Function at 0x4952db
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push 0x29c
mov eax, 0x50aa8e
call fcn.004d2c4d
mov dword [ebp - 0x2a4], ecx
mov ecx, dword [ebp + 0x14]
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov ebx, dword [ebp + 0x10]
mov dword [ebp - 0x284], ecx
lea ecx, [ebp - 0x274]
push eax
mov dword [ebp - 0x2a0], esi
mov dword [ebp - 0x280], ebx
call fcn.004073cf
lea ecx, [ebp - 0x274]
call fcn.0046f310
mov ecx, dword [ebp - 0x274]
lea ecx, [ecx - 0x10]
call fcn.0040737c
add eax, 0x10
mov dword [ebp - 0x278], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x278]
mov eax, dword [esi]
push dword [eax - 0xc]
push eax
call fcn.004072ec
lea eax, [ebp - 0x264]
push eax
push dword [ebp - 0x278]
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
and dword [ebp - 0x290], 0
mov edi, eax
lea eax, [ebp - 0x264]
mov dword [ebp - 0x294], edi
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
dec eax
neg eax
sbb al, al
add al, 1
je 0x495564
lea eax, [ebp - 0x238]
push eax
lea ecx, [ebp - 0x26c]
call fcn.00409419
mov eax, dword [ebp - 0x26c]
push 0x2e
push eax
mov esi, dword [eax - 0xc]
call fcn.004d5852
pop ecx
pop ecx
test eax, eax
jne 0x4953bc
or eax, 0xffffffff
jmp 0x4953c4
sub eax, dword [ebp - 0x26c]
sar eax, 1
sub esi, eax
lea ecx, [ebp - 0x26c]
push esi
lea eax, [ebp - 0x270]
push eax
call fcn.00444f2b
push str..pack
lea ecx, [ebp - 0x270]
call fcn.004504db
test eax, eax
jne 0x49551c
push 0x2e
push dword [ebp - 0x26c]
call fcn.004d5852
pop ecx
pop ecx
test eax, eax
jne 0x495409
or eax, 0xffffffff
jmp 0x495411
sub eax, dword [ebp - 0x26c]
sar eax, 1
push eax
lea eax, [ebp - 0x298]
push eax
lea ecx, [ebp - 0x26c]
call fcn.00444ed9
push eax
lea ecx, [ebp - 0x26c]
call fcn.004434b9
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x298]
lea ecx, [ecx - 0x10]
call fcn.00406df6
mov eax, dword [ebp - 0x26c]
push 0x2e
push eax
mov esi, dword [eax - 0xc]
call fcn.004d5852
pop ecx
pop ecx
test eax, eax
jne 0x49545e
or eax, 0xffffffff
jmp 0x495466
sub eax, dword [ebp - 0x26c]
sar eax, 1
sub esi, eax
lea ecx, [ebp - 0x26c]
push esi
lea eax, [ebp - 0x29c]
push eax
call fcn.00444f2b
push eax
lea ecx, [ebp - 0x270]
call fcn.004434b9
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x29c]
lea ecx, [ecx - 0x10]
call fcn.00406df6
push 0x52f4e0
lea ecx, [ebp - 0x270]
call fcn.004504db
test eax, eax
jne 0x49551c
lea eax, [ebp - 0x238]
push eax
lea edx, [ebp - 0x274]
lea ecx, [ebp - 0x27c]
call fcn.0044fcbf
pop ecx
push eax
lea ecx, [ebp - 0x28c]
call fcn.004073cf
mov eax, dword [ebp - 0x284]
mov ecx, ebx
mov dword [ebp - 0x288], eax
lea eax, [ebp - 0x28c]
push eax
call fcn.004837f5
lea eax, [ebp - 0x28c]
mov dword [ebp - 0x2a8], eax
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x28c]
lea ecx, [ecx - 0x10]
call fcn.00406df6
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x27c]
lea ecx, [ecx - 0x10]
call fcn.00406df6
lea eax, [ebp - 0x264]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
lea ebx, [eax - 1]
neg ebx
sbb bl, bl
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x270]
add ecx, 0xfffffff0
call fcn.00406df6
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x26c]
lea ecx, [ecx - 0x10]
call fcn.00406df6
add bl, 1
mov ebx, dword [ebp - 0x280]
jne 0x49538e
push 0x52a2d4
lea ecx, [ebp - 0x270]
call fcn.0047f9fb
lea eax, [ebp - 0x270]
push eax
lea edx, [ebp - 0x274]
lea ecx, [ebp - 0x27c]
call fcn.0047f1e3
pop ecx
push eax
lea ecx, [ebp - 0x278]
call fcn.004434b9
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x27c]
lea ecx, [ecx - 0x10]
call fcn.00406df6
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x270]
lea ecx, [ecx - 0x10]
call fcn.00406df6
mov ebx, dword [sym.imp.KERNEL32.dll_FindClose]
test edi, edi
je 0x4955d1
push edi
call ebx
and dword [ebp - 0x294], 0
mov esi, dword [ebp - 0x278]
lea eax, [ebp - 0x264]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
push eax
lea ecx, [ebp - 0x294]
call fcn.0044ecf8
mov edi, dword [ebp - 0x294]
lea eax, [ebp - 0x264]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
dec eax
neg eax
sbb al, al
add al, 1
je 0x49568b
mov ebx, dword [ebp - 0x280]
mov esi, dword [ebp - 0x284]
lea ecx, [ebp - 0x264]
call fcn.00486dc5
test al, al
je 0x495668
push esi
push ebx
push dword [ebp - 0x2a0]
lea eax, [ebp - 0x238]
push eax
lea edx, [ebp - 0x274]
lea ecx, [ebp - 0x27c]
call fcn.0044fcbf
pop ecx
mov ecx, dword [ebp - 0x2a4]
push eax
call fcn.004952db
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x27c]
lea ecx, [ecx - 0x10]
call fcn.00406df6
lea eax, [ebp - 0x264]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
dec eax
neg eax
sbb al, al
add al, 1
jne 0x49561a
mov esi, dword [ebp - 0x278]
mov ebx, dword [sym.imp.KERNEL32.dll_FindClose]
test edi, edi
je 0x495692
push edi
call ebx
or dword [ebp - 4], 0xffffffff
lea ecx, [esi - 0x10]
call fcn.00406df6
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x274]
lea ecx, [ecx - 0x10]
call fcn.00406df6
call fcn.004d2bf7
ret 0x10