Function at 0x597ca0
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x670
mov eax, dword [0x673f64]
xor eax, ebp
mov dword [ebp - 4], eax
mov byte [ebp - 0x665], 1
mov dword [ebp - 0x66c], 0xffffffff
push 0x630978
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x414]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea edx, [ebp - 0x664]
push edx
lea eax, [ebp - 0x414]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x66c], eax
cmp dword [ebp - 0x66c], 0xffffffff
jne 0x597d09
mov byte [ebp - 0x665], 0
jmp 0x597f52
mov ecx, dword [ebp + 8]
push ecx
push 0x104
lea edx, [ebp - 0x20c]
push edx
call fcn.005b1d6f
add esp, 0xc
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAddBackslashW]
lea ecx, [ebp - 0x20c]
push ecx
push 0x104
lea edx, [ebp - 0x414]
push edx
call fcn.005b1d6f
add esp, 0xc
mov byte [ebp - 0x666], 1
movzx eax, byte [ebp - 0x666]
test eax, eax
je 0x597f08
lea ecx, [ebp - 0x664]
push ecx
mov edx, dword [ebp - 0x66c]
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x597ed9
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0x638]
cmp edx, 0x2e
jne 0x597dce
mov eax, 2
shl eax, 0
movzx ecx, word [ebp + eax - 0x638]
test ecx, ecx
je 0x597dcc
mov edx, 2
shl edx, 0
movzx eax, word [ebp + edx - 0x638]
cmp eax, 0x2e
jne 0x597dce
mov ecx, 2
shl ecx, 1
movzx edx, word [ebp + ecx - 0x638]
test edx, edx
jne 0x597dce
jmp 0x597d50
lea eax, [ebp - 0x638]
push eax
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
mov edx, dword [ebp - 0x664]
and edx, 0x10
je 0x597e4a
push 1
lea eax, [ebp - 0x20c]
push eax
call fcn.00597ca0
movzx ecx, al
test ecx, ecx
jne 0x597e1d
mov edx, dword [ebp - 0x66c]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov byte [ebp - 0x665], 0
jmp 0x597f08
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
lea ecx, [ebp - 0x414]
push ecx
push 0x104
lea edx, [ebp - 0x20c]
push edx
call fcn.005b1d6f
add esp, 0xc
jmp 0x597ed7
mov eax, dword [ebp - 0x664]
and eax, 1
je 0x597e93
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov dword [ebp - 0x670], eax
cmp dword [ebp - 0x670], 0xffffffff
je 0x597e93
mov edx, dword [ebp - 0x670]
and edx, 1
je 0x597e93
mov eax, dword [ebp - 0x670]
and eax, 0xfffffffe
push eax
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x597ebc
mov eax, dword [ebp - 0x66c]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov byte [ebp - 0x665], 0
jmp 0x597f08
lea ecx, [ebp - 0x414]
push ecx
push 0x104
lea edx, [ebp - 0x20c]
push edx
call fcn.005b1d6f
add esp, 0xc
jmp 0x597f03
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x12
jne 0x597eed
mov byte [ebp - 0x666], 0
jmp 0x597f03
mov eax, dword [ebp - 0x66c]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov byte [ebp - 0x665], 0
jmp 0x597f08
jmp 0x597d50
mov ecx, dword [ebp - 0x66c]
push ecx
call dword [sym.imp.KERNEL32.dll_FindClose]
movzx edx, byte [ebp + 0xc]
test edx, edx
jne 0x597f52
movzx eax, byte [ebp - 0x665]
test eax, eax
je 0x597f52
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
test eax, eax
je 0x597f3f
mov byte [ebp - 0x667], 1
jmp 0x597f46
mov byte [ebp - 0x667], 0
mov dl, byte [ebp - 0x667]
mov byte [ebp - 0x665], dl
mov al, byte [ebp - 0x665]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0058a7e9
mov esp, ebp
pop ebp
ret 8