Function at 0x462df0
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x50fb16
mov eax, dword fs:[0]
push eax
sub esp, 0x328
mov eax, dword [0x55e2f4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 0xc]
mov ecx, 0x51ac14
mov ebx, dword [ebp + 8]
mov eax, 0x516968
push esi
mov dword [ebp - 0x308], ebx
cmp dword [esi + 0x10], 3
mov dword [ebp - 0x310], esi
cmova eax, ecx
push eax
lea eax, [ebp - 0xb0]
push eax
call fcn.004560a0
push 0x51d3ec
push eax
lea eax, [ebp - 0x98]
mov dword [ebp - 4], 0
push eax
call fcn.00403cd0
add esp, 0x18
cmp dword [eax + 0x14], 8
jb 0x462e73
mov eax, dword [eax]
lea ecx, [ebp - 0x300]
push ecx
push eax
call dword [sym.imp.KERNEL32.DLL_FindFirstFileW]
mov ecx, dword [ebp - 0x84]
mov edi, eax
mov dword [ebp - 0x328], edi
cmp ecx, 8
jb 0x462ea7
inc ecx
push ecx
push dword [ebp - 0x98]
lea ecx, [ebp - 0x98]
call fcn.004052a0
xor eax, eax
mov dword [ebp - 0x84], 7
mov word [ebp - 0x98], ax
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x88], 0
mov dword [ebp - 4], 0xffffffff
cmp eax, 8
jb 0x462ee9
inc eax
lea ecx, [ebp - 0xb0]
push eax
push dword [ebp - 0xb0]
call fcn.004052a0
xor eax, eax
mov dword [ebp - 0x9c], 7
mov dword [ebp - 0xa0], 0
mov word [ebp - 0xb0], ax
cmp edi, 0xffffffff
jne 0x462f15
mov eax, 1
jmp 0x46336c
mov dword [ebp - 0x32c], edi
mov edi, dword [ebp + 0x10]
mov dword [ebp - 4], 1
nop word [eax + eax]
test byte [ebp - 0x300], 0x10
je 0x463063
xor eax, eax
mov dword [ebp - 0x14], 7
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], ax
cmp word [ebp - 0x2d4], ax
jne 0x462f5e
xor ecx, ecx
jmp 0x462f76
lea ecx, [ebp - 0x2d4]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x462f67
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x2d4]
push eax
lea ecx, [ebp - 0x28]
call fcn.004051a0
push 1
push 0x516c70
push dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
push 0
call fcn.00408610
test eax, eax
je 0x4631fd
push 2
push 0x51d3f4
push dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
push 0
call fcn.00408610
test eax, eax
je 0x4631fd
push 0x518b40
lea eax, [ebp - 0x78]
push esi
push eax
call fcn.00438370
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 3
push ecx
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.00460c40
push dword [ebp + 0x14]
mov byte [ebp - 4], 4
push edi
push eax
push ebx
call fcn.00462df0
add esp, 0x28
test eax, eax
mov eax, dword [ebp - 0x2c]
sete bl
cmp eax, 8
jb 0x46300f
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.004052a0
xor eax, eax
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x30], 0
mov byte [ebp - 4], 2
cmp eax, 8
jb 0x46303c
inc eax
lea ecx, [ebp - 0x78]
push eax
push dword [ebp - 0x78]
call fcn.004052a0
mov eax, dword [ebp - 0x14]
test bl, bl
jne 0x463388
mov byte [ebp - 4], 1
cmp eax, 8
jb 0x46305d
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004052a0
mov ebx, dword [ebp - 0x308]
test dword [ebp - 0x300], 0x4000
mov eax, 1
push 0x518b40
push dword [ebp - 0x310]
mov esi, 0x80
cmovne esi, eax
lea eax, [ebp - 0x28]
push eax
call fcn.00438370
lea ecx, [ebp - 0x2d4]
mov byte [ebp - 4], 5
push ecx
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.00403cd0
add esp, 0x18
cmp dword [eax + 0x14], 8
jb 0x4630ae
mov eax, dword [eax]
push 0
push 0x2000000
push 3
push 0
push 7
push esi
push eax
call dword [sym.imp.KERNEL32.DLL_CreateFileW]
mov ecx, dword [ebp - 0x2c]
mov esi, eax
mov dword [ebp - 0x314], esi
cmp ecx, 8
jb 0x4630e0
inc ecx
push ecx
push dword [ebp - 0x40]
lea ecx, [ebp - 0x40]
call fcn.004052a0
xor eax, eax
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x30], 0
mov byte [ebp - 4], 1
cmp eax, 8
jb 0x46310d
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004052a0
xor eax, eax
mov dword [ebp - 0x14], 7
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], ax
cmp esi, 0xffffffff
je 0x46333b
xorps xmm0, xmm0
mov dword [ebp - 0x318], esi
movlpd qword [ebp - 0x334], xmm0
nop dword [eax + eax]
push 0
lea eax, [ebp - 0x324]
push eax
push 0x20
lea eax, [ebp - 0x60]
push eax
push 8
lea eax, [ebp - 0x334]
push eax
push 0x90073
push esi
call dword [sym.imp.KERNEL32.DLL_DeviceIoControl]
test eax, eax
jne 0x463179
call dword [sym.imp.KERNEL32.DLL_GetLastError]
cmp eax, 0xea
jne 0x46332a
cmp dword [ebp - 0x60], 0
je 0x46332a
mov edx, dword [ebp - 0x48]
mov eax, edx
mov ebx, dword [ebp - 0x44]
and eax, ebx
mov dword [ebp - 0x31c], edx
mov dword [ebp - 0x320], ebx
cmp eax, 0xffffffff
je 0x4632f3
mov eax, dword [ebp - 0x50]
mov esi, eax
sub esi, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x4c]
mov edi, ecx
sbb edi, dword [ebp - 0x54]
add esi, edx
adc edi, ebx
sub esi, 1
mov dword [ebp - 0x304], edi
sbb dword [ebp - 0x304], 0
mov edi, dword [ebp + 0x10]
mov dword [ebp - 0x30c], esi
mov esi, dword [ebp + 0x14]
cmp dword [ebp - 0x304], esi
jl 0x463313
jg 0x4631ec
cmp dword [ebp - 0x30c], edi
jb 0x463313
cmp ebx, esi
jl 0x46321f
jg 0x4631f6
cmp edx, edi
jbe 0x46321f
mov edi, edx
mov edx, dword [ebp + 0x10]
jmp 0x463226
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 1
cmp eax, 8
jb 0x463341
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004052a0
jmp 0x463341
mov edx, dword [ebp + 0x10]
mov ebx, esi
mov edi, edx
cmp ebx, dword [ebp - 0x304]
jg 0x463310
jl 0x463240
cmp edi, dword [ebp - 0x30c]
ja 0x463310
xor esi, esi
push dword [ebp + 0x14]
lea eax, [ebp - 0x70]
push edx
push eax
push dword [ebp - 0x308]
call fcn.00462b20
add esp, 0x10
test eax, eax
je 0x4632b0
mov eax, dword [ebp - 0x314]
mov ecx, edi
sub ecx, dword [ebp - 0x31c]
mov dword [ebp - 0x80], eax
mov eax, ebx
sbb eax, dword [ebp - 0x320]
add ecx, dword [ebp - 0x58]
push 0
adc eax, dword [ebp - 0x54]
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x324]
push eax
push 0
push 0
push 0x20
lea eax, [ebp - 0x80]
mov dword [ebp - 0x78], ecx
push eax
push 0x90074
push dword [ebp - 0x308]
mov dword [ebp - 0x68], 1
call dword [sym.imp.KERNEL32.DLL_DeviceIoControl]
test eax, eax
jne 0x4632cd
cmp esi, 0x258
jg 0x46339e
push 0x64
call dword [sym.imp.KERNEL32.DLL_Sleep]
mov edx, dword [ebp + 0x10]
inc esi
jmp 0x463242
mov edx, dword [ebp + 0x10]
add edi, 1
adc ebx, 0
cmp ebx, dword [ebp - 0x304]
jl 0x463240
jg 0x4632f0
cmp edi, dword [ebp - 0x30c]
jbe 0x463240
mov edi, dword [ebp + 0x10]
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x50]
mov esi, dword [ebp - 0x314]
mov dword [ebp - 0x334], eax
mov dword [ebp - 0x330], ecx
jmp 0x463140
mov edi, dword [ebp + 0x10]
mov esi, dword [ebp - 0x314]
mov dword [ebp - 0x334], eax
mov dword [ebp - 0x330], ecx
jmp 0x463140
lea ecx, [ebp - 0x318]
call fcn.00460c90
mov ebx, dword [ebp - 0x308]
mov esi, dword [ebp - 0x310]
lea eax, [ebp - 0x300]
push eax
push dword [ebp - 0x328]
call dword [sym.imp.KERNEL32.DLL_FindNextFileW]
test eax, eax
jne 0x462f30
lea esi, [eax + 1]
lea ecx, [ebp - 0x32c]
call fcn.00460c80
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004e1f40
mov esp, ebp
pop ebp
ret
cmp eax, 8
jb 0x46339a
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004052a0
xor esi, esi
jmp 0x46335f
lea ecx, [ebp - 0x318]
call fcn.00460c90
xor esi, esi
jmp 0x46335f