Function at 0x49757d
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1950
call fcn.005106b0
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x1150]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov edx, dword [ebp + 0xc]
push edx
lea eax, [ebp - 0x1150]
push eax
call sub.MSVCRT.dll_strcat
add esp, 8
mov dword [0x5b84b8], 0
jmp 0x4975cb
mov ecx, dword [0x5b84b8]
add ecx, 1
mov dword [0x5b84b8], ecx
cmp dword [0x5b84b8], 0x104
jae 0x4975e7
mov edx, dword [0x5b84b8]
mov byte [ebp + edx - 0x914], 0
jmp 0x4975bc
lea eax, [ebp - 0x940]
push eax
lea ecx, [ebp - 0x1150]
push ecx
call dword [sym.imp.KERNEL32.DLL_FindFirstFileA]
mov dword [ebp - 0x944], eax
movsx edx, byte [ebp - 0x914]
test edx, edx
jne 0x497611
jmp 0x4976c7
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x800]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
lea edx, [ebp - 0x914]
push edx
lea eax, [ebp - 0x800]
push eax
call sub.MSVCRT.dll_strcat
add esp, 8
lea ecx, [ebp - 0x800]
push ecx
call fcn.00401fca
add esp, 4
push 0x561ab0
lea edx, [ebp - 0x800]
push edx
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
je 0x49769a
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x800]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
lea edx, [ebp - 0x810]
push edx
lea eax, [ebp - 0x800]
push eax
call sub.MSVCRT.dll_strcat
add esp, 8
lea ecx, [ebp - 0x800]
push ecx
call fcn.00401fca
add esp, 4
lea edx, [ebp - 0x800]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f680
lea eax, [ebp - 0x940]
push eax
mov ecx, dword [ebp - 0x944]
push ecx
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
test eax, eax
jne 0x497601
mov edx, dword [ebp - 0x944]
push edx
call dword [sym.imp.KERNEL32.DLL_FindClose]
mov dword [ebp - 0x950], 0
mov dword [ebp - 0x94c], 0
cmp dword [0x5b84d4], 0
je 0x49789f
push 0x5b7db4
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
je 0x49789f
push 0x5b7db4
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x950], eax
mov ecx, dword [ebp + 8]
push ecx
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x94c], eax
push 0x5b7eb4
push str._sSysWOW64
lea edx, [ebp - 0x1950]
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
mov eax, dword [ebp - 0x950]
mov dword [0x5b84b8], eax
jmp 0x49776a
mov ecx, dword [0x5b84b8]
add ecx, 1
mov dword [0x5b84b8], ecx
mov edx, dword [0x5b84b8]
cmp edx, dword [ebp - 0x94c]
jge 0x4977a8
mov eax, dword [ebp + 8]
add eax, dword [0x5b84b8]
mov cl, byte [eax]
mov byte [ebp - 0x948], cl
mov byte [ebp - 0x947], 0
lea edx, [ebp - 0x948]
push edx
lea eax, [ebp - 0x1950]
push eax
call sub.MSVCRT.dll_strcat
add esp, 8
jmp 0x49775b
lea ecx, [ebp - 0x1950]
push ecx
lea edx, [ebp - 0x1150]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0x1150]
push ecx
call sub.MSVCRT.dll_strcat
add esp, 8
mov dword [0x5b84b8], 0
jmp 0x4977ec
mov edx, dword [0x5b84b8]
add edx, 1
mov dword [0x5b84b8], edx
cmp dword [0x5b84b8], 0x104
jae 0x497807
mov eax, dword [0x5b84b8]
mov byte [ebp + eax - 0x914], 0
jmp 0x4977dd
lea ecx, [ebp - 0x940]
push ecx
lea edx, [ebp - 0x1150]
push edx
call dword [sym.imp.KERNEL32.DLL_FindFirstFileA]
mov dword [ebp - 0x944], eax
movsx eax, byte [ebp - 0x914]
test eax, eax
jne 0x49782e
jmp 0x497892
lea ecx, [ebp - 0x1950]
push ecx
lea edx, [ebp - 0x800]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
lea eax, [ebp - 0x914]
push eax
lea ecx, [ebp - 0x800]
push ecx
call sub.MSVCRT.dll_strcat
add esp, 8
lea edx, [ebp - 0x800]
push edx
call fcn.00401fca
add esp, 4
lea eax, [ebp - 0x800]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f680
lea ecx, [ebp - 0x940]
push ecx
mov edx, dword [ebp - 0x944]
push edx
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
test eax, eax
jne 0x497821
mov eax, dword [ebp - 0x944]
push eax
call dword [sym.imp.KERNEL32.DLL_FindClose]
mov esp, ebp
pop ebp
ret