Function at 0x447850
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
sub esp, 0x34c
lea eax, [esp + 4]
push ebx
push ebp
mov ebp, dword [esp + 0x360]
push esi
push edi
push 0x104
push ebp
push eax
call fcn.0042f1a0
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenA]
add esp, 0xc
push ebp
call ebx
mov esi, eax
add esi, 2
push esi
call fcn.00451b7b
mov edi, eax
add esp, 4
test edi, edi
je 0x4478e5
push esi
push ebp
push edi
call fcn.0042f1a0
mov ecx, dword [esp + 0x370]
push 0xc
mov esi, dword [ecx + 4]
mov ebp, dword [esi + 4]
call fcn.00451b7b
add esp, 0x10
mov ecx, esi
test esi, esi
jne 0x4478b8
mov ecx, eax
test ebp, ebp
mov dword [eax], ecx
jne 0x4478c0
mov ebp, eax
mov dword [eax + 4], ebp
mov dword [esi + 4], eax
mov edx, dword [eax + 4]
mov dword [edx], eax
add eax, 8
test eax, eax
je 0x4478d4
mov dword [eax], edi
mov eax, dword [esp + 0x364]
mov ebp, dword [esp + 0x368]
inc dword [eax + 8]
push 0x104
lea eax, [esp + 0x11c]
push ebp
push eax
call fcn.0042f1a0
add esp, 0xc
lea ecx, [esp + 0x118]
push ecx
call ebx
cmp byte [esp + eax + 0x117], 0x5c
je 0x44793d
lea edx, [esp + 0x118]
push edx
call ebx
cmp byte [esp + eax + 0x117], 0x3a
je 0x44793d
push 0x104
lea eax, [esp + 0x11c]
push 0x4695f4
push eax
call fcn.0042f1f0
add esp, 0xc
push 0x104
lea ecx, [esp + 0x11c]
push 0x47ceb0
push ecx
call fcn.0042f1f0
add esp, 0xc
lea edx, [esp + 0x21c]
lea eax, [esp + 0x118]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov esi, eax
test esi, esi
mov dword [esp + 0x10], esi
je 0x447b4a
cmp esi, 0xffffffff
je 0x447b4a
lea ecx, [esp + 0x21c]
push ecx
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
je 0x447b33
test byte [esp + 0x21c], 0x10
je 0x447a45
cmp byte [esp + 0x248], 0x2e
jne 0x4479c6
lea edx, [esp + 0x248]
push edx
call ebx
cmp eax, 3
jle 0x447b1c
push 0x104
lea eax, [esp + 0x18]
push ebp
push eax
call fcn.0042f1a0
add esp, 0xc
lea ecx, [esp + 0x14]
push ecx
call ebx
cmp byte [esp + eax + 0x13], 0x5c
je 0x447a0c
lea edx, [esp + 0x14]
push edx
call ebx
cmp byte [esp + eax + 0x13], 0x3a
je 0x447a0c
push 0x104
lea eax, [esp + 0x18]
push 0x4695f4
push eax
call fcn.0042f1f0
add esp, 0xc
lea ecx, [esp + 0x248]
push 0x104
lea edx, [esp + 0x18]
push ecx
push edx
call fcn.0042f1f0
mov ecx, dword [esp + 0x370]
mov edx, dword [esp + 0x36c]
lea eax, [esp + 0x20]
push eax
push ecx
push edx
call fcn.00447850
add esp, 0x18
jmp 0x447b1c
push 0x104
lea eax, [esp + 0x18]
push ebp
push eax
call fcn.0042f1a0
add esp, 0xc
lea ecx, [esp + 0x14]
push ecx
call ebx
cmp byte [esp + eax + 0x13], 0x5c
je 0x447a8b
lea edx, [esp + 0x14]
push edx
call ebx
cmp byte [esp + eax + 0x13], 0x3a
je 0x447a8b
push 0x104
lea eax, [esp + 0x18]
push 0x4695f4
push eax
call fcn.0042f1f0
add esp, 0xc
lea ecx, [esp + 0x248]
push 0x104
lea edx, [esp + 0x18]
push ecx
push edx
call fcn.0042f1f0
add esp, 0xc
lea eax, [esp + 0x14]
push eax
call ebx
mov esi, eax
add esi, 2
push esi
call fcn.00451b7b
mov edi, eax
add esp, 4
test edi, edi
je 0x447b18
lea ecx, [esp + 0x14]
push esi
push ecx
push edi
call fcn.0042f1a0
mov edx, dword [esp + 0x370]
push 0xc
mov esi, dword [edx + 4]
mov ebp, dword [esi + 4]
call fcn.00451b7b
add esp, 0x10
mov ecx, esi
test esi, esi
jne 0x447aeb
mov ecx, eax
test ebp, ebp
mov dword [eax], ecx
jne 0x447af3
mov ebp, eax
mov dword [eax + 4], ebp
mov dword [esi + 4], eax
mov ecx, dword [eax + 4]
mov dword [ecx], eax
add eax, 8
test eax, eax
je 0x447b07
mov dword [eax], edi
mov eax, dword [esp + 0x364]
mov ebp, dword [esp + 0x368]
inc dword [eax + 8]
mov esi, dword [esp + 0x10]
lea edx, [esp + 0x21c]
push edx
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x44799b
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x34c
ret
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x34c
ret