Function at 0x428ee0
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x40c
mov eax, dword [0x49d310]
xor eax, ebp
mov dword [ebp - 4], eax
push edi
mov dword [ebp - 0x330], ecx
push str..
push dword [ebp + 8]
lea eax, [ebp - 0xac]
push eax
call fcn.0042a047
add esp, 0xc
lea ecx, [ebp - 0xac]
call fcn.004251bc
mov dword [ebp - 0x380], eax
lea eax, [ebp - 0x2fc]
push eax
push dword [ebp - 0x380]
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 0xffffffff
je 0x429431
xor eax, eax
lea edi, [ebp - 0x10]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea ecx, [ebp - 0x10]
call fcn.004285b4
xor eax, eax
lea edi, [ebp - 0x1c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea ecx, [ebp - 0x1c]
call fcn.004285b4
mov eax, dword [ebp - 0x2fc]
and eax, 0x10
je 0x429196
mov dword [ebp - 0x314], 0x487f40
lea eax, [ebp - 0x2d0]
mov dword [ebp - 0x310], eax
mov eax, dword [ebp - 0x310]
mov ax, word [eax]
mov word [ebp - 0x320], ax
mov ecx, dword [ebp - 0x314]
cmp ax, word [ecx]
jne 0x428ff0
cmp word [ebp - 0x320], 0
je 0x428fe7
mov eax, dword [ebp - 0x310]
mov ax, word [eax + 2]
mov word [ebp - 0x322], ax
mov ecx, dword [ebp - 0x314]
cmp ax, word [ecx + 2]
jne 0x428ff0
add dword [ebp - 0x310], 4
add dword [ebp - 0x314], 4
cmp word [ebp - 0x322], 0
jne 0x428f8d
and dword [ebp - 0x338], 0
jmp 0x428ffb
sbb eax, eax
or eax, 1
mov dword [ebp - 0x338], eax
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x37c], eax
cmp dword [ebp - 0x37c], 0
je 0x429191
mov dword [ebp - 0x31c], 0x487f44
lea eax, [ebp - 0x2d0]
mov dword [ebp - 0x318], eax
mov eax, dword [ebp - 0x318]
mov ax, word [eax]
mov word [ebp - 0x324], ax
mov ecx, dword [ebp - 0x31c]
cmp ax, word [ecx]
jne 0x42908d
cmp word [ebp - 0x324], 0
je 0x429084
mov eax, dword [ebp - 0x318]
mov ax, word [eax + 2]
mov word [ebp - 0x326], ax
mov ecx, dword [ebp - 0x31c]
cmp ax, word [ecx + 2]
jne 0x42908d
add dword [ebp - 0x318], 4
add dword [ebp - 0x31c], 4
cmp word [ebp - 0x326], 0
jne 0x42902a
and dword [ebp - 0x33c], 0
jmp 0x429098
sbb eax, eax
or eax, 1
mov dword [ebp - 0x33c], eax
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x378], eax
cmp dword [ebp - 0x378], 0
je 0x429191
push 0x487f58
push dword [ebp + 8]
lea eax, [ebp - 0x3ac]
push eax
call fcn.0042a047
add esp, 0xc
mov dword [ebp - 0x36c], eax
lea eax, [ebp - 0x2d0]
mov dword [ebp - 0x304], eax
mov eax, dword [ebp - 0x304]
add eax, 2
mov dword [ebp - 0x374], eax
mov eax, dword [ebp - 0x304]
mov ax, word [eax]
mov word [ebp - 0x32a], ax
add dword [ebp - 0x304], 2
cmp word [ebp - 0x32a], 0
jne 0x4290e9
mov eax, dword [ebp - 0x304]
sub eax, dword [ebp - 0x374]
sar eax, 1
mov dword [ebp - 0x370], eax
push dword [ebp - 0x370]
lea eax, [ebp - 0x2d0]
push eax
mov ecx, dword [ebp - 0x36c]
call fcn.0042e458
mov dword [ebp - 0x384], eax
push dword [ebp - 0x384]
lea ecx, [ebp - 0x4c]
call fcn.00428579
lea ecx, [ebp - 0x3ac]
call fcn.0042545b
push dword [ebp + 0x10]
lea eax, [ebp - 0x4c]
push eax
mov ecx, dword [ebp - 0x330]
call fcn.00429660
movzx eax, al
test eax, eax
jne 0x429189
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
lea eax, [ebp - 0x4c]
push eax
mov ecx, dword [ebp - 0x330]
call fcn.00428ee0
lea ecx, [ebp - 0x4c]
call fcn.0042545b
jmp 0x4293fa
push 0x487f58
push dword [ebp + 8]
lea eax, [ebp - 0x3c4]
push eax
call fcn.0042a047
add esp, 0xc
mov dword [ebp - 0x34c], eax
lea eax, [ebp - 0x2d0]
mov dword [ebp - 0x308], eax
mov eax, dword [ebp - 0x308]
add eax, 2
mov dword [ebp - 0x344], eax
mov eax, dword [ebp - 0x308]
mov ax, word [eax]
mov word [ebp - 0x328], ax
add dword [ebp - 0x308], 2
cmp word [ebp - 0x328], 0
jne 0x4291ce
mov eax, dword [ebp - 0x308]
sub eax, dword [ebp - 0x344]
sar eax, 1
mov dword [ebp - 0x348], eax
push dword [ebp - 0x348]
lea eax, [ebp - 0x2d0]
push eax
mov ecx, dword [ebp - 0x34c]
call fcn.0042e458
mov dword [ebp - 0x350], eax
push dword [ebp - 0x350]
lea ecx, [ebp - 0x34]
call fcn.00428579
lea ecx, [ebp - 0x3c4]
call fcn.0042545b
push dword [ebp + 0x14]
lea eax, [ebp - 0x34]
push eax
mov ecx, dword [ebp - 0x330]
call fcn.004296c0
movzx eax, al
test eax, eax
jne 0x4293f2
mov byte [ebp - 0x2fd], 0
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x340], eax
mov eax, dword [ebp - 0x340]
mov eax, dword [eax]
mov dword [ebp - 0x30c], eax
mov eax, dword [ebp - 0x340]
mov eax, dword [eax + 4]
mov dword [ebp - 0x354], eax
jmp 0x429295
mov eax, dword [ebp - 0x30c]
add eax, 0x18
mov dword [ebp - 0x30c], eax
mov eax, dword [ebp - 0x30c]
cmp eax, dword [ebp - 0x354]
je 0x4292e2
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0x358], eax
mov ecx, dword [ebp - 0x358]
call fcn.004251bc
mov dword [ebp - 0x35c], eax
push dword [ebp - 0x35c]
lea eax, [ebp - 0x2d0]
push eax
call dword [sym.imp.SHLWAPI.dll_PathMatchSpecW]
test eax, eax
je 0x4292e0
mov byte [ebp - 0x2fd], 1
jmp 0x4292e2
jmp 0x429286
movzx eax, byte [ebp - 0x2fd]
test eax, eax
je 0x4293f2
push 0xffffffffffffffff
push 0x487f58
mov ecx, dword [ebp + 8]
call fcn.0042eff7
inc eax
mov dword [ebp - 0x360], eax
lea eax, [ebp - 0x31d]
push eax
push 0xffffffffffffffff
push dword [ebp - 0x360]
push dword [ebp + 8]
lea ecx, [ebp - 0x94]
call fcn.0042bf6d
lea eax, [ebp - 0x2d0]
push eax
lea ecx, [ebp - 0x64]
call fcn.0042c016
push 0x487f58
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x3dc]
push eax
call fcn.0042a047
add esp, 0xc
mov dword [ebp - 0x38c], eax
lea eax, [ebp - 0x64]
push eax
mov ecx, dword [ebp - 0x38c]
call fcn.0042e429
mov dword [ebp - 0x388], eax
push dword [ebp - 0x388]
lea ecx, [ebp - 0x7c]
call fcn.00428579
lea ecx, [ebp - 0x3dc]
call fcn.0042545b
lea eax, [ebp - 0x7c]
mov dword [ebp - 0x364], eax
lea eax, [ebp - 0x34]
mov dword [ebp - 0x368], eax
push dword [ebp - 0x364]
push dword [ebp - 0x368]
lea ecx, [ebp - 0x40c]
call fcn.00429b9d
lea eax, [ebp - 0x40c]
push eax
lea eax, [ebp - 0x394]
push eax
mov ecx, dword [ebp + 0x18]
call fcn.0042bd0d
lea ecx, [ebp - 0x3f4]
call fcn.0042545b
lea ecx, [ebp - 0x40c]
call fcn.0042545b
lea ecx, [ebp - 0x7c]
call fcn.0042545b
lea ecx, [ebp - 0x64]
call fcn.0042545b
lea ecx, [ebp - 0x94]
call fcn.0042545b
lea ecx, [ebp - 0x34]
call fcn.0042545b
lea eax, [ebp - 0x2fc]
push eax
push dword [ebp - 0x334]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x428f68
push dword [ebp - 0x334]
call dword [sym.imp.KERNEL32.dll_FindClose]
lea ecx, [ebp - 0x1c]
call fcn.0042e01e
lea ecx, [ebp - 0x10]
call fcn.0042e01e
lea ecx, [ebp - 0xac]
call fcn.0042545b
pop edi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00445680
leave
ret 0x14