Function at 0x425c90
Capabilities:
Enumerate files on windows

Disassembly:
push 0xffffffffffffffff
push 0x4efba2
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x280
mov eax, dword [0x50d0e0]
push ebx
push esi
push edi
mov dword [esp + 0x38], ecx
mov dword [esp + 0x14], eax
mov ecx, dword [0x525768]
lea edx, [esp + 0x14]
push ecx
xor ebx, ebx
push 0x51031c
push edx
mov dword [esp + 0x2a0], ebx
call fcn.004074f0
mov ecx, dword [esp + 0x20]
add esp, 0xc
lea eax, [esp + 0x3c]
mov dword [esp + 0x20], ebx
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov edi, eax
cmp edi, 0xffffffff
jne 0x425d35
mov ecx, dword [0x50d0e4]
mov dword [esp + 0x294], eax
mov eax, dword [esp + 0x14]
lea edx, [eax - 0xc]
cmp edx, ecx
je 0x425d2e
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x425d2e
mov eax, dword [esp + 0x14]
add eax, 0xfffffff4
push eax
call fcn.004de3a6
add esp, 4
xor eax, eax
jmp 0x426081
mov cl, byte [esp + 0x1f]
mov dword [esp + 0x2c], ebx
mov byte [esp + 0x28], cl
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
mov edx, dword [0x50d0e0]
mov eax, str..wmv.rm.rmvb
test eax, eax
mov byte [esp + 0x294], 1
mov dword [esp + 0x10], edx
je 0x425dbb
mov ecx, eax
shr ecx, 0x10
jne 0x425d81
xor eax, eax
mov edx, str..wmv.rm.rmvb
mov ax, dx
lea ecx, [esp + 0x10]
push eax
call fcn.00407b60
jmp 0x425dbb
push str..wmv.rm.rmvb
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov esi, eax
cmp esi, ebx
je 0x425dbb
push esi
lea ecx, [esp + 0x14]
call fcn.00402190
test eax, eax
je 0x425dbb
mov edx, dword [esp + 0x10]
lea eax, [esi + esi]
push eax
lea ecx, [esi + esi + 2]
push str..wmv.rm.rmvb
push ecx
push edx
call fcn.00402060
add esp, 0x10
push ebp
mov ebp, dword [sym.imp.KERNEL32.dll_FindNextFileW]
mov byte [esp + 0x298], 2
lea eax, [esp + 0x6c]
push eax
push 0x510318
call fcn.004dfe9e
lea ecx, [esp + 0x74]
mov esi, eax
push ecx
push 0x510310
call fcn.004dfe9e
add esp, 0x10
cmp esi, ebx
je 0x425f56
cmp eax, ebx
je 0x425f56
test byte [esp + 0x40], 0x10
jne 0x425f56
mov edx, dword [0x50d0e0]
lea eax, [esp + 0x6c]
test eax, eax
mov dword [esp + 0x10], edx
je 0x425e72
lea ecx, [esp + 0x6c]
shr ecx, 0x10
jne 0x425e38
xor eax, eax
lea edx, [esp + 0x6c]
mov ax, dx
lea ecx, [esp + 0x10]
push eax
call fcn.00407b60
jmp 0x425e72
lea eax, [esp + 0x6c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov esi, eax
cmp esi, ebx
je 0x425e72
push esi
lea ecx, [esp + 0x14]
call fcn.00402190
test eax, eax
je 0x425e72
lea ecx, [esi + esi]
lea edx, [esp + 0x6c]
push ecx
mov ecx, dword [esp + 0x14]
lea eax, [esi + esi + 2]
push edx
push eax
push ecx
call fcn.00402060
add esp, 0x10
mov edx, dword [esp + 0x10]
push 0x2e
push edx
mov byte [esp + 0x2a0], 3
call fcn.004dec29
add esp, 8
cmp eax, ebx
je 0x425f1f
mov edx, dword [esp + 0x10]
sub eax, edx
sar eax, 1
mov ecx, eax
cmp ecx, 0xffffffff
je 0x425f1f
mov eax, dword [edx - 8]
sub eax, ecx
lea ecx, [esp + 0x10]
dec eax
push eax
lea eax, [esp + 0x20]
push eax
call fcn.004071a0
mov ecx, dword [esp + 0x1c]
push ebx
push ecx
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2a0], 4
call fcn.00414af0
cmp eax, 0xffffffff
je 0x425ee8
mov eax, dword [esp + 0x34]
lea edx, [esp + 0x10]
push edx
push eax
lea ecx, [esp + 0x34]
call fcn.0040dfb0
inc dword [esp + 0x24]
mov eax, dword [esp + 0x1c]
mov edx, dword [0x50d0e4]
mov byte [esp + 0x298], 3
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x425f1f
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x425f1f
mov edx, dword [esp + 0x1c]
lea eax, [edx - 0xc]
push eax
call fcn.004de3a6
add esp, 4
mov eax, dword [esp + 0x10]
mov edx, dword [0x50d0e4]
mov byte [esp + 0x298], 2
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x425f56
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x425f56
mov edx, dword [esp + 0x10]
lea eax, [edx - 0xc]
push eax
call fcn.004de3a6
add esp, 4
lea eax, [esp + 0x40]
push eax
push edi
call ebp
test eax, eax
jne 0x425dca
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov esi, dword [esp + 0x24]
pop ebp
cmp esi, ebx
jne 0x425fd8
mov eax, dword [esp + 0x10]
mov edx, dword [0x50d0e4]
mov byte [esp + 0x294], 1
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x425fad
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x425fad
mov edx, dword [esp + 0x10]
lea eax, [edx - 0xc]
push eax
call fcn.004de3a6
add esp, 4
lea ecx, [esp + 0x28]
mov byte [esp + 0x294], bl
call fcn.0040dd70
lea ecx, [esp + 0x14]
mov dword [esp + 0x294], 0xffffffff
call fcn.00402160
xor eax, eax
jmp 0x426081
push ebx
call fcn.004de872
push eax
call fcn.004e0010
add esp, 8
call fcn.004e001d
cdq
idiv esi
cmp edx, ebx
jge 0x425ff5
xor edx, edx
mov eax, dword [esp + 0x2c]
lea ecx, [eax + edx*4]
push ecx
lea ecx, [esp + 0x28]
call fcn.0040bd90
mov edx, dword [esp + 0x38]
mov byte [esp + 0x294], 5
lea esi, [edx + 4]
mov ecx, esi
call fcn.00406cd0
mov eax, dword [esp + 0x24]
mov ecx, dword [0x525768]
push eax
push ecx
push str._sData_ad_s
push esi
call fcn.004074f0
add esp, 0x10
lea ecx, [esp + 0x24]
mov byte [esp + 0x294], 2
call fcn.00402160
lea ecx, [esp + 0x10]
mov byte [esp + 0x294], 1
call fcn.00402160
lea ecx, [esp + 0x28]
mov byte [esp + 0x294], bl
call fcn.0040dd70
lea ecx, [esp + 0x14]
mov dword [esp + 0x294], 0xffffffff
call fcn.00402160
mov eax, 1
mov ecx, dword [esp + 0x28c]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x28c
ret