Function at 0x46d9af
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push 0x414
mov eax, 0x44cced
call fcn.0043bc61
mov edi, ecx
lea eax, [ebp + 8]
xor ebx, ebx
push eax
lea ecx, [ebp - 0x1cc]
mov dword [ebp - 4], ebx
call fcn.004312b5
push edi
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 1
call fcn.004312b5
mov byte [ebp - 4], 2
push dword [ebp - 0x1c0]
mov eax, dword [ebp - 0xa4]
push dword [ebp - 0x98]
push dword [ebp - 0x1c8]
mov esi, dword [eax + 0x10]
mov ecx, esi
call dword [0x4a3670]
lea ecx, [ebp - 0xa4]
call esi
mov eax, dword [ebp - 0xa4]
push 0xffffffffffffffff
push dword [ebp - 0x98]
mov esi, dword [eax + 0x10]
mov ecx, esi
push 0x4070b8
call dword [0x4a3670]
lea ecx, [ebp - 0xa4]
call esi
push ebx
push ebx
push ebx
lea eax, [ebp - 0x41c]
mov esi, ebx
push eax
push ebx
push dword [ebp - 0xa0]
call dword [sym.imp.api_ms_win_core_file_l1_1_0.dll_FindFirstFileExW]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x46db79
test byte [ebp - 0x41c], 0x10
je 0x46db33
cmp word [ebp - 0x3f0], 0x2e
je 0x46db41
add dword [edi + 0xa0], 1
lea eax, [ebp - 0x1cc]
push eax
adc dword [edi + 0xa4], 0
lea ecx, [ebp - 0x138]
call fcn.004312b5
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x138]
push 0xffffffffffffffff
push dword [ebp - 0x12c]
mov esi, dword [eax + 0x10]
mov ecx, esi
push 0x406fdc
call dword [0x4a3670]
lea ecx, [ebp - 0x138]
call esi
push 0xffffffffffffffff
push dword [ebp - 0x12c]
lea eax, [ebp - 0x3f0]
push eax
mov eax, dword [ebp - 0x138]
mov esi, dword [eax + 0x10]
mov ecx, esi
call dword [0x4a3670]
lea ecx, [ebp - 0x138]
call esi
sub esp, 0x94
lea eax, [ebp - 0x138]
mov ecx, esp
push eax
call fcn.004312b5
mov ecx, edi
call fcn.0046d9af
mov byte [ebp - 4], 2
mov esi, eax
mov eax, dword [ebp - 0x134]
mov dword [ebp - fcn.0042be10], 0x401028
test eax, eax
je 0x46db41
lea ecx, [ebp - 0x128]
cmp eax, ecx
je 0x46db41
push eax
call dword [sym.imp.msvcrt.dll_free]
pop ecx
jmp 0x46db41
add dword [edi + 0x98], 1
adc dword [edi + 0x9c], 0
test esi, esi
js 0x46db70
lea eax, [ebp - 0x41c]
push eax
push ebx
call dword [sym.imp.api_ms_win_core_file_l1_1_0.dll_FindNextFileW]
test eax, eax
jne 0x46da5d
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x46db70
movzx esi, si
or esi, 0x80070000
push ebx
call dword [sym.imp.api_ms_win_core_file_l1_1_0.dll_FindClose]
jmp 0x46db8e
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x46db8e
movzx esi, si
or esi, 0x80070000
mov eax, dword [ebp - 0xa0]
lea edi, [esi + 0x7ff8ffee]
neg edi
mov ebx, 0x401028
mov dword [ebp - 0xa4], ebx
sbb edi, edi
and edi, esi
test eax, eax
je 0x46dbc1
lea ecx, [ebp - 0x94]
cmp eax, ecx
je 0x46dbc1
push eax
call dword [sym.imp.msvcrt.dll_free]
pop ecx
mov eax, dword [ebp - 0x1c8]
mov esi, 0x401558
mov dword [ebp - 0xa4], esi
mov dword [ebp - 0x1cc], ebx
test eax, eax
je 0x46dbee
lea ecx, [ebp - 0x1bc]
cmp eax, ecx
je 0x46dbee
push eax
call dword [sym.imp.msvcrt.dll_free]
pop ecx
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x1cc], esi
mov dword [ebp + 8], ebx
test ecx, ecx
je 0x46dc0d
lea eax, [ebp + 0x18]
cmp ecx, eax
je 0x46dc0d
push ecx
call dword [sym.imp.msvcrt.dll_free]
pop ecx
mov eax, edi
call fcn.0043bc10
ret 0x94