Function at 0x4a22b0
Capabilities:
Enumerate files on windows

Disassembly:
mov eax, 0x4c1627
call fcn.004bf97c
sub esp, 0x1dc
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
push dword [ebp + 0xc]
lea edi, [ebp - 0x14]
call fcn.00402faf
and dword [ebp - 4], 0
mov ecx, dword [ebp - 0x14]
mov eax, dword [ecx - 8]
mov al, byte [eax + ecx - 1]
cmp al, 0x5c
je 0x4a22f6
lea eax, [ebp + 0xf]
xor edi, edi
push eax
inc edi
lea eax, [ebp - 0x14]
mov byte [ebp + 0xf], 0x5c
call fcn.00403448
push dword [ebp + 0x10]
lea edi, [ebp - 0x1c]
call fcn.00402faf
push str.ttp_.dll
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.004031be
lea eax, [ebp - 0x1e8]
mov byte [ebp - 4], 2
mov esi, dword [ebp - 0x18]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp eax, 0xffffffff
mov dword [ebp - 0x34], eax
jne 0x4a2371
lea eax, [esi - 0xc]
cmp eax, dword [0x4e4154]
je 0x4a2341
push eax
call fcn.00401377
mov eax, dword [ebp - 0x1c]
add eax, 0xfffffff4
cmp eax, dword [0x4e4154]
je 0x4a2355
push eax
call fcn.00401377
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff4
cmp eax, dword [0x4e4154]
je 0x4a2369
push eax
call fcn.00401377
xor eax, eax
inc eax
jmp 0x4a250e
test byte [ebp - 0x1e8], 0x10
jne 0x4a24a8
mov eax, dword [ebp - 0x1c]
xor ebx, ebx
cmp dword [eax - 8], ebx
je 0x4a23a2
lea eax, [ebp - 0x1bc]
push eax
xor ecx, ecx
lea esi, [ebp - 0x1c]
call fcn.00408904
cmp eax, 0xffffffff
jne 0x4a24a8
lea eax, [ebp - 0x1bc]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.004031be
mov edi, eax
lea eax, [ebp - 0x18]
call fcn.0040301a
mov eax, dword [ebp - 0x38]
add eax, 0xfffffff4
cmp eax, dword [0x4e4154]
je 0x4a23d4
push eax
call fcn.00401377
push 0x2c
mov dword [ebp - 0x2c], ebx
mov byte [ebp - 4], 3
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
cmp eax, ebx
pop ecx
je 0x4a23f1
push ebx
mov esi, eax
call fcn.0049fbe2
jmp 0x4a23f3
xor eax, eax
xor esi, esi
cmp eax, esi
mov ebx, eax
mov dword [ebp - 0x2c], ebx
jne 0x4a2412
mov dword [ebp - 0x44], 0x8007000e
push 0x4d2fac
lea eax, [ebp - 0x44]
jmp 0x4a252e
mov ecx, dword [ebp - 0x18]
mov edx, eax
call fcn.004a0004
cmp eax, esi
jge 0x4a2430
mov dword [ebp - 0x3c], eax
push 0x4d2fac
lea eax, [ebp - 0x3c]
jmp 0x4a252e
mov dword [ebp + 0x10], esi
and dword [ebp + 0xc], 0
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x54]
push eax
push dword [ebp + 0x10]
mov ecx, ebx
mov byte [ebp - 4], 4
call fcn.004a007f
test eax, eax
jge 0x4a2534
mov byte [ebp - 4], 3
mov eax, dword [ebp + 0xc]
test eax, eax
je 0x4a2466
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
test esi, esi
je 0x4a251f
test ebx, ebx
mov dword [ebp + 0xc], ebx
je 0x4a247f
lea eax, [ebx + 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
mov edi, dword [ebp + 8]
lea eax, [ebp + 0xc]
push eax
add edi, 0x40
mov byte [ebp - 4], 0xd
call fcn.004581b1
test ebx, ebx
mov byte [ebp - 4], 3
je 0x4a24a1
mov esi, ebx
call fcn.0049fc1a
mov esi, ebx
call fcn.0049fc1a
lea eax, [ebp - 0x1e8]
push eax
push dword [ebp - 0x34]
mov dword [ebp - 4], 2
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x4a2371
push dword [ebp - 0x34]
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff4
cmp eax, dword [0x4e4154]
je 0x4a24e4
push eax
call fcn.00401377
mov eax, dword [ebp - 0x1c]
add eax, 0xfffffff4
cmp eax, dword [0x4e4154]
je 0x4a24f8
push eax
call fcn.00401377
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff4
cmp eax, dword [0x4e4154]
je 0x4a250c
push eax
call fcn.00401377
xor eax, eax
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 0xc
mov dword [ebp - 0x40], 0x80004001
push 0x4d2fac
lea eax, [ebp - 0x40]
push eax
call sub.MSVCRT.dll__CxxThrowException
push 0x10
pop edi
push edi
lea eax, [ebp - 0x54]
push 0x4c9f18
push eax
call sub.MSVCRT.dll_memcmp
add esp, 0xc
test eax, eax
jne 0x4a2597
mov esi, dword [ebp + 0xc]
lea eax, [ebp - 0x28]
push eax
call fcn.004a456b
push dword [ebp + 0x10]
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 5
mov edi, dword [ebp - 0x28]
push eax
call fcn.0049fc73
mov ecx, dword [ebp + 8]
push eax
mov byte [ebp - 4], 6
call fcn.004a49c3
lea esi, [ebp - 0x90]
mov byte [ebp - 4], 5
call fcn.004a1f07
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x28]
jmp 0x4a26af
push edi
lea eax, [ebp - 0x54]
push 0x4c9f28
push eax
call sub.MSVCRT.dll_memcmp
add esp, 0xc
test eax, eax
jne 0x4a25f7
mov esi, dword [ebp + 0xc]
lea eax, [ebp - 0x20]
push eax
call fcn.004a458d
mov byte [ebp - 4], 7
push dword [ebp - 0x20]
lea eax, [ebp - 0x64]
push dword [ebp + 0x10]
push eax
call fcn.004a4659
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x64]
push eax
add ecx, 0x10
mov byte [ebp - 4], 8
call fcn.004a4a7a
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 7
call fcn.0049fcbe
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x20]
jmp 0x4a26af
push edi
lea eax, [ebp - 0x54]
push 0x4c9f38
push eax
call sub.MSVCRT.dll_memcmp
add esp, 0xc
test eax, eax
jne 0x4a2657
mov esi, dword [ebp + 0xc]
lea eax, [ebp - 0x30]
push eax
call fcn.004a45af
push dword [ebp + 0x10]
lea eax, [ebp - 0xa8]
mov byte [ebp - 4], 9
mov edi, dword [ebp - 0x30]
push eax
call fcn.0049fcec
mov ecx, dword [ebp + 8]
push eax
add ecx, 0x20
mov byte [ebp - 4], 0xa
call fcn.004a4af4
lea esi, [ebp - 0xa8]
mov byte [ebp - 4], 9
call fcn.004a26e7
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x30]
jmp 0x4a26af
push edi
lea eax, [ebp - 0x54]
push 0x4c9f48
push eax
call sub.MSVCRT.dll_memcmp
add esp, 0xc
test eax, eax
jne 0x4a26bc
mov esi, dword [ebp + 0xc]
lea eax, [ebp - 0x24]
push eax
call fcn.004a45d1
push dword [ebp + 0x10]
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0xb
mov edi, dword [ebp - 0x24]
push eax
call fcn.0049fd3f
mov ecx, dword [ebp + 8]
push eax
add ecx, 0x30
mov byte [ebp - 4], 0xc
call fcn.004a4ba8
lea esi, [ebp - 0x78]
mov byte [ebp - 4], 0xb
call fcn.004a26e7
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x24]
xor esi, esi
inc esi
test eax, eax
je 0x4a26bc
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 3
mov eax, dword [ebp + 0xc]
test eax, eax
je 0x4a26cd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
inc dword [ebp + 0x10]
jmp 0x4a2433