Function at 0x408d4e
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
lea ebp, [esp - 0x50]
sub esp, 0x354
cmp dword [ebp + 0x64], 3
push ebx
push esi
push edi
mov dword [ebp + 0x48], ecx
jne 0x408e2b
push 0x104
push dword [ebp + 0x70]
lea eax, [ebp - 0x200]
push eax
call fcn.00438c34
lea eax, [ebp - 0x200]
push 0x5c
push eax
call fcn.00454340
add esp, 0x14
test eax, eax
je 0x408db9
lea esi, [eax + 1]
lea eax, [ebp - 0x304]
push esi
push eax
call fcn.004538d0
lea eax, [ebp - 0x200]
push eax
mov byte [esi], 0
call fcn.00453b00
add esp, 0xc
mov dword [ebp + 0x4c], eax
jmp 0x408dd9
lea eax, [ebp - 0x200]
push eax
lea eax, [ebp - 0x304]
push eax
call fcn.004538d0
and dword [ebp + 0x4c], 0
pop ecx
pop ecx
mov byte [ebp - 0x200], 0
lea eax, [ebp - 0xfc]
push eax
push dword [ebp + 0x70]
call dword [sym.imp.KERNEL32.DLL_FindFirstFileA]
mov ebx, eax
xor eax, eax
cmp ebx, 0xffffffff
setne al
jmp 0x408e23
push dword [ebp + 0x4c]
lea eax, [ebp - 0x200]
push eax
push dword [ebp + 0x68]
lea eax, [ebp - 0xfc]
push eax
call fcn.00423b87
add esp, 0x10
test al, al
je 0x408e30
lea eax, [ebp - 0xfc]
push eax
push ebx
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
mov edi, eax
test edi, edi
jne 0x408df5
jmp 0x408e30
xor edi, edi
or ebx, 0xffffffff
and dword [ebp + 0x44], 0
cmp byte [ebp + 0x7c], 0
jne 0x408e5c
test edi, edi
jne 0x408e60
mov eax, dword [0x463224]
cmp eax, dword [ebp + 0x78]
jg 0x408f09
jl 0x408e5c
mov eax, dword [0x463220]
cmp eax, dword [ebp + 0x74]
ja 0x408f09
test edi, edi
je 0x408e6b
lea eax, [ebp - 0xfc]
mov dword [0x463228], eax
lea eax, [ebp + 0x44]
push eax
push dword [ebp + 0x58]
mov eax, dword [ebp + 0x48]
mov ecx, dword [eax + 0x14]
push 3
call fcn.004057b1
mov esi, eax
cmp esi, 5
je 0x409047
cmp esi, 7
je 0x409047
cmp esi, 8
je 0x409047
test esi, esi
je 0x409047
mov eax, dword [ebp + 0x44]
cmp eax, dword [ebp + 0x48]
je 0x408efc
test eax, eax
jne 0x408f04
cmp ebx, 0xffffffff
je 0x408ee9
lea eax, [ebp - 0xfc]
push eax
push ebx
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
mov edi, eax
test edi, edi
je 0x408ee9
push dword [ebp + 0x4c]
lea eax, [ebp - 0x200]
push eax
push dword [ebp + 0x68]
lea eax, [ebp - 0xfc]
push eax
call fcn.00423b87
add esp, 0x10
test al, al
jne 0x408eb5
add dword [0x463220], 1
adc dword [0x463224], 0
jmp 0x408e34
mov eax, dword [ebp + 0x5c]
mov byte [eax], 1
jmp 0x408f09
mov ecx, dword [ebp + 0x60]
mov dword [ecx], eax
cmp ebx, 0xffffffff
je 0x408f15
push ebx
call dword [sym.imp.KERNEL32.DLL_FindClose]
cmp dword [ebp + 0x64], 3
jne 0x408f5a
cmp byte [ebp + 0x6c], 0
je 0x408f5a
mov eax, dword [ebp + 0x4c]
cmp eax, 0x100
ja 0x408f5a
lea esi, [ebp + eax - 0x200]
push 0x458b38
push esi
call fcn.004538d0
pop ecx
pop ecx
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0x200]
push eax
call dword [sym.imp.KERNEL32.DLL_FindFirstFileA]
mov edi, eax
cmp edi, 0xffffffff
jne 0x408f62
xor eax, eax
inc eax
jmp 0x409055
lea eax, [ebp - 0x304]
push eax
call fcn.00453b00
mov ebx, eax
add ebx, dword [ebp + 0x4c]
pop ecx
test byte [ebp - 0xfc], 0x10
je 0x409027
cmp byte [ebp - 0xd0], 0x2e
jne 0x408fa9
cmp byte [ebp - 0xcf], 0
je 0x409027
cmp byte [ebp - 0xcf], 0x2e
jne 0x408fa9
cmp byte [ebp - 0xce], 0
je 0x409027
lea eax, [ebp - 0xd0]
push eax
call fcn.00453b00
add eax, ebx
cmp eax, 0x102
pop ecx
ja 0x409027
lea eax, [ebp - 0x304]
push eax
lea eax, [ebp - 0xd0]
push eax
push 0x45853c
push esi
call fcn.0044118f
add esp, 0x10
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x48]
push dword [ebp + 0x78]
lea eax, [ebp - 0x200]
push dword [ebp + 0x74]
push eax
push dword [ebp + 0x6c]
push dword [ebp + 0x68]
push 3
push dword [ebp + 0x60]
push dword [ebp + 0x5c]
push dword [ebp + 0x58]
call fcn.00408d4e
cmp eax, 5
je 0x409043
cmp eax, 7
je 0x409043
cmp eax, 8
je 0x409043
test eax, eax
je 0x409043
mov eax, dword [ebp + 0x5c]
cmp byte [eax], 0
jne 0x40903d
mov eax, dword [ebp + 0x60]
cmp dword [eax], 0
jne 0x40903d
lea eax, [ebp - 0xfc]
push eax
push edi
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
test eax, eax
jne 0x408f74
xor esi, esi
inc esi
push edi
jmp 0x40904d
mov esi, eax
jmp 0x409040
cmp ebx, 0xffffffff
je 0x409053
push ebx
call dword [sym.imp.KERNEL32.DLL_FindClose]
mov eax, esi
pop edi
pop esi
pop ebx
add ebp, 0x50
leave
ret 0x28