Function at 0x417360
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x45b980
mov eax, dword fs:[0]
push eax
sub esp, 0x340
mov eax, dword [0x4810f4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x2bc], ecx
mov ecx, dword [ebp + 8]
call fcn.004074a0
movzx eax, al
test eax, eax
jne 0x41770e
lea ecx, [ebp + 0xc]
call fcn.00408150
movzx ecx, al
test ecx, ecx
je 0x41770e
mov edx, dword fs:[0x2c]
mov eax, dword [edx]
mov ecx, dword [0x485f94]
cmp ecx, dword [eax + 4]
jle 0x417409
push 0x485f94
call fcn.0043a7c1
add esp, 4
cmp dword [0x485f94], 0xffffffff
jne 0x417409
mov ecx, 0x485f90
call fcn.00401200
push 0x45d9d0
call fcn.0043aa91
add esp, 4
push 0x485f94
call fcn.0043a770
add esp, 4
mov edx, dword [ebp + 8]
push edx
lea ecx, [ebp - 0x44]
call fcn.00418580
lea eax, [ebp - 0x294]
push eax
push 0x4794a8
mov ecx, dword [ebp + 8]
push ecx
lea edx, [ebp - 0x304]
push edx
call fcn.00418a60
add esp, 0xc
mov ecx, eax
call fcn.00407540
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x2b0], eax
lea ecx, [ebp - 0x304]
call fcn.00407640
cmp dword [ebp - 0x2b0], 0xffffffff
jne 0x417471
lea ecx, [ebp - 0x44]
call fcn.0040a960
lea ecx, [ebp + 0xc]
call fcn.00403690
jmp 0x417716
mov dword [ebp - 0x29c], 0x4794b0
lea eax, [ebp - 0x268]
mov dword [ebp - 0x298], eax
mov ecx, dword [ebp - 0x298]
mov dx, word [ecx]
mov word [ebp - 0x2a6], dx
mov eax, dword [ebp - 0x29c]
cmp dx, word [eax]
jne 0x4174ed
cmp word [ebp - 0x2a6], 0
je 0x4174e1
mov ecx, dword [ebp - 0x298]
mov dx, word [ecx + 2]
mov word [ebp - 0x2a8], dx
mov eax, dword [ebp - 0x29c]
cmp dx, word [eax + 2]
jne 0x4174ed
add dword [ebp - 0x298], 4
add dword [ebp - 0x29c], 4
cmp word [ebp - 0x2a8], 0
jne 0x417487
mov dword [ebp - 0x2b4], 0
jmp 0x4174f8
sbb ecx, ecx
or ecx, 1
mov dword [ebp - 0x2b4], ecx
mov edx, dword [ebp - 0x2b4]
mov dword [ebp - 0x2c0], edx
cmp dword [ebp - 0x2c0], 0
je 0x4175ba
mov dword [ebp - 0x2a4], 0x4794b4
lea eax, [ebp - 0x268]
mov dword [ebp - 0x2a0], eax
mov ecx, dword [ebp - 0x2a0]
mov dx, word [ecx]
mov word [ebp - 0x2aa], dx
mov eax, dword [ebp - 0x2a4]
cmp dx, word [eax]
jne 0x41758d
cmp word [ebp - 0x2aa], 0
je 0x417581
mov ecx, dword [ebp - 0x2a0]
mov dx, word [ecx + 2]
mov word [ebp - 0x2ac], dx
mov eax, dword [ebp - 0x2a4]
cmp dx, word [eax + 2]
jne 0x41758d
add dword [ebp - 0x2a0], 4
add dword [ebp - 0x2a4], 4
cmp word [ebp - 0x2ac], 0
jne 0x417527
mov dword [ebp - 0x2b8], 0
jmp 0x417598
sbb ecx, ecx
or ecx, 1
mov dword [ebp - 0x2b8], ecx
mov edx, dword [ebp - 0x2b8]
mov dword [ebp - 0x2c4], edx
cmp dword [ebp - 0x2c4], 0
je 0x4175ba
mov eax, dword [ebp - 0x294]
and eax, 0x400
je 0x4175bf
jmp 0x4176dd
lea ecx, [ebp - 0x268]
push ecx
lea ecx, [ebp - 0x31c]
call fcn.00407790
push eax
lea ecx, [ebp - 0x2ec]
call fcn.00418580
lea edx, [ebp - 0x2ec]
push edx
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x2c]
push ecx
call fcn.00416dc0
add esp, 0xc
lea ecx, [ebp - 0x2ec]
call fcn.0040a960
lea ecx, [ebp - 0x31c]
call fcn.00407640
mov edx, dword [ebp - 0x294]
and edx, 0x10
je 0x41765c
sub esp, 0x28
mov ecx, esp
mov dword [ebp - 0x2cc], esp
lea eax, [ebp + 0xc]
push eax
call fcn.00406fb0
lea ecx, [ebp - 0x334]
push ecx
lea ecx, [ebp - 0x2c]
call fcn.00416d10
push eax
mov ecx, dword [ebp - 0x2bc]
call fcn.00417360
lea ecx, [ebp - 0x334]
call fcn.00407640
lea ecx, [ebp - 0x2c]
call fcn.0040a960
jmp 0x4176dd
lea edx, [ebp - 0x34c]
push edx
lea ecx, [ebp - 0x2c]
call fcn.00416d10
push eax
mov ecx, dword [ebp - 0x2bc]
call fcn.00416260
mov dword [ebp - 0x14], eax
lea ecx, [ebp - 0x34c]
call fcn.00407640
mov dword [ebp - 0x2c8], 0x417270
sub esp, 0x58
mov esi, esp
mov dword [ebp - 0x2d0], esp
push 0x485f90
lea eax, [ebp - 0x2d4]
push eax
call fcn.00418af0
add esp, 8
push eax
lea ecx, [ebp + 0xc]
push ecx
lea edx, [ebp - 0x14]
push edx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x2c8]
push ecx
push esi
call fcn.00418b10
add esp, 0x18
mov ecx, 0x485e98
call fcn.00418b50
lea ecx, [ebp - 0x2c]
call fcn.0040a960
lea edx, [ebp - 0x294]
push edx
mov eax, dword [ebp - 0x2b0]
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x417471
mov ecx, dword [ebp - 0x2b0]
push ecx
call dword [sym.imp.KERNEL32.dll_FindClose]
lea ecx, [ebp - 0x44]
call fcn.0040a960
lea ecx, [ebp + 0xc]
call fcn.00403690
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0043a762
mov esp, ebp
pop ebp
ret 0x2c