Function at 0x10484f0
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x25c
mov eax, dword [0x10f5ca0]
xor eax, esp
mov dword [esp + 0x258], eax
push ebx
push esi
mov dword [esp + 8], ecx
mov esi, edx
add ecx, 0x1c8
push edi
test esi, esi
jne 0x1048521
xor eax, eax
jmp 0x104852f
mov eax, esi
lea ebx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x1048526
sub eax, ebx
push eax
push esi
call fcn.010079c0
push ebx
call 0x104853c
jmp 0x1048541
pushal
call 0x1048547
pop ebx
add ebx, 0xfffffff4
push 0x351000
pop ebx
popal
pop ebx
pop ebx
push ebx
call 0x104855a
jmp 0x104855f
pushal
call 0x1048565
pop ebx
add ebx, 0xfffffff4
push 0x351000
pop ebx
popal
pop ebx
pop ebx
push ebx
call 0x1048578
jmp 0x104857d
pushal
call 0x1048583
pop ebx
add ebx, 0xfffffff4
push 0x351000
pop ebx
popal
pop ebx
pop ebx
lea edx, [esp + 0x158]
mov eax, esi
sub edx, esi
jmp 0x10485a0
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x10485a0
push ebx
call 0x10485b0
jmp 0x10485b5
pushal
call 0x10485bb
pop ebx
add ebx, 0xfffffff4
push 0x351000
pop ebx
popal
pop ebx
pop ebx
lea eax, [esp + 0x158]
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x10485d0
mov ecx, dword [0x10ebaa8]
mov dx, word [0x10ebaac]
mov dword [eax], ecx
mov cl, byte [0x10ebaae]
mov word [eax + 4], dx
mov byte [eax + 6], cl
push ebx
call 0x10485fa
jmp 0x10485ff
pushal
call 0x1048605
pop ebx
add ebx, 0xfffffff4
push 0x351000
pop ebx
popal
pop ebx
pop ebx
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x15c]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov edi, eax
push ebx
call 0x104862d
jmp 0x1048632
pushal
call 0x1048638
pop ebx
add ebx, 0xfffffff4
push 0x351000
pop ebx
popal
pop ebx
pop ebx
cmp edi, 0xffffffff
jne 0x1048661
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x258]
xor ecx, esp
call fcn.01090090
mov esp, ebp
pop ebp
ret
push ebx
call 0x1048667
jmp 0x104866c
pushal
call 0x1048672
pop ebx
add ebx, 0xfffffff4
push 0x351000
pop ebx
popal
pop ebx
pop ebx
nop
test byte [esp + 0x18], 0x10
jne 0x104873d
mov edx, dword [0x10fa190]
mov eax, dword [edx + 0xc]
push ecx
mov ecx, 0x10fa190
mov esi, esp
call eax
add eax, 0x10
lea ecx, [esp + 0x48]
mov dword [esi], eax
test ecx, 0xffff0000
jne 0x10486f8
mov edx, ecx
movzx ebx, dx
call fcn.010014d0
mov ecx, eax
test ecx, ecx
je 0x10486cb
push esi
mov eax, ebx
call fcn.01007400
test eax, eax
jne 0x1048716
mov eax, dword [0x10fa104]
push ebx
push str.Warning:_implicit_LoadString__u__failed_n
push 2
push eax
lea ecx, [esp + 0x24]
push ecx
mov dword [esp + 0x28], str.C:Program_Files__x86_Microsoft_Visual_Studio_9.0VC_atlmfcincludecstringt.h
mov dword [esp + 0x2c], 0x8d1
call fcn.010012a0
add esp, 0x14
jmp 0x1048716
lea eax, [esp + 0x48]
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1048700
sub eax, edx
push eax
lea edx, [esp + 0x4c]
push edx
mov ecx, esi
call fcn.010079c0
mov ecx, dword [esp + 0x10]
call fcn.0104b050
push ebx
call 0x1048725
jmp 0x104872a
pushal
call 0x1048730
pop ebx
add ebx, 0xfffffff4
push 0x351000
pop ebx
popal
pop ebx
pop ebx
lea eax, [esp + 0x18]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
je 0x1048770
push ebx
call 0x1048753
jmp 0x1048758
pushal
call 0x104875e
pop ebx
add ebx, 0xfffffff4
push 0x351000
pop ebx
popal
pop ebx
pop ebx
jmp 0x1048680
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
push ebx
call 0x104877d
jmp 0x1048782
pushal
call 0x1048788
pop ebx
add ebx, 0xfffffff4
push 0x351000
pop ebx
popal
pop ebx
pop ebx
mov ecx, dword [esp + 0x264]
pop edi
pop esi
pop ebx
xor ecx, esp
mov eax, 1
call fcn.01090090
mov esp, ebp
pop ebp
ret