Function at 0x491380
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x15e8
call fcn.0049dec0
mov eax, dword [0x4ad2d0]
xor eax, ebp
mov dword [ebp - 4], eax
mov byte [ebp - 0x418], 0
push 0x40f
push 0
lea eax, [ebp - 0x417]
push eax
call fcn.00499430
add esp, 0xc
mov cx, word [0x4a6864]
mov word [ebp - 0x560], cx
mov dl, byte [0x4a6866]
mov byte [ebp - 0x55e], dl
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.004912c0
add esp, 8
mov edx, dword [ebp + 0xc]
mov dword [ebp - 0x15a4], edx
mov eax, dword [ebp - 0x15a4]
add eax, 1
mov dword [ebp - 0x15a8], eax
mov ecx, dword [ebp - 0x15a4]
mov dl, byte [ecx]
mov byte [ebp - 0x15a9], dl
add dword [ebp - 0x15a4], 1
cmp byte [ebp - 0x15a9], 0
jne 0x4913f6
mov eax, dword [ebp - 0x15a4]
sub eax, dword [ebp - 0x15a8]
mov dword [ebp - 0x15b0], eax
cmp dword [ebp - 0x15b0], 0x30c
jbe 0x491437
jmp 0x49177f
push 0x103
push 0
lea ecx, [ebp - 0x418]
push ecx
call fcn.004029d0
add esp, 0xc
mov edx, dword [ebp + 0xc]
push edx
push 0x4a6868
lea eax, [ebp - 0x418]
push eax
call fcn.00491923
add esp, 0xc
lea ecx, [ebp - 0x558]
push ecx
lea edx, [ebp - 0x418]
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x55c], eax
cmp dword [ebp - 0x55c], 0xffffffff
jne 0x49148d
jmp 0x49177f
lea eax, [ebp - 0x52c]
mov dword [ebp - 0x15b4], eax
mov ecx, dword [ebp - 0x15b4]
add ecx, 1
mov dword [ebp - 0x15b8], ecx
mov edx, dword [ebp - 0x15b4]
mov al, byte [edx]
mov byte [ebp - 0x15b9], al
add dword [ebp - 0x15b4], 1
cmp byte [ebp - 0x15b9], 0
jne 0x4914a8
mov ecx, dword [ebp - 0x15b4]
sub ecx, dword [ebp - 0x15b8]
mov dword [ebp - 0x15c0], ecx
cmp dword [ebp - 0x15c0], 0xff
jbe 0x4914e9
jmp 0x491756
mov edx, dword [ebp - 0x558]
and edx, 0x10
je 0x4916c4
lea eax, [ebp - 0x55f]
mov dword [ebp - 0x15c4], eax
lea ecx, [ebp - 0x52c]
mov dword [ebp - 0x15c8], ecx
mov edx, dword [ebp - 0x15c8]
mov al, byte [edx]
mov byte [ebp - 0x15c9], al
mov ecx, dword [ebp - 0x15c4]
cmp al, byte [ecx]
jne 0x49156e
cmp byte [ebp - 0x15c9], 0
je 0x491562
mov edx, dword [ebp - 0x15c8]
mov al, byte [edx + 1]
mov byte [ebp - 0x15ca], al
mov ecx, dword [ebp - 0x15c4]
cmp al, byte [ecx + 1]
jne 0x49156e
add dword [ebp - 0x15c8], 2
add dword [ebp - 0x15c4], 2
cmp byte [ebp - 0x15ca], 0
jne 0x491510
mov dword [ebp - 0x15d0], 0
jmp 0x491579
sbb edx, edx
sbb edx, 0xffffffff
mov dword [ebp - 0x15d0], edx
mov eax, dword [ebp - 0x15d0]
mov dword [ebp - 0x15d4], eax
cmp dword [ebp - 0x15d4], 0
je 0x491628
lea ecx, [ebp - 0x560]
mov dword [ebp - 0x15d8], ecx
lea edx, [ebp - 0x52c]
mov dword [ebp - 0x15dc], edx
mov eax, dword [ebp - 0x15dc]
mov cl, byte [eax]
mov byte [ebp - 0x15dd], cl
mov edx, dword [ebp - 0x15d8]
cmp cl, byte [edx]
jne 0x491608
cmp byte [ebp - 0x15dd], 0
je 0x4915fc
mov eax, dword [ebp - 0x15dc]
mov cl, byte [eax + 1]
mov byte [ebp - 0x15de], cl
mov edx, dword [ebp - 0x15d8]
cmp cl, byte [edx + 1]
jne 0x491608
add dword [ebp - 0x15dc], 2
add dword [ebp - 0x15d8], 2
cmp byte [ebp - 0x15de], 0
jne 0x4915aa
mov dword [ebp - 0x15e4], 0
jmp 0x491613
sbb eax, eax
sbb eax, 0xffffffff
mov dword [ebp - 0x15e4], eax
mov ecx, dword [ebp - 0x15e4]
mov dword [ebp - 0x15e8], ecx
cmp dword [ebp - 0x15e8], 0
jne 0x49162d
jmp 0x491756
mov byte [ebp - 0x970], 0
push 0x40f
push 0
lea edx, [ebp - 0x96f]
push edx
call fcn.00499430
add esp, 0xc
mov byte [ebp - 0xd80], 0
push 0x40f
push 0
lea eax, [ebp - 0xd7f]
push eax
call fcn.00499430
add esp, 0xc
lea ecx, [ebp - 0x52c]
push ecx
mov edx, dword [ebp + 0xc]
push edx
push 0x4a6870
lea eax, [ebp - 0x970]
push eax
call fcn.00491923
add esp, 0x10
lea ecx, [ebp - 0x52c]
push ecx
mov edx, dword [ebp + 0x10]
push edx
push 0x4a6878
lea eax, [ebp - 0xd80]
push eax
call fcn.00491923
add esp, 0x10
lea ecx, [ebp - 0xd80]
push ecx
lea edx, [ebp - 0x970]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.00491380
add esp, 0xc
jmp 0x491756
mov byte [ebp - 0x15a0], 0
push 0x40f
push 0
lea ecx, [ebp - 0x159f]
push ecx
call fcn.00499430
add esp, 0xc
mov byte [ebp - 0x1190], 0
push 0x40f
push 0
lea edx, [ebp - 0x118f]
push edx
call fcn.00499430
add esp, 0xc
lea eax, [ebp - 0x52c]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
push 0x4a6880
lea edx, [ebp - 0x15a0]
push edx
call fcn.00491923
add esp, 0x10
lea eax, [ebp - 0x52c]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x4a6888
lea edx, [ebp - 0x1190]
push edx
call fcn.00491923
add esp, 0x10
lea eax, [ebp - 0x15a0]
push eax
lea ecx, [ebp - 0x1190]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004912a0
add esp, 0xc
lea eax, [ebp - 0x558]
push eax
mov ecx, dword [ebp - 0x55c]
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x49148d
mov edx, dword [ebp - 0x55c]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00491914
mov esp, ebp
pop ebp
ret