Function at 0x46fdf0
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push 0xffffffffffffffff
push 0x85b141
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x268
push ebx
mov ebx, dword [esp + 0x280]
mov eax, 0x1f3
push ebp
sub eax, ebx
push esi
mov esi, dword [esp + 0x284]
mov dword [esp + 0x20], eax
mov eax, dword [0x9dce80]
mov ebp, ecx
test eax, eax
je 0x46fe4c
push esi
push str.CFileEnum::EnumCoreW_1___s_...
push str.EDBackup_DBG
push 0xffffffffffffffff
push 0x9dc5ec
call fcn.006600d0
add esp, 0x14
mov eax, dword [esp + 0x28c]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp eax, 0xffffffff
mov dword [esp + 0x18], eax
jne 0x46fe91
mov eax, dword [0x9dce80]
test eax, eax
je 0x46fe87
push esi
push str.CFileEnum::EnumCoreW_2___s_...
push str.EDBackup_DBG
push 0xffffffffffffffff
push 0x9dc5ec
call fcn.006600d0
add esp, 0x14
mov eax, 1
jmp 0x470105
push edi
mov edi, 1
mov eax, dword [esp + 0x290]
test byte [eax], 0x10
je 0x46ff91
cmp word [eax + 0x2c], 0x2e
lea edx, [eax + 0x2c]
jne 0x46fecf
mov cx, word [eax + 0x2e]
test cx, cx
je 0x4700c0
cmp cx, 0x2e
jne 0x46fecf
cmp word [eax + 0x30], 0
je 0x4700c0
push edx
call fcn.005fc40b
mov ecx, dword [esp + 0x28]
add esp, 4
mov dword [esp + 0x20], eax
inc eax
cmp ecx, eax
jb 0x4700b9
mov ecx, dword [esp + 0x290]
mov word [esi + ebx*2 - 2], 0
lea eax, [ecx + 0x2c]
push eax
push esi
call fcn.005fc468
add esp, 8
test edi, edi
je 0x46ff7f
mov edx, dword [esp + 0x20]
mov ecx, 0x93
lea edi, [esp + 0x2c]
mov dword [esp + 0x28], 0
lea eax, [edx + ebx]
lea edx, [edx + ebx + 1]
lea eax, [esi + eax*2]
mov word [eax - 2], 0x5c
mov word [eax], 0x2a
xor eax, eax
mov word [esi + edx*2], 0
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x298]
mov eax, dword [esp + 0x294]
push ecx
lea ecx, [esp + 0x2c]
push eax
push ecx
push edx
push esi
mov ecx, ebp
call fcn.0046fdf0
mov edi, eax
test edi, edi
je 0x46ff7f
mov edx, dword [esp + 0x298]
mov eax, dword [esp + 0x290]
push ebp
push edx
push eax
add eax, 0x2c
push eax
push esi
call dword [esp + 0x2a8]
mov edi, eax
mov word [esi + ebx*2 - 2], 0x2a
mov word [esi + ebx*2], 0
jmp 0x4700b9
xor edi, edi
mov word [esi + ebx*2 - 4], di
mov ecx, dword [ebp + 0x488]
inc ecx
mov dword [ebp + 0x488], ecx
mov ecx, dword [ebp + 0x484]
cmp ecx, edi
je 0x470093
call fcn.00577500
mov ecx, dword [ebp + 0x484]
call fcn.00577640
test eax, eax
jne 0x4700df
mov eax, dword [ebp + 0x488]
cmp eax, 0x64
jae 0x46ffe2
mov ecx, dword [ebp + 0x484]
push eax
mov edx, dword [ecx]
call dword [edx + 0x10]
mov eax, dword [0x8ab26c]
mov dword [esp + 0x18], eax
mov dword [esp + 0x280], edi
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x290]
lea ecx, [esp + 0x18]
add eax, 0x2c
mov byte [esp + 0x280], 2
push eax
push esi
push 0x92ecec
push ecx
call fcn.0061aed0
add esp, 0x10
lea ecx, [esp + 0x14]
push edi
push 0x121c
call fcn.0061bfb0
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
push edx
lea ecx, [esp + 0x14]
push eax
push ecx
call fcn.0061aed0
mov ecx, dword [ebp + 0x484]
mov eax, dword [esp + 0x1c]
add esp, 0xc
mov edx, dword [ecx]
push eax
call dword [edx + 0xc]
lea ecx, [esp + 0x14]
mov byte [esp + 0x280], 1
call fcn.00617ec0
lea ecx, [esp + 0x10]
mov byte [esp + 0x280], 0
call fcn.00617ec0
lea ecx, [esp + 0x18]
mov dword [esp + 0x280], 0xffffffff
call fcn.00617ec0
mov eax, dword [esp + 0x290]
mov ecx, dword [esp + 0x298]
push ebp
push ecx
push eax
add eax, 0x2c
push eax
push esi
call dword [esp + 0x2a8]
mov word [esi + ebx*2 - 4], 0x5c
mov edi, eax
mov word [esi + ebx*2 - 2], 0x2a
mov eax, dword [esp + 0x290]
test edi, edi
je 0x4700f7
cmp dword [ebp], 0
jne 0x4700eb
mov edx, dword [esp + 0x1c]
push eax
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x4700f7
jmp 0x46fe97
mov dword [ebp + 0x48c], 1
jmp 0x4700f7
mov dword [ebp + 0x48c], 1
xor edi, edi
mov eax, dword [esp + 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, edi
pop edi
mov ecx, dword [esp + 0x274]
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x274
ret 0x14