Function at 0x472da3
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x458
cmp byte [0x504aca], 0
je 0x4730b3
push ebx
push esi
push edi
push 0x250
lea eax, [ebp - 0x250]
push 0
push eax
call fcn.0049a3b0
push 0x208
lea eax, [ebp - 0x458]
push 0
push eax
call fcn.0049a3b0
add esp, 0x18
lea eax, [ebp - 0x458]
push 0x4cdb38
push 0x502f50
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp - 0x250]
xor esi, esi
push eax
lea eax, [ebp - 0x458]
inc esi
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov edi, eax
push 4
pop ebx
cmp edi, 0xffffffff
je 0x472f12
test byte [ebp - 0x250], 0x10
lea eax, [ebp - 0x224]
je 0x472ea0
mov ecx, 0x4cb7a8
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x472e59
test dx, dx
je 0x472e55
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x472e59
add eax, ebx
add ecx, ebx
test dx, dx
jne 0x472e35
xor eax, eax
jmp 0x472e5e
sbb eax, eax
or eax, 1
test eax, eax
je 0x472ef5
mov ecx, 0x4cb7ac
lea eax, [ebp - 0x224]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x472e95
test dx, dx
je 0x472e91
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x472e95
add eax, ebx
add ecx, ebx
test dx, dx
jne 0x472e71
xor eax, eax
jmp 0x472e9a
sbb eax, eax
or eax, 1
test eax, eax
je 0x472ef5
jmp 0x472ef4
push 0x4d2f7c
push eax
call fcn.00476738
pop ecx
push eax
call fcn.0049e71a
pop ecx
pop ecx
test eax, eax
je 0x472ef4
lea eax, [ebp - 0x224]
push 0x4ccb5c
push eax
call fcn.00476738
pop ecx
push eax
call fcn.0049e71a
pop ecx
pop ecx
test eax, eax
je 0x472ef4
lea eax, [ebp - 0x224]
push 0x4ccb64
push eax
call fcn.00476738
pop ecx
push eax
call fcn.0049e71a
pop ecx
pop ecx
test eax, eax
jne 0x472ef5
inc esi
lea eax, [ebp - 0x250]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x472e21
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
call fcn.00465916
cdq
idiv esi
mov ebx, edx
test ebx, ebx
jne 0x472f2d
xor eax, eax
mov word [0x504ce0], ax
jmp 0x4730b0
lea eax, [ebp - 0x250]
xor esi, esi
push eax
lea eax, [ebp - 0x458]
inc esi
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov edi, eax
cmp edi, 0xffffffff
je 0x473060
test byte [ebp - 0x250], 0x10
lea eax, [ebp - 0x224]
je 0x472fd2
mov ecx, 0x4cb7a8
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x472f89
test dx, dx
je 0x472f85
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x472f89
add eax, 4
add ecx, 4
test dx, dx
jne 0x472f63
xor eax, eax
jmp 0x472f8e
sbb eax, eax
or eax, 1
test eax, eax
je 0x47302b
mov ecx, 0x4cb7ac
lea eax, [ebp - 0x224]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x472fc7
test dx, dx
je 0x472fc3
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x472fc7
add eax, 4
add ecx, 4
test dx, dx
jne 0x472fa1
xor eax, eax
jmp 0x472fcc
sbb eax, eax
or eax, 1
test eax, eax
je 0x47302b
jmp 0x473026
push 0x4d2f7c
push eax
call fcn.00476738
pop ecx
push eax
call fcn.0049e71a
pop ecx
pop ecx
test eax, eax
je 0x473026
lea eax, [ebp - 0x224]
push 0x4ccb5c
push eax
call fcn.00476738
pop ecx
push eax
call fcn.0049e71a
pop ecx
pop ecx
test eax, eax
je 0x473026
lea eax, [ebp - 0x224]
push 0x4ccb64
push eax
call fcn.00476738
pop ecx
push eax
call fcn.0049e71a
pop ecx
pop ecx
test eax, eax
jne 0x47302b
cmp esi, ebx
je 0x473043
inc esi
lea eax, [ebp - 0x250]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x472f4f
jmp 0x473059
lea eax, [ebp - 0x224]
push eax
push 0x104
push 0x504ce0
call fcn.0040c4d6
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
push 0
push 0x9d63
push 0x111
push dword [0x531f70]
call dword [sym.imp.USER32.dll_PostMessageW]
push 0x28
pop esi
cmp dword [0x533710], esi
jne 0x4730b0
push dword [0x533714]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x4730b0
and dword [0x533710], 0
push 1
call fcn.0048de8f
push 1
mov dword [0x533710], esi
call fcn.0048de8f
pop ecx
pop ecx
pop edi
pop esi
pop ebx
leave
ret