Function at 0x408dc5
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
lea ebp, [esp - 0x54]
sub esp, 0x354
cmp dword [ebp + 0x68], 0
push ebx
push esi
push edi
mov dword [ebp + 0x4c], ecx
je 0x408ea2
push 0x104
push dword [ebp + 0x70]
lea eax, [ebp - 0x1fc]
push eax
call fcn.0043880f
lea eax, [ebp - 0x1fc]
push 0x5c
push eax
call fcn.004550c0
add esp, 0x14
test eax, eax
je 0x408e30
lea esi, [eax + 1]
lea eax, [ebp - 0x300]
push esi
push eax
call fcn.00454650
lea eax, [ebp - 0x1fc]
push eax
mov byte [esi], 0
call fcn.00454880
add esp, 0xc
mov dword [ebp + 0x50], eax
jmp 0x408e50
lea eax, [ebp - 0x1fc]
push eax
lea eax, [ebp - 0x300]
push eax
call fcn.00454650
and dword [ebp + 0x50], 0
pop ecx
pop ecx
mov byte [ebp - 0x1fc], 0
lea eax, [ebp - 0xf8]
push eax
push dword [ebp + 0x70]
call dword [sym.imp.KERNEL32.DLL_FindFirstFileA]
mov ebx, eax
xor eax, eax
cmp ebx, 0xffffffff
setne al
jmp 0x408e9a
push dword [ebp + 0x50]
lea eax, [ebp - 0x1fc]
push eax
push dword [ebp + 0x68]
lea eax, [ebp - 0xf8]
push eax
call fcn.00423654
add esp, 0x10
test al, al
je 0x408ea7
lea eax, [ebp - 0xf8]
push eax
push ebx
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
mov edi, eax
test edi, edi
jne 0x408e6c
jmp 0x408ea7
xor edi, edi
or ebx, 0xffffffff
and dword [ebp + 0x48], 0
cmp byte [ebp + 0x7c], 0
jne 0x408ecf
mov eax, dword [0x464244]
cmp eax, dword [ebp + 0x78]
jl 0x408ecf
jg 0x408ec7
mov eax, dword [0x464240]
cmp eax, dword [ebp + 0x74]
jbe 0x408ecf
test edi, edi
je 0x408f7c
test edi, edi
je 0x408ede
lea eax, [ebp - 0xf8]
mov dword [0x464248], eax
lea eax, [ebp + 0x48]
push eax
push dword [ebp + 0x5c]
mov eax, dword [ebp + 0x4c]
mov ecx, dword [eax + 0x14]
push 3
call fcn.00405839
mov esi, eax
cmp esi, 5
je 0x4090b8
cmp esi, 7
je 0x4090b8
cmp esi, 8
je 0x4090b8
test esi, esi
je 0x4090b8
mov eax, dword [ebp + 0x48]
cmp eax, dword [ebp + 0x4c]
je 0x408f6f
test eax, eax
jne 0x408f77
cmp ebx, 0xffffffff
je 0x408f5c
lea eax, [ebp - 0xf8]
push eax
push ebx
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
mov edi, eax
test edi, edi
je 0x408f5c
push dword [ebp + 0x50]
lea eax, [ebp - 0x1fc]
push eax
push dword [ebp + 0x68]
lea eax, [ebp - 0xf8]
push eax
call fcn.00423654
add esp, 0x10
test al, al
jne 0x408f28
add dword [0x464240], 1
adc dword [0x464244], 0
jmp 0x408eab
mov eax, dword [ebp + 0x60]
mov byte [eax], 1
jmp 0x408f7c
mov ecx, dword [ebp + 0x64]
mov dword [ecx], eax
cmp ebx, 0xffffffff
je 0x408f88
push ebx
call dword [sym.imp.KERNEL32.DLL_FindClose]
cmp dword [ebp + 0x68], 0
je 0x408fcd
cmp byte [ebp + 0x6c], 0
je 0x408fcd
mov eax, dword [ebp + 0x50]
cmp eax, 0x100
ja 0x408fcd
lea esi, [ebp + eax - 0x1fc]
push 0x459b38
push esi
call fcn.00454650
pop ecx
pop ecx
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0x1fc]
push eax
call dword [sym.imp.KERNEL32.DLL_FindFirstFileA]
mov edi, eax
cmp edi, 0xffffffff
jne 0x408fd5
xor eax, eax
inc eax
jmp 0x4090c6
lea eax, [ebp - 0x300]
push eax
call fcn.00454880
mov ebx, eax
add ebx, dword [ebp + 0x50]
pop ecx
test byte [ebp - 0xf8], 0x10
je 0x409098
cmp byte [ebp - 0xcc], 0x2e
jne 0x40901c
cmp byte [ebp - 0xcb], 0
je 0x409098
cmp byte [ebp - 0xcb], 0x2e
jne 0x40901c
cmp byte [ebp - 0xca], 0
je 0x409098
lea eax, [ebp - 0xcc]
push eax
call fcn.00454880
add eax, ebx
cmp eax, 0x102
pop ecx
ja 0x409098
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0xcc]
push eax
push 0x45953c
push esi
call fcn.00440d7f
add esp, 0x10
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x4c]
push dword [ebp + 0x78]
lea eax, [ebp - 0x1fc]
push dword [ebp + 0x74]
push eax
push dword [ebp + 0x6c]
push dword [ebp + 0x68]
push dword [ebp + 0x64]
push dword [ebp + 0x60]
push dword [ebp + 0x5c]
call fcn.00408dc5
cmp eax, 5
je 0x4090b4
cmp eax, 7
je 0x4090b4
cmp eax, 8
je 0x4090b4
test eax, eax
je 0x4090b4
mov eax, dword [ebp + 0x60]
cmp byte [eax], 0
jne 0x4090ae
mov eax, dword [ebp + 0x64]
cmp dword [eax], 0
jne 0x4090ae
lea eax, [ebp - 0xf8]
push eax
push edi
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
test eax, eax
jne 0x408fe7
xor esi, esi
inc esi
push edi
jmp 0x4090be
mov esi, eax
jmp 0x4090b1
cmp ebx, 0xffffffff
je 0x4090c4
push ebx
call dword [sym.imp.KERNEL32.DLL_FindClose]
mov eax, esi
pop edi
pop esi
pop ebx
add ebp, 0x54
leave
ret 0x24