Function at 0x42fe3d
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x160
mov eax, dword [0x5f2e68]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 0x14]
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
xor esi, esi
push 0x13c
mov dword [ebp - 0x15c], eax
lea eax, [ebp - 0x148]
push esi
push eax
mov dword [ebp - 0x14c], esi
call fcn.005306b0
add esp, 0xc
mov edx, edi
mov dword [ebp - 0x154], esi
call fcn.004ccc0d
test eax, eax
je 0x42fe9e
xor eax, eax
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005317e7
leave
ret
push 1
mov ebx, 0x71c
push ebx
call fcn.00530848
mov esi, eax
test esi, esi
pop ecx
pop ecx
mov dword [ebp - 0x150], esi
je 0x42fe8d
push 1
push ebx
call fcn.00530848
test eax, eax
pop ecx
pop ecx
mov dword [ebp - 0x158], eax
jne 0x42fed6
push esi
call fcn.0053061e
pop ecx
jmp 0x42fe8d
push edi
mov ecx, ebx
mov eax, esi
call fcn.004ccc3f
pop ecx
mov edx, esi
call fcn.004cd7e8
call fcn.004cd889
push 0x22
mov edi, esi
call fcn.004cd66d
pop ecx
push esi
call fcn.00432310
test eax, eax
pop ecx
je 0x42ff38
mov edi, 0x552e64
push edi
push esi
call fcn.00531210
test eax, eax
pop ecx
pop ecx
jne 0x42ff38
push esi
call fcn.00530f70
cmp byte [eax + esi - 1], 0x5c
pop ecx
je 0x42ff2f
push 0x55f6cc
mov eax, ebx
call fcn.004ccd0f
pop ecx
push edi
mov eax, ebx
call fcn.004ccd0f
pop ecx
lea eax, [ebp - 0x14c]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp eax, 0xffffffff
mov dword [ebp - 0x160], eax
jne 0x42ff6d
xor edi, edi
push esi
call fcn.0053061e
pop ecx
push dword [ebp - 0x158]
call fcn.0053061e
pop ecx
mov eax, edi
jmp 0x42fe8f
mov edi, 0x104
lea edx, [ebp - 0x120]
call fcn.004ccc0d
test eax, eax
jne 0x430014
cmp byte [ebp - 0x120], 0x2e
je 0x430014
cmp dword [ebp + 0xc], eax
je 0x42ffa0
test byte [ebp - 0x14c], 2
jne 0x430014
test byte [ebp - 0x14c], 0x10
jne 0x430014
inc dword [ebp - 0x154]
cmp dword [ebp - 0x15c], 0
je 0x430014
mov esi, dword [ebp - 0x158]
lea eax, [ebp - 0x120]
push eax
mov ecx, ebx
mov eax, esi
call fcn.004ccc3f
pop ecx
push dword [ebp - 0x150]
mov ecx, edi
lea eax, [ebp - 0x120]
call fcn.004ccc3f
pop ecx
call fcn.004ccf84
mov edx, eax
mov ecx, esi
call fcn.004cd1ce
push esi
mov ecx, edi
lea eax, [ebp - 0x120]
call fcn.004ccc3f
pop ecx
push dword [ebp + 0x18]
lea eax, [ebp - 0x14c]
push eax
call dword [ebp - 0x15c]
test eax, eax
je 0x430035
lea eax, [ebp - 0x14c]
push eax
push dword [ebp - 0x160]
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x42ff72
mov esi, dword [ebp - 0x158]
push dword [ebp - 0x160]
mov ebx, dword [sym.imp.KERNEL32.dll_FindClose]
call ebx
cmp dword [ebp + 0x10], 0
je 0x430102
push dword [ebp - 0x150]
push esi
call fcn.005312a0
mov eax, esi
call fcn.004ccf84
push 0x552e64
push esi
call fcn.005312b0
add esp, 0x10
lea eax, [ebp - 0x14c]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov edi, eax
cmp edi, 0xffffffff
je 0x430102
lea edx, [ebp - 0x120]
call fcn.004ccc0d
test eax, eax
jne 0x4300ed
cmp byte [ebp - 0x120], 0x2e
je 0x4300ed
cmp dword [ebp + 0xc], eax
je 0x4300a9
test byte [ebp - 0x14c], 2
jne 0x4300ed
test byte [ebp - 0x14c], 0x10
je 0x4300ed
push dword [ebp - 0x150]
push esi
call fcn.005312a0
lea eax, [ebp - 0x120]
push eax
mov ecx, esi
call fcn.004cd0b7
add esp, 0xc
push dword [ebp + 0x18]
push dword [ebp - 0x15c]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push esi
call fcn.0042fe3d
add esp, 0x14
add dword [ebp - 0x154], eax
lea eax, [ebp - 0x14c]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x430083
push edi
call ebx
mov edi, dword [ebp - 0x154]
mov esi, dword [ebp - 0x150]
jmp 0x42ff53