Function at 0x448840
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x670
mov eax, dword [0x721970]
xor eax, ebp
mov dword [ebp - 4], eax
mov byte [ebp - 0x665], 1
mov dword [ebp - 0x66c], 0xffffffff
push 0x668270
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x414]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea edx, [ebp - 0x664]
push edx
lea eax, [ebp - 0x414]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x66c], eax
cmp dword [ebp - 0x66c], 0xffffffff
jne 0x4488a9
mov byte [ebp - 0x665], 0
jmp 0x448af2
mov ecx, dword [ebp + 8]
push ecx
push 0x104
lea edx, [ebp - 0x20c]
push edx
call fcn.00611e74
add esp, 0xc
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAddBackslashW]
lea ecx, [ebp - 0x20c]
push ecx
push 0x104
lea edx, [ebp - 0x414]
push edx
call fcn.00611e74
add esp, 0xc
mov byte [ebp - 0x667], 1
movzx eax, byte [ebp - 0x667]
test eax, eax
je 0x448aa8
lea ecx, [ebp - 0x664]
push ecx
mov edx, dword [ebp - 0x66c]
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x448a79
mov eax, 2
imul ecx, eax, 0
movzx edx, word [ebp + ecx - 0x638]
cmp edx, 0x2e
jne 0x44896e
mov eax, 2
shl eax, 0
movzx ecx, word [ebp + eax - 0x638]
test ecx, ecx
je 0x44896c
mov edx, 2
shl edx, 0
movzx eax, word [ebp + edx - 0x638]
cmp eax, 0x2e
jne 0x44896e
mov ecx, 2
shl ecx, 1
movzx edx, word [ebp + ecx - 0x638]
test edx, edx
jne 0x44896e
jmp 0x4488f0
lea eax, [ebp - 0x638]
push eax
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
mov edx, dword [ebp - 0x664]
and edx, 0x10
je 0x4489ea
push 1
lea eax, [ebp - 0x20c]
push eax
call fcn.00448840
movzx ecx, al
test ecx, ecx
jne 0x4489bd
mov edx, dword [ebp - 0x66c]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov byte [ebp - 0x665], 0
jmp 0x448aa8
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
lea ecx, [ebp - 0x414]
push ecx
push 0x104
lea edx, [ebp - 0x20c]
push edx
call fcn.00611e74
add esp, 0xc
jmp 0x448a77
mov eax, dword [ebp - 0x664]
and eax, 1
je 0x448a33
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov dword [ebp - 0x670], eax
cmp dword [ebp - 0x670], 0xffffffff
je 0x448a33
mov edx, dword [ebp - 0x670]
and edx, 1
je 0x448a33
mov eax, dword [ebp - 0x670]
and eax, 0xfffffffe
push eax
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x448a5c
mov eax, dword [ebp - 0x66c]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov byte [ebp - 0x665], 0
jmp 0x448aa8
lea ecx, [ebp - 0x414]
push ecx
push 0x104
lea edx, [ebp - 0x20c]
push edx
call fcn.00611e74
add esp, 0xc
jmp 0x448aa3
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x12
jne 0x448a8d
mov byte [ebp - 0x667], 0
jmp 0x448aa3
mov eax, dword [ebp - 0x66c]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov byte [ebp - 0x665], 0
jmp 0x448aa8
jmp 0x4488f0
mov ecx, dword [ebp - 0x66c]
push ecx
call dword [sym.imp.KERNEL32.dll_FindClose]
movzx edx, byte [ebp + 0xc]
test edx, edx
jne 0x448af2
movzx eax, byte [ebp - 0x665]
test eax, eax
je 0x448af2
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
test eax, eax
je 0x448adf
mov byte [ebp - 0x666], 1
jmp 0x448ae6
mov byte [ebp - 0x666], 0
mov dl, byte [ebp - 0x666]
mov byte [ebp - 0x665], dl
mov al, byte [ebp - 0x665]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0060f7c8
mov esp, ebp
pop ebp
ret 8