Function at 0x4728aa
Capabilities:
Enumerate files on windows
Get file attributes
Set current directory

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x570f0a
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x5b0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1a4], 0
lea ecx, [ebp - 0x14]
call fcn.004013e0
mov dword [ebp - 4], 0
mov eax, dword [ebp + 8]
mov dword [eax + 0x29bc], 9
push str.Preload_into_Hidden
mov ecx, dword [ebp + 8]
push ecx
call fcn.005031b7
add esp, 8
push 0x5a8f5c
mov edx, dword [ebp + 8]
add edx, 0x2eb4
push edx
call fcn.0054d7f0
add esp, 8
test eax, eax
jne 0x472945
mov dword [ebp - 0x5a8], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.00560ea1
mov eax, dword [ebp - 0x5a8]
jmp 0x472b88
mov eax, dword [ebp + 8]
add eax, 0x2eb4
push eax
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
test eax, eax
jne 0x47297c
mov dword [ebp - 0x5ac], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.00560ea1
mov eax, dword [ebp - 0x5ac]
jmp 0x472b88
lea ecx, [ebp - 0x15c]
push ecx
push 0x5a8f60
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0xffffffff
jne 0x4729c1
mov dword [ebp - 0x5b0], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.00560ea1
mov eax, dword [ebp - 0x5b0]
jmp 0x472b88
mov dword [ebp - 0x10], 0
cmp dword [ebp - 0x10], 0
jne 0x472b5c
mov edx, dword [ebp + 8]
add edx, 0x2eb4
push edx
lea eax, [ebp - 0x3a4]
push eax
call fcn.0054bec0
add esp, 8
lea ecx, [ebp - 0x130]
push ecx
lea edx, [ebp - 0x3a4]
push edx
call fcn.0054bed0
add esp, 8
lea eax, [ebp - 0x3a4]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
and ecx, 0x10
test ecx, ecx
je 0x472a20
jmp 0x472b2d
mov edx, dword [ebp + 8]
add edx, 0x2eb4
push edx
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
mov eax, dword [ebp + 8]
add eax, 0x2eb4
push eax
lea ecx, [ebp - 0x5a4]
push ecx
call fcn.0054bec0
add esp, 8
lea edx, [ebp - 0x130]
push edx
lea eax, [ebp - 0x5a4]
push eax
call fcn.0054bed0
add esp, 8
lea ecx, [ebp - 0x130]
push ecx
push str.Preload_into_Hidden___s_
lea edx, [ebp - 0x19c]
push edx
call fcn.0054c45b
add esp, 0xc
lea eax, [ebp - 0x19c]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.005031b7
add esp, 8
mov edx, dword [ebp + 8]
cmp dword [edx + 0x2ac4], 0x3ff
jl 0x472aee
mov eax, dword [ebp + 8]
cmp dword [eax + 0x2ac4], 0x413
jg 0x472aee
lea ecx, [ebp - 0x130]
push ecx
lea edx, [ebp - 0x5a4]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.00472b96
add esp, 0xc
test eax, eax
jne 0x472aec
mov dword [ebp - 0x5b4], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.00560ea1
mov eax, dword [ebp - 0x5b4]
jmp 0x472b88
jmp 0x472b2d
lea ecx, [ebp - 0x130]
push ecx
lea edx, [ebp - 0x5a4]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.00474787
add esp, 0xc
test eax, eax
jne 0x472b2d
mov dword [ebp - 0x5b8], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.00560ea1
mov eax, dword [ebp - 0x5b8]
jmp 0x472b88
lea ecx, [ebp - 0x15c]
push ecx
mov edx, dword [ebp - 0x1a0]
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x472b57
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x12
jne 0x472b57
mov dword [ebp - 0x10], 1
jmp 0x4729c8
mov eax, dword [ebp - 0x1a0]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov dword [ebp - 0x5bc], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.00560ea1
mov eax, dword [ebp - 0x5bc]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret