Function at 0x420e8e
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push 0x2cc
mov eax, 0x578dcb
call fcn.004890c6
mov esi, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x10]
xor ebx, ebx
cmp dword [esi + 0x14], ebx
mov dword [ebp - 0x2d8], edi
mov dword [ebp - 0x2d4], ecx
je 0x4210e4
cmp dword [edi + 0x14], ebx
je 0x4210e4
push 0x24c
lea eax, [ebp - 0x2cc]
push ebx
push eax
mov dword [ebp - 0x2d0], ebx
call fcn.00488910
add esp, 0xc
push esi
lea ecx, [ebp - 0x48]
call fcn.0040454a
mov eax, dword [ebp - 0x34]
dec eax
push eax
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], ebx
call fcn.00401b57
cmp word [eax], 0x5c
jne 0x420f13
mov eax, dword [ebp - 0x34]
dec eax
push eax
lea ecx, [ebp - 0x48]
call fcn.00401b57
cmp word [eax], 0x2f
je 0x420f20
push 0x5b0788
lea ecx, [ebp - 0x48]
call fcn.00404570
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x64]
call fcn.0040454a
push 0xffffffffffffffff
push ebx
push edi
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 1
call fcn.0040414a
cmp dword [ebp - 0x4c], 8
mov eax, dword [ebp - 0x60]
jae 0x420f48
lea eax, [ebp - 0x60]
mov esi, dword [sym.imp.KERNEL32.dll_FindFirstFileW]
lea ecx, [ebp - 0x2d0]
push ecx
push eax
call esi
mov edi, eax
cmp edi, 0xffffffff
je 0x420fca
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x2c]
call fcn.0040454a
lea eax, [ebp - 0x2a4]
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 2
call fcn.00404570
mov ecx, dword [ebp - 0x2d4]
lea eax, [ebp - 0x2c]
push eax
call fcn.0040d912
lea eax, [ebp - 0x2d0]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x420fb0
push ebx
push 1
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 1
call fcn.0040321f
jmp 0x420f5f
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
xor edi, edi
push ebx
inc edi
push edi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 1
call fcn.0040321f
jmp 0x420fcd
xor edi, edi
inc edi
cmp byte [ebp + 0x14], bl
je 0x4210ce
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x2c]
call fcn.0040454a
push 0x5b1144
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.00404570
cmp dword [ebp - 0x14], 8
mov eax, dword [ebp - 0x28]
jae 0x420fff
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x2d0]
push ecx
push eax
call esi
mov esi, eax
cmp esi, ebx
je 0x4210c4
test byte [ebp - 0x2d0], 0x10
je 0x4210a7
lea eax, [ebp - 0x2a4]
push eax
call fcn.004871e1
cmp eax, 2
pop ecx
jne 0x421046
cmp word [ebp - 0x2a4], 0x2e
jne 0x421046
cmp word [ebp - 0x2a2], 0x2e
je 0x4210a7
lea eax, [ebp - 0x2a4]
push eax
call fcn.004871e1
cmp eax, edi
pop ecx
jne 0x421061
cmp word [ebp - 0x2a4], 0x2e
je 0x4210a7
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x80]
call fcn.0040454a
lea eax, [ebp - 0x2a4]
push eax
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 4
call fcn.00404570
push edi
push dword [ebp - 0x2d4]
lea eax, [ebp - 0x80]
push dword [ebp - 0x2d8]
push eax
call fcn.00420e8e
add esp, 0x10
push ebx
push edi
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 3
call fcn.0040321f
lea eax, [ebp - 0x2d0]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x421013
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
push ebx
push edi
lea ecx, [ebp - 0x2c]
call fcn.0040321f
push ebx
push edi
lea ecx, [ebp - 0x64]
call fcn.0040321f
push ebx
push edi
lea ecx, [ebp - 0x48]
call fcn.0040321f
jmp 0x4210e9
call fcn.004140a3
call fcn.00489149
ret