Function at 0x49f484
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x79
push 0
push 0
dec ecx
jne 0x49f48d
xchg dword [ebp - 4], ecx
push ebx
push esi
mov esi, ecx
mov ebx, edx
mov dword [ebp - 4], eax
lea eax, [ebp - 4]
call fcn.00405084
xor eax, eax
push ebp
push 0x49f993
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.004a1738
test al, al
je 0x49f6da
lea eax, [ebp - 0x39c]
push eax
lea eax, [ebp - 0x3a0]
mov ecx, 0x49f9a4
mov edx, dword [ebp - 4]
call fcn.00404d48
mov eax, dword [ebp - 0x3a0]
call fcn.00404ccc
push eax
call dword [0x560670]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0xffffffff
je 0x49f924
xor eax, eax
push ebp
push 0x49f6d3
push dword fs:[eax]
mov dword fs:[eax], esp
test bl, bl
je 0x49f5a8
test byte [ebp - 0x39c], 0x10
je 0x49f5a8
push 0x49f9b0
lea eax, [ebp - 0x370]
push eax
call dword [0x560688]
test eax, eax
je 0x49f69a
push 0x49f9b4
lea eax, [ebp - 0x370]
push eax
call dword [0x560688]
test eax, eax
je 0x49f69a
test byte [ebp - 0x39b], 4
jne 0x49f69a
push dword [ebp - 4]
push 0x49f9c0
lea eax, [ebp - 0x3a8]
lea edx, [ebp - 0x370]
mov ecx, 0x104
call fcn.00404c34
push dword [ebp - 0x3a8]
lea eax, [ebp - 0x3a4]
mov edx, 3
call fcn.00404dac
mov eax, dword [ebp - 0x3a4]
mov ecx, esi
mov edx, ebx
call fcn.0049f484
jmp 0x49f69a
push 0
push 0xffffffffffffffff
mov eax, dword [ebp - 0x380]
xor edx, edx
call fcn.00405668
add eax, dword [esi]
adc edx, dword [esi + 4]
push edx
push eax
mov eax, dword [ebp - 0x37c]
xor edx, edx
add eax, dword [esp]
adc edx, dword [esp + 4]
add esp, 8
mov dword [esi], eax
mov dword [esi + 4], edx
jmp 0x49f69a
test bl, bl
je 0x49f66b
test byte [ebp - 0x39c], 0x10
je 0x49f66b
push 0x49f9b0
lea eax, [ebp - 0x370]
push eax
call dword [0x560688]
test eax, eax
je 0x49f69a
push 0x49f9b4
lea eax, [ebp - 0x370]
push eax
call dword [0x560688]
test eax, eax
je 0x49f69a
test byte [ebp - 0x39b], 4
jne 0x49f69a
push dword [ebp - 4]
push 0x49f9c0
lea eax, [ebp - 0x3b0]
lea edx, [ebp - 0x370]
mov ecx, 0x104
call fcn.00404c34
push dword [ebp - 0x3b0]
lea eax, [ebp - 0x3ac]
mov edx, 3
call fcn.00404dac
mov eax, dword [ebp - 0x3ac]
mov ecx, esi
mov edx, ebx
call fcn.0049f484
jmp 0x49f69a
push 0
push 0xffffffffffffffff
mov eax, dword [ebp - 0x380]
xor edx, edx
call fcn.00405668
add eax, dword [esi]
adc edx, dword [esi + 4]
push edx
push eax
mov eax, dword [ebp - 0x37c]
xor edx, edx
add eax, dword [esp]
adc edx, dword [esp + 4]
add esp, 8
mov dword [esi], eax
mov dword [esi + 4], edx
lea eax, [ebp - 0x39c]
push eax
mov eax, dword [ebp - 8]
push eax
call dword [0x560674]
test eax, eax
je 0x49f6bc
cmp byte [0x560788], 0
je 0x49f5dc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x49f924
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_FindClose_1
ret
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 4]
call fcn.00404624
lea eax, [ebp - 0x14c]
push eax
lea eax, [ebp - 0x3b4]
mov ecx, 0x49f9cc
mov edx, dword [ebp - 0xc]
call fcn.004046a8
mov eax, dword [ebp - 0x3b4]
call fcn.0040485c
push eax
call sub.kernel32.dll_FindFirstFileA_1
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0xffffffff
je 0x49f924
xor eax, eax
push ebp
push 0x49f91d
push dword fs:[eax]
mov dword fs:[eax], esp
test bl, bl
je 0x49f7d8
test byte [ebp - 0x14c], 0x10
je 0x49f7d8
push 0x49f9b0
lea eax, [ebp - 0x120]
push eax
call sub.kernel32.dll_lstrcmpiA
test eax, eax
je 0x49f8e5
push 0x49f9d4
lea eax, [ebp - 0x120]
push eax
call sub.kernel32.dll_lstrcmpiA
test eax, eax
je 0x49f8e5
test byte [ebp - 0x14b], 4
jne 0x49f8e5
push dword [ebp - 0xc]
push 0x49f9e0
lea eax, [ebp - 0x3c0]
lea edx, [ebp - 0x120]
mov ecx, 0x104
call fcn.0040460c
push dword [ebp - 0x3c0]
lea eax, [ebp - 0x3bc]
mov edx, 3
call fcn.0040471c
mov edx, dword [ebp - 0x3bc]
lea eax, [ebp - 0x3b8]
call fcn.00404c50
mov eax, dword [ebp - 0x3b8]
mov ecx, esi
mov edx, ebx
call fcn.0049f484
jmp 0x49f8e5
push 0
push 0xffffffffffffffff
mov eax, dword [ebp - 0x130]
xor edx, edx
call fcn.00405668
add eax, dword [esi]
adc edx, dword [esi + 4]
push edx
push eax
mov eax, dword [ebp - 0x12c]
xor edx, edx
add eax, dword [esp]
adc edx, dword [esp + 4]
add esp, 8
mov dword [esi], eax
mov dword [esi + 4], edx
jmp 0x49f8e5
test bl, bl
je 0x49f8b6
test byte [ebp - 0x14c], 0x10
je 0x49f8b6
push 0x49f9b0
lea eax, [ebp - 0x120]
push eax
call sub.kernel32.dll_lstrcmpiA
test eax, eax
je 0x49f8e5
push 0x49f9d4
lea eax, [ebp - 0x120]
push eax
call sub.kernel32.dll_lstrcmpiA
test eax, eax
je 0x49f8e5
test byte [ebp - 0x14b], 4
jne 0x49f8e5
push dword [ebp - 0xc]
push 0x49f9e0
lea eax, [ebp - 0x3cc]
lea edx, [ebp - 0x120]
mov ecx, 0x104
call fcn.0040460c
push dword [ebp - 0x3cc]
lea eax, [ebp - 0x3c8]
mov edx, 3
call fcn.0040471c
mov edx, dword [ebp - 0x3c8]
lea eax, [ebp - 0x3c4]
call fcn.00404c50
mov eax, dword [ebp - 0x3c4]
mov ecx, esi
mov edx, ebx
call fcn.0049f484
jmp 0x49f8e5
push 0
push 0xffffffffffffffff
mov eax, dword [ebp - 0x130]
xor edx, edx
call fcn.00405668
add eax, dword [esi]
adc edx, dword [esi + 4]
push edx
push eax
mov eax, dword [ebp - 0x12c]
xor edx, edx
add eax, dword [esp]
adc edx, dword [esp + 4]
add esp, 8
mov dword [esi], eax
mov dword [esi + 4], edx
lea eax, [ebp - 0x14c]
push eax
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_FindNextFileA
test eax, eax
je 0x49f906
cmp byte [0x560788], 0
je 0x49f80c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x49f924
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_FindClose_1
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x49f99a
lea eax, [ebp - 0x3cc]
mov edx, 2
call fcn.004043b0
lea eax, [ebp - 0x3c4]
call fcn.00404a7c
lea eax, [ebp - 0x3c0]
mov edx, 2
call fcn.004043b0
lea eax, [ebp - 0x3b8]
call fcn.00404a7c
lea eax, [ebp - 0x3b4]
call fcn.0040438c
lea eax, [ebp - 0x3b0]
mov edx, 5
call fcn.00404a94
lea eax, [ebp - 0xc]
call fcn.0040438c
lea eax, [ebp - 4]
call fcn.00404a7c
ret