Function at 0x449c2d
Capabilities:
Enumerate files on windows

Disassembly:
push 0x298
mov eax, 0x5d25f4
call fcn.0056df1d
mov ebx, edx
mov esi, ecx
push 0x250
xor edi, edi
lea eax, [ebp - 0x290]
push edi
push eax
call fcn.005713c0
add esp, 0xc
mov dword [ebp - 0x40], edi
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x2c], edi
push esi
call fcn.00407eca
mov dword [ebp - 4], edi
lea ecx, [ebp - 0x28]
push esi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x14], edi
call fcn.00407eca
push 0x60a0fc
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 1
call fcn.004092d1
cmp dword [ebp - 0x2c], 8
lea ecx, [ebp - 0x290]
lea eax, [ebp - 0x40]
cmovae eax, dword [ebp - 0x40]
push ecx
push eax
call dword [sym.imp.KERNEL32.DLL_FindFirstFileW]
mov edi, eax
xor eax, eax
mov dword [ebp - 0x2a4], eax
mov dword [ebp - 0x2a0], eax
mov dword [ebp - 0x29c], eax
mov byte [ebp - 4], 2
cmp edi, 0xffffffff
je 0x449e29
mov ecx, 0x6088ac
lea eax, [ebp - 0x264]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x449cfc
test dx, dx
je 0x449cf8
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x449cfc
add eax, 4
add ecx, 4
test dx, dx
jne 0x449cd6
xor eax, eax
jmp 0x449d01
sbb eax, eax
or eax, 1
test eax, eax
je 0x449d90
mov ecx, 0x6088b0
lea eax, [ebp - 0x264]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x449d3a
test dx, dx
je 0x449d36
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x449d3a
add eax, 4
add ecx, 4
test dx, dx
jne 0x449d14
xor eax, eax
jmp 0x449d3f
sbb eax, eax
or eax, 1
test eax, eax
je 0x449d90
test byte [ebp - 0x290], 0x10
je 0x449d6f
lea eax, [ebp - 0x2a4]
push eax
push 0
lea eax, [ebp - 0x264]
push eax
lea ecx, [ebp - 0x28]
call fcn.004092d1
mov edx, ebx
mov ecx, eax
call fcn.0044969c
pop ecx
pop ecx
push 0x250
lea eax, [ebp - 0x290]
push 0
push eax
call fcn.005713c0
add esp, 0xc
lea ecx, [ebp - 0x28]
push esi
call fcn.00405d53
jmp 0x449da6
push 0x250
lea eax, [ebp - 0x290]
push 0
push eax
call fcn.005713c0
add esp, 0xc
lea eax, [ebp - 0x290]
push eax
push edi
call dword [sym.imp.KERNEL32.DLL_FindNextFileW]
test eax, eax
jne 0x449ccb
mov esi, dword [ebp - 0x2a4]
test esi, esi
je 0x449e29
push 0x18
mov edi, esi
pop ebx
jmp 0x449dd6
mov ecx, edi
call fcn.00403812
add edi, ebx
cmp edi, dword [ebp - 0x2a0]
jne 0x449dcd
mov eax, dword [ebp - 0x29c]
sub eax, esi
mov dword [ebp - 0x298], esi
cdq
idiv ebx
imul eax, eax, 0x18
mov dword [ebp - 0x294], eax
cmp eax, 0x1000
jb 0x449e20
lea eax, [ebp - 0x294]
push eax
lea eax, [ebp - 0x298]
push eax
call fcn.0040379f
mov eax, dword [ebp - 0x294]
mov esi, dword [ebp - 0x298]
pop ecx
pop ecx
push eax
push esi
call fcn.0056d0c8
pop ecx
pop ecx
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x449e78
mov ecx, dword [ebp - 0x28]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x298], eax
mov dword [ebp - 0x294], ecx
cmp eax, 0x1000
jb 0x449e6f
lea eax, [ebp - 0x298]
push eax
lea eax, [ebp - 0x294]
push eax
call fcn.0040379f
mov eax, dword [ebp - 0x298]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x294]
push eax
push ecx
call fcn.0056d0c8
pop ecx
pop ecx
and dword [ebp - 0x18], 0
xor eax, eax
mov word [ebp - 0x28], ax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x14], 7
cmp eax, 8
jb 0x449ed8
mov ecx, dword [ebp - 0x40]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x298], eax
mov dword [ebp - 0x294], ecx
cmp eax, 0x1000
jb 0x449ecf
lea eax, [ebp - 0x298]
push eax
lea eax, [ebp - 0x294]
push eax
call fcn.0040379f
mov eax, dword [ebp - 0x298]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x294]
push eax
push ecx
call fcn.0056d0c8
pop ecx
pop ecx
call fcn.0056decc
ret