Function at 0x422965
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x294
mov eax, dword [0x458090]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov eax, dword [eax]
push ebx
mov ebx, dword [ebp + 0xc]
mov dword [ebp - 0x284], ecx
mov ecx, dword [ebp + 0x10]
push esi
push edi
sub eax, 0x10
mov dword [ebp - 0x270], ebx
mov dword [ebp - 0x278], ecx
call fcn.00409bcb
add eax, 0x10
lea esi, [ebp - 0x274]
mov dword [ebp - 0x274], eax
call fcn.00409c45
mov eax, dword [ebp - 0x274]
add eax, 0xfffffff0
mov dword [ebp - 0x28c], eax
call fcn.00409bcb
add eax, 0x10
mov dword [ebp - 0x26c], eax
mov eax, dword [ebx]
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x26c]
call fcn.00402288
lea eax, [ebp - 0x258]
push eax
push dword [ebp - 0x26c]
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
lea ecx, [ebp - 0x258]
push ecx
push eax
mov dword [ebp - 0x268], eax
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
cmp eax, 1
jne 0x422b80
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x25c]
call fcn.004044e8
mov eax, dword [ebp - 0x25c]
mov edi, dword [eax - 0xc]
push 0x2e
lea esi, [ebp - 0x25c]
call fcn.00408b4f
mov ecx, edi
sub ecx, eax
lea eax, [ebp - 0x260]
push eax
mov eax, esi
call fcn.00410708
push 0x453fa8
lea eax, [ebp - 0x260]
push eax
call fcn.0040aaa5
test eax, eax
jne 0x422b3a
push 0x2e
call fcn.00408b4f
mov ecx, eax
lea edx, [ebp - 0x288]
mov eax, esi
call fcn.00408c5c
mov edi, esi
call fcn.004087db
mov eax, dword [ebp - 0x288]
add eax, 0xfffffff0
call fcn.004045dc
mov eax, dword [ebp - 0x25c]
mov edi, dword [eax - 0xc]
push 0x2e
call fcn.00408b4f
mov ecx, edi
sub ecx, eax
lea eax, [ebp - 0x27c]
push eax
mov eax, esi
call fcn.00410708
lea edi, [ebp - 0x260]
call fcn.004087db
mov eax, dword [ebp - 0x27c]
add eax, 0xfffffff0
call fcn.004045dc
push str..jar
mov eax, edi
push eax
call fcn.0040aaa5
test eax, eax
jne 0x422b3a
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x274]
lea ecx, [ebp - 0x280]
call fcn.00408cc4
mov eax, dword [eax]
pop ecx
sub eax, 0x10
call fcn.00409bcb
mov esi, dword [ebp - 0x278]
mov edi, eax
mov eax, dword [ebp + 0x14]
add edi, 0x10
lea ebx, [ebp - 0x294]
mov dword [ebp - 0x294], edi
mov dword [ebp - 0x290], eax
call fcn.00422fee
lea eax, [edi - 0x10]
call fcn.004045dc
mov eax, dword [ebp - 0x280]
add eax, 0xfffffff0
call fcn.004045dc
lea eax, [ebp - 0x258]
push eax
push dword [ebp - 0x268]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
mov ebx, eax
mov eax, dword [ebp - 0x260]
dec ebx
neg ebx
sbb bl, bl
add eax, 0xfffffff0
inc bl
call fcn.004045dc
mov eax, dword [ebp - 0x25c]
add eax, 0xfffffff0
call fcn.004045dc
test bl, bl
jne 0x422a12
mov ebx, dword [ebp - 0x270]
push 0x453fc0
lea eax, [ebp - 0x260]
call fcn.00409b82
lea eax, [ebp - 0x260]
push eax
lea eax, [ebp - 0x274]
lea ecx, [ebp - 0x270]
call fcn.00408c92
pop ecx
lea edi, [ebp - 0x26c]
call fcn.004087db
mov eax, dword [ebp - 0x270]
add eax, 0xfffffff0
call fcn.004045dc
mov eax, dword [ebp - 0x260]
add eax, 0xfffffff0
call fcn.004045dc
cmp dword [ebp - 0x268], 0
mov esi, dword [sym.imp.KERNEL32.dll_FindClose]
je 0x422bee
push dword [ebp - 0x268]
call esi
and dword [ebp - 0x268], 0
lea eax, [ebp - 0x258]
push eax
push dword [ebp - 0x26c]
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov edi, eax
cmp edi, dword [ebp - 0x268]
je 0x422c22
cmp dword [ebp - 0x268], 0
je 0x422c1c
push dword [ebp - 0x268]
call esi
mov dword [ebp - 0x268], edi
mov edi, dword [sym.imp.KERNEL32.dll_FindNextFileW]
jmp 0x422c76
lea eax, [ebp - 0x258]
call fcn.00421c10
test al, al
je 0x422c76
push dword [ebp + 0x14]
lea eax, [ebp - 0x22c]
push dword [ebp - 0x278]
lea ecx, [ebp - 0x270]
push ebx
push eax
lea eax, [ebp - 0x274]
call fcn.00408cc4
pop ecx
mov ecx, dword [ebp - 0x284]
push eax
call fcn.00422965
mov eax, dword [ebp - 0x270]
add eax, 0xfffffff0
call fcn.004045dc
lea eax, [ebp - 0x258]
push eax
push dword [ebp - 0x268]
call edi
cmp eax, 1
je 0x422c2a
cmp dword [ebp - 0x268], 0
je 0x422c9b
push dword [ebp - 0x268]
call esi
mov eax, dword [ebp - 0x26c]
add eax, 0xfffffff0
call fcn.004045dc
mov eax, dword [ebp - 0x28c]
call fcn.004045dc
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0043159b
leave
ret 0x10