Function at 0x424baa
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x294
mov eax, dword [0x457090]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov eax, dword [eax]
push ebx
mov ebx, dword [ebp + 0xc]
mov dword [ebp - 0x284], ecx
mov ecx, dword [ebp + 0x10]
push esi
push edi
sub eax, 0x10
mov dword [ebp - 0x270], ebx
mov dword [ebp - 0x278], ecx
call fcn.00409c66
add eax, 0x10
lea esi, [ebp - 0x274]
mov dword [ebp - 0x274], eax
call fcn.00409ce0
mov eax, dword [ebp - 0x274]
add eax, 0xfffffff0
mov dword [ebp - 0x28c], eax
call fcn.00409c66
add eax, 0x10
mov dword [ebp - 0x26c], eax
mov eax, dword [ebx]
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x26c]
call fcn.004022eb
lea eax, [ebp - 0x258]
push eax
push dword [ebp - 0x26c]
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
lea ecx, [ebp - 0x258]
push ecx
push eax
mov dword [ebp - 0x268], eax
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
cmp eax, 1
jne 0x424dc5
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x25c]
call fcn.00404558
mov eax, dword [ebp - 0x25c]
mov edi, dword [eax - 0xc]
push 0x2e
lea esi, [ebp - 0x25c]
call fcn.00408c55
mov ecx, edi
sub ecx, eax
lea eax, [ebp - 0x260]
push eax
mov eax, esi
call fcn.004106dc
push 0x453000
lea eax, [ebp - 0x260]
push eax
call fcn.0040aaed
test eax, eax
jne 0x424d7f
push 0x2e
call fcn.00408c55
mov ecx, eax
lea edx, [ebp - 0x288]
mov eax, esi
call fcn.00408d62
mov edi, esi
call fcn.004088e1
mov eax, dword [ebp - 0x288]
add eax, 0xfffffff0
call fcn.0040464c
mov eax, dword [ebp - 0x25c]
mov edi, dword [eax - 0xc]
push 0x2e
call fcn.00408c55
mov ecx, edi
sub ecx, eax
lea eax, [ebp - 0x27c]
push eax
mov eax, esi
call fcn.004106dc
lea edi, [ebp - 0x260]
call fcn.004088e1
mov eax, dword [ebp - 0x27c]
add eax, 0xfffffff0
call fcn.0040464c
push str..jar
mov eax, edi
push eax
call fcn.0040aaed
test eax, eax
jne 0x424d7f
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x274]
lea ecx, [ebp - 0x280]
call fcn.00408dca
mov eax, dword [eax]
pop ecx
sub eax, 0x10
call fcn.00409c66
mov esi, dword [ebp - 0x278]
mov edi, eax
mov eax, dword [ebp + 0x14]
add edi, 0x10
lea ebx, [ebp - 0x294]
mov dword [ebp - 0x294], edi
mov dword [ebp - 0x290], eax
call fcn.0040de15
lea eax, [edi - 0x10]
call fcn.0040464c
mov eax, dword [ebp - 0x280]
add eax, 0xfffffff0
call fcn.0040464c
lea eax, [ebp - 0x258]
push eax
push dword [ebp - 0x268]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
mov ebx, eax
mov eax, dword [ebp - 0x260]
dec ebx
neg ebx
sbb bl, bl
add eax, 0xfffffff0
inc bl
call fcn.0040464c
mov eax, dword [ebp - 0x25c]
add eax, 0xfffffff0
call fcn.0040464c
test bl, bl
jne 0x424c57
mov ebx, dword [ebp - 0x270]
push 0x453018
lea eax, [ebp - 0x260]
call fcn.00409c1d
lea eax, [ebp - 0x260]
push eax
lea eax, [ebp - 0x274]
lea ecx, [ebp - 0x270]
call fcn.00408d98
pop ecx
lea edi, [ebp - 0x26c]
call fcn.004088e1
mov eax, dword [ebp - 0x270]
add eax, 0xfffffff0
call fcn.0040464c
mov eax, dword [ebp - 0x260]
add eax, 0xfffffff0
call fcn.0040464c
cmp dword [ebp - 0x268], 0
mov esi, dword [sym.imp.KERNEL32.dll_FindClose]
je 0x424e33
push dword [ebp - 0x268]
call esi
and dword [ebp - 0x268], 0
lea eax, [ebp - 0x258]
push eax
push dword [ebp - 0x26c]
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov edi, eax
cmp edi, dword [ebp - 0x268]
je 0x424e67
cmp dword [ebp - 0x268], 0
je 0x424e61
push dword [ebp - 0x268]
call esi
mov dword [ebp - 0x268], edi
mov edi, dword [sym.imp.KERNEL32.dll_FindNextFileW]
jmp 0x424ebb
lea eax, [ebp - 0x258]
call fcn.00423e52
test al, al
je 0x424ebb
push dword [ebp + 0x14]
lea eax, [ebp - 0x22c]
push dword [ebp - 0x278]
lea ecx, [ebp - 0x270]
push ebx
push eax
lea eax, [ebp - 0x274]
call fcn.00408dca
pop ecx
mov ecx, dword [ebp - 0x284]
push eax
call fcn.00424baa
mov eax, dword [ebp - 0x270]
add eax, 0xfffffff0
call fcn.0040464c
lea eax, [ebp - 0x258]
push eax
push dword [ebp - 0x268]
call edi
cmp eax, 1
je 0x424e6f
cmp dword [ebp - 0x268], 0
je 0x424ee0
push dword [ebp - 0x268]
call esi
mov eax, dword [ebp - 0x26c]
add eax, 0xfffffff0
call fcn.0040464c
mov eax, dword [ebp - 0x28c]
call fcn.0040464c
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004313fb
leave
ret 0x10