Function at 0x4b90d0
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x520ddb
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x3ca0
call fcn.004fe1a0
mov eax, dword [0x5a4aa8]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edi, ecx
mov dword [ebp - 0x3ca8], edi
mov ebx, edx
mov dword [ebp - 0x3ca0], 2
or eax, 0xffffffff
mov dword [ebp - 0x3ca4], eax
test edi, edi
je 0x4b95c3
test ebx, ebx
je 0x4b95c3
mov dword [ebp - 4], 0
mov dword [ebp - method.CInfInfo.virtual_0], vtable.CInfInfo.0
mov dword [ebp - 0x1a6c], eax
lea esi, [ebp - 0x3c98]
call fcn.004ba410
mov byte [ebp - 4], 1
push 0x800
push 0
lea eax, [ebp - 0x818]
push eax
call fcn.004fd670
add esp, 0xc
push 0x3ff
push edi
push 0x400
lea ecx, [ebp - 0x818]
push ecx
call fcn.004fa71b
add esp, 0x10
lea eax, [ebp - 0x818]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4b9192
sub eax, edx
sar eax, 1
cmp word [ebp + eax*2 - 0x81a], 0x5c
jne 0x4b91cc
lea eax, [ebp - 0x818]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4b91b5
sub eax, edx
sar eax, 1
mov word [ebp + eax*2 - 0x81a], cx
push str..
push 0x400
lea edx, [ebp - 0x818]
push edx
call fcn.004fad44
add esp, 0xc
lea eax, [ebp - 0x1a68]
push eax
lea ecx, [ebp - 0x818]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x3ca4], eax
cmp eax, 0xffffffff
jne 0x4b9226
mov dword [ebp - 0x3cac], 2
push 0x5814b0
lea edx, [ebp - 0x3cac]
push edx
call fcn.004fd5a3
nop
mov edi, dword [ebp - 0x3ca8]
test byte [ebp - 0x1a68], 0x10
jne 0x4b9310
push 0x800
push 0
lea eax, [ebp - 0x1818]
push eax
call fcn.004fd670
add esp, 0xc
push 0x3ff
lea ecx, [ebp - 0x1a3c]
push ecx
push 0x400
lea edx, [ebp - 0x1818]
push edx
call fcn.004fa71b
push 0x2e
lea eax, [ebp - 0x1818]
push eax
call fcn.004fa6eb
add esp, 0x18
test eax, eax
je 0x4b9310
push str..inf
push eax
call fcn.004f9f1e
add esp, 8
test eax, eax
jne 0x4b9310
push 0x800
push eax
lea ecx, [ebp - 0x1018]
push ecx
call fcn.004fd670
add esp, 0xc
lea edx, [ebp - 0x1a3c]
push edx
push edi
push 0x535a74
lea edx, [ebp - 0x1018]
call fcn.00404380
add esp, 0xc
lea edi, [ebx + 0x800]
lea eax, [ebx + 0x1000]
push eax
lea ecx, [ebx + 0xe00]
push ecx
push edi
mov edx, dword [ebx + 0x2204]
push edx
lea eax, [ebp - 0x1018]
push eax
lea ecx, [ebp - 0x3c98]
call fcn.004b9b00
test al, al
jne 0x4b9370
lea ecx, [ebp - 0x1018]
push ecx
push str.Init_INF_Fail__s_
mov ecx, 0x649e50
call fcn.004918f0
add esp, 8
lea eax, [ebp - 0x1a68]
push eax
mov ecx, dword [ebp - 0x3ca4]
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x4b9220
mov byte [ebp - 4], 0
mov dword [ebp - method.CInfInfo.virtual_0], vtable.CInfInfo.0
mov eax, dword [ebp - 0x1a6c]
cmp eax, 0xffffffff
je 0x4b934c
push eax
call dword [sym.imp.SETUPAPI.dll_SetupCloseInfFile]
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x3ca4]
cmp eax, 0xffffffff
je 0x4b9365
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [ebp - 0x3ca0]
jmp 0x4b95c8
lea esi, [ebx + 0xa00]
mov eax, esi
lea edx, [eax + 2]
jmp 0x4b9380
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4b9380
sub eax, edx
sar eax, 1
je 0x4b93c4
lea edx, [ebp - 0x3c94]
push edx
push esi
call fcn.004f9f1e
add esp, 8
test eax, eax
je 0x4b93c4
lea eax, [ebp - 0x3c94]
push eax
push esi
push str.Inf_class_name_was_not_matched_with_target_class_name___s___s_
mov ecx, 0x649e50
call fcn.004918f0
add esp, 0xc
jmp 0x4b9310
lea ecx, [ebp - 0x3c94]
push ecx
push str.Printer
call fcn.004f9f1e
add esp, 8
test eax, eax
jne 0x4b9411
lea ecx, [ebp - 0x3c98]
call fcn.004bab40
cmp dword [ebx + 0x220c], eax
je 0x4b940b
cmp eax, 3
je 0x4b940b
push str.Inf_Platform_was_not_matched_with_target_platform
mov ecx, 0x649e50
call fcn.004918f0
add esp, 4
jmp 0x4b9310
mov dword [ebx + 0x220c], eax
push 0x3ff
lea edx, [ebp - 0x1018]
push edx
push 0x400
push ebx
call fcn.004fa71b
add esp, 0x10
mov eax, esi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4b9430
sub eax, edx
sar eax, 1
jne 0x4b945b
push 0xff
lea eax, [ebp - 0x3c94]
push eax
push pe_nt_image_headers32
push esi
call fcn.004fa71b
add esp, 0x10
mov ecx, dword [ebp - 0x1a70]
mov dword [ebx + 0x2204], ecx
push 0xff
lea edx, [ebp - 0x3a8c]
push edx
push pe_nt_image_headers32
push edi
call fcn.004fa71b
add esp, 0x10
mov al, byte [ebp - 0x1a74]
mov byte [ebx + 0x2208], al
lea ecx, [ebp - 0x3c98]
call fcn.004bb3b0
lea edx, [eax + 2]
jmp 0x4b94a0
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4b94a0
sub eax, edx
sar eax, 1
je 0x4b94d6
lea ecx, [ebp - 0x3c98]
call fcn.004bb3b0
push 0xff
push eax
push pe_nt_image_headers32
lea ecx, [ebx + 0xc00]
push ecx
call fcn.004fa71b
add esp, 0x10
lea edi, [ebp - 0x3c98]
call fcn.004bb3e0
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4b94e4
sub eax, edx
sar eax, 1
je 0x4b951a
lea edi, [ebp - 0x3c98]
call fcn.004bb3e0
push 0x3ff
push eax
push 0x400
lea edx, [ebx + 0x1200]
push edx
call fcn.004fa71b
add esp, 0x10
lea edi, [ebp - 0x3c98]
call fcn.004bb530
lea edx, [eax + 2]
jmp 0x4b9530
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4b9530
sub eax, edx
sar eax, 1
je 0x4b9566
lea edi, [ebp - 0x3c98]
call fcn.004bb530
push 0x3ff
push eax
push 0x400
add ebx, 0x1a00
push ebx
call fcn.004fa71b
add esp, 0x10
mov dword [ebp - 0x3ca0], 0
jmp 0x4b932c
mov eax, 0x57
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004fa103
mov esp, ebp
pop ebp
ret