Function at 0x4a9ca8
Capabilities:
Enumerate files on windows
Get common file path

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffc44
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0x3bc], edx
mov dword [ebp - 0x3b8], edx
mov dword [ebp - 0x3b4], edx
mov dword [ebp - 0x3b0], edx
mov dword [ebp - 0x3ac], edx
mov dword [ebp - 0x3a8], edx
mov dword [ebp - 4], edx
mov dword [ebp - 8], edx
mov dword [ebp - 0xc], edx
mov edi, eax
lea eax, [ebp - 0x164]
mov edx, dword [0x407bfc]
call fcn.004050f4
xor eax, eax
push ebp
push 0x4aa01c
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, 0x104
call fcn.00402ac8
mov ebx, eax
mov edx, 0x104
mov eax, ebx
call fcn.004075d0
push ebx
push 0
push 0
push 0x2e
push 0
call sub.shell32.dll_SHGetFolderPathA
mov eax, dword [edi + 4]
mov edx, dword [eax]
call dword [edx + 8]
lea eax, [ebp - 0x3a8]
call fcn.00409630
mov edx, dword [ebp - 0x3a8]
lea eax, [ebp - 0x264]
mov ecx, 0xff
call fcn.004049cc
lea eax, [ebp - 0x3ac]
mov edx, ebx
call fcn.00404928
mov edx, dword [ebp - 0x3ac]
lea eax, [ebp - 8]
mov ecx, 0x4aa034
call fcn.00404a3c
mov eax, dword [ebp - 8]
call fcn.004093e0
test al, al
je 0x4a9fe0
mov eax, dword [ebp - 8]
call fcn.00402c90
call fcn.00402c54
lea eax, [ebp - 0x3a4]
push eax
push 0x4aa048
call sub.kernel32.dll_FindFirstFileA_1
mov esi, eax
mov dword [ebp - 0x150], esi
cmp esi, 0xffffffff
je 0x4a9e84
lea eax, [ebp - 4]
lea edx, [ebp - 0x378]
mov ecx, 0x104
call fcn.004049a0
mov eax, dword [ebp - 4]
mov edx, 0x4aa054
call fcn.00404b3c
je 0x4a9e58
mov eax, dword [ebp - 4]
mov edx, 0x4aa060
call fcn.00404b3c
je 0x4a9e58
cmp dword [ebp - 0x3a4], 0x10
jne 0x4a9e58
lea eax, [ebp - 0xc]
mov ecx, 0x4aa06c
mov edx, dword [ebp - 4]
call fcn.00404a3c
mov eax, dword [ebp - 0xc]
call fcn.004093d0
test al, al
je 0x4a9e58
lea eax, [ebp - 0x3b0]
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.00404a3c
mov eax, dword [ebp - 0x3b0]
push eax
mov ecx, dword [0x4b1ecc]
mov ecx, dword [ecx]
mov dl, 1
mov eax, dword [0x49ae28]
call fcn.0049b238
mov esi, eax
mov eax, esi
call fcn.0049b1b8
test al, al
je 0x4a9e51
mov eax, dword [edi + 4]
mov edx, esi
call fcn.0042cefc
jmp 0x4a9e58
mov eax, esi
call fcn.00403864
lea eax, [ebp - 0x3a4]
push eax
mov eax, dword [ebp - 0x150]
push eax
call sub.kernel32.dll_FindNextFileA
cmp eax, 1
sbb eax, eax
inc eax
test al, al
jne 0x4a9db2
lea eax, [ebp - 0x164]
call fcn.00409404
mov eax, ebx
call fcn.00402af8
lea edx, [ebp - 0x3b4]
mov eax, 0x4aa080
call fcn.0040e628
mov edx, dword [ebp - 0x3b4]
lea eax, [ebp - 8]
mov ecx, 0x4aa098
call fcn.00404a3c
mov eax, dword [ebp - 8]
call fcn.004093e0
test al, al
je 0x4a9fe0
mov eax, dword [ebp - 8]
call fcn.00402c90
call fcn.00402c54
lea eax, [ebp - 0x3a4]
push eax
push 0x4aa048
call sub.kernel32.dll_FindFirstFileA_1
mov ebx, eax
mov dword [ebp - 0x150], ebx
cmp ebx, 0xffffffff
je 0x4a9fbf
lea eax, [ebp - 4]
lea edx, [ebp - 0x378]
mov ecx, 0x104
call fcn.004049a0
mov eax, dword [ebp - 4]
mov edx, 0x4aa054
call fcn.00404b3c
je 0x4a9f93
mov eax, dword [ebp - 4]
mov edx, 0x4aa060
call fcn.00404b3c
je 0x4a9f93
cmp dword [ebp - 0x3a4], 0x10
jne 0x4a9f93
lea eax, [ebp - 0xc]
mov ecx, 0x4aa06c
mov edx, dword [ebp - 4]
call fcn.00404a3c
mov eax, dword [ebp - 0xc]
call fcn.004093d0
test al, al
je 0x4a9f93
lea eax, [ebp - 0x3b8]
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.00404a3c
mov eax, dword [ebp - 0x3b8]
push eax
mov ecx, dword [0x4b1ecc]
mov ecx, dword [ecx]
mov dl, 1
mov eax, dword [0x49ae28]
call fcn.0049b238
mov esi, eax
mov eax, esi
call fcn.0049b1b8
test al, al
je 0x4a9f8c
mov eax, dword [edi + 4]
mov edx, esi
call fcn.0042cefc
jmp 0x4a9f93
mov eax, esi
call fcn.00403864
lea eax, [ebp - 0x3a4]
push eax
mov eax, dword [ebp - 0x150]
push eax
call sub.kernel32.dll_FindNextFileA
cmp eax, 1
sbb eax, eax
inc eax
test al, al
jne 0x4a9eed
lea eax, [ebp - 0x164]
call fcn.00409404
lea eax, [ebp - 0x3bc]
lea edx, [ebp - 0x264]
call fcn.00404994
mov eax, dword [ebp - 0x3bc]
call fcn.00402c90
call fcn.00402c54
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4aa023
lea eax, [ebp - 0x3bc]
mov edx, 6
call fcn.00404754
lea eax, [ebp - 0x164]
mov edx, dword [0x407bfc]
call fcn.004051c4
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00404754
ret