Function at 0x4ad1a023
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x270
mov eax, dword [0x4ad33b38]
mov ecx, dword [ebp + 0xc]
push ebx
push esi
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push edi
mov edi, dword [ebp + 0x18]
mov dword [ebp - 0x268], ecx
mov ecx, dword [ebp + 0x10]
push eax
mov dword [ebp - 0x25c], eax
mov dword [ebp - 0x264], ecx
mov dword [ebp - 0x26c], edi
call dword [sym.imp.msvcrt.dll_wcslen]
pop ecx
mov ecx, eax
xor esi, esi
xor edx, edx
cmp word [edi], si
mov dword [ebp - 0x258], ecx
mov eax, edi
je 0x4ad1a088
inc edx
mov bx, word [eax]
inc eax
inc eax
test bx, bx
jne 0x4ad1a079
cmp word [eax], si
jne 0x4ad1a078
sub eax, edi
sar eax, 1
lea eax, [eax + ecx + 1]
imul eax, edx
shl eax, 1
push eax
call fcn.4ad0206b
cmp eax, esi
mov dword [ebp - 0x260], eax
jne 0x4ad1a0b7
push esi
push 0x2374
call fcn.4ad050c9
pop ecx
pop ecx
jmp 0x4ad1a14b
cmp word [edi], 0
mov ebx, edi
mov edi, dword [sym.imp.msvcrt.dll_wcscpy]
mov esi, eax
je 0x4ad1a100
push dword [ebp - 0x258]
push dword [ebp - 0x25c]
push esi
call dword [sym.imp.msvcrt.dll_wcsncpy]
mov eax, dword [ebp - 0x258]
lea esi, [esi + eax*2]
push ebx
push esi
call edi
add esp, 0x14
xor eax, eax
jmp 0x4ad1a0f2
inc ebx
inc ebx
inc esi
inc esi
cmp word [ebx], ax
jne 0x4ad1a0ee
inc ebx
inc ebx
inc esi
inc esi
cmp word [ebx], ax
jne 0x4ad1a0c7
and word [esi], 0
push 1
push dword [ebp - 0x260]
push dword [ebp + 0x14]
push dword [ebp - 0x264]
push dword [ebp - 0x268]
call fcn.4ad1172f
push dword [ebp - 0x25c]
mov ebx, eax
call dword [sym.imp.msvcrt.dll_wcslen]
mov dword [ebp - 0x260], eax
pop ecx
lea eax, [eax + eax + 4]
push eax
call fcn.4ad0206b
mov esi, eax
test esi, esi
mov dword [ebp - 0x258], esi
jne 0x4ad1a153
xor eax, eax
inc eax
jmp 0x4ad1a2ae
push dword [ebp - 0x25c]
push esi
call edi
pop ecx
pop ecx
push esi
call fcn.4ad02ea5
mov esi, eax
inc esi
inc esi
push 0x4ad0ae18
push esi
call edi
pop ecx
pop ecx
lea eax, [ebp - 0x254]
push eax
push dword [ebp - 0x258]
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
and word [esi], 0
cmp eax, 0xffffffff
mov dword [ebp - 0x25c], eax
je 0x4ad1a2a1
test byte [ebp - 0x254], 0x10
je 0x4ad1a276
lea eax, [ebp - 0x228]
push 0x4ad02d34
push eax
call dword [sym.imp.msvcrt.dll_wcscmp]
test eax, eax
pop ecx
pop ecx
je 0x4ad1a276
lea eax, [ebp - 0x228]
push 0x4ad02d2c
push eax
call dword [sym.imp.msvcrt.dll_wcscmp]
test eax, eax
pop ecx
pop ecx
je 0x4ad1a276
push dword [ebp - 0x258]
mov ebx, dword [sym.imp.msvcrt.dll_wcslen]
call ebx
lea ecx, [ebp - 0x228]
push ecx
mov dword [ebp - 0x270], eax
call ebx
pop ecx
pop ecx
mov ecx, dword [ebp - 0x270]
lea ebx, [ecx + eax + 2]
cmp ebx, dword [ebp - 0x260]
jle 0x4ad1a237
lea eax, [ebx + ebx]
push eax
push dword [ebp - 0x258]
call fcn.4ad026f3
test eax, eax
je 0x4ad1a292
push eax
mov dword [ebp - 0x258], eax
mov dword [ebp - 0x260], ebx
call fcn.4ad02ea5
mov esi, eax
inc esi
inc esi
lea eax, [ebp - 0x228]
push eax
push esi
call edi
push 0x4ad0300c
push esi
call dword [sym.imp.msvcrt.dll_wcscat]
add esp, 0x10
push dword [ebp - 0x26c]
push dword [ebp + 0x14]
push dword [ebp - 0x264]
push dword [ebp - 0x268]
push dword [ebp - 0x258]
call fcn.4ad1a023
and word [esi], 0
mov ebx, eax
lea eax, [ebp - 0x254]
push eax
push dword [ebp - 0x25c]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x4ad1a295
jmp 0x4ad1a198
xor ebx, ebx
inc ebx
push dword [ebp - 0x25c]
call dword [sym.imp.KERNEL32.dll_FindClose]
push dword [ebp - 0x258]
call fcn.4ad01573
mov eax, ebx
mov ecx, dword [ebp - 4]
pop edi
pop esi
pop ebx
call fcn.4ad01389
leave
ret 0x14