Function at 0x4fc2b0
Capabilities:
Enumerate files on windows

Disassembly:
push 0x630
mov eax, 0x6a38c2
call fcn.0064d018
mov edi, edx
mov ebx, ecx
mov dword [ebp - 0x63c], ebx
mov esi, dword [ebp + 8]
mov ecx, edi
call fcn.004fbf18
test al, al
je 0x4fc51c
mov ecx, ebx
call fcn.00415451
xor ebx, ebx
mov dword [ebp - 0x44], 7
xor eax, eax
mov dword [ebp - 0x48], ebx
mov word [ebp - 0x58], ax
push edi
lea ecx, [ebp - 0x58]
mov dword [ebp - 4], ebx
call fcn.0040d37a
xor eax, eax
mov dword [ebp - 0x30], ebx
push 0x6d9558
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
call fcn.0040d510
push 1
lea edx, [ebp - 0x40]
mov byte [ebp - 4], 1
mov ecx, edi
call fcn.0040bdd3
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0
mov bl, al
call fcn.0040d475
test bl, bl
jne 0x4fc383
and dword [ebp - 0x18], 0
lea ecx, [ebp - 0x28]
xor eax, eax
mov dword [ebp - 0x14], 7
push 0x6d9558
mov word [ebp - 0x28], ax
call fcn.0040d510
mov byte [ebp - 4], 2
lea eax, [ebp - 0x28]
cmp dword [ebp - 0x14], 8
lea ecx, [ebp - 0x58]
push dword [ebp - 0x18]
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.0040d537
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.0040d475
cmp dword [esi + 0x14], 8
mov eax, esi
jb 0x4fc38d
mov eax, dword [esi]
push dword [esi + 0x10]
lea ecx, [ebp - 0x58]
push eax
call fcn.0040d537
cmp dword [ebp - 0x44], 8
lea ecx, [ebp - 0x2a8]
lea eax, [ebp - 0x58]
cmovae eax, dword [ebp - 0x58]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, eax
cmp esi, 0xffffffff
jne 0x4fc3e9
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 3
je 0x4fc50c
cmp eax, 2
je 0x4fc50c
push str.directory_search_failed
push eax
push 0xf
lea ecx, [ebp - 0x638]
call fcn.004fcbac
jmp 0x4fc52a
push 0x6db5a8
lea eax, [ebp - 0x27c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x4fc4ef
push 0x6dba80
lea eax, [ebp - 0x27c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x4fc4ef
test byte [ebp - 0x2a8], 0x10
je 0x4fc4ef
and dword [ebp - 0x30], 0
lea ecx, [ebp - 0x40]
and dword [ebp - 0x2c], 0
push edi
call fcn.0040d595
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x28]
and dword [ebp - 0x18], 0
xor eax, eax
push 0x6d9558
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
call fcn.0040d510
push 1
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x40]
call fcn.0040bdd3
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 3
mov bl, al
call fcn.0040d475
test bl, bl
jne 0x4fc4c5
and dword [ebp - 0x18], 0
lea ecx, [ebp - 0x28]
xor eax, eax
mov dword [ebp - 0x14], 7
push 0x6d9558
mov word [ebp - 0x28], ax
call fcn.0040d510
mov byte [ebp - 4], 5
lea eax, [ebp - 0x28]
cmp dword [ebp - 0x14], 8
lea ecx, [ebp - 0x40]
push dword [ebp - 0x18]
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.0040d537
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 3
call fcn.0040d475
lea eax, [ebp - 0x27c]
push eax
lea ecx, [ebp - 0x40]
call fcn.0040d32d
mov ecx, dword [ebp - 0x63c]
lea eax, [ebp - 0x40]
push eax
call fcn.0043420b
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0
call fcn.0040d475
lea eax, [ebp - 0x2a8]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x4fc3e9
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
lea ecx, [ebp - 0x58]
call fcn.0040d475
call fcn.0064cfc2
ret 4
push edi
push ecx
push ecx
lea ecx, [ebp - 0x638]
call fcn.004fcb90
push 0x811494
lea eax, [ebp - 0x638]
push eax
call fcn.0064f293
int3