Function at 0x424c80
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
sub esp, 0x34c
lea eax, [esp + 4]
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push ebp
mov ebp, dword [esp + 0x360]
push esi
push edi
push ebp
push eax
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenA]
push ebp
call esi
inc eax
push eax
call fcn.0042fffb
mov edi, eax
add esp, 4
test edi, edi
je 0x424d0e
push ebp
push edi
call ebx
mov ecx, dword [esp + 0x364]
push 0xc
mov esi, dword [ecx + 4]
mov ebp, dword [esi + 4]
call fcn.0042fffb
add esp, 4
mov ecx, esi
test esi, esi
jne 0x424cdb
mov ecx, eax
test ebp, ebp
mov dword [eax], ecx
jne 0x424ce3
mov ebp, eax
mov dword [eax + 4], ebp
mov dword [esi + 4], eax
mov edx, dword [eax + 4]
mov dword [edx], eax
add eax, 8
test eax, eax
je 0x424cf7
mov dword [eax], edi
mov eax, dword [esp + 0x364]
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ebp, dword [esp + 0x368]
inc dword [eax + 8]
lea eax, [esp + 0x118]
push ebp
push eax
call ebx
lea ecx, [esp + 0x118]
push ecx
call esi
cmp byte [esp + eax + 0x117], 0x5c
je 0x424d58
lea edx, [esp + 0x118]
push edx
call esi
cmp byte [esp + eax + 0x117], 0x3a
je 0x424d58
mov edi, dword [sym.imp.KERNEL32.dll_lstrcatA]
lea eax, [esp + 0x118]
push 0x445344
push eax
call edi
jmp 0x424d5e
mov edi, dword [sym.imp.KERNEL32.dll_lstrcatA]
lea ecx, [esp + 0x118]
push 0x4511bc
push ecx
call edi
lea edx, [esp + 0x21c]
lea eax, [esp + 0x118]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
test eax, eax
mov dword [esp + 0x10], eax
je 0x424f14
cmp eax, 0xffffffff
je 0x424f14
lea ecx, [esp + 0x21c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
je 0x424ef9
test byte [esp + 0x21c], 0x10
je 0x424e28
cmp byte [esp + 0x248], 0x2e
je 0x424ede
lea edx, [esp + 0x14]
push ebp
push edx
call ebx
lea eax, [esp + 0x14]
push eax
call esi
cmp byte [esp + eax + 0x13], 0x5c
je 0x424df7
lea ecx, [esp + 0x14]
push ecx
call esi
cmp byte [esp + eax + 0x13], 0x3a
je 0x424df7
lea edx, [esp + 0x14]
push 0x445344
push edx
call edi
lea eax, [esp + 0x248]
lea ecx, [esp + 0x14]
push eax
push ecx
call edi
mov eax, dword [esp + 0x364]
mov ecx, dword [esp + 0x360]
lea edx, [esp + 0x14]
push edx
push eax
push ecx
call fcn.00424c80
add esp, 0xc
jmp 0x424ede
lea edx, [esp + 0x14]
push ebp
push edx
call ebx
lea eax, [esp + 0x14]
push eax
call esi
cmp byte [esp + eax + 0x13], 0x5c
je 0x424e58
lea ecx, [esp + 0x14]
push ecx
call esi
cmp byte [esp + eax + 0x13], 0x3a
je 0x424e58
lea edx, [esp + 0x14]
push 0x445344
push edx
call edi
lea eax, [esp + 0x248]
lea ecx, [esp + 0x14]
push eax
push ecx
call edi
lea edx, [esp + 0x14]
push edx
call esi
inc eax
push eax
call fcn.0042fffb
mov ebp, eax
add esp, 4
test ebp, ebp
je 0x424ed7
lea eax, [esp + 0x14]
push eax
push ebp
call ebx
mov ecx, dword [esp + 0x364]
push 0xc
mov esi, dword [ecx + 4]
mov edi, dword [esi + 4]
call fcn.0042fffb
add esp, 4
mov ecx, esi
test esi, esi
jne 0x424ea5
mov ecx, eax
test edi, edi
mov dword [eax], ecx
jne 0x424ead
mov edi, eax
mov dword [eax + 4], edi
mov dword [esi + 4], eax
mov edx, dword [eax + 4]
mov dword [edx], eax
add eax, 8
test eax, eax
je 0x424ec1
mov dword [eax], ebp
mov eax, dword [esp + 0x364]
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenA]
mov edi, dword [sym.imp.KERNEL32.dll_lstrcatA]
inc dword [eax + 8]
mov ebp, dword [esp + 0x368]
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x21c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x424daf
mov edx, dword [esp + 0x10]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x34c
ret
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x34c
ret