Function at 0x4b8a97
Capabilities:
Enumerate files on windows

Disassembly:
mov eax, 0x4effd2
call fcn.004ebd20
sub esp, 0x2fc
mov eax, dword [0x517ad4]
xor eax, ebp
push ebx
mov dword [ebp - 0x14], eax
mov eax, dword [ebp + 8]
push esi
push edi
mov dword [ebp - 0x284], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x10], esp
push eax
lea edi, [ebp - 0x280]
mov esi, ecx
call fcn.00403098
and dword [ebp - 4], 0
mov ecx, dword [ebp - 0x280]
mov eax, dword [ecx - 8]
mov ax, word [ecx + eax*2 - 2]
push 0x5c
pop ecx
cmp ax, cx
je 0x4b8b06
lea eax, [ebp - 0x28c]
xor edi, edi
push eax
inc edi
lea eax, [ebp - 0x280]
mov dword [ebp - 0x28c], ecx
call fcn.00403522
push esi
lea edi, [ebp - 0x290]
call fcn.00403098
push str.ttp_.dll
lea eax, [ebp - 0x280]
push eax
lea eax, [ebp - 0x288]
push eax
call fcn.004032df
lea eax, [ebp - 0x274]
mov byte [ebp - 4], 2
mov esi, dword [ebp - 0x288]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp eax, 0xffffffff
mov dword [ebp - 0x28c], eax
jne 0x4b8b94
lea eax, [esi - 0xc]
cmp eax, dword [0x51b43c]
je 0x4b8b5e
push eax
call fcn.004013b2
mov eax, dword [ebp - 0x290]
add eax, 0xfffffff4
cmp eax, dword [0x51b43c]
je 0x4b8b75
push eax
call fcn.004013b2
mov eax, dword [ebp - 0x280]
add eax, 0xfffffff4
cmp eax, dword [0x51b43c]
je 0x4b8b8c
push eax
call fcn.004013b2
xor eax, eax
inc eax
jmp 0x4b8d7f
test byte [ebp - 0x274], 0x10
jne 0x4b8d0a
mov eax, dword [ebp - 0x290]
xor ebx, ebx
cmp dword [eax - 8], ebx
je 0x4b8bcb
lea eax, [ebp - 0x248]
push eax
xor ecx, ecx
lea esi, [ebp - 0x290]
call fcn.004107c0
cmp eax, 0xffffffff
jne 0x4b8d0a
lea eax, [ebp - 0x248]
push eax
lea eax, [ebp - 0x280]
push eax
lea eax, [ebp - 0x2b0]
push eax
call fcn.004032df
mov edi, eax
lea eax, [ebp - 0x288]
call fcn.0040311c
mov eax, dword [ebp - 0x2b0]
add eax, 0xfffffff4
cmp eax, dword [0x51b43c]
je 0x4b8c09
push eax
call fcn.004013b2
push 0x2c
mov dword [ebp - 0x294], ebx
mov byte [ebp - 4], 3
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
cmp eax, ebx
pop ecx
je 0x4b8c29
push ebx
mov esi, eax
call fcn.004b6120
jmp 0x4b8c2b
xor eax, eax
xor esi, esi
cmp eax, esi
mov ebx, eax
mov dword [ebp - 0x294], ebx
jne 0x4b8c53
mov dword [ebp - 0x2ac], 0x8007000e
push 0x505b58
lea eax, [ebp - 0x2ac]
jmp 0x4b8daf
mov ecx, dword [ebp - 0x288]
mov edx, eax
call fcn.004b64de
cmp eax, esi
jge 0x4b8c7a
mov dword [ebp - 0x2b4], eax
push 0x505b58
lea eax, [ebp - 0x2b4]
jmp 0x4b8daf
mov dword [ebp - 0x278], esi
and dword [ebp - 0x27c], 0
lea eax, [ebp - 0x27c]
push eax
lea eax, [ebp - 0x24]
push eax
mov byte [ebp - 4], 4
push dword [ebp - 0x278]
mov ecx, ebx
call fcn.004b6559
test eax, eax
jge 0x4b8db5
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x27c]
test eax, eax
je 0x4b8cbf
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
test esi, esi
je 0x4b8d9a
test ebx, ebx
mov dword [ebp - 0x278], ebx
je 0x4b8cdb
lea eax, [ebx + 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
mov edi, dword [ebp - 0x284]
lea eax, [ebp - 0x278]
push eax
add edi, 0x40
mov byte [ebp - 4], 0xd
call fcn.004bca4d
test ebx, ebx
mov byte [ebp - 4], 3
je 0x4b8d03
mov esi, ebx
call fcn.004b6158
mov esi, ebx
call fcn.004b6158
lea eax, [ebp - 0x274]
push eax
mov dword [ebp - 4], 2
push dword [ebp - 0x28c]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x4b8b94
push dword [ebp - 0x28c]
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [ebp - 0x288]
add eax, 0xfffffff4
cmp eax, dword [0x51b43c]
je 0x4b8d4f
push eax
call fcn.004013b2
mov eax, dword [ebp - 0x290]
add eax, 0xfffffff4
cmp eax, dword [0x51b43c]
je 0x4b8d66
push eax
call fcn.004013b2
mov eax, dword [ebp - 0x280]
add eax, 0xfffffff4
cmp eax, dword [0x51b43c]
je 0x4b8d7d
push eax
call fcn.004013b2
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x14]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004ebd70
leave
ret 8
mov dword [ebp - 0x2a8], 0x80004001
push 0x505b58
lea eax, [ebp - 0x2a8]
push eax
call sub.MSVCRT.dll__CxxThrowException
push 0x10
pop edi
push edi
lea eax, [ebp - 0x24]
push 0x4f94d8
push eax
call sub.MSVCRT.dll_memcmp
add esp, 0xc
test eax, eax
jne 0x4b8e2a
mov esi, dword [ebp - 0x27c]
lea eax, [ebp - 0x29c]
push eax
call fcn.004bc1f3
mov byte [ebp - 4], 5
push dword [ebp - 0x278]
mov edi, dword [ebp - 0x29c]
lea eax, [ebp - 0x308]
push eax
call fcn.004b61b1
mov ecx, dword [ebp - 0x284]
push eax
mov byte [ebp - 4], 6
call fcn.004bc7b2
lea esi, [ebp - 0x308]
mov byte [ebp - 4], 5
call fcn.004b86da
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x29c]
jmp 0x4b8f87
push edi
lea eax, [ebp - 0x24]
push 0x4f94e8
push eax
call sub.MSVCRT.dll_memcmp
add esp, 0xc
test eax, eax
jne 0x4b8ea5
mov esi, dword [ebp - 0x27c]
lea eax, [ebp - 0x298]
push eax
call fcn.004bc215
mov byte [ebp - 4], 7
push dword [ebp - 0x298]
lea eax, [ebp - 0x2c4]
push dword [ebp - 0x278]
push eax
call fcn.004bc3e4
mov ecx, dword [ebp - 0x284]
lea eax, [ebp - 0x2c4]
push eax
add ecx, 0x10
mov byte [ebp - 4], 8
call fcn.004bc869
lea eax, [ebp - 0x2c4]
mov byte [ebp - 4], 7
call fcn.004b6291
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x298]
jmp 0x4b8f87
push edi
lea eax, [ebp - 0x24]
push 0x4f94f8
push eax
call sub.MSVCRT.dll_memcmp
add esp, 0xc
test eax, eax
jne 0x4b8f17
mov esi, dword [ebp - 0x27c]
lea eax, [ebp - 0x2a4]
push eax
call fcn.004bc237
mov byte [ebp - 4], 9
push dword [ebp - 0x278]
mov edi, dword [ebp - 0x2a4]
lea eax, [ebp - 0x2f0]
push eax
call fcn.004b61fc
mov ecx, dword [ebp - 0x284]
push eax
add ecx, 0x20
mov byte [ebp - 4], 0xa
call fcn.004bc8f8
lea esi, [ebp - 0x2f0]
mov byte [ebp - 4], 9
call fcn.004b8a7f
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x2a4]
jmp 0x4b8f87
push edi
lea eax, [ebp - 0x24]
push 0x4f9508
push eax
call sub.MSVCRT.dll_memcmp
add esp, 0xc
test eax, eax
jne 0x4b8f94
mov esi, dword [ebp - 0x27c]
lea eax, [ebp - 0x2a0]
push eax
call fcn.004bc259
mov byte [ebp - 4], 0xb
push dword [ebp - 0x278]
mov edi, dword [ebp - 0x2a0]
lea eax, [ebp - 0x2d8]
push eax
call fcn.004b624f
mov ecx, dword [ebp - 0x284]
push eax
add ecx, 0x30
mov byte [ebp - 4], 0xc
call fcn.004bc9c4
lea esi, [ebp - 0x2d8]
mov byte [ebp - 4], 0xb
call fcn.004b8a7f
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x2a0]
xor esi, esi
inc esi
test eax, eax
je 0x4b8f94
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x27c]
test eax, eax
je 0x4b8fa8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
inc dword [ebp - 0x278]
jmp 0x4b8c80