Function at 0x4b0450
Capabilities:
Enumerate files on windows

Disassembly:
push 0xffffffffffffffff
push 0x5080eb
mov eax, dword fs:[0]
push eax
mov eax, 0x1460
call fcn.004f3c00
mov eax, dword [0x5364d0]
xor eax, esp
mov dword [esp + 0x145c], eax
push ebx
push esi
push edi
mov eax, dword [0x5364d0]
xor eax, esp
push eax
lea eax, [esp + 0x1470]
mov dword fs:[0], eax
mov edi, ecx
push 0x24c
lea eax, [esp + 0x1c]
push 0
push eax
mov dword [esp + 0x20], 0
call fcn.004e8fe0
mov edx, dword [0x563288]
mov eax, dword [edx + 0xc]
add esp, 0xc
mov ecx, 0x563288
call eax
add eax, 0x10
mov dword [esp + 0x10], eax
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x26e]
mov dword [esp + 0x1480], 0
push edx
mov word [esp + 0x270], cx
call fcn.004e8fe0
add esp, 0xc
xor eax, eax
push 0x7fe
push eax
lea ecx, [esp + 0xc76]
push ecx
mov word [esp + 0xc78], ax
call fcn.004e8fe0
add esp, 0xc
xor edx, edx
push 0x7fe
push edx
lea eax, [esp + 0x476]
push eax
mov word [esp + 0x478], dx
call fcn.004e8fe0
add esp, 0xc
lea esi, [esp + 0x46c]
call fcn.004b4320
xor esi, esi
cmp dword [edi + 8], esi
jle 0x4b0560
mov ebx, dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
jmp 0x4b0550
lea ecx, [esp + 0x46c]
push ecx
call ebx
inc esi
cmp esi, dword [edi + 8]
jl 0x4b0550
push str.config
lea edx, [esp + 0x470]
push edx
lea eax, [esp + 0x26c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [esp + 0x264]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4b0585
sub eax, edx
sar eax, 1
push eax
lea ecx, [esp + 0x268]
push ecx
lea eax, [esp + 0x18]
call fcn.00401560
push 4
push str..
lea edx, [esp + 0x18]
push edx
call fcn.0041e520
mov edi, dword [esp + 0x10]
lea eax, [esp + 0x14]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, eax
test esi, esi
je 0x4b069d
mov ebx, dword [sym.imp.KERNEL32.dll_FindNextFileW]
jmp 0x4b05e0
test byte [esp + 0x14], 0x10
je 0x4b0686
mov ecx, 0x512924
lea eax, [esp + 0x40]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4b061a
test dx, dx
je 0x4b0616
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4b061a
add eax, 4
add ecx, 4
test dx, dx
jne 0x4b05f4
xor eax, eax
jmp 0x4b061f
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4b0686
mov ecx, 0x5153dc
lea eax, [esp + 0x40]
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4b0656
test dx, dx
je 0x4b0652
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4b0656
add eax, 4
add ecx, 4
test dx, dx
jne 0x4b0630
xor eax, eax
jmp 0x4b065b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4b0686
lea ecx, [esp + 0x40]
push ecx
lea edx, [esp + 0x268]
push edx
lea eax, [esp + 0xc74]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea ecx, [esp + 0xc6c]
call fcn.004b0120
lea ecx, [esp + 0x14]
push ecx
push esi
call ebx
test eax, eax
jne 0x4b05e0
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
lea eax, [edi - 0x10]
mov dword [esp + 0x1478], 0xffffffff
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4b06c4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x1470]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x145c]
xor ecx, esp
call fcn.004e3edb
add esp, 0x146c
ret