x404e53
Capabilities:
Enumerate files on windows

Disassembly:
push 0x2f8
mov eax, 0x5b7be5
call fcn.00580f0a
mov ebx, ecx
mov dword [ebp - 0x2c4], ebx
mov eax, dword [ebp + 8]
mov dword [ebp - 0x2c0], eax
mov byte [ebp - 0x2a5], 0
xor edi, edi
mov dword [ebp - 4], edi
push ebx
lea esi, [ebp - 0x34]
call fcn.004081da
mov byte [ebp - 4], 1
push 0x672308
mov eax, esi
push eax
call fcn.00408208
mov dword [ebp - 0x2a4], edi
push 0x24c
push edi
lea eax, [ebp - 0x2a0]
push eax
call fcn.005783f0
add esp, 0xc
cmp dword [ebp - 0x1c], 8
mov eax, dword [ebp - 0x30]
jae 0x404ec0
lea eax, [ebp - 0x30]
lea ecx, [ebp - 0x2a4]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x2b0], eax
cmp eax, 0xffffffff
je 0x4050fa
push dword [sym.imp.KERNEL32.dll_FindClose]
push eax
lea esi, [ebp - 0x2c8]
call fcn.0040de02
mov byte [ebp - 4], 2
mov byte [ebp - 4], 3
cmp dword [ebp - 0x284], 0
jbe 0x4050ad
test byte [ebp - 0x2a4], 0x10
jne 0x4050ad
lea eax, [ebp - 0x2bc]
push eax
call fcn.0040512b
mov byte [ebp - 4], 4
and dword [ebp - 0x2bc], 0
lea edi, [ebx + 4]
cmp dword [ebx + 0x18], 8
jb 0x404f35
mov eax, dword [edi]
jmp 0x404f37
mov eax, edi
push eax
lea eax, [ebp - 0x2b8]
push eax
call fcn.00408606
lea eax, [ebp - 0x278]
push eax
lea eax, [ebp - 0x2b4]
push eax
call fcn.00408606
push ebx
lea esi, [ebp - 0x50]
call fcn.004081da
mov byte [ebp - 4], 5
push 0x670fe8
mov eax, esi
push eax
call fcn.00408208
lea eax, [ebp - 0x278]
push eax
mov eax, esi
push eax
call fcn.00408208
mov eax, esi
push eax
lea ecx, [ebp - 0x304]
call fcn.00404cc2
pop ecx
mov byte [ebp - 4], 6
cmp dword [eax + 0x18], 8
jb 0x404f9e
mov eax, dword [eax + 4]
jmp 0x404fa1
add eax, 4
push eax
lea eax, [ebp - 0x2ac]
push eax
call fcn.00408561
mov byte [ebp - 4], 8
push 0
push 1
lea esi, [ebp - 0x304]
call fcn.00409c0f
mov eax, dword [ebp - 0x2ac]
mov eax, dword [eax - 0xc]
test eax, eax
jne 0x405007
cmp dword [ebx + 0x18], 8
jb 0x404fd6
mov edi, dword [edi]
push edi
lea eax, [ebp - 0x2ac]
push eax
call fcn.00408606
push 0x670fe8
lea eax, [ebp - 0x2ac]
push eax
call fcn.00408624
lea eax, [ebp - 0x278]
push eax
lea eax, [ebp - 0x2ac]
push eax
call fcn.00408624
lea eax, [ebp - 0x2ac]
call fcn.004087b3
lea eax, [ebp - 0x2e8]
push eax
call fcn.0040518d
mov byte [ebp - 4], 9
lea eax, [ebp - 0x2ac]
lea edi, [ebp - 0x2e8]
call fcn.004085c5
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x2e4]
call fcn.004088dd
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x2cc], esp
push eax
mov ecx, edi
call fcn.00405206
mov byte [ebp - 4], 0xa
mov byte [ebp - 4], 9
mov edi, dword [ebp - 0x2c0]
call fcn.00407c72
add esp, 0x1c
mov byte [ebp - 4], 8
lea eax, [ebp - 0x2e8]
push eax
call fcn.004051d7
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2ac]
call fcn.004085a2
mov byte [ebp - 4], 4
push 0
push 1
lea esi, [ebp - 0x50]
call fcn.00409c0f
mov byte [ebp - 4], 3
lea eax, [ebp - 0x2bc]
push eax
call fcn.0040515e
mov dword [ebp - 4], 2
jmp 0x4050c9
lea eax, [ebp - 0x2a4]
push eax
push dword [ebp - 0x2b0]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x404ef3
mov byte [ebp - 0x2a5], 1
mov byte [ebp - 4], 1
lea esi, [ebp - 0x2c8]
call fcn.004047a2
mov byte [ebp - 4], 0
push 0
push 1
lea esi, [ebp - 0x34]
call fcn.00409c0f
or dword [ebp - 4], 0xffffffff
mov al, byte [ebp - 0x2a5]
call fcn.00580f66
ret