Function at 0x4308f0
Capabilities:
Enumerate files on windows
Enumerate files recursively
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4a579d
mov eax, dword fs:[0]
push eax
sub esp, 0x310
mov eax, dword [0x4c3518]
xor eax, esp
mov dword [esp + 0x308], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4c3518]
xor eax, esp
push eax
lea eax, [esp + 0x324]
mov dword fs:[0], eax
mov eax, dword [esp + 0x334]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x32c], 1
xor ebx, ebx
xor ecx, ecx
mov ebp, 7
push ebx
mov eax, 0x4aad14
lea esi, [esp + 0x28]
mov dword [esp + 0x40], ebp
mov dword [esp + 0x3c], ebx
mov word [esp + 0x2c], cx
call fcn.00409640
mov byte [esp + 0x32c], 2
push 0xffffffffffffffff
xor edx, edx
push ebx
lea eax, [esp + 0x340]
lea ecx, [esp + 0x48]
mov dword [esp + 0x60], ebp
mov dword [esp + 0x5c], ebx
mov word [esp + 0x4c], dx
call fcn.00409830
push 2
mov eax, 0x4b3908
lea ecx, [esp + 0x44]
mov byte [esp + 0x330], 3
call fcn.004191f0
mov eax, dword [esp + 0x44]
mov esi, 8
cmp dword [esp + 0x58], esi
jae 0x4309bb
lea eax, [esp + 0x44]
lea ecx, [esp + 0xcc]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [esp + 0x14], eax
cmp eax, 0xffffffff
jne 0x430a6c
cmp dword [esp + 0x58], esi
jb 0x4309ea
mov edx, dword [esp + 0x44]
push edx
call fcn.00485321
add esp, 4
xor eax, eax
mov word [esp + 0x44], ax
mov dword [esp + 0x54], ebx
mov dword [esp + 0x58], ebp
cmp dword [esp + 0x3c], esi
jb 0x430a0c
mov ecx, dword [esp + 0x28]
push ecx
call fcn.00485321
add esp, 4
xor edx, edx
mov word [esp + 0x28], dx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], ebp
cmp dword [esp + 0x350], esi
jb 0x430a34
mov eax, dword [esp + 0x33c]
push eax
call fcn.00485321
add esp, 4
xor ecx, ecx
mov dword [esp + 0x350], ebp
mov dword [esp + 0x34c], ebx
mov word [esp + 0x33c], cx
cmp dword [esp + 0x36c], esi
jb 0x430a65
mov edx, dword [esp + 0x358]
push edx
call fcn.00485321
add esp, 4
xor al, al
jmp 0x430f55
mov edi, 0x10
mov ecx, 0x4b3910
lea eax, [esp + 0xf8]
lea ecx, [ecx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x430aa6
cmp dx, bx
je 0x430aa2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x430aa6
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x430a80
xor eax, eax
jmp 0x430aab
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x430e9e
mov ecx, 0x4b3914
lea eax, [esp + 0xf8]
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x430ae6
cmp dx, bx
je 0x430ae2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x430ae6
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x430ac0
xor eax, eax
jmp 0x430aeb
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x430e9e
xor eax, eax
mov word [esp + 0xb4], ax
lea eax, [esp + 0xf8]
mov dword [esp + 0xc8], ebp
mov dword [esp + 0xc4], ebx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x430b15
sub eax, edx
sar eax, 1
push eax
lea eax, [esp + 0xfc]
lea esi, [esp + 0xb4]
call fcn.00409640
mov byte [esp + 0x32c], 4
xor ecx, ecx
push 0xffffffffffffffff
mov word [esp + 0x64], cx
push ebx
lea eax, [esp + 0x340]
lea ecx, [esp + 0x64]
mov dword [esp + 0x7c], ebp
mov dword [esp + 0x78], ebx
call fcn.00409830
push 1
mov eax, 0x4b2e6c
lea ecx, [esp + 0x60]
mov byte [esp + 0x330], 5
call fcn.004191f0
mov edx, esi
push ebx
push edx
or eax, 0xffffffff
lea esi, [esp + 0x64]
call fcn.00419130
push 0xffffffffffffffff
lea ecx, [esp + 0x28]
push ebx
cmp dword [esp + 0x370], ebx
ja 0x430ba8
lea eax, [esp + 0xb8]
call fcn.00409830
jmp 0x430bd9
lea eax, [esp + 0x35c]
call fcn.00409830
push 1
mov eax, 0x4b3904
lea ecx, [esp + 0x28]
call fcn.004191f0
push ebx
lea eax, [esp + 0xb4]
push eax
or eax, 0xffffffff
lea esi, [esp + 0x2c]
call fcn.00419130
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 0xffffffffffffffff
xor edx, edx
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], ebx
push ebx
lea eax, [esp + 0x48]
mov word [ecx + 4], dx
call fcn.00409830
lea esi, [esp + 0x94]
call fcn.00430660
mov ecx, esp
mov byte [esp + 0x348], 6
mov dword [esp + 0x34], esp
xor eax, eax
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], ebx
push 0xffffffffffffffff
mov word [ecx + 4], ax
push ebx
lea eax, [esp + 0x80]
call fcn.00409830
lea esi, [esp + 0xb0]
call fcn.00430660
add esp, 0x1c
mov byte [esp + 0x32c], 7
test byte [esp + 0xcc], 0x10
mov eax, dword [esp + 0x98]
je 0x430dbf
cmp dword [esp + 0xac], edi
jae 0x430c6b
lea eax, [esp + 0x98]
cmp dword [esp + 0x90], edi
mov edi, dword [esp + 0x7c]
jae 0x430c7c
lea edi, [esp + 0x7c]
mov esi, dword [esp + 0x1c]
push 1
push eax
mov ecx, esi
call fcn.004310e0
add esp, 8
test al, al
je 0x430cf7
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 0xffffffffffffffff
xor edx, edx
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], ebx
push ebx
lea eax, [esp + 0x48]
mov word [ecx + 4], dx
call fcn.00409830
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0x364], 8
mov dword [esp + 0x58], esp
xor eax, eax
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], ebx
push 0xffffffffffffffff
mov word [ecx + 4], ax
push ebx
lea eax, [esp + 0x9c]
call fcn.00409830
push esi
mov byte [esp + 0x368], 7
call fcn.004308f0
add esp, 0x3c
cmp al, bl
jne 0x430df6
mov ecx, dword [esp + 0x14]
push ecx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov edi, 0x10
cmp dword [esp + 0xac], edi
jb 0x430d20
mov edx, dword [esp + 0x98]
push edx
call fcn.00485321
add esp, 4
mov esi, 0xf
mov dword [esp + 0xac], esi
mov dword [esp + 0xa8], ebx
mov byte [esp + 0x98], bl
cmp dword [esp + 0x90], edi
jb 0x430d50
mov eax, dword [esp + 0x7c]
push eax
call fcn.00485321
add esp, 4
mov dword [esp + 0x90], esi
mov esi, 8
mov dword [esp + 0x8c], ebx
mov byte [esp + 0x7c], bl
cmp dword [esp + 0x74], esi
jb 0x430d7a
mov ecx, dword [esp + 0x60]
push ecx
call fcn.00485321
add esp, 4
xor edx, edx
mov dword [esp + 0x74], ebp
mov dword [esp + 0x70], ebx
mov word [esp + 0x60], dx
cmp dword [esp + 0xc8], esi
jb 0x430da2
mov eax, dword [esp + 0xb4]
push eax
call fcn.00485321
add esp, 4
xor ecx, ecx
mov dword [esp + 0xc8], ebp
mov dword [esp + 0xc4], ebx
mov word [esp + 0xb4], cx
jmp 0x4309d7
cmp dword [esp + 0xac], edi
jae 0x430dcf
lea eax, [esp + 0x98]
cmp dword [esp + 0x90], edi
mov edi, dword [esp + 0x7c]
jae 0x430de0
lea edi, [esp + 0x7c]
mov ecx, dword [esp + 0x1c]
push ebx
push eax
call fcn.004310e0
add esp, 8
test al, al
je 0x430f7d
mov edi, 0x10
cmp dword [esp + 0xac], edi
jb 0x430e14
mov ecx, dword [esp + 0x98]
push ecx
call fcn.00485321
add esp, 4
mov esi, 0xf
mov dword [esp + 0xac], esi
mov dword [esp + 0xa8], ebx
mov byte [esp + 0x98], bl
cmp dword [esp + 0x90], edi
jb 0x430e44
mov edx, dword [esp + 0x7c]
push edx
call fcn.00485321
add esp, 4
mov dword [esp + 0x90], esi
mov esi, 8
mov dword [esp + 0x8c], ebx
mov byte [esp + 0x7c], bl
cmp dword [esp + 0x74], esi
jb 0x430e6e
mov eax, dword [esp + 0x60]
push eax
call fcn.00485321
add esp, 4
xor ecx, ecx
mov byte [esp + 0x32c], 3
mov dword [esp + 0x74], ebp
mov dword [esp + 0x70], ebx
mov word [esp + 0x60], cx
cmp dword [esp + 0xc8], esi
jb 0x430e9e
mov edx, dword [esp + 0xb4]
push edx
call fcn.00485321
add esp, 4
mov esi, dword [esp + 0x14]
lea eax, [esp + 0xcc]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x430a6c
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov esi, 8
cmp dword [esp + 0x58], esi
jb 0x430ed8
mov edx, dword [esp + 0x44]
push edx
call fcn.00485321
add esp, 4
xor eax, eax
mov dword [esp + 0x58], ebp
mov dword [esp + 0x54], ebx
mov word [esp + 0x44], ax
cmp dword [esp + 0x3c], esi
jb 0x430efa
mov ecx, dword [esp + 0x28]
push ecx
call fcn.00485321
add esp, 4
xor edx, edx
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x38], ebx
mov word [esp + 0x28], dx
cmp dword [esp + 0x350], esi
jb 0x430f22
mov eax, dword [esp + 0x33c]
push eax
call fcn.00485321
add esp, 4
xor ecx, ecx
mov dword [esp + 0x350], ebp
mov dword [esp + 0x34c], ebx
mov word [esp + 0x33c], cx
cmp dword [esp + 0x36c], esi
jb 0x430f53
mov edx, dword [esp + 0x358]
push edx
call fcn.00485321
add esp, 4
mov al, 1
mov ecx, dword [esp + 0x324]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x308]
xor ecx, esp
call fcn.0048532c
add esp, 0x31c
ret
mov eax, dword [esp + 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov edi, 0x10
cmp dword [esp + 0xac], edi
jb 0x430fa6
mov ecx, dword [esp + 0x98]
push ecx
call fcn.00485321
add esp, 4
mov esi, 0xf
mov dword [esp + 0xac], esi
mov dword [esp + 0xa8], ebx
mov byte [esp + 0x98], bl
cmp dword [esp + 0x90], edi
jb 0x430fd6
mov edx, dword [esp + 0x7c]
push edx
call fcn.00485321
add esp, 4
mov dword [esp + 0x90], esi
mov esi, 8
mov dword [esp + 0x8c], ebx
mov byte [esp + 0x7c], bl
cmp dword [esp + 0x74], esi
jb 0x431000
mov eax, dword [esp + 0x60]
push eax
call fcn.00485321
add esp, 4
xor ecx, ecx
mov dword [esp + 0x74], ebp
mov dword [esp + 0x70], ebx
mov word [esp + 0x60], cx
cmp dword [esp + 0xc8], esi
jb 0x431028
mov edx, dword [esp + 0xb4]
push edx
call fcn.00485321
add esp, 4
xor eax, eax
mov dword [esp + 0xc8], ebp
mov dword [esp + 0xc4], ebx
mov word [esp + 0xb4], ax
cmp dword [esp + 0x58], esi
jb 0x431053
mov ecx, dword [esp + 0x44]
push ecx
call fcn.00485321
add esp, 4
xor edx, edx
mov dword [esp + 0x58], ebp
mov dword [esp + 0x54], ebx
mov word [esp + 0x44], dx
cmp dword [esp + 0x3c], esi
jb 0x431075
mov eax, dword [esp + 0x28]
push eax
call fcn.00485321
add esp, 4
xor ecx, ecx
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x38], ebx
mov word [esp + 0x28], cx
cmp dword [esp + 0x350], esi
jb 0x43109d
mov edx, dword [esp + 0x33c]
push edx
call fcn.00485321
add esp, 4
xor eax, eax
mov dword [esp + 0x350], ebp
mov dword [esp + 0x34c], ebx
mov word [esp + 0x33c], ax
cmp dword [esp + 0x36c], esi
jb 0x430a65
mov ecx, dword [esp + 0x358]
push ecx
call fcn.00485321
add esp, 4
xor al, al
jmp 0x430f55