Function at 0x42e451
Capabilities:
Enumerate files on windows

Disassembly:
push 0x6c0
mov eax, 0x52d670
call fcn.0049fba2
mov eax, dword [ebp + 8]
xor edi, edi
mov ecx, dword [ebp + 0x10]
mov esi, dword [ebp + 0x14]
mov dword [ebp - 0x674], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x67c], ecx
mov dword [ebp - 0x684], esi
mov dword [ebp - 0x680], eax
cmp dword [ebp + 0xc], edi
je 0x42e72d
test ecx, ecx
je 0x42e72d
test eax, eax
je 0x42e72d
push 0x208
lea eax, [ebp - 0x420]
push edi
push eax
call fcn.004c4160
add esp, 0xc
lea eax, [ebp - 0x420]
push dword [ebp + 0xc]
push 0x104
push eax
call fcn.0041bc76
push 0x5479a4
lea eax, [ebp - 0x420]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push 0x250
lea eax, [ebp - 0x670]
push edi
push eax
call fcn.004c4160
add esp, 0xc
lea eax, [ebp - 0x670]
push eax
lea eax, [ebp - 0x420]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x42e72d
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.004c4160
add esp, 0xc
lea eax, [ebp - 0x218]
push dword [ebp + 0xc]
push 0x104
push eax
call fcn.0041bc76
lea eax, [ebp - 0x644]
push eax
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea ecx, [ebp - 0x6b4]
call fcn.0042ee4c
and dword [ebp - 4], 0
lea ecx, [ebp - 0x6c0]
call fcn.0042ee4c
xor eax, eax
lea ecx, [ebp - 0x6a8]
inc eax
mov byte [ebp - 4], al
call fcn.0042ee4c
lea ecx, [ebp - 0x6cc]
mov byte [ebp - 4], 2
call fcn.0042ee4c
and dword [ebp - 0x678], 0
lea eax, [ebp - 0x678]
push eax
lea eax, [ebp - 0x6cc]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x6a8]
push eax
lea eax, [ebp - 0x6c0]
push eax
lea eax, [ebp - 0x6b4]
push eax
lea eax, [ebp - 0x218]
push eax
push dword [ebp - 0x674]
call fcn.0042d14c
add esp, 0x1c
lea ecx, [ebp - 0x69c]
call fcn.0042ee4c
lea ecx, [ebp - 0x690]
mov byte [ebp - 4], 4
call fcn.0042ee4c
mov eax, 0x104
mov byte [ebp - 4], 5
push eax
push eax
lea ecx, [ebp - 0x69c]
call fcn.0042f595
push eax
lea ecx, [ebp - 0x6b4]
call fcn.0042ef3d
push eax
call dword [sym.imp.KERNEL32.dll_GetShortPathNameW]
push 0xffffffffffffffff
lea ecx, [ebp - 0x69c]
call fcn.00430032
mov eax, 0x104
lea ecx, [ebp - 0x690]
push eax
push eax
call fcn.0042f595
push eax
push dword [ebp - 0x67c]
call dword [sym.imp.KERNEL32.dll_GetShortPathNameW]
push 0xffffffffffffffff
lea ecx, [ebp - 0x690]
call fcn.00430032
lea ecx, [ebp - 0x690]
call fcn.0042ef3d
push eax
lea ecx, [ebp - 0x69c]
call fcn.0042f097
test eax, eax
jne 0x42e6be
test esi, esi
je 0x42e674
push esi
lea ecx, [ebp - 0x6a8]
call fcn.0042f097
test eax, eax
jne 0x42e6be
push dword [ebp + 0x1c]
lea ecx, [ebp - 0x6a8]
push dword [ebp - 0x680]
call fcn.0042ef3d
push eax
lea ecx, [ebp - 0x6c0]
call fcn.0042ef3d
push eax
lea ecx, [ebp - 0x6b4]
call fcn.0042ef3d
push eax
lea eax, [ebp - 0x218]
push eax
push dword [ebp - 0x674]
call fcn.0042dcb1
add esp, 0x1c
test eax, eax
push 1
pop eax
cmovns edi, eax
lea eax, [ebp - 0x670]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
lea ecx, [ebp - 0x690]
mov esi, eax
call fcn.0042ee5d
lea ecx, [ebp - 0x69c]
call fcn.0042ee5d
lea ecx, [ebp - 0x6cc]
call fcn.0042ee5d
lea ecx, [ebp - 0x6a8]
call fcn.0042ee5d
lea ecx, [ebp - 0x6c0]
call fcn.0042ee5d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6b4]
call fcn.0042ee5d
test esi, esi
mov esi, dword [ebp - 0x684]
jne 0x42e50e
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, edi
jmp 0x42e732
mov eax, 0x80004005
call fcn.0049fb4c
ret