Function at 0x409c90
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x670
mov eax, dword [0x5f4900]
xor eax, ebp
mov dword [ebp - 4], eax
mov byte [ebp - 0x665], 1
mov dword [ebp - 0x66c], 0xffffffff
push 0x58abe0
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x414]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea edx, [ebp - 0x664]
push edx
lea eax, [ebp - 0x414]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x66c], eax
cmp dword [ebp - 0x66c], 0xffffffff
jne 0x409cf9
mov byte [ebp - 0x665], 0
jmp 0x409f42
mov ecx, dword [ebp + 8]
push ecx
push 0x104
lea edx, [ebp - 0x20c]
push edx
call fcn.005508be
add esp, 0xc
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAddBackslashW]
lea ecx, [ebp - 0x20c]
push ecx
push 0x104
lea edx, [ebp - 0x414]
push edx
call fcn.005508be
add esp, 0xc
mov byte [ebp - 0x667], 1
movzx eax, byte [ebp - 0x667]
test eax, eax
je 0x409ef8
lea ecx, [ebp - 0x664]
push ecx
mov edx, dword [ebp - 0x66c]
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x409ec9
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0x638]
cmp edx, 0x2e
jne 0x409dbe
mov eax, 2
shl eax, 0
movzx ecx, word [ebp + eax - 0x638]
test ecx, ecx
je 0x409dbc
mov edx, 2
shl edx, 0
movzx eax, word [ebp + edx - 0x638]
cmp eax, 0x2e
jne 0x409dbe
mov ecx, 2
shl ecx, 1
movzx edx, word [ebp + ecx - 0x638]
test edx, edx
jne 0x409dbe
jmp 0x409d40
lea eax, [ebp - 0x638]
push eax
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
mov edx, dword [ebp - 0x664]
and edx, 0x10
je 0x409e3a
push 1
lea eax, [ebp - 0x20c]
push eax
call fcn.00409c90
movzx ecx, al
test ecx, ecx
jne 0x409e0d
mov edx, dword [ebp - 0x66c]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov byte [ebp - 0x665], 0
jmp 0x409ef8
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
lea ecx, [ebp - 0x414]
push ecx
push 0x104
lea edx, [ebp - 0x20c]
push edx
call fcn.005508be
add esp, 0xc
jmp 0x409ec7
mov eax, dword [ebp - 0x664]
and eax, 1
je 0x409e83
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov dword [ebp - 0x670], eax
cmp dword [ebp - 0x670], 0xffffffff
je 0x409e83
mov edx, dword [ebp - 0x670]
and edx, 1
je 0x409e83
mov eax, dword [ebp - 0x670]
and eax, 0xfffffffe
push eax
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x409eac
mov eax, dword [ebp - 0x66c]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov byte [ebp - 0x665], 0
jmp 0x409ef8
lea ecx, [ebp - 0x414]
push ecx
push 0x104
lea edx, [ebp - 0x20c]
push edx
call fcn.005508be
add esp, 0xc
jmp 0x409ef3
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x12
jne 0x409edd
mov byte [ebp - 0x667], 0
jmp 0x409ef3
mov eax, dword [ebp - 0x66c]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov byte [ebp - 0x665], 0
jmp 0x409ef8
jmp 0x409d40
mov ecx, dword [ebp - 0x66c]
push ecx
call dword [sym.imp.KERNEL32.dll_FindClose]
movzx edx, byte [ebp + 0xc]
test edx, edx
jne 0x409f42
movzx eax, byte [ebp - 0x665]
test eax, eax
je 0x409f42
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
test eax, eax
je 0x409f2f
mov byte [ebp - 0x666], 1
jmp 0x409f36
mov byte [ebp - 0x666], 0
mov dl, byte [ebp - 0x666]
mov byte [ebp - 0x665], dl
mov al, byte [ebp - 0x665]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005502f8
mov esp, ebp
pop ebp
ret 8