Function at 0x72a63470
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x4a4
mov eax, dword [str._____.SHD]
mov dword [ebp - 0x47e], eax
mov eax, dword [0x72a7782e]
mov dword [ebp - 0x47a], eax
mov eax, dword [0x72a77832]
mov dword [ebp - 0x476], eax
mov eax, dword [0x72a77836]
mov dword [ebp - 0x472], eax
mov eax, dword [0x72a7783a]
mov dword [ebp - 0x46e], eax
movzx eax, word [0x72a7783e]
mov word [ebp - 0x46a], ax
test byte [0x72a765e8], 8
jne 0x72a636c0
mov dword [esp + 0xc], sym._DllFreeSplMem_4
lea esi, [ebp - 0x260]
mov dword [esp + 8], sym.__GlobalJobListCompareRoutine_8
mov dword [esp + 4], sym._DllAllocSplMem_4
mov dword [esp], 0x72a7c020
mov dword [0x72a7c0b8], 0
call sym._InitializeSkiplist
mov eax, dword [0x72a7c2e8]
mov dword [esp + 4], 0x72a7c300
lea ebx, [eax + eax]
lea eax, [ebp - 0x468]
mov dword [esp + 8], ebx
mov dword [esp], eax
call sym._memcpy
mov eax, dword [ebp - 0x47e]
mov dword [esp + 4], esi
mov dword [ebp + ebx - 0x468], eax
mov eax, dword [ebp - 0x47a]
mov dword [ebp + ebx - 0x464], eax
mov eax, dword [ebp - 0x476]
mov dword [ebp + ebx - 0x460], eax
mov eax, dword [ebp - 0x472]
mov dword [ebp + ebx - 0x45c], eax
mov eax, dword [ebp - 0x46e]
mov dword [ebp + ebx - 0x458], eax
movzx eax, word [ebp - 0x46a]
mov word [ebp + ebx - 0x454], ax
lea eax, [ebp - 0x468]
mov dword [esp], eax
call sym._FindFirstFileW_8
sub esp, 8
mov ebx, eax
cmp eax, 0xffffffff
je 0x72a636a7
test byte [ebp - 0x260], 0x10
jne 0x72a63670
lea eax, [ebp - 0x484]
mov dword [esp + 8], 0xa
mov dword [esp + 4], eax
lea eax, [ebp - 0x234]
mov dword [esp], eax
call sym._wcstoul
mov edx, eax
lea eax, [eax - 1]
mov dword [ebp - 0x48c], edx
cmp eax, 0x1869e
ja 0x72a63670
mov eax, dword [ebp - 0x484]
mov dword [esp + 4], str..SHD
mov dword [esp], eax
call dword [sym.imp.msvcrt.dll__wcsicmp]
mov edi, eax
test eax, eax
jne 0x72a63670
mov edx, dword [ebp - 0x48c]
lea eax, [ebp - 0x468]
mov dword [esp], 0x72a777dc
mov dword [esp + 8], eax
mov dword [esp + 4], edx
call sym._GetJobFilePath
lea eax, [ebp - 0x468]
mov dword [esp], eax
call sym._ReadJobShadowFile
test eax, eax
je 0x72a63670
mov dword [esp + 4], eax
mov dword [esp], 0x72a7c020
mov dword [ebp - 0x48c], eax
call sym._InsertElementSkiplist
mov edx, dword [ebp - 0x48c]
test eax, eax
je 0x72a636f9
mov dword [esp + 4], edx
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x48c], edx
add eax, 0x28
mov dword [esp], eax
call sym._InsertElementSkiplist
mov edx, dword [ebp - 0x48c]
test eax, eax
je 0x72a63709
mov dword [esp + 4], esi
mov dword [esp], ebx
call sym._FindNextFileW_8
sub esp, 8
test eax, eax
jne 0x72a63594
mov edi, 1
xor esi, esi
test ebx, ebx
jne 0x72a636ae
mov dword [esp], esi
call sym._SetLastError_4
mov eax, edi
sub esp, 4
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov edi, 1
xor esi, esi
mov dword [esp], ebx
call sym._FindClose_4
sub esp, 4
jmp 0x72a63692
mov dword [esp + 0x14], str.InitializeGlobalJobList___n
mov dword [esp + 0x10], 0xae
mov dword [esp + 0xc], str.InitializeGlobalJobList
mov dword [esp + 8], 0x72a77301
mov dword [esp + 4], 0x72a765e8
mov dword [esp], 3
call sym._ros_dbg_log
jmp 0x72a634ce
test byte [0x72a765e8], 2
jne 0x72a6372a
mov esi, 8
jmp 0x72a6368e
test byte [0x72a765e8], 2
je 0x72a63702
mov eax, dword [edx]
mov dword [esp + 0x14], str.InsertElementSkiplist_failed_for_job__lu_for_the_Printers_Job_List__n
mov dword [esp + 0x10], 0xe5
mov dword [esp + 0x18], eax
jmp 0x72a63740
mov eax, dword [edx]
mov dword [esp + 0x14], str.InsertElementSkiplist_failed_for_job__lu_for_the_GlobalJobList__n
mov dword [esp + 0x10], 0xdd
mov dword [esp + 0x18], eax
mov dword [esp + 0xc], str.InitializeGlobalJobList
mov dword [esp + 8], 0x72a77301
mov dword [esp + 4], 0x72a765e8
mov dword [esp], 1
call sym._ros_dbg_log
jmp 0x72a63702