Function at 0x42f070
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x58e21d
mov eax, dword fs:[0]
push eax
sub esp, 0xb5c
mov eax, dword [0x608190]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0x8d8]
call fcn.0042d030
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x8d8]
push ecx
call fcn.00430180
add esp, 4
movzx edx, al
test edx, edx
jne 0x42f0d3
mov dword [ebp - 0xb58], 1
jmp 0x42f0dd
mov dword [ebp - 0xb58], 0
mov al, byte [ebp - 0xb58]
mov byte [ebp - 0xb2c], al
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8d8]
call fcn.0042d070
movzx ecx, byte [ebp - 0xb2c]
test ecx, ecx
je 0x42f10d
xor al, al
jmp 0x42f599
mov edx, dword [ebp + 8]
push edx
lea ecx, [ebp - 0x8c0]
call fcn.0042d030
mov dword [ebp - 4], 1
lea eax, [ebp - 0x8c0]
push eax
call fcn.0042ee40
add esp, 4
mov dword [ebp - 0xb5c], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8c0]
call fcn.0042d070
mov ecx, dword [ebp - 0xb5c]
mov dword [ebp - 0xb40], ecx
cmp dword [ebp - 0xb40], 0xffffffff
je 0x42f173
cmp dword [ebp - 0xb40], 0
je 0x42f17a
cmp dword [ebp - 0xb40], 1
je 0x42f17c
jmp 0x42f1ca
xor al, al
jmp 0x42f599
jmp 0x42f1d1
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
mov dword [ebp - 0xb60], eax
mov eax, dword [ebp - 0xb60]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
push 0x5e1550
push 0x208
lea edx, [ebp - 0x830]
push edx
call fcn.0055c303
add esp, 0x14
lea eax, [ebp - 0x830]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0042f040
add esp, 8
mov al, 1
jmp 0x42f599
xor al, al
jmp 0x42f599
mov edx, dword [ebp + 0xc]
push edx
lea ecx, [ebp - 0x890]
call fcn.0042d030
mov dword [ebp - 4], 2
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x878]
call fcn.0042d030
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x890]
push ecx
lea edx, [ebp - 0x848]
push edx
call fcn.0042efa0
add esp, 8
mov byte [ebp - 4], 4
lea eax, [ebp - 0x878]
push eax
lea ecx, [ebp - 0x860]
push ecx
call fcn.0042efa0
add esp, 8
mov byte [ebp - 4], 5
cmp dword [ebp - 0xb5c], 0
jne 0x42f291
lea edx, [ebp - 0x860]
push edx
lea eax, [ebp - 0x8a8]
push eax
call fcn.0042ee80
add esp, 8
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x8a8]
push ecx
lea ecx, [ebp - 0x848]
call fcn.00412980
push 0x5e155c
lea ecx, [ebp - 0x848]
call fcn.004129a0
lea edx, [ebp - 0x848]
push edx
call fcn.00430180
add esp, 4
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x8a8]
call fcn.0042d070
lea ecx, [ebp - 0x860]
call fcn.0042e3d0
push eax
push 0x5e1560
push 0x208
lea eax, [ebp - 0x628]
push eax
call fcn.0055c303
add esp, 0x10
lea ecx, [ebp - 0xb28]
push ecx
lea edx, [ebp - 0x628]
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0xb44], eax
cmp dword [ebp - 0xb44], 0xffffffff
jne 0x42f32a
mov byte [ebp - 0xb2a], 0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x860]
call fcn.0042d070
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x848]
call fcn.0042d070
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x878]
call fcn.0042d070
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x890]
call fcn.0042d070
mov al, byte [ebp - 0xb2a]
jmp 0x42f599
mov byte [ebp - 0xb29], 1
mov dword [ebp - 0xb3c], 0x5e156c
lea eax, [ebp - 0xafc]
mov dword [ebp - 0xb34], eax
mov ecx, dword [ebp - 0xb34]
mov dx, word [ecx]
mov word [ebp - 0xb4a], dx
mov eax, dword [ebp - 0xb3c]
cmp dx, word [eax]
jne 0x42f3ad
cmp word [ebp - 0xb4a], 0
je 0x42f3a1
mov ecx, dword [ebp - 0xb34]
mov dx, word [ecx + 2]
mov word [ebp - 0xb48], dx
mov eax, dword [ebp - 0xb3c]
cmp dx, word [eax + 2]
jne 0x42f3ad
add dword [ebp - 0xb34], 4
add dword [ebp - 0xb3c], 4
cmp word [ebp - 0xb48], 0
jne 0x42f347
mov dword [ebp - 0xb50], 0
jmp 0x42f3b8
sbb ecx, ecx
or ecx, 1
mov dword [ebp - 0xb50], ecx
mov edx, dword [ebp - 0xb50]
mov dword [ebp - 0xb64], edx
cmp dword [ebp - 0xb64], 0
je 0x42f46d
mov dword [ebp - 0xb38], 0x5e1570
lea eax, [ebp - 0xafc]
mov dword [ebp - 0xb30], eax
mov ecx, dword [ebp - 0xb30]
mov dx, word [ecx]
mov word [ebp - 0xb4c], dx
mov eax, dword [ebp - 0xb38]
cmp dx, word [eax]
jne 0x42f44d
cmp word [ebp - 0xb4c], 0
je 0x42f441
mov ecx, dword [ebp - 0xb30]
mov dx, word [ecx + 2]
mov word [ebp - 0xb46], dx
mov eax, dword [ebp - 0xb38]
cmp dx, word [eax + 2]
jne 0x42f44d
add dword [ebp - 0xb30], 4
add dword [ebp - 0xb38], 4
cmp word [ebp - 0xb46], 0
jne 0x42f3e7
mov dword [ebp - 0xb54], 0
jmp 0x42f458
sbb ecx, ecx
or ecx, 1
mov dword [ebp - 0xb54], ecx
mov edx, dword [ebp - 0xb54]
mov dword [ebp - 0xb68], edx
cmp dword [ebp - 0xb68], 0
jne 0x42f472
jmp 0x42f51f
lea eax, [ebp - 0xafc]
push eax
lea ecx, [ebp - 0x860]
call fcn.0042e3d0
push eax
push 0x5e1578
push 0x208
lea ecx, [ebp - 0x218]
push ecx
call fcn.0055c303
add esp, 0x14
lea edx, [ebp - 0xafc]
push edx
lea ecx, [ebp - 0x848]
call fcn.0042e3d0
push eax
push str._s_s
push 0x208
lea eax, [ebp - 0x420]
push eax
call fcn.0055c303
add esp, 0x14
mov ecx, dword [ebp - 0xb28]
and ecx, 0x10
je 0x42f4fb
lea edx, [ebp - 0x420]
push edx
lea eax, [ebp - 0x218]
push eax
call fcn.0042f070
add esp, 8
movzx ecx, al
test ecx, ecx
jne 0x42f4f9
mov byte [ebp - 0xb29], 0
jmp 0x42f51f
lea edx, [ebp - 0x420]
push edx
lea eax, [ebp - 0x218]
push eax
call fcn.0042f040
add esp, 8
movzx ecx, al
test ecx, ecx
jne 0x42f51f
mov byte [ebp - 0xb29], 0
lea edx, [ebp - 0xb28]
push edx
mov eax, dword [ebp - 0xb44]
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x42f331
mov ecx, dword [ebp - 0xb44]
push ecx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov dl, byte [ebp - 0xb29]
mov byte [ebp - 0xb2b], dl
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x860]
call fcn.0042d070
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x848]
call fcn.0042d070
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x878]
call fcn.0042d070
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x890]
call fcn.0042d070
mov al, byte [ebp - 0xb2b]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00558807
mov esp, ebp
pop ebp
ret