Function at 0x42440a
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push 0x8c4
mov eax, 0x4ca4db
call fcn.00496d1f
mov edi, ecx
cmp dword [edi + 0x18], 0
mov esi, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x8b0], esi
mov dword [ebp - 0x8c0], eax
jle 0x42443f
mov eax, dword [ebp + 0x10]
cmp dword [edi + 0x18], eax
je 0x4248c1
mov ax, word [0x4d18d0]
push 0x206
mov word [ebp - 0x420], ax
lea eax, [ebp - 0x41e]
push 0
push eax
call fcn.0049f230
push esi
lea eax, [ebp - 0x420]
push 0x103
push eax
call fcn.00404609
add esp, 0x18
lea eax, [ebp - 0x420]
push 0x4d68fc
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [ebp - 0x8a8]
push eax
lea eax, [ebp - 0x420]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x4248c1
cmp dword [ebp - 0x8a8], 0x10
jne 0x424554
lea eax, [ebp - 0x87c]
push 0x4d59e8
push eax
call fcn.004a9bcc
pop ecx
pop ecx
test eax, eax
je 0x4248a4
lea eax, [ebp - 0x87c]
push 0x4d59ec
push eax
call fcn.004a9bcc
pop ecx
pop ecx
test eax, eax
je 0x4248a4
mov ax, word [0x4d18d0]
push 0x206
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push 0
push eax
call fcn.0049f230
add esp, 0xc
lea eax, [ebp - 0x87c]
push eax
push esi
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp - 0x218]
push eax
call fcn.004a338c
pop ecx
test eax, eax
je 0x4248a4
mov eax, dword [ebp + 0x10]
mov ecx, edi
inc eax
push eax
lea eax, [ebp - 0x87c]
push eax
lea eax, [ebp - 0x218]
push eax
call fcn.0042440a
jmp 0x4248a4
mov eax, dword [0x51a230]
inc eax
mov dword [0x51a230], eax
cmp eax, 0x1388
ja 0x4248ba
lea eax, [ebp - 0x87c]
push eax
lea ecx, [ebp - 0x8bc]
call fcn.004241a3
and dword [ebp - 4], 0
lea ecx, [ebp - 0x8bc]
call fcn.004249e8
push dword [edi + 0x1c]
lea ecx, [ebp - 0x8bc]
call fcn.0042439d
test eax, eax
je 0x4245aa
mov eax, dword [edi + 0x1c]
cmp dword [eax - 0xc], 0
jne 0x424892
lea eax, [ebp - 0x87c]
mov ecx, edi
push eax
call fcn.0042491a
push 0x206
test eax, eax
mov ax, word [0x4d18d0]
push 0
je 0x424774
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push eax
call fcn.0049f230
add esp, 0xc
lea eax, [ebp - 0x87c]
push eax
push esi
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
push 0x828
call fcn.004969e8
mov esi, eax
mov dword [esp], 0x828
push 0
push esi
mov dword [ebp - 0x8ac], esi
call fcn.0049f230
lea eax, [ebp - 0x87c]
push eax
push 0x4d2db0
push 0x103
push esi
call fcn.00404609
push dword [ebp - 0x8b0]
lea eax, [esi + 0x208]
push 0x4d2db0
push 0x103
push eax
call fcn.00404609
push dword [ebp - 0x8c0]
lea eax, [esi + 0x618]
push 0x4d2db0
push 0x103
push eax
call fcn.00404609
and dword [ebp - 0x630], 0
xor eax, eax
add esp, 0x3c
mov dword [ebp - 0x62c], 7
mov word [ebp - 0x640], ax
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x658]
call fcn.004022ea
lea eax, [ebp - 0x640]
mov byte [ebp - 4], 2
push eax
lea eax, [ebp - 0x658]
push eax
call fcn.004270be
pop ecx
pop ecx
lea ecx, [ebp - 0x658]
mov byte [ebp - 4], 1
call fcn.00404061
cmp dword [ebp - 0x62c], 8
lea eax, [ebp - 0x640]
cmovae eax, dword [ebp - 0x640]
push eax
push 0x4d2db0
lea eax, [esi + 0x410]
push 0x103
push eax
call fcn.00404609
mov eax, dword [ebp + 0x10]
lea ecx, [edi + 0xc]
add esp, 0x10
mov byte [esi + 0x820], 1
mov dword [esi + 0x824], eax
lea eax, [ebp - 0x8ac]
push eax
call fcn.0041ff6a
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x8b4]
call fcn.004241a3
lea ecx, [ebp - 0x8b4]
mov byte [ebp - 4], 3
call fcn.004249e8
lea eax, [ebp - 0x8b4]
push eax
lea eax, [ebp - 0x8c8]
push eax
lea ecx, [edi + 4]
call fcn.00424137
mov ecx, dword [ebp - 0x8c8]
mov eax, dword [ebp - 0x8ac]
mov dword [ecx + 0x14], eax
mov ecx, dword [ebp - 0x8b4]
lea ecx, [ecx - 0x10]
call fcn.00407d41
lea ecx, [ebp - 0x640]
call fcn.00404061
jmp 0x42488c
mov word [ebp - 0x628], ax
lea eax, [ebp - 0x626]
push eax
call fcn.0049f230
add esp, 0xc
lea eax, [ebp - 0x87c]
push eax
push esi
lea eax, [ebp - 0x628]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
push 0x828
call fcn.004969e8
mov esi, eax
mov dword [esp], 0x828
push 0
push esi
mov dword [ebp - 0x8ac], esi
call fcn.0049f230
lea eax, [ebp - 0x87c]
mov byte [esi + 0x820], 0
push eax
push 0x4d2db0
push 0x103
push esi
call fcn.00404609
push dword [ebp - 0x8b0]
lea eax, [esi + 0x208]
push 0x4d2db0
push 0x103
push eax
call fcn.00404609
push dword [ebp - 0x8c0]
lea eax, [esi + 0x618]
push 0x4d2db0
push 0x103
push eax
call fcn.00404609
mov eax, dword [ebp + 0x10]
lea ecx, [edi + 0xc]
add esp, 0x3c
mov byte [esi + 0x820], 0
mov dword [esi + 0x824], eax
lea eax, [ebp - 0x8ac]
push eax
call fcn.0041ff6a
lea eax, [ebp - 0x628]
push eax
lea ecx, [ebp - 0x8b8]
call fcn.004241a3
lea ecx, [ebp - 0x8b8]
mov byte [ebp - 4], 4
call fcn.004249e8
lea eax, [ebp - 0x8b8]
push eax
lea eax, [ebp - 0x8d0]
push eax
lea ecx, [edi + 4]
call fcn.00424137
mov ecx, dword [ebp - 0x8d0]
mov eax, dword [ebp - 0x8ac]
mov dword [ecx + 0x14], eax
mov ecx, dword [ebp - 0x8b8]
lea ecx, [ecx - 0x10]
call fcn.00407d41
mov esi, dword [ebp - 0x8b0]
mov ecx, dword [ebp - 0x8bc]
or dword [ebp - 4], 0xffffffff
lea ecx, [ecx - 0x10]
call fcn.00407d41
lea eax, [ebp - 0x8a8]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x4244a5
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
call fcn.00496cc9
ret 0xc