Function at 0x4741c0
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x78
mov eax, dword [0x4e44b4]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
mov esi, ecx
mov dword [ebp - 0x40], eax
jmp 0x4741e0
mov al, byte [esi]
xor ebx, ebx
test al, al
jne 0x47435f
cmp dword [esi + 0x2a8], ebx
je 0x4744d8
test al, al
jne 0x47435f
mov eax, dword [esi + 0x2a4]
mov edi, dword [esi + 0x2a8]
add edi, eax
cmp eax, edi
jbe 0x474217
call fcn.00496100
mov eax, dword [esi + 0x2a4]
mov ecx, dword [esi + 0x2a8]
add edi, 0xffffffff
add ecx, eax
cmp edi, ecx
ja 0x474230
cmp edi, eax
jae 0x474235
call fcn.00496100
mov edx, dword [esi + 0x2a4]
add edx, dword [esi + 0x2a8]
cmp edi, edx
jb 0x47424a
call fcn.00496100
mov eax, dword [esi + 0x2a0]
cmp eax, edi
ja 0x474256
sub edi, eax
mov eax, dword [esi + 0x29c]
mov ecx, dword [eax + edi*4]
lea ebx, [esi + 0x258]
push ecx
mov ecx, ebx
call fcn.00475e00
mov eax, dword [esi + 0x2a8]
xor edi, edi
cmp eax, edi
je 0x4742ac
mov edx, dword [esi + 0x2a4]
mov ecx, dword [esi + 0x2a0]
lea eax, [eax + edx - 1]
cmp ecx, eax
ja 0x47428f
sub eax, ecx
mov ecx, dword [esi + 0x29c]
mov ecx, dword [ecx + eax*4]
call fcn.00475620
add dword [esi + 0x2a8], 0xffffffff
jne 0x4742ac
mov dword [esi + 0x2a4], edi
push ebx
lea ecx, [ebp - 0x3c]
call fcn.00475a60
cmp dword [esi + 0x290], edi
jne 0x47430f
push 1
push 0x4c2bec
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x44], 7
mov dword [ebp - 0x48], edi
mov word [ebp - 0x58], di
call fcn.00405680
lea edx, [ebp - 0x5c]
push edx
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x3c]
call fcn.00476020
push eax
lea ecx, [ebp - 0x3c]
call fcn.00475e00
lea ecx, [ebp - 0x78]
call fcn.00475620
cmp dword [ebp - 0x44], 8
jb 0x474333
mov ecx, dword [ebp - 0x58]
push ecx
call fcn.00495fd1
add esp, 4
jmp 0x474333
lea edx, [esi + 0x27c]
push edx
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x3c]
call fcn.00476020
push eax
lea ecx, [ebp - 0x3c]
call fcn.00475e00
lea ecx, [ebp - 0x78]
call fcn.00475620
cmp dword [ebp - 0x24], 8
mov eax, dword [ebp - 0x38]
jae 0x47433f
lea eax, [ebp - 0x38]
lea ecx, [esi + 4]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
lea ecx, [ebp - 0x3c]
mov dword [esi + 0x254], eax
mov byte [esi], 1
call fcn.00475620
xor ebx, ebx
jmp 0x47438b
mov ecx, dword [esi + 0x254]
lea eax, [esi + 4]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x47438b
mov edx, dword [esi + 0x254]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov dword [esi + 0x254], 0xffffffff
cmp dword [esi + 0x254], 0xffffffff
mov dword [ebp - 0x44], 7
mov dword [ebp - 0x48], ebx
mov word [ebp - 0x58], bx
jne 0x4743d2
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x5c]
push eax
lea ecx, [esi + 0x27c]
mov byte [esi], 0
call fcn.004031a0
cmp dword [ebp - 0x44], 8
jb 0x4741e0
mov ecx, dword [ebp - 0x58]
push ecx
call fcn.00495fd1
add esp, 4
jmp 0x4741e0
lea edi, [esi + 0x30]
mov eax, edi
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x4743e0
sub eax, edx
sar eax, 1
push eax
push edi
lea ecx, [ebp - 0x5c]
call fcn.00405680
lea edx, [ebp - 0x5c]
push edx
lea ecx, [ebp - 0x20]
call fcn.00475a60
cmp dword [ebp - 0x44], 8
jb 0x474417
mov eax, dword [ebp - 0x58]
push eax
call fcn.00495fd1
add esp, 4
lea ecx, [ebp - 0x20]
push ecx
mov ecx, esi
call fcn.0047f840
test al, al
je 0x474433
lea ecx, [ebp - 0x20]
call fcn.00475620
jmp 0x4741e0
mov eax, edi
mov dword [ebp - 0x44], 7
mov dword [ebp - 0x48], ebx
mov word [ebp - 0x58], bx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x474446
sub eax, edx
sar eax, 1
push eax
push edi
lea ecx, [ebp - 0x5c]
call fcn.00405680
lea edx, [ebp - 0x5c]
push edx
lea eax, [ebp - 0x78]
push eax
lea ecx, [esi + 0x258]
call fcn.00476020
push eax
lea ecx, [ebp - 0x20]
call fcn.00475e00
lea ecx, [ebp - 0x78]
call fcn.00475620
cmp dword [ebp - 0x44], 8
jb 0x474495
mov ecx, dword [ebp - 0x58]
push ecx
call fcn.00495fd1
add esp, 4
test byte [esi + 4], 0x10
je 0x4744c2
cmp byte [esi + 0x274], 0
je 0x4744b3
lea edx, [ebp - 0x20]
push edx
lea ecx, [esi + 0x298]
call fcn.00474160
test byte [esi + 0x278], 2
je 0x4744cb
lea eax, [ebp - 0x20]
push eax
jmp 0x4744e8
test byte [esi + 0x278], 1
jne 0x4744e4
lea ecx, [ebp - 0x20]
call fcn.00475620
jmp 0x4741e0
mov esi, dword [ebp - 0x40]
mov ecx, esi
call fcn.00475600
jmp 0x4744fa
lea ecx, [ebp - 0x20]
push ecx
mov esi, dword [ebp - 0x40]
mov ecx, esi
call fcn.00475a60
lea ecx, [ebp - 0x20]
call fcn.00475620
mov ecx, dword [ebp - 4]
pop edi
mov eax, esi
pop esi
xor ecx, ebp
pop ebx
call fcn.00495cb8
mov esp, ebp
pop ebp
ret 4