Function at 0x48290e
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5ab9dc
mov eax, dword fs:[0]
push eax
sub esp, 0x3c8
mov eax, dword [0x631350]
xor eax, esp
mov dword [esp + 0x3c0], eax
push ebx
push esi
push edi
mov eax, dword [0x631350]
xor eax, esp
push eax
lea eax, [esp + 0x3d8]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
and dword [esp + 0x14], 0
mov ebx, ecx
mov dword [esp + 0x2c], eax
push eax
lea eax, [esp + 0xb8]
mov dword [esp + 0x2c], ebx
call fcn.004827f9
and dword [esp + 0x3e0], 0
push 0x5ca7ec
push eax
lea eax, [esp + 0xa0]
call fcn.00410678
pop ecx
pop ecx
push 1
xor edi, edi
lea esi, [esp + 0xb8]
mov byte [esp + 0x3e4], 2
call fcn.00404589
cmp dword [esp + 0xac], 8
mov eax, dword [esp + 0x98]
jae 0x4829b9
lea eax, [esp + 0x98]
lea ecx, [esp + 0xec]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [esp + 0x14], eax
cmp eax, 0xffffffff
jne 0x482a0c
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x4829e5
and eax, 0xffff
or eax, 0x80070000
push 0x1f
push str.src_filesystem.cpp
mov edx, eax
lea ecx, [esp + 0x344]
call fcn.0047d2f3
push 0x60763c
lea eax, [esp + 0x340]
push eax
call fcn.00566ed2
mov dword [esp + 0x30], eax
xor edi, edi
mov dword [esp + 0x18], edi
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], edi
mov byte [esp + 0x3e0], 4
lea eax, [esp + 0x118]
push 0x5cb540
push eax
call fcn.00562782
pop ecx
pop ecx
test eax, eax
je 0x482bbc
lea eax, [esp + 0x118]
push 0x5cb544
push eax
call fcn.00562782
pop ecx
pop ecx
test eax, eax
je 0x482bbc
push dword [esp + 0x2c]
lea esi, [esp + 0x80]
call fcn.0040dc52
lea eax, [esp + 0x118]
push eax
lea esi, [esp + 0xd4]
mov byte [esp + 0x3e4], 5
call fcn.004037ae
push eax
lea eax, [esp + 0xb8]
push eax
mov byte [esp + 0x3e8], 6
call fcn.00482763
lea ebx, [esp + 0xb4]
lea eax, [esp + 0x7c]
mov byte [esp + 0x3e0], 7
call fcn.0048278f
xor ebx, ebx
inc ebx
push ebx
xor edi, edi
lea esi, [esp + 0xb8]
call fcn.00404589
push ebx
lea esi, [esp + 0xd4]
mov byte [esp + 0x3e4], 5
call fcn.00404589
lea eax, [esp + 0x7c]
push eax
lea esi, [esp + 0x3c]
call fcn.0040dc52
mov byte [esp + 0x3e0], 8
cmp dword [esp + 0x8c], edi
push 0x13
setne al
movzx eax, al
push eax
mov edi, 0x5e4354
call fcn.0047f667
mov eax, dword [esp + 0xf4]
pop ecx
pop ecx
mov ecx, dword [esp + 0xf0]
mov dword [esp + 0x58], ecx
mov ecx, dword [esp + 0xf4]
mov dword [esp + 0x5c], ecx
mov ecx, dword [esp + 0xf8]
mov dword [esp + 0x60], ecx
mov ecx, dword [esp + 0xfc]
mov dword [esp + 0x64], ecx
mov ecx, dword [esp + 0x100]
mov dword [esp + 0x68], ecx
mov ecx, dword [esp + 0x104]
mov dword [esp + 0x6c], ecx
mov ecx, dword [esp + 0x108]
mov dword [esp + 0x70], ecx
mov ecx, dword [esp + 0x10c]
mov dword [esp + 0x74], ecx
mov dword [esp + 0x54], eax
and al, 0x10
xor ecx, ecx
cmp al, 0x10
sete cl
inc ecx
mov dword [esp + 0x34], ecx
lea eax, [esp + 0x34]
lea esi, [esp + 0x18]
mov byte [esp + 0x3e0], 9
call fcn.00482c98
push ebx
xor edi, edi
lea esi, [esp + 0x3c]
call fcn.00404589
mov byte [esp + 0x3e0], 4
push ebx
lea esi, [esp + 0x80]
call fcn.00404589
mov ebx, dword [esp + 0x28]
lea eax, [esp + 0xec]
push eax
push dword [esp + 0x18]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x482a26
lea eax, [esp + 0x18]
mov dword [ebx], edi
mov dword [ebx + 4], edi
mov dword [ebx + 8], edi
cmp ebx, eax
je 0x482c0d
mov esi, ebx
call fcn.00482d3e
mov eax, dword [esp + 0x18]
mov dword [ebx], eax
mov eax, dword [esp + 0x1c]
mov dword [ebx + 4], eax
mov eax, dword [esp + 0x20]
mov dword [ebx + 8], eax
mov dword [esp + 0x18], edi
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], edi
lea esi, [esp + 0x18]
call fcn.00482d3e
cmp dword [esp + 0x14], edi
je 0x482c26
push dword [esp + 0x14]
call dword [sym.imp.KERNEL32.dll_FindClose]
push 1
xor edi, edi
lea esi, [esp + 0x9c]
call fcn.00404589
mov eax, ebx
mov ecx, dword [esp + 0x3d8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x3c0]
xor ecx, esp
call fcn.0055c9d4
mov esp, ebp
pop ebp
ret