Function at 0x467310
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x95c
mov eax, dword [0x57c870]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x810]
push ecx
call fcn.00532580
add esp, 8
lea edx, [ebp - 0x810]
push edx
call fcn.00532e80
add esp, 4
test eax, eax
jbe 0x46737c
lea eax, [ebp - 0x810]
push eax
call fcn.00532e80
add esp, 4
movsx ecx, byte [ebp + eax - 0x811]
cmp ecx, 0x5c
jne 0x46737c
lea edx, [ebp - 0x810]
push edx
call fcn.00532e80
add esp, 4
mov byte [ebp + eax - 0x811], 0
lea eax, [ebp - 0x810]
push eax
push 0x565cb4
lea ecx, [ebp - 0x410]
push ecx
call fcn.00532706
add esp, 0xc
lea edx, [ebp - 0x958]
push edx
lea eax, [ebp - 0x410]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x814], eax
cmp dword [ebp - 0x814], 0xffffffff
je 0x467655
mov ecx, dword [ebp + 0xc]
lea edx, [ebp + ecx - 0x811]
mov dword [ebp - 0x95c], edx
mov eax, dword [ebp - 0x95c]
movsx ecx, byte [eax]
test ecx, ecx
je 0x4673fa
mov edx, dword [ebp - 0x95c]
movsx eax, byte [edx]
cmp eax, 0x5c
je 0x4673fa
mov ecx, dword [ebp - 0x95c]
sub ecx, 1
mov dword [ebp - 0x95c], ecx
jmp 0x4673ce
mov edx, dword [ebp - 0x95c]
add edx, 1
mov dword [ebp - 0x95c], edx
movsx eax, byte [ebp - 0x92c]
cmp eax, 0x2e
jne 0x46741a
jmp 0x46762c
mov ecx, dword [ebp - 0x958]
and ecx, 0x10
je 0x4674db
push 0x565cbc
lea edx, [ebp - 0x92c]
push edx
call fcn.005327a0
add esp, 8
test eax, eax
jne 0x467446
jmp 0x46762c
push 0x565cc4
lea eax, [ebp - 0x92c]
push eax
call fcn.005327a0
add esp, 8
test eax, eax
jne 0x467463
jmp 0x46762c
push 0x565ccc
lea ecx, [ebp - 0x92c]
push ecx
call fcn.005327a0
add esp, 8
test eax, eax
jne 0x467480
jmp 0x46762c
push 0x565cd8
lea edx, [ebp - 0x92c]
push edx
call fcn.005327a0
add esp, 8
test eax, eax
jne 0x46749d
jmp 0x46762c
lea eax, [ebp - 0x92c]
push eax
lea ecx, [ebp - 0x810]
push ecx
push 0x565ce0
lea edx, [ebp - 0x208]
push edx
call fcn.00532706
add esp, 0x10
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
lea edx, [ebp - 0x208]
push edx
call fcn.00467310
add esp, 0xc
jmp 0x46762c
push 0x565ce8
lea eax, [ebp - 0x92c]
push eax
call fcn.005327a0
add esp, 8
test eax, eax
jne 0x4674f8
jmp 0x46762c
push 0x565cf0
lea ecx, [ebp - 0x92c]
push ecx
call fcn.005327a0
add esp, 8
test eax, eax
jne 0x467515
jmp 0x46762c
push 0x565cf8
lea edx, [ebp - 0x92c]
push edx
call fcn.005327a0
add esp, 8
test eax, eax
jne 0x467532
jmp 0x46762c
lea eax, [ebp - 0x92c]
push eax
lea ecx, [ebp - 0x810]
push ecx
push 0x565d04
lea edx, [ebp - 0x610]
push edx
call fcn.00532706
add esp, 0x10
push 0x5c
lea eax, [ebp - 0x810]
push eax
call fcn.005350b0
add esp, 8
test eax, eax
je 0x4675ae
mov ecx, dword [ebp + 0xc]
lea edx, [ebp + ecx - 0x811]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
movsx ecx, byte [eax]
cmp ecx, 0x5c
je 0x46758c
mov edx, dword [ebp - 4]
sub edx, 1
mov dword [ebp - 4], edx
jmp 0x467576
lea eax, [ebp - 0x92c]
push eax
mov ecx, dword [ebp - 4]
add ecx, 1
push ecx
push 0x565d0c
lea edx, [ebp - 0x610]
push edx
call fcn.00532706
add esp, 0x10
lea eax, [ebp - 0x610]
push eax
push 0
push 0
push 0x565d14
lea ecx, [ebp - 0x410]
push ecx
call fcn.00532706
add esp, 0x14
cmp dword [ebp + 0x10], 0
je 0x46762c
push 0x565d28
mov edx, dword [ebp + 0x10]
push edx
call fcn.0042eaa0
add esp, 8
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0
je 0x46762c
mov eax, dword [ebp - 0x20c]
push eax
lea ecx, [ebp - 0x410]
push ecx
call fcn.00534f64
add esp, 8
mov edx, dword [ebp - 0x20c]
push edx
push 0x565d2c
call fcn.00534f64
add esp, 8
mov eax, dword [ebp - 0x20c]
push eax
call fcn.00431d50
add esp, 4
lea ecx, [ebp - 0x958]
push ecx
mov edx, dword [ebp - 0x814]
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x467409
mov eax, dword [ebp - 0x814]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
xor eax, eax
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.00532783
mov esp, ebp
pop ebp
ret