Function at 0x494cd2
Capabilities:
Enumerate files on windows

Disassembly:
push 0x344
mov eax, 0x5653e8
call fcn.00523c97
and dword [ebp - 4], 0
mov eax, dword [ebp + 8]
and dword [ebp - 0x34c], 0
mov dword [ebp - 0x344], eax
mov eax, dword [ebp + 0xc]
push eax
lea esi, [ebp - 0x98]
mov dword [ebp - 0x348], eax
mov edi, ecx
call fcn.0040d93e
push edi
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 4], 1
call fcn.00494aa3
lea ebx, [ebp - 0x30]
mov eax, esi
mov byte [ebp - 4], 2
call fcn.00494adb
push 1
xor edi, edi
mov esi, ebx
mov byte [ebp - 4], 1
call fcn.00404145
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0xd0]
call fcn.00494bb7
cmp dword [eax + 0x14], 8
jb 0x494d54
mov eax, dword [eax]
lea ecx, [ebp - 0x33c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov ebx, eax
push 1
xor edi, edi
lea esi, [ebp - 0xd0]
mov dword [ebp - 0x340], ebx
call fcn.00404145
cmp ebx, 0xffffffff
jne 0x494da0
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x494d92
and eax, 0xffff
or eax, 0x80070000
mov edx, eax
push 0x20
mov eax, str.src_filesystem.cpp
call fcn.0042ca65
mov dword [ebp - 0x350], ebx
mov byte [ebp - 4], 3
mov ebx, dword [ebp - 0x344]
xor eax, eax
mov dword [ebx], eax
mov dword [ebx + 4], eax
mov dword [ebx + 8], eax
mov dword [ebp - 0x34c], 1
lea eax, [ebp - 0x310]
push 0x587c20
push eax
call fcn.00518732
pop ecx
pop ecx
test eax, eax
je 0x494f18
lea eax, [ebp - 0x310]
push 0x587c24
push eax
call fcn.00518732
pop ecx
pop ecx
test eax, eax
je 0x494f18
push dword [ebp - 0x348]
lea esi, [ebp - 0x30]
call fcn.0040d93e
lea eax, [ebp - 0x310]
push eax
lea esi, [ebp - 0xec]
mov byte [ebp - 4], 4
call fcn.0040338f
push eax
lea eax, [ebp - 0xb4]
push eax
mov byte [ebp - 4], 5
call fcn.00494aa3
lea ebx, [ebp - 0xb4]
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 6
call fcn.00494adb
xor ebx, ebx
inc ebx
push ebx
xor edi, edi
lea esi, [ebp - 0xb4]
call fcn.00404145
push ebx
lea esi, [ebp - 0xec]
mov byte [ebp - 4], 4
call fcn.00404145
lea eax, [ebp - 0x30]
push eax
lea esi, [ebp - 0x78]
call fcn.0040d93e
mov byte [ebp - 4], 7
cmp dword [ebp - 0x20], edi
push 0x14
setne al
movzx eax, al
push eax
mov edi, 0x5a59dc
call fcn.004922e6
mov eax, dword [ebp - 0x33c]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x338]
mov dword [ebp - 0x58], ecx
mov ecx, dword [ebp - 0x334]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x330]
mov dword [ebp - 0x50], ecx
mov ecx, dword [ebp - 0x32c]
mov dword [ebp - 0x4c], ecx
mov ecx, dword [ebp - 0x328]
mov dword [ebp - 0x48], ecx
mov ecx, dword [ebp - 0x324]
mov dword [ebp - 0x44], ecx
mov ecx, dword [ebp - 0x320]
mov dword [ebp - 0x40], ecx
mov ecx, dword [ebp - 0x31c]
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x5c], eax
and al, 0x10
xor ecx, ecx
cmp al, 0x10
sete cl
inc ecx
mov dword [ebp - 0x7c], ecx
mov byte [ebp - 4], 8
mov esi, dword [ebp - 0x344]
lea eax, [ebp - 0x7c]
call fcn.0043cadd
push ebx
xor edi, edi
lea esi, [ebp - 0x78]
call fcn.00404145
mov byte [ebp - 4], 3
push ebx
lea esi, [ebp - 0x30]
call fcn.00404145
mov ebx, dword [ebp - 0x344]
lea eax, [ebp - 0x33c]
push eax
push dword [ebp - 0x340]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x494dc4
cmp dword [ebp - 0x340], eax
je 0x494f47
push dword [ebp - 0x340]
call dword [sym.imp.KERNEL32.dll_FindClose]
push 1
xor edi, edi
lea esi, [ebp - 0x98]
call fcn.00404145
mov eax, ebx
call fcn.00523d1a
ret