Function at 0x404dd5
Capabilities:
Enumerate files on windows

Disassembly:
push 0x2f8
mov eax, 0x5c5db0
call fcn.0058ecca
mov ebx, ecx
mov dword [ebp - 0x2c4], ebx
mov eax, dword [ebp + 8]
mov dword [ebp - 0x2c0], eax
mov byte [ebp - 0x2a5], 0
xor edi, edi
mov dword [ebp - 4], edi
push ebx
lea esi, [ebp - 0x34]
call fcn.0040822e
mov byte [ebp - 4], 1
push 0x6823c8
mov eax, esi
push eax
call fcn.0040825c
mov dword [ebp - 0x2a4], edi
push 0x24c
push edi
lea eax, [ebp - 0x2a0]
push eax
call fcn.00586790
add esp, 0xc
cmp dword [ebp - 0x1c], 8
mov eax, dword [ebp - 0x30]
jae 0x404e42
lea eax, [ebp - 0x30]
lea ecx, [ebp - 0x2a4]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x2b0], eax
cmp eax, 0xffffffff
je 0x40507c
push dword [sym.imp.KERNEL32.dll_FindClose]
push eax
lea esi, [ebp - 0x2c8]
call fcn.0040dc2a
mov byte [ebp - 4], 2
mov byte [ebp - 4], 3
cmp dword [ebp - 0x284], 0
jbe 0x40502f
test byte [ebp - 0x2a4], 0x10
jne 0x40502f
lea eax, [ebp - 0x2bc]
push eax
call fcn.004050ad
mov byte [ebp - 4], 4
and dword [ebp - 0x2bc], 0
lea edi, [ebx + 4]
cmp dword [ebx + 0x18], 8
jb 0x404eb7
mov eax, dword [edi]
jmp 0x404eb9
mov eax, edi
push eax
lea eax, [ebp - 0x2b8]
push eax
call fcn.0040865a
lea eax, [ebp - 0x278]
push eax
lea eax, [ebp - 0x2b4]
push eax
call fcn.0040865a
push ebx
lea esi, [ebp - 0x50]
call fcn.0040822e
mov byte [ebp - 4], 5
push 0x6810d0
mov eax, esi
push eax
call fcn.0040825c
lea eax, [ebp - 0x278]
push eax
mov eax, esi
push eax
call fcn.0040825c
mov eax, esi
push eax
lea ecx, [ebp - 0x304]
call fcn.00404c44
pop ecx
mov byte [ebp - 4], 6
cmp dword [eax + 0x18], 8
jb 0x404f20
mov eax, dword [eax + 4]
jmp 0x404f23
add eax, 4
push eax
lea eax, [ebp - 0x2ac]
push eax
call fcn.004085b5
mov byte [ebp - 4], 8
push 0
push 1
lea esi, [ebp - 0x304]
call fcn.00409da6
mov eax, dword [ebp - 0x2ac]
mov eax, dword [eax - 0xc]
test eax, eax
jne 0x404f89
cmp dword [ebx + 0x18], 8
jb 0x404f58
mov edi, dword [edi]
push edi
lea eax, [ebp - 0x2ac]
push eax
call fcn.0040865a
push 0x6810d0
lea eax, [ebp - 0x2ac]
push eax
call fcn.00408678
lea eax, [ebp - 0x278]
push eax
lea eax, [ebp - 0x2ac]
push eax
call fcn.00408678
lea eax, [ebp - 0x2ac]
call fcn.00408807
lea eax, [ebp - 0x2e8]
push eax
call fcn.0040510f
mov byte [ebp - 4], 9
lea eax, [ebp - 0x2ac]
lea edi, [ebp - 0x2e8]
call fcn.00408619
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x2e4]
call fcn.00408955
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x2cc], esp
push eax
mov ecx, edi
call fcn.00405188
mov byte [ebp - 4], 0xa
mov byte [ebp - 4], 9
mov edi, dword [ebp - 0x2c0]
call fcn.00407bde
add esp, 0x1c
mov byte [ebp - 4], 8
lea eax, [ebp - 0x2e8]
push eax
call fcn.00405159
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2ac]
call fcn.004085f6
mov byte [ebp - 4], 4
push 0
push 1
lea esi, [ebp - 0x50]
call fcn.00409da6
mov byte [ebp - 4], 3
lea eax, [ebp - 0x2bc]
push eax
call fcn.004050e0
mov dword [ebp - 4], 2
jmp 0x40504b
lea eax, [ebp - 0x2a4]
push eax
push dword [ebp - 0x2b0]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x404e75
mov byte [ebp - 0x2a5], 1
mov byte [ebp - 4], 1
lea esi, [ebp - 0x2c8]
call fcn.00404724
mov byte [ebp - 4], 0
push 0
push 1
lea esi, [ebp - 0x34]
call fcn.00409da6
or dword [ebp - 4], 0xffffffff
mov al, byte [ebp - 0x2a5]
call fcn.0058ed26
ret