Function at 0x428209
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push 0x278
mov eax, 0x488b15
call fcn.0047ceef
mov dword [ebp - 0x27c], edx
mov eax, ecx
mov dword [ebp - 0x280], eax
mov ecx, dword [ebp + 8]
and dword [ebp - 0x278], 0
mov dword [ebp - 0x270], ecx
and dword [ebp - 4], 0
xor ebx, ebx
mov dword [ebp - 0x26c], ebx
or dword [ebp - 0x268], 0xffffffff
mov byte [ebp - 4], 2
test eax, eax
jne 0x428261
mov edi, 0x80070057
push edi
call fcn.004314fa
jmp 0x428580
lea ecx, [ebp - 0x278]
push ecx
push 0
push 0x409778
push eax
call fcn.004307e7
mov edi, eax
test edi, edi
js 0x428256
push 0x250
lea eax, [ebp - 0x264]
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0x264]
push eax
push dword [ebp - 0x278]
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
push eax
lea ecx, [ebp - 0x268]
call fcn.0041a4f2
cmp dword [ebp - 0x268], 0
je 0x428568
cmp dword [ebp - 0x268], 0xffffffff
je 0x428568
mov ecx, 0x407390
lea eax, [ebp - 0x238]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4282fb
test dx, dx
je 0x4282f7
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4282fb
add eax, 4
add ecx, 4
test dx, dx
jne 0x4282d5
xor eax, eax
jmp 0x428300
sbb eax, eax
or eax, 1
test eax, eax
je 0x42852c
mov ecx, 0x406f00
lea eax, [ebp - 0x238]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x428339
test dx, dx
je 0x428335
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x428339
add eax, 4
add ecx, 4
test dx, dx
jne 0x428313
xor eax, eax
jmp 0x42833e
sbb eax, eax
or eax, 1
test eax, eax
je 0x42852c
test ebx, ebx
je 0x428357
push ebx
call fcn.00431523
and dword [ebp - 0x26c], 0
lea eax, [ebp - 0x26c]
push eax
push 0
lea eax, [ebp - 0x238]
push eax
push dword [ebp - 0x280]
call fcn.004307e7
mov edi, eax
test edi, edi
js 0x4285df
mov ebx, dword [ebp - 0x26c]
xor edx, edx
mov ecx, ebx
call fcn.0042782b
test eax, eax
jns 0x4283aa
mov eax, dword [0x48dcb8]
test eax, eax
je 0x42839d
cmp eax, 0xffffffff
jne 0x42839f
xor eax, eax
push ebx
push 0x40977c
jmp 0x4284e6
test byte [ebp - 0x264], 0x10
mov ecx, ebx
je 0x4284ab
mov edx, dword [ebp - 0x27c]
lea eax, [ebp - 0x284]
push eax
lea eax, [ebp - 0x274]
push eax
push dword [ebp - 0x270]
call fcn.0042801f
mov edi, eax
test edi, edi
js 0x428256
cmp dword [ebp - 0x274], 0
mov eax, dword [0x48dcb8]
je 0x428464
test eax, eax
je 0x4283f9
cmp eax, 0xffffffff
jne 0x4283fb
xor eax, eax
push ebx
push 0x4097b0
push dword [0x490330]
push eax
call fcn.0041ad72
add esp, 0x10
cmp dword [ebp - 0x284], 0
je 0x42852c
mov eax, dword [0x48dcb8]
test eax, eax
je 0x42842b
cmp eax, 0xffffffff
jne 0x42842d
xor eax, eax
push ebx
push 0x4097e8
push dword [0x490330]
push eax
call fcn.0041ad72
mov edx, dword [ebp - 0x27c]
add esp, 0x10
mov ecx, ebx
push dword [ebp - 0x270]
call fcn.00428209
mov edi, eax
test edi, edi
js 0x428256
jmp 0x42852c
test eax, eax
je 0x42846d
cmp eax, 0xffffffff
jne 0x42846f
xor eax, eax
push ebx
push 0x409828
push dword [0x490330]
push eax
call fcn.0041ad72
add esp, 0x10
mov ecx, ebx
call fcn.00427b6b
test eax, eax
jns 0x42852c
mov eax, dword [0x48dcb8]
test eax, eax
je 0x4284a1
cmp eax, 0xffffffff
jne 0x4284a3
xor eax, eax
push ebx
push 0x40985c
jmp 0x4284e6
mov edx, dword [ebp - 0x270]
lea eax, [ebp - 0x274]
push eax
call fcn.00428156
mov edi, eax
test edi, edi
js 0x428256
cmp dword [ebp - 0x274], 0
je 0x4284f7
mov eax, dword [0x48dcb8]
test eax, eax
je 0x4284de
cmp eax, 0xffffffff
jne 0x4284e0
xor eax, eax
push ebx
push 0x409894
push dword [0x490330]
push eax
call fcn.0041ad72
add esp, 0x10
jmp 0x42852c
mov ecx, ebx
call fcn.00427c9c
mov edi, eax
test edi, edi
jns 0x42852c
mov eax, dword [0x48dcb8]
test eax, eax
je 0x428512
cmp eax, 0xffffffff
jne 0x428514
xor eax, eax
push ebx
push edi
push 0x4098c8
push dword [0x490330]
push eax
call fcn.0041ad72
add esp, 0x14
xor edi, edi
push 0x250
lea eax, [ebp - 0x264]
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0x264]
push eax
push dword [ebp - 0x268]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x4282ca
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x12
je 0x42857c
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
call fcn.004317f4
mov edi, eax
push edi
call fcn.004314fa
test edi, edi
jns 0x4285aa
mov eax, dword [0x48dcb8]
test eax, eax
je 0x42858e
cmp eax, 0xffffffff
jne 0x428590
xor eax, eax
push edi
push 0x40990c
push 0x406200
push dword [0x490330]
push eax
call fcn.0041ad72
add esp, 0x14
push edi
call fcn.00431467
lea ecx, [ebp - 0x268]
call fcn.00431692
test ebx, ebx
je 0x4285c5
push ebx
call fcn.00431523
mov eax, dword [ebp - 0x278]
test eax, eax
je 0x4285d5
push eax
call fcn.00431523
mov eax, edi
call fcn.0047cea1
ret 4
push edi
call fcn.004314fa
mov ebx, dword [ebp - 0x26c]
jmp 0x428580