Function at 0x424e20
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
sub esp, 0x34c
lea eax, [esp + 4]
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push ebp
mov ebp, dword [esp + 0x360]
push esi
push edi
push ebp
push eax
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenA]
push ebp
call esi
inc eax
push eax
call fcn.0043052b
mov edi, eax
add esp, 4
test edi, edi
je 0x424eae
push ebp
push edi
call ebx
mov ecx, dword [esp + 0x364]
push 0xc
mov esi, dword [ecx + 4]
mov ebp, dword [esi + 4]
call fcn.0043052b
add esp, 4
mov ecx, esi
test esi, esi
jne 0x424e7b
mov ecx, eax
test ebp, ebp
mov dword [eax], ecx
jne 0x424e83
mov ebp, eax
mov dword [eax + 4], ebp
mov dword [esi + 4], eax
mov edx, dword [eax + 4]
mov dword [edx], eax
add eax, 8
test eax, eax
je 0x424e97
mov dword [eax], edi
mov eax, dword [esp + 0x364]
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ebp, dword [esp + 0x368]
inc dword [eax + 8]
lea eax, [esp + 0x118]
push ebp
push eax
call ebx
lea ecx, [esp + 0x118]
push ecx
call esi
cmp byte [esp + eax + 0x117], 0x5c
je 0x424ef8
lea edx, [esp + 0x118]
push edx
call esi
cmp byte [esp + eax + 0x117], 0x3a
je 0x424ef8
mov edi, dword [sym.imp.KERNEL32.dll_lstrcatA]
lea eax, [esp + 0x118]
push 0x446350
push eax
call edi
jmp 0x424efe
mov edi, dword [sym.imp.KERNEL32.dll_lstrcatA]
lea ecx, [esp + 0x118]
push 0x4521c8
push ecx
call edi
lea edx, [esp + 0x21c]
lea eax, [esp + 0x118]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
test eax, eax
mov dword [esp + 0x10], eax
je 0x4250b4
cmp eax, 0xffffffff
je 0x4250b4
lea ecx, [esp + 0x21c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
je 0x425099
test byte [esp + 0x21c], 0x10
je 0x424fc8
cmp byte [esp + 0x248], 0x2e
je 0x42507e
lea edx, [esp + 0x14]
push ebp
push edx
call ebx
lea eax, [esp + 0x14]
push eax
call esi
cmp byte [esp + eax + 0x13], 0x5c
je 0x424f97
lea ecx, [esp + 0x14]
push ecx
call esi
cmp byte [esp + eax + 0x13], 0x3a
je 0x424f97
lea edx, [esp + 0x14]
push 0x446350
push edx
call edi
lea eax, [esp + 0x248]
lea ecx, [esp + 0x14]
push eax
push ecx
call edi
mov eax, dword [esp + 0x364]
mov ecx, dword [esp + 0x360]
lea edx, [esp + 0x14]
push edx
push eax
push ecx
call fcn.00424e20
add esp, 0xc
jmp 0x42507e
lea edx, [esp + 0x14]
push ebp
push edx
call ebx
lea eax, [esp + 0x14]
push eax
call esi
cmp byte [esp + eax + 0x13], 0x5c
je 0x424ff8
lea ecx, [esp + 0x14]
push ecx
call esi
cmp byte [esp + eax + 0x13], 0x3a
je 0x424ff8
lea edx, [esp + 0x14]
push 0x446350
push edx
call edi
lea eax, [esp + 0x248]
lea ecx, [esp + 0x14]
push eax
push ecx
call edi
lea edx, [esp + 0x14]
push edx
call esi
inc eax
push eax
call fcn.0043052b
mov ebp, eax
add esp, 4
test ebp, ebp
je 0x425077
lea eax, [esp + 0x14]
push eax
push ebp
call ebx
mov ecx, dword [esp + 0x364]
push 0xc
mov esi, dword [ecx + 4]
mov edi, dword [esi + 4]
call fcn.0043052b
add esp, 4
mov ecx, esi
test esi, esi
jne 0x425045
mov ecx, eax
test edi, edi
mov dword [eax], ecx
jne 0x42504d
mov edi, eax
mov dword [eax + 4], edi
mov dword [esi + 4], eax
mov edx, dword [eax + 4]
mov dword [edx], eax
add eax, 8
test eax, eax
je 0x425061
mov dword [eax], ebp
mov eax, dword [esp + 0x364]
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenA]
mov edi, dword [sym.imp.KERNEL32.dll_lstrcatA]
inc dword [eax + 8]
mov ebp, dword [esp + 0x368]
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x21c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x424f4f
mov edx, dword [esp + 0x10]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x34c
ret
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x34c
ret