Function at 0x405c8e
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
mov eax, 0x44c394
call fcn.0044ae38
sub esp, 0x2b0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov bl, cl
lea ecx, [ebp - 0x4c]
call fcn.004021c9
or dword [ebp - 0x18], 0xffffffff
test bl, bl
je 0x405cf1
mov edx, 0x45962c
lea ecx, [ebp + 0x20]
call fcn.00406ca4
test al, al
je 0x405cf1
sub esp, 0x18
mov ecx, esp
lea eax, [ebp + 8]
push eax
call fcn.0040659e
lea ecx, [ebp - 0x34]
call fcn.00413ac2
add esp, 0x18
push eax
lea ecx, [ebp + 0x20]
call fcn.004064d4
lea ecx, [ebp - 0x34]
call fcn.004034ff
sub esp, 0x18
mov ecx, esp
lea eax, [ebp + 8]
push eax
call fcn.0040659e
lea ecx, [ebp - 0x34]
call fcn.00413afe
add esp, 0x18
push eax
lea ecx, [ebp + 0x20]
call fcn.004064c2
lea ecx, [ebp - 0x34]
call fcn.004034ff
push 0x4596b8
lea ecx, [ebp + 8]
call fcn.004064b9
and dword [ebp - 4], 0
lea eax, [ebp - 0x2b4]
push eax
push 0x459698
lea edx, [ebp + 8]
lea ecx, [ebp - 0x34]
call fcn.00406b5e
pop ecx
mov ecx, eax
call fcn.00404c42
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, eax
mov dword [ebp - 0x18], esi
lea ecx, [ebp - 0x34]
call fcn.004034ff
cmp esi, 0xffffffff
jne 0x405d79
mov dword [ebp - 0x1c], 2
push 0x461dc8
lea eax, [ebp - 0x1c]
push eax
call fcn.0042ebd4
lea eax, [ebp - 0x2b4]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x405edc
cmp byte [0x465a71], 0
jne 0x405f1e
test byte [ebp - 0x2b4], 0x10
je 0x405e86
mov ecx, 0x4595d4
lea eax, [ebp - 0x288]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x405dda
test dx, dx
je 0x405dd6
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x405dda
add eax, 4
add ecx, 4
test dx, dx
jne 0x405db4
xor eax, eax
jmp 0x405ddf
sbb eax, eax
or eax, 1
test eax, eax
je 0x405d79
mov ecx, 0x4596bc
lea eax, [ebp - 0x288]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x405e14
test dx, dx
je 0x405e10
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x405e14
add eax, 4
add ecx, 4
test dx, dx
jne 0x405dee
xor eax, eax
jmp 0x405e19
sbb eax, eax
or eax, 1
test eax, eax
je 0x405d79
lea eax, [ebp - 0x288]
push eax
lea ecx, [ebp - 0x64]
call fcn.00403509
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x34]
call fcn.00406c3d
pop ecx
lea ecx, [ebp - 0x64]
call fcn.004034ff
sub esp, 0x18
mov ecx, esp
lea eax, [ebp + 0x38]
push eax
call fcn.004021e0
sub esp, 0x18
mov ecx, esp
lea eax, [ebp + 0x20]
push eax
call fcn.0040659e
sub esp, 0x18
mov ecx, esp
lea eax, [ebp - 0x34]
push eax
call fcn.0040659e
mov cl, bl
call fcn.00405c8e
add esp, 0x48
lea ecx, [ebp - 0x34]
call fcn.004034ff
jmp 0x405d79
sub esp, 0x18
mov ecx, esp
lea eax, [ebp + 0x38]
push eax
call fcn.004021e0
sub esp, 0x18
mov ecx, esp
lea eax, [ebp + 0x20]
push eax
call fcn.0040659e
lea eax, [ebp - 0x288]
push eax
lea ecx, [ebp - 0x34]
call fcn.00403509
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x64]
call fcn.00406c3d
sub esp, 0x14
mov ecx, esp
push eax
call fcn.00406547
mov cl, bl
call fcn.00405f51
add esp, 0x48
lea ecx, [ebp - 0x64]
call fcn.004034ff
jmp 0x405e79
or dword [ebp - 4], 0xffffffff
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
lea ecx, [ebp - 0x4c]
call fcn.00402091
lea ecx, [ebp + 8]
call fcn.004034ff
lea ecx, [ebp + 0x20]
call fcn.004034ff
lea ecx, [ebp + 0x38]
call fcn.00402091
mov al, 1
jmp 0x405f40
lea ecx, [ebp - 0x4c]
call fcn.00402091
lea ecx, [ebp + 8]
call fcn.004034ff
lea ecx, [ebp + 0x20]
call fcn.004034ff
lea ecx, [ebp + 0x38]
call fcn.00402091
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret