Function at 0x42d70d
Capabilities:
Enumerate files on windows

Disassembly:
push 0x5bc
mov eax, 0x484f9f
call fcn.00483193
mov dword [ebp - 0x590], ecx
mov edi, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x5b8], edi
cmp byte [edi + 1], 0
jne 0x42d986
xor eax, eax
xor ebx, ebx
mov word [ebp - 0x334], ax
lea eax, [ebp - 0x334]
mov dword [ebp - 0x338], ebx
mov dword [ebp - 0x128], ebx
mov dword [ebp - 0x33c], eax
mov edx, dword [ebp + 0x10]
lea eax, [ebp - 0x33c]
push eax
mov dword [ebp - 4], ebx
call fcn.00479c17
mov esi, dword [ebp - 0x338]
lea ecx, [ebp - 0x33c]
push ebx
lea eax, [esi + 2]
push eax
call fcn.00474c83
mov eax, dword [ebp - 0x33c]
push 4
push 0x4031f0
push 4
lea ecx, [eax + esi*2]
pop edx
call fcn.00474c43
pop ecx
pop ecx
push 2
push ebx
push ebx
lea eax, [ebp - 0x58c]
push eax
push 1
push dword [ebp - 0x33c]
call dword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov dword [ebp - 0x594], eax
cmp eax, 0xffffffff
je 0x491b17
lea eax, [ebp - 0x594]
mov byte [ebp - 0x5bc], 1
mov dword [ebp - 0x5c0], eax
xor edx, edx
mov ebx, edx
mov dword [ebp - 0x5ac], edx
mov dword [ebp - 0x5a8], ebx
mov dword [ebp - 0x5a4], edx
mov edi, edx
mov dword [ebp - 0x5a0], edx
mov dword [ebp - 0x59c], edi
mov dword [ebp - 0x598], edx
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], edx
mov dword [ebp - 0x14], edx
mov byte [ebp - 0x11c], dl
mov dword [ebp - 0x124], eax
mov byte [ebp - 4], 4
lea esi, [ebp - 0x560]
lea ecx, [esi + 2]
mov ax, word [esi]
add esi, 2
cmp ax, dx
jne 0x42d82a
sub esi, ecx
sar esi, 1
je 0x491b20
push ecx
push ecx
mov edx, esi
lea ecx, [ebp - 0x560]
call fcn.0042d9eb
pop ecx
pop ecx
test al, al
jne 0x42d8ea
lea ecx, [ebp - 0x560]
call fcn.0042d655
lea eax, [ebp - 0x124]
mov edx, esi
push eax
lea ecx, [ebp - 0x560]
call fcn.00435410
pop ecx
mov ecx, dword [ebp - 0x590]
mov eax, dword [ecx + 0x18]
cmp eax, dword [ecx + 0x1c]
jne 0x491b43
mov esi, dword [ebp - 0x120]
mov ecx, dword [ebp - 0x124]
mov eax, dword [ebp - 0x590]
push esi
push ecx
add eax, 0x60
lea ecx, [ebp - 0x5b4]
push eax
call fcn.0042da49
mov esi, dword [ebp - 0x5b4]
test esi, esi
je 0x42d8ea
mov ecx, dword [ebp - 0x58c]
call fcn.0042d6e2
test al, al
jne 0x42d9ac
cmp ebx, dword [ebp - 0x5a4]
je 0x42d98e
mov eax, dword [ebp - 0x5b0]
mov dword [ebx], esi
mov dword [ebx + 4], eax
add ebx, 8
mov dword [ebp - 0x5a8], ebx
lea eax, [ebp - 0x58c]
push eax
push dword [ebp - 0x594]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
push 0
pop edx
test eax, eax
jne 0x42d821
mov edi, dword [ebp - 0x5b8]
lea eax, [ebp - 0x5ac]
push eax
mov ecx, edi
call fcn.00464755
lea eax, [ebp - 0x5a0]
mov ecx, edi
push eax
call fcn.0046f0e3
mov esi, dword [ebp - 0x14]
mov byte [edi], 1
test esi, esi
jne 0x491ba7
mov ecx, dword [ebp - 0x5a0]
test ecx, ecx
je 0x42d952
mov edx, dword [ebp - 0x598]
sub edx, ecx
and edx, 0xfffffff8
call fcn.004311f4
mov ecx, dword [ebp - 0x5ac]
test ecx, ecx
je 0x42d96c
mov edx, dword [ebp - 0x5a4]
sub edx, ecx
and edx, 0xfffffff8
call fcn.004311f4
push dword [ebp - 0x594]
call dword [sym.imp.KERNEL32.dll_FindClose]
mov esi, dword [ebp - 0x128]
test esi, esi
jne 0x491bbd
call fcn.0048313d
ret 0xc
lea eax, [ebp - 0x5b4]
push eax
push ebx
lea ecx, [ebp - 0x5ac]
call fcn.004646c4
mov ebx, dword [ebp - 0x5a8]
jmp 0x42d8ea
cmp edi, dword [ebp - 0x598]
je 0x42d9cd
mov eax, dword [ebp - 0x5b0]
mov dword [edi], esi
mov dword [edi + 4], eax
add edi, 8
mov dword [ebp - 0x59c], edi
jmp 0x42d8ea
lea eax, [ebp - 0x5b4]
push eax
push edi
lea ecx, [ebp - 0x5a0]
call fcn.004646c4
mov edi, dword [ebp - 0x59c]
jmp 0x42d8ea
mov byte [edi + 1], 1
jmp 0x42d978
push edx
lea eax, [ebp - 0x560]
push 0x401ebc
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncmp]
add esp, 0xc
test eax, eax
je 0x42d8ea
jmp 0x42d83f
mov esi, dword [ebp - 0x120]
mov edx, esi
push 0x2e
push ecx
mov ecx, dword [ebp - 0x124]
call fcn.0047bd14
add esp, 8
cmp eax, 0xffffffff
je 0x42d896
inc ecx
add eax, ecx
lea ecx, [ebp - 0x5c8]
push eax
call fcn.0046f4eb
mov eax, dword [ebp - 0x590]
mov esi, dword [eax + 0x18]
jmp 0x491b9d
lea edx, [ebp - 0x5c8]
mov ecx, esi
call fcn.0043beb1
test al, al
jne 0x42d88a
mov eax, dword [ebp - 0x590]
add esi, 8
cmp esi, dword [eax + 0x1c]
jne 0x491b7f
jmp 0x42d8ea
mov ecx, esi
call fcn.0043baa3
push 0x18
push esi
call fcn.00481cc4
pop ecx
pop ecx
jmp 0x42d938
mov ecx, esi
call fcn.0043308e
push 0x18
push esi
call fcn.00481cc4
pop ecx
pop ecx
jmp 0x42d986