Function at 0x42873b
Capabilities:
Enumerate files on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x280
mov eax, dword [0x479b74]
xor eax, ebp
mov dword [ebp - 8], eax
mov ecx, dword [ebp + 8]
mov eax, edx
push ebx
push esi
mov dword [ebp - 0x270], ecx
xor ecx, ecx
push edi
or edi, 0xffffffff
mov dword [ebp - 0x26c], eax
mov dword [ebp - 0x27c], ecx
mov esi, ecx
mov dword [ebp - 0x278], ecx
mov dword [ebp - 0x274], ecx
mov dword [ebp - 0x260], esi
mov dword [ebp - 0x264], ecx
mov dword [ebp - 0x268], edi
test eax, eax
jne 0x4287a4
mov ecx, 0x80070057
mov ebx, ecx
call fcn.00427566
jmp 0x42896b
mov ecx, eax
call fcn.00428e2c
mov ebx, eax
test ebx, ebx
jns 0x4287b5
mov ecx, ebx
jmp 0x42879a
cmp dword [ebp - 0x270], esi
je 0x428793
mov ecx, dword [ebp - 0x26c]
lea eax, [ebp - 0x264]
push eax
push 0
mov edx, 0x40ae74
call fcn.004268f1
mov ebx, eax
test ebx, ebx
js 0x4287b1
push 0x250
lea eax, [ebp - 0x25c]
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0x25c]
push eax
push dword [ebp - 0x264]
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
push eax
lea ecx, [ebp - 0x268]
call fcn.00416a04
mov edi, dword [ebp - 0x268]
test edi, edi
je 0x428959
cmp edi, 0xffffffff
je 0x428959
mov ecx, 0x407ef8
lea eax, [ebp - 0x230]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x428859
test dx, dx
je 0x428855
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x428859
add eax, 4
add ecx, 4
test dx, dx
jne 0x428833
xor eax, eax
jmp 0x42885e
sbb eax, eax
or eax, 1
test eax, eax
je 0x4288ff
mov ecx, 0x407a68
lea eax, [ebp - 0x230]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x428897
test dx, dx
je 0x428893
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x428897
add eax, 4
add ecx, 4
test dx, dx
jne 0x428871
xor eax, eax
jmp 0x42889c
sbb eax, eax
or eax, 1
test eax, eax
je 0x4288ff
test byte [ebp - 0x25c], 0x10
jne 0x4288ff
test esi, esi
je 0x4288bb
mov ecx, esi
call fcn.00427347
and dword [ebp - 0x260], 0
mov ecx, dword [ebp - 0x26c]
lea eax, [ebp - 0x260]
push eax
push 0
lea edx, [ebp - 0x230]
call fcn.004268f1
mov ebx, eax
test ebx, ebx
js 0x42894a
lea eax, [ebp - 0x260]
push eax
push dword [ebp - 0x278]
lea ecx, [ebp - 0x27c]
call fcn.00428fa1
mov ebx, eax
test ebx, ebx
js 0x42894a
mov esi, dword [ebp - 0x260]
push 0x250
lea eax, [ebp - 0x25c]
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0x25c]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x428828
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x12
je 0x428959
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.0042754e
mov ebx, eax
jmp 0x4287b1
mov ecx, ebx
call fcn.00427566
mov esi, dword [ebp - 0x260]
jmp 0x42896b
mov ecx, dword [ebp - 0x270]
lea eax, [ebp - 0x27c]
push eax
call fcn.004272bf
mov ecx, ebx
call fcn.0042757e
test edi, edi
je 0x428982
cmp edi, 0xffffffff
je 0x428982
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [ebp - 0x264]
test eax, eax
je 0x428993
mov ecx, eax
call fcn.00427347
test esi, esi
je 0x42899e
mov ecx, esi
call fcn.00427347
push 0
lea ecx, [ebp - 0x27c]
call fcn.00429588
lea ecx, [ebp - 0x274]
call fcn.0041702b
mov ecx, dword [ebp - 8]
mov eax, ebx
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004729c0
leave
ret 4