Function at 0x42e6a8
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x3ec
mov eax, dword [ebp + 8]
mov ecx, eax
mov edx, dword [ebp + 0xc]
mov dword [ebp - 0x48], eax
mov eax, edx
mov byte [ebp - 0x49], 0
mov esi, dword [ebp - 0x48]
mov edi, esp
mov dword [edi], esi
mov dword [ebp - 0x380], edx
mov dword [ebp - 0x384], ecx
mov dword [ebp - 0x388], eax
call fcn.00421e8c
mov dword [ebp - 0x28], 0x550e90
mov dword [ebp - 0x24], 0x5586d8
mov eax, ebp
mov dword [ebp - 0x20], eax
mov eax, esp
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x20], 0x42ebe0
mov dword [ebp - 0x3c], 1
lea eax, [ebp - 0x44]
call fcn.00551af9
mov eax, esp
mov ecx, dword [ebp - 0x380]
mov dword [eax + 4], ecx
lea edx, [ebp - 0x84]
mov dword [eax], edx
call fcn.0042db6c
jmp 0x42e72b
mov dword [ebp - 0x3c], 2
mov eax, esp
lea ecx, [ebp - 0x84]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0x68]
mov dword [eax], ecx
mov dword [eax + 8], str._.
call fcn.0042e44c
jmp 0x42e750
mov eax, esp
lea ecx, [ebp - 0x84]
mov dword [eax], ecx
call fcn.0040380c
mov eax, esp
lea ecx, [ebp - 0x68]
mov dword [eax], ecx
call fcn.00403828
mov dword [ebp - 0x3c], 3
mov ecx, esp
lea edx, [ebp - 0x2dc]
mov dword [ecx + 4], edx
mov dword [ecx], eax
call sub.KERNEL32.DLL_FindFirstFileW
sub esp, 8
mov dword [ebp - 0x38c], eax
jmp 0x42e78f
mov eax, 0xffffffff
mov ecx, dword [ebp - 0x38c]
mov dword [ebp - 0x2e0], ecx
cmp dword [ebp - 0x2e0], eax
je 0x42eb71
jmp 0x42e7ae
mov eax, dword [ebp - 0x2dc]
and eax, 0x10
cmp eax, 0
je 0x42eb13
lea eax, [ebp - 0x2b0]
mov dword [ebp - 0x3c], 4
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0x55849a
call fcn.00541130
mov dword [ebp - 0x390], eax
jmp 0x42e7e5
mov eax, dword [ebp - 0x390]
cmp eax, 0
je 0x42eb11
lea eax, [ebp - 0x2b0]
mov dword [ebp - 0x3c], 5
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0x55849e
call fcn.00541130
mov dword [ebp - 0x394], eax
jmp 0x42e819
mov eax, dword [ebp - 0x394]
cmp eax, 0
je 0x42eb11
lea eax, [ebp - 0x2b0]
mov dword [ebp - 0x3c], 6
mov ecx, esp
mov dword [ecx + 4], eax
lea eax, [ebp - 0x2fc]
mov dword [ecx], eax
call fcn.0042d654
jmp 0x42e849
mov dword [ebp - 0x3c], 7
mov eax, esp
mov ecx, dword [ebp - 0x388]
mov dword [eax + 4], ecx
lea edx, [ebp - 0x350]
mov dword [eax], edx
call fcn.0042db6c
jmp 0x42e86a
mov dword [ebp - 0x3c], 8
mov eax, esp
lea ecx, [ebp - 0x350]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0x334]
mov dword [eax], ecx
mov dword [eax + 8], 0x558496
call fcn.0042e44c
jmp 0x42e892
mov dword [ebp - 0x3c], 9
mov eax, esp
lea ecx, [ebp - 0x2fc]
mov dword [eax + 8], ecx
lea ecx, [ebp - 0x334]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0x318]
mov dword [eax], ecx
call fcn.0042d728
jmp 0x42e8bc
mov eax, esp
lea ecx, [ebp - 0x334]
mov dword [eax], ecx
call fcn.0040380c
mov eax, esp
lea ecx, [ebp - 0x350]
mov dword [eax], ecx
call fcn.0040380c
mov dword [ebp - 0x3c], 0xa
mov eax, esp
lea ecx, [ebp - 0x318]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0x37c]
mov dword [eax], ecx
call fcn.0042d950
jmp 0x42e8fb
mov eax, esp
lea ecx, [ebp - 0x37c]
mov dword [eax], ecx
call fcn.004223d4
mov dword [ebp - 0x3c], 0xb
mov ecx, esp
mov dword [ecx + 4], eax
lea eax, [ebp - 0x36c]
mov dword [ecx], eax
call fcn.004043c0
jmp 0x42e925
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x3c], 0xc
mov ecx, esp
lea edx, [ebp - 0x36c]
mov dword [ecx + 4], edx
mov dword [ecx], eax
call fcn.0042e4a0
jmp 0x42e943
lea eax, [ebp - 0x36c]
mov dword [esp], eax
call fcn.00405890
lea eax, [ebp - 0x37c]
mov dword [esp], eax
call fcn.00422814
lea eax, [ebp - 0x318]
mov dword [esp], eax
call fcn.0040380c
lea eax, [ebp - 0x2fc]
mov dword [esp], eax
call fcn.0040380c
jmp 0x42eb11
jmp 0x42eb13
jmp 0x42eb15
mov eax, dword [ebp - 0x2e0]
mov dword [ebp - 0x3c], 0xd
mov ecx, esp
lea edx, [ebp - 0x2dc]
mov dword [ecx + 4], edx
mov dword [ecx], eax
call sub.KERNEL32.DLL_FindNextFileW
sub esp, 8
mov dword [ebp - 0x3e0], eax
jmp 0x42eb3f
mov eax, dword [ebp - 0x3e0]
cmp eax, 0
jne 0x42e7ae
mov eax, dword [ebp - 0x2e0]
mov dword [ebp - 0x3c], 0xe
mov ecx, esp
mov dword [ecx], eax
call sub.KERNEL32.DLL_FindClose
sub esp, 4
mov dword [ebp - 0x3e4], eax
jmp 0x42eb6f
jmp 0x42eb71
lea eax, [ebp - 0x68]
mov byte [ebp - 0x49], 1
mov dword [esp], eax
call fcn.0040380c
test byte [ebp - 0x49], 1
jne 0x42eba0
jmp 0x42eb95
mov eax, dword [ebp - 0x48]
mov dword [esp], eax
call fcn.00416150
jmp 0x42ebaf
lea eax, [ebp - 0x44]
mov dword [esp], eax
call fcn.00551b1a
mov eax, dword [ebp - 0x384]
add esp, 0x3ec
pop esi
pop edi
pop ebx
pop ebp
ret