Function at 0x4d73f4
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x30
push 0
push 0
dec ecx
jne 0x4d73fd
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
mov esi, ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.00404c50
mov eax, dword [ebp - 8]
call fcn.00404c50
mov eax, dword [ebp + 8]
call fcn.00404c50
xor eax, eax
push ebp
push 0x4d77aa
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x150]
push eax
lea eax, [ebp - 0x154]
mov ecx, 0x4d77c4
mov edx, dword [ebp - 4]
call fcn.00404aac
mov eax, dword [ebp - 0x154]
call fcn.00404c60
push eax
call sub.kernel32.dll_FindFirstFileA_1
mov ebx, eax
cmp ebx, 0xffffffff
setne al
jmp 0x4d7769
mov eax, dword [0x51e76c]
mov eax, dword [eax]
call fcn.00480460
lea eax, [ebp - 0xc]
lea edx, [ebp - 0x124]
mov ecx, 0x104
call fcn.00404a10
push dword [ebp - 4]
push 0x4d77d4
push dword [ebp - 0xc]
lea eax, [ebp - 0x15c]
mov edx, 3
call fcn.00404b20
mov eax, dword [ebp - 0x15c]
lea edx, [ebp - 0x158]
call fcn.00408fbc
mov eax, dword [ebp - 0x158]
push eax
lea edx, [ebp - 0x160]
mov eax, 0x4d77e0
call fcn.00408fbc
mov eax, dword [ebp - 0x160]
pop edx
call fcn.00404da4
test eax, eax
jg 0x4d7777
mov eax, dword [ebp - 0x150]
cmp eax, 0x10
je 0x4d752f
cmp eax, 2
je 0x4d752f
cmp eax, 4
je 0x4d752f
cmp eax, 0x80
je 0x4d752f
cmp eax, 0x100
je 0x4d752f
cmp eax, 0x13
je 0x4d752f
cmp eax, 0x21
je 0x4d752f
cmp eax, 0x20
je 0x4d752f
cmp eax, 0x16
je 0x4d752f
cmp eax, 0x2020
je 0x4d752f
cmp eax, 0x2010
jne 0x4d7756
mov eax, dword [ebp - 0xc]
mov edx, 0x4d77f0
call fcn.00404bac
je 0x4d7756
mov eax, dword [ebp - 0xc]
mov edx, 0x4d77fc
call fcn.00404bac
je 0x4d7756
mov eax, dword [ebp - 4]
call fcn.004099b4
test al, al
je 0x4d75bc
mov eax, dword [0x521304]
mov edx, dword [ebp - 4]
call fcn.00404bac
je 0x4d7579
mov byte [0x521308], 0
jmp 0x4d7580
mov byte [0x521308], 1
mov eax, 0x521304
mov edx, dword [ebp - 4]
call fcn.004047f4
mov eax, dword [ebp + 8]
push eax
push dword [ebp - 4]
push 0x4d77d4
push dword [ebp - 0xc]
lea eax, [ebp - 0x164]
mov edx, 3
call fcn.00404b20
mov eax, dword [ebp - 0x164]
mov ecx, esi
mov edx, dword [ebp - 8]
call fcn.004d73f4
push dword [ebp - 4]
push 0x4d77d4
push dword [ebp - 0xc]
lea eax, [ebp - 0x168]
mov edx, 3
call fcn.00404b20
mov eax, dword [ebp - 0x168]
call fcn.004099a4
test al, al
je 0x4d7756
cmp byte [0x521308], 0
jne 0x4d76b0
mov eax, dword [esi]
call fcn.00481da8
mov dword [ebp - 0x10], eax
lea edx, [ebp - 0x170]
mov eax, dword [ebp - 0xc]
call fcn.00409d98
mov eax, dword [ebp - 0x170]
lea edx, [ebp - 0x16c]
call fcn.00408eb8
mov eax, dword [ebp - 0x16c]
mov edx, 0x4d7808
call fcn.00404bac
jne 0x4d7654
push dword [ebp - 4]
push 0x4d77d4
push dword [ebp - 0xc]
mov eax, dword [esi]
mov edx, dword [ebp - 0x10]
call fcn.00481dbc
add eax, 0xc
mov edx, 3
call fcn.00404b20
lea edx, [ebp - 0x178]
mov eax, dword [ebp - 0xc]
call fcn.00409d98
mov eax, dword [ebp - 0x178]
lea edx, [ebp - 0x174]
call fcn.00408eb8
mov eax, dword [ebp - 0x174]
mov edx, 0x4d7818
call fcn.00404bac
jne 0x4d7756
push dword [ebp - 4]
push 0x4d77d4
push dword [ebp - 0xc]
mov eax, dword [esi]
mov edx, dword [ebp - 0x10]
call fcn.00481dbc
add eax, 0x10
mov edx, 3
call fcn.00404b20
jmp 0x4d7756
lea edx, [ebp - 0x180]
mov eax, dword [ebp - 0xc]
call fcn.00409d98
mov eax, dword [ebp - 0x180]
lea edx, [ebp - 0x17c]
call fcn.00408eb8
mov eax, dword [ebp - 0x17c]
mov edx, 0x4d7808
call fcn.00404bac
jne 0x4d7703
push dword [ebp - 4]
push 0x4d77d4
push dword [ebp - 0xc]
mov eax, dword [esi]
mov edx, dword [ebp - 0x10]
call fcn.00481dbc
add eax, 0xc
mov edx, 3
call fcn.00404b20
lea edx, [ebp - 0x188]
mov eax, dword [ebp - 0xc]
call fcn.00409d98
mov eax, dword [ebp - 0x188]
lea edx, [ebp - 0x184]
call fcn.00408eb8
mov eax, dword [ebp - 0x184]
mov edx, 0x4d7818
call fcn.00404bac
jne 0x4d7756
push dword [ebp - 4]
push 0x4d77d4
push dword [ebp - 0xc]
mov eax, dword [esi]
mov edx, dword [ebp - 0x10]
call fcn.00481dbc
add eax, 0x10
mov edx, 3
call fcn.00404b20
lea eax, [ebp - 0x150]
push eax
push ebx
call sub.kernel32.dll_FindNextFileA
cmp eax, 1
sbb eax, eax
inc eax
test al, al
jne 0x4d7470
push ebx
call sub.kernel32.dll_FindClose_1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4d77b1
lea eax, [ebp - 0x188]
mov edx, 0xe
call fcn.004047c4
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.004047c4
lea eax, [ebp + 8]
call fcn.004047a0
ret