Function at 0x428dab
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push 0x278
mov eax, 0x4899e1
call fcn.0047dc8f
mov dword [ebp - 0x27c], edx
mov eax, ecx
mov dword [ebp - 0x280], eax
mov ecx, dword [ebp + 8]
and dword [ebp - 0x278], 0
mov dword [ebp - 0x270], ecx
and dword [ebp - 4], 0
xor ebx, ebx
mov dword [ebp - 0x26c], ebx
or dword [ebp - 0x268], 0xffffffff
mov byte [ebp - 4], 2
test eax, eax
jne 0x428e03
mov edi, 0x80070057
push edi
call fcn.004321e3
jmp 0x429122
lea ecx, [ebp - 0x278]
push ecx
push 0
push 0x409718
push eax
call fcn.004314b7
mov edi, eax
test edi, edi
js 0x428df8
push 0x250
lea eax, [ebp - 0x264]
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0x264]
push eax
push dword [ebp - 0x278]
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
push eax
lea ecx, [ebp - 0x268]
call fcn.0041a652
cmp dword [ebp - 0x268], 0
je 0x42910a
cmp dword [ebp - 0x268], 0xffffffff
je 0x42910a
mov ecx, 0x407390
lea eax, [ebp - 0x238]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x428e9d
test dx, dx
je 0x428e99
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x428e9d
add eax, 4
add ecx, 4
test dx, dx
jne 0x428e77
xor eax, eax
jmp 0x428ea2
sbb eax, eax
or eax, 1
test eax, eax
je 0x4290ce
mov ecx, 0x406f00
lea eax, [ebp - 0x238]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x428edb
test dx, dx
je 0x428ed7
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x428edb
add eax, 4
add ecx, 4
test dx, dx
jne 0x428eb5
xor eax, eax
jmp 0x428ee0
sbb eax, eax
or eax, 1
test eax, eax
je 0x4290ce
test ebx, ebx
je 0x428ef9
push ebx
call fcn.0043220c
and dword [ebp - 0x26c], 0
lea eax, [ebp - 0x26c]
push eax
push 0
lea eax, [ebp - 0x238]
push eax
push dword [ebp - 0x280]
call fcn.004314b7
mov edi, eax
test edi, edi
js 0x429181
mov ebx, dword [ebp - 0x26c]
xor edx, edx
mov ecx, ebx
call fcn.0042799b
test eax, eax
jns 0x428f4c
mov eax, dword [0x48ecb8]
test eax, eax
je 0x428f3f
cmp eax, 0xffffffff
jne 0x428f41
xor eax, eax
push ebx
push 0x40971c
jmp 0x429088
test byte [ebp - 0x264], 0x10
mov ecx, ebx
je 0x42904d
mov edx, dword [ebp - 0x27c]
lea eax, [ebp - 0x284]
push eax
lea eax, [ebp - 0x274]
push eax
push dword [ebp - 0x270]
call fcn.00428bc1
mov edi, eax
test edi, edi
js 0x428df8
cmp dword [ebp - 0x274], 0
mov eax, dword [0x48ecb8]
je 0x429006
test eax, eax
je 0x428f9b
cmp eax, 0xffffffff
jne 0x428f9d
xor eax, eax
push ebx
push 0x409750
push dword [0x491330]
push eax
call fcn.0041aecf
add esp, 0x10
cmp dword [ebp - 0x284], 0
je 0x4290ce
mov eax, dword [0x48ecb8]
test eax, eax
je 0x428fcd
cmp eax, 0xffffffff
jne 0x428fcf
xor eax, eax
push ebx
push 0x409788
push dword [0x491330]
push eax
call fcn.0041aecf
mov edx, dword [ebp - 0x27c]
add esp, 0x10
mov ecx, ebx
push dword [ebp - 0x270]
call fcn.00428dab
mov edi, eax
test edi, edi
js 0x428df8
jmp 0x4290ce
test eax, eax
je 0x42900f
cmp eax, 0xffffffff
jne 0x429011
xor eax, eax
push ebx
push 0x4097c8
push dword [0x491330]
push eax
call fcn.0041aecf
add esp, 0x10
mov ecx, ebx
call fcn.00427cdb
test eax, eax
jns 0x4290ce
mov eax, dword [0x48ecb8]
test eax, eax
je 0x429043
cmp eax, 0xffffffff
jne 0x429045
xor eax, eax
push ebx
push 0x4097fc
jmp 0x429088
mov edx, dword [ebp - 0x270]
lea eax, [ebp - 0x274]
push eax
call fcn.00428cf8
mov edi, eax
test edi, edi
js 0x428df8
cmp dword [ebp - 0x274], 0
je 0x429099
mov eax, dword [0x48ecb8]
test eax, eax
je 0x429080
cmp eax, 0xffffffff
jne 0x429082
xor eax, eax
push ebx
push 0x409834
push dword [0x491330]
push eax
call fcn.0041aecf
add esp, 0x10
jmp 0x4290ce
mov ecx, ebx
call fcn.00427e0c
mov edi, eax
test edi, edi
jns 0x4290ce
mov eax, dword [0x48ecb8]
test eax, eax
je 0x4290b4
cmp eax, 0xffffffff
jne 0x4290b6
xor eax, eax
push ebx
push edi
push 0x409868
push dword [0x491330]
push eax
call fcn.0041aecf
add esp, 0x14
xor edi, edi
push 0x250
lea eax, [ebp - 0x264]
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0x264]
push eax
push dword [ebp - 0x268]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x428e6c
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x12
je 0x42911e
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
call fcn.004324dd
mov edi, eax
push edi
call fcn.004321e3
test edi, edi
jns 0x42914c
mov eax, dword [0x48ecb8]
test eax, eax
je 0x429130
cmp eax, 0xffffffff
jne 0x429132
xor eax, eax
push edi
push 0x4098ac
push 0x406200
push dword [0x491330]
push eax
call fcn.0041aecf
add esp, 0x14
push edi
call fcn.00432150
lea ecx, [ebp - 0x268]
call fcn.0043237b
test ebx, ebx
je 0x429167
push ebx
call fcn.0043220c
mov eax, dword [ebp - 0x278]
test eax, eax
je 0x429177
push eax
call fcn.0043220c
mov eax, edi
call fcn.0047dc41
ret 4
push edi
call fcn.004321e3
mov ebx, dword [ebp - 0x26c]
jmp 0x429122