Function at 0x4cf7e4
Capabilities:
Enumerate files on windows

Disassembly:
push 0x284
mov eax, 0x5d8f46
call fcn.00506dfb
mov dword [ebp - 0x288], ecx
xor eax, eax
xor esi, esi
mov dword [ebp - 0x268], eax
xor edi, edi
mov edx, dword [0x682b1c]
mov dword [ebp - 0x270], eax
mov eax, dword [0x682b20]
sub eax, edx
sar eax, 2
test eax, eax
je 0x4cfac1
lea ecx, [edx + edi*4]
mov eax, dword [ecx]
cmp dword [eax - 0xc], 0
je 0x4cfaad
push 1
lea eax, [ebp - 0x274]
push eax
call fcn.00434d0c
and dword [ebp - 4], 0
mov ecx, eax
push 0x5f1b04
call fcn.0042e677
mov ecx, dword [ebp - 0x274]
test eax, eax
setne bl
or dword [ebp - 4], 0xffffffff
lea ecx, [ecx - 0x10]
call fcn.00412ac4
test bl, bl
je 0x4cf87d
mov eax, dword [0x682b1c]
push 0x5f1b04
lea ecx, [eax + edi*4]
call fcn.0042e473
push 0x250
lea eax, [ebp - 0x260]
push 0
push eax
call fcn.0056b050
mov eax, dword [0x682b1c]
push 0x61cfd8
lea eax, [eax + edi*4]
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.0042dfbd
add esp, 0x18
lea ecx, [ebp - 0x260]
push ecx
push dword [eax]
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov ecx, dword [ebp - 0x278]
mov ebx, eax
mov dword [ebp - 0x28c], ebx
lea ecx, [ecx - 0x10]
call fcn.00412ac4
cmp ebx, 0xffffffff
jne 0x4cf8de
xor esi, esi
jmp 0x4cfaa7
cmp dword [0x683574], 0
jne 0x4cfa9e
test byte [ebp - 0x260], 0x10
jne 0x4cfa83
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp - 0x26c]
call fcn.00413f09
xor esi, esi
lea eax, [ebp - 0x284]
push 3
inc esi
lea ecx, [ebp - 0x26c]
push eax
mov dword [ebp - 4], esi
call fcn.00434d0c
mov ebx, dword [ebp - 0x270]
mov ecx, eax
or ebx, esi
mov byte [ebp - 4], 2
push 0x61ffc0
mov dword [ebp - 0x268], ebx
call fcn.0042e69b
test eax, eax
je 0x4cf9b2
push 4
pop esi
push esi
lea eax, [ebp - 0x280]
push eax
lea ecx, [ebp - 0x26c]
call fcn.00434d0c
or ebx, 2
mov dword [ebp - 4], 3
push str..dat
mov ecx, eax
mov dword [ebp - 0x268], ebx
call fcn.0042e69b
test eax, eax
je 0x4cf9b2
push 5
lea eax, [ebp - 0x27c]
push eax
lea ecx, [ebp - 0x26c]
call fcn.00434d0c
or ebx, esi
mov dword [ebp - 4], esi
push str..info
mov ecx, eax
mov dword [ebp - 0x268], ebx
call fcn.0042e69b
mov byte [ebp - 0x261], 0
test eax, eax
jne 0x4cf9b9
mov byte [ebp - 0x261], 1
test bl, 4
je 0x4cf9cf
mov ecx, dword [ebp - 0x27c]
and ebx, 0xfffffffb
lea ecx, [ecx - 0x10]
call fcn.00412ac4
test bl, 2
je 0x4cf9e5
mov ecx, dword [ebp - 0x280]
and ebx, 0xfffffffd
lea ecx, [ecx - 0x10]
call fcn.00412ac4
mov ecx, dword [ebp - 0x284]
and ebx, 0xfffffffe
mov dword [ebp - 4], 1
mov dword [ebp - 0x270], ebx
lea ecx, [ecx - 0x10]
call fcn.00412ac4
cmp byte [ebp - 0x261], 0
je 0x4cfa6b
mov eax, dword [0x682b1c]
mov eax, dword [eax + edi*4]
sub eax, 0x10
push eax
call fcn.00412393
add eax, 0x10
mov dword [ebp - 0x268], eax
lea eax, [ebp - 0x234]
mov byte [ebp - 4], 5
push eax
lea eax, [ebp - 0x268]
push 0x5f1ce0
push eax
call fcn.004607c0
add esp, 0xc
mov ecx, esp
push 0x61ffb0
call fcn.00413f09
mov esi, dword [ebp - 0x268]
mov ecx, dword [ebp - 0x288]
push esi
call fcn.0045ed1e
lea ecx, [esi - 0x10]
call fcn.00412ac4
mov ecx, dword [ebp - 0x26c]
or dword [ebp - 4], 0xffffffff
lea ecx, [ecx - 0x10]
call fcn.00412ac4
mov ebx, dword [ebp - 0x28c]
lea eax, [ebp - 0x260]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x4cf8de
xor esi, esi
inc esi
jmp 0x4cfaa0
xor esi, esi
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov edx, dword [0x682b1c]
mov ecx, dword [0x682b20]
inc edi
sub ecx, edx
sar ecx, 2
cmp edi, ecx
jb 0x4cf823
mov eax, esi
call fcn.00506da5
ret