Function at 0x42ce60
Capabilities:
Enumerate files on windows
Get common file path

Disassembly:
mov eax, 0x1aa4
call fcn.004ac5b0
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0x1a9c], eax
mov eax, dword [esp + 0x1aac]
push ebx
push ebp
push esi
push edi
push 0x2808
push dword [0x4e6030]
mov dword [esp + 0x1c], edx
mov esi, ecx
mov dword [esp + 0x18], eax
call dword [sym.imp.USER32.dll_GetDlgItem]
mov ebx, eax
xor eax, eax
push 0x7fe
push eax
mov word [esp + 0x12b0], ax
lea eax, [esp + 0x12b2]
push eax
call fcn.0048fb10
add esp, 0xc
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x1abc]
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderLocation]
lea eax, [esp + 0x12a8]
push eax
push dword [esp + 0x1c]
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
push esi
lea eax, [esp + 0x12ac]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCatW]
lea eax, [esp + 0x12a8]
push eax
call fcn.00493613
add esp, 4
cmp eax, 0xffffffff
jne 0x42cf11
xor eax, eax
jmp 0x42d282
xor eax, eax
push 0x7fe
push eax
mov word [esp + 0xab0], ax
lea eax, [esp + 0xab2]
push eax
call fcn.0048fb10
add esp, 0xc
lea eax, [esp + 0x58]
push eax
push 0x4b358c
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov ebp, eax
cmp ebp, 0xffffffff
je 0x42d27d
lea eax, [esp + 0x58]
push eax
push ebp
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x42d276
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
mov esi, dword [sym.imp.SHLWAPI.dll_StrStrIW]
nop dword [eax]
lea eax, [esp + 0x58]
push eax
push ebp
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x42d276
push str.desktop.ini
lea eax, [esp + 0x88]
push eax
call esi
test eax, eax
jne 0x42cf70
push str..lnk
lea eax, [esp + 0x88]
push eax
call esi
push 0
test eax, eax
lea eax, [esp + 0xaac]
push eax
push 0x400
lea eax, [esp + 0x90]
push eax
je 0x42d139
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
push 0
push 0
push 0x1004
push ebx
mov dword [0x4d7c60], 0
call edi
mov dword [0x4d7c48], eax
xor eax, eax
push 0x7fe
push eax
mov word [esp + 0x2b0], ax
lea eax, [esp + 0x2b2]
push eax
mov dword [0x4d7c4c], 0
call fcn.0048fb10
add esp, 0xc
lea eax, [esp + 0xaa8]
lea esi, [esp + 0x2a8]
push 0x5c
push 0
push eax
call dword [sym.imp.SHLWAPI.dll_StrRChrW]
test eax, eax
je 0x42d056
movzx ecx, word [eax]
test cx, cx
je 0x42d04f
mov edx, esi
sub eax, edx
nop dword [eax]
mov word [esi], cx
add esi, 2
movzx ecx, word [eax + esi]
test cx, cx
jne 0x42d040
xor eax, eax
mov word [esi], ax
jmp 0x42d06c
lea eax, [esp + 0xaa8]
push eax
lea eax, [esp + 0x2ae]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyW]
push 0x4d7c44
push 0
push 0x104d
lea eax, [esp + 0x2b6]
push ebx
mov dword [0x4d7c58], eax
call edi
push 0
call dword [sym.imp.ole32.dll_OleInitialize]
mov esi, dword [sym.imp.KERNEL32.dll_SetErrorMode]
push 1
call esi
lea eax, [esp + 0x2a8]
push eax
lea edx, [esp + 0xaac]
call fcn.00477340
add esp, 4
mov dword [esp + 0x24], 1
lea eax, [esp + 0x2a8]
mov dword [esp + 0x30], eax
lea eax, [esp + 0x1c]
push eax
push dword [0x4d7c48]
push 0x1074
push ebx
call edi
mov eax, dword [esp + 0x10]
mov dword [esp + 0x30], eax
lea eax, [esp + 0x1c]
push eax
push dword [0x4d7c48]
mov dword [esp + 0x2c], 2
push 0x1074
push ebx
call edi
cmp dword [esp + 0x14], 0
mov ecx, 0x2000
mov eax, 0x1000
mov dword [esp + 0x2c], 0xf000
cmovne eax, ecx
mov dword [esp + 0x28], eax
lea eax, [esp + 0x1c]
push eax
push dword [0x4d7c48]
push 0x102b
push ebx
call edi
push 0
call esi
call dword [sym.imp.ole32.dll_OleUninitialize]
jmp 0x42cf66
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
push 0
push 0
push 0x1004
push ebx
mov dword [0x4d7c60], 0
call edi
mov dword [0x4d7c48], eax
xor eax, eax
push 0x7fe
push eax
mov word [esp + 0x2b0], ax
lea eax, [esp + 0x2b2]
push eax
mov dword [0x4d7c4c], 0
call fcn.0048fb10
add esp, 0xc
lea eax, [esp + 0xaa8]
lea esi, [esp + 0x2a8]
push 0x5c
push 0
push eax
call dword [sym.imp.SHLWAPI.dll_StrRChrW]
test eax, eax
je 0x42d1c6
movzx ecx, word [eax]
test cx, cx
je 0x42d1bf
mov edx, esi
sub eax, edx
nop dword [eax]
mov word [esi], cx
add esi, 2
movzx ecx, word [eax + esi]
test cx, cx
jne 0x42d1b0
xor eax, eax
mov word [esi], ax
jmp 0x42d1dc
lea eax, [esp + 0xaa8]
push eax
lea eax, [esp + 0x2ae]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyW]
push 0x4d7c44
push 0
push 0x104d
lea eax, [esp + 0x2b6]
push ebx
mov dword [0x4d7c58], eax
call edi
lea eax, [esp + 0x2aa]
mov dword [esp + 0x24], 1
mov dword [esp + 0x30], eax
lea eax, [esp + 0x1c]
push eax
push dword [0x4d7c48]
push 0x1074
push ebx
call edi
mov eax, dword [esp + 0x10]
mov dword [esp + 0x30], eax
lea eax, [esp + 0x1c]
push eax
push dword [0x4d7c48]
mov dword [esp + 0x2c], 2
push 0x1074
push ebx
call edi
cmp dword [esp + 0x14], 0
mov ecx, 0x2000
mov eax, 0x1000
mov dword [esp + 0x2c], 0xf000
cmovne eax, ecx
mov dword [esp + 0x28], eax
lea eax, [esp + 0x1c]
push eax
push dword [0x4d7c48]
push 0x102b
push ebx
call edi
jmp 0x42cf66
push ebp
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, 1
mov ecx, dword [esp + 0x1aac]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0048ea75
add esp, 0x1aa4
ret