Function at 0x4a929b
Capabilities:
Enumerate files on windows

Disassembly:
push 0x348
mov eax, 0x6945cb
call fcn.0056e23b
lea ecx, [ebp - 0xfc]
mov dword [ebp - 0x354], 1
call fcn.004d2654
and dword [ebp - 4], 0
call fcn.00564e5d
test eax, eax
jne 0x4a94c9
mov esi, 0x77b084
cmp dword [0x7960fc], eax
jle 0x4a92ea
push str.__RecycleBinIsEmpty___A1
push esi
call fcn.0042e634
pop ecx
pop ecx
lea ecx, [ebp - 0x48]
call fcn.004173bc
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2c]
call fcn.004173bc
push 2
pop eax
mov dword [ebp - 0x350], eax
mov byte [ebp - 4], al
push 8
pop edi
lea ebx, [eax + 0x41]
push ebx
lea ecx, [ebp - 0xfc]
call fcn.004d2843
test eax, eax
jne 0x4a9457
lea ecx, [ebp - 0xfc]
call fcn.004d281a
cmp eax, 5
movzx eax, bx
push eax
lea eax, [ebp - 0x48]
jne 0x4a9361
push 0x6ce970
push eax
call fcn.0041ccda
cmp dword [ebp - 0x30], edi
lea ecx, [ebp - 0x44]
lea eax, [ebp - 0x44]
cmovae eax, dword [ebp - 0x44]
push ecx
push eax
push 0
call fcn.004552fa
add esp, 0x18
jmp 0x4a936f
push 0x6ce9ac
push eax
call fcn.0041ccda
add esp, 0xc
lea ecx, [ebp - 0xfc]
call fcn.004d2741
cmp dword [0x7960fc], 0
jle 0x4a939c
cmp dword [ebp - 0x30], edi
lea eax, [ebp - 0x44]
cmovae eax, dword [ebp - 0x44]
push eax
push str.__RecycleBinIsEmpty___A2___s
push esi
call fcn.0042e634
add esp, 0xc
cmp dword [ebp - 0x30], edi
lea eax, [ebp - 0x44]
cmovae eax, dword [ebp - 0x44]
push eax
lea eax, [ebp - 0x2c]
push 0x6cea0c
push eax
call fcn.0041ccda
add esp, 0xc
cmp dword [0x7960fc], 0
jle 0x4a93da
cmp dword [ebp - 0x14], edi
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push str.__RecycleBinIsEmpty___A3___s
push esi
call fcn.0042e634
add esp, 0xc
cmp dword [ebp - 0x14], edi
lea ecx, [ebp - 0x34c]
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x4a9457
lea eax, [ebp - 0x320]
push eax
push 0x6cea58
call fcn.0064806f
pop ecx
pop ecx
test eax, eax
je 0x4a943e
lea eax, [ebp - 0x320]
push eax
push 0x6cea5c
call fcn.0064806f
pop ecx
pop ecx
test eax, eax
je 0x4a943e
lea eax, [ebp - 0x320]
push eax
push 0x6cea64
call fcn.0064806f
pop ecx
pop ecx
test eax, eax
jne 0x4a9485
lea eax, [ebp - 0x34c]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x4a93f9
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [ebp - 0x350]
inc eax
mov dword [ebp - 0x350], eax
cmp eax, 0x19
jle 0x4a930d
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2c]
call fcn.0041786a
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x48]
jmp 0x4a9696
cmp dword [0x7960fc], 0
jle 0x4a94a3
lea eax, [ebp - 0x320]
push eax
push str.__RecycleBinIsEmpty___A4___s
push esi
call fcn.0042e634
add esp, 0xc
push ebx
xor edi, edi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2c]
call fcn.0041786a
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x48]
call fcn.0041786a
jmp 0x4a96a1
lea ecx, [ebp - 0x64]
call fcn.004173bc
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2c]
call fcn.004173bc
mov byte [ebp - 4], 4
mov esi, 0x77b084
cmp dword [0x7960fc], 0
jle 0x4a94fc
push str.__RecycleBinIsEmpty___B1
push esi
call fcn.0042e634
pop ecx
pop ecx
push 2
pop eax
push 8
mov dword [ebp - 0x350], eax
pop edi
lea ebx, [eax + 0x41]
push ebx
lea ecx, [ebp - 0xfc]
call fcn.004d2843
test eax, eax
jne 0x4a966d
lea ecx, [ebp - 0xfc]
call fcn.004d281a
cmp eax, 5
movzx eax, bx
push eax
lea eax, [ebp - 0x64]
jne 0x4a955c
push 0x6ceaec
push eax
call fcn.0041ccda
cmp dword [ebp - 0x4c], edi
lea ecx, [ebp - 0x60]
lea eax, [ebp - 0x60]
cmovae eax, dword [ebp - 0x60]
push ecx
push eax
push 0
call fcn.004552fa
add esp, 0x18
jmp 0x4a956a
push 0x6ceb20
push eax
call fcn.0041ccda
add esp, 0xc
lea ecx, [ebp - 0xfc]
call fcn.004d2741
cmp dword [0x7960fc], 0
jle 0x4a9597
cmp dword [ebp - 0x4c], edi
lea eax, [ebp - 0x60]
cmovae eax, dword [ebp - 0x60]
push eax
push str.__RecycleBinIsEmpty___B2___s
push esi
call fcn.0042e634
add esp, 0xc
cmp dword [ebp - 0x4c], edi
lea eax, [ebp - 0x60]
cmovae eax, dword [ebp - 0x60]
push eax
lea eax, [ebp - 0x2c]
push 0x6ceb78
push eax
call fcn.0041ccda
add esp, 0xc
cmp dword [0x7960fc], 0
jle 0x4a95d5
cmp dword [ebp - 0x14], edi
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push str.__RecycleBinIsEmpty___B3___s
push esi
call fcn.0042e634
add esp, 0xc
cmp dword [ebp - 0x14], edi
lea ecx, [ebp - 0x34c]
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x4a966d
lea eax, [ebp - 0x320]
push eax
push 0x6cebc0
call fcn.0064806f
pop ecx
pop ecx
test eax, eax
je 0x4a9654
lea eax, [ebp - 0x320]
push eax
push 0x6cebc4
call fcn.0064806f
pop ecx
pop ecx
test eax, eax
je 0x4a9654
lea eax, [ebp - 0x320]
push eax
push 0x6cebcc
call fcn.0064806f
pop ecx
pop ecx
test eax, eax
je 0x4a9654
lea eax, [ebp - 0x320]
push eax
push 0x6cebe4
call fcn.0064806f
pop ecx
pop ecx
test eax, eax
jne 0x4a96df
lea eax, [ebp - 0x34c]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x4a95f4
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [ebp - 0x350]
inc eax
mov dword [ebp - 0x350], eax
cmp eax, 0x19
jle 0x4a9508
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2c]
call fcn.0041786a
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x64]
call fcn.0041786a
mov edi, dword [ebp - 0x354]
cmp dword [0x7960fc], 0
jle 0x4a96c8
mov ecx, str.FALSE
test edi, edi
mov eax, str.TRUE
cmove eax, ecx
push eax
push str.__RecycleBinIsEmpty___Result___s
push esi
call fcn.0042e634
add esp, 0xc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xfc]
call fcn.004d26ba
mov eax, edi
call fcn.0056e1e5
ret
cmp dword [0x7960fc], 0
jle 0x4a96fd
lea eax, [ebp - 0x320]
push eax
push str.__RecycleBinIsEmpty___B4___s
push esi
call fcn.0042e634
add esp, 0xc
push ebx
xor edi, edi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2c]
call fcn.0041786a
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x64]
jmp 0x4a94bf