Function at 0x4e4480
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd48
mov eax, dword [0x676300]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
xor ebx, ebx
push 0x13c
lea eax, [ebp - 0xd40]
push ebx
push eax
mov dword [ebp - 0xd44], ebx
call fcn.00534b40
push 0x3ff
lea ecx, [ebp - 0x803]
push ebx
push ecx
mov byte [ebp - 0x804], bl
call fcn.00534b40
push 0x3ff
lea edx, [ebp - 0xc03]
push ebx
push edx
mov byte [ebp - 0xc04], bl
call fcn.00534b40
lea edx, [ebp - 0x804]
add esp, 0x24
mov eax, esi
sub edx, esi
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x4e44f0
lea edi, [ebp - 0x804]
dec edi
mov al, byte [edi + 1]
inc edi
cmp al, bl
jne 0x4e4501
mov ax, word [0x65c970]
mov word [edi], ax
xor eax, eax
jmp 0x4e4520
mov cl, byte [ebp + eax - 0x804]
mov byte [ebp + eax - 0xc04], cl
inc eax
cmp cl, bl
jne 0x4e4520
lea edi, [ebp - 0xc04]
dec edi
lea ebx, [ebx]
mov al, byte [edi + 1]
inc edi
cmp al, bl
jne 0x4e4540
mov cx, word [0x57b788]
mov word [edi], cx
call fcn.004e43b0
lea edx, [ebp - 0xd44]
push edx
lea eax, [ebp - 0xc04]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0xd48], eax
cmp eax, 0xffffffff
jne 0x4e4590
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00534bba
mov esp, ebp
pop ebp
ret
mov ecx, 0x65cb44
lea eax, [ebp - 0xd18]
jmp 0x4e45a0
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4e45c0
cmp dl, bl
je 0x4e45bc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4e45c0
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x4e45a0
xor eax, eax
jmp 0x4e45c5
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x4e46e1
mov ecx, 0x65cb48
lea eax, [ebp - 0xd18]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4e45f8
cmp dl, bl
je 0x4e45f4
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4e45f8
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x4e45d8
xor eax, eax
jmp 0x4e45fd
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x4e46e1
push 0x3ff
lea ecx, [ebp - 0x403]
push ebx
push ecx
mov byte [ebp - 0x404], bl
call fcn.00534b40
add esp, 0xc
xor eax, eax
jmp 0x4e4630
mov cl, byte [ebp + eax - 0x804]
mov byte [ebp + eax - 0x404], cl
inc eax
cmp cl, bl
jne 0x4e4630
lea eax, [ebp - 0xd18]
mov edx, eax
jmp 0x4e4650
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4e4650
lea edi, [ebp - 0x404]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
cmp cl, bl
jne 0x4e4660
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
test byte [ebp - 0xd44], 0x10
rep movsb byte es:[edi], byte [esi]
je 0x4e46a7
mov eax, dword [ebp + 0xc]
cmp eax, ebx
je 0x4e469a
push eax
lea edx, [ebp - 0x404]
push edx
call fcn.004e4480
add esp, 8
jmp 0x4e46e1
lea esi, [ebp - 0x404]
call fcn.004e43b0
jmp 0x4e46e1
lea eax, [ebp - 0x404]
push 0x57a81c
push eax
call fcn.00536808
add esp, 8
cmp eax, ebx
jne 0x4e46d8
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
jne 0x4e46e1
lea ecx, [ebp - 0x404]
push ecx
call fcn.004e4320
jmp 0x4e46de
push eax
call fcn.00536f74
add esp, 4
mov esi, dword [ebp - 0xd48]
lea edx, [ebp - 0xd44]
push edx
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x4e4590
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
mov eax, 1
pop ebx
call fcn.00534bba
mov esp, ebp
pop ebp
ret