Function at 0x449ec5
Capabilities:
Enumerate files on windows
Enumerate files recursively
Set file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4b8
mov eax, dword [0x51f5d0]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
push ebx
push esi
mov dword [ebp - 0x474], eax
mov eax, dword [ebp + 0xc]
push edi
mov dword [ebp - 0x468], eax
mov eax, dword [ebp + 0x10]
mov esi, 0x103
push esi
mov dword [ebp - 0x478], eax
xor ebx, ebx
lea eax, [ebp - 0x113]
push ebx
push eax
mov byte [ebp - 0x114], 0
call fcn.004c05d0
add esp, 0xc
push esi
lea eax, [ebp - 0x21b]
push ebx
push eax
mov byte [ebp - 0x21c], bl
call fcn.004c05d0
add esp, 0xc
push 0x13c
lea eax, [ebp - 0x460]
push ebx
push eax
mov dword [ebp - 0x464], ebx
call fcn.004c05d0
xor eax, eax
mov word [ebp - 0x494], bx
lea edi, [ebp - 0x492]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
xor eax, eax
mov word [ebp - 0x4a4], bx
lea edi, [ebp - 0x4a2]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
add esp, 0xc
push esi
stosw word es:[edi], ax
lea eax, [ebp - 0x323]
push ebx
push eax
mov dword [ebp - 0x47c], ebx
mov dword [ebp - 0x470], ebx
mov byte [ebp - 0x324], bl
call fcn.004c05d0
mov esi, dword [ebp - 0x474]
add esp, 0xc
cmp esi, ebx
je 0x44a4d7
cmp dword [ebp - 0x468], ebx
je 0x44a4d7
push esi
call fcn.004bf880
test eax, eax
pop ecx
jbe 0x44a4d7
push esi
call fcn.004bf880
mov edi, 0x104
cmp eax, edi
pop ecx
jae 0x44a4d7
push dword [ebp - 0x468]
call fcn.004bf880
test eax, eax
pop ecx
jbe 0x44a4d7
push dword [ebp - 0x468]
call fcn.004bf880
cmp eax, edi
pop ecx
jae 0x44a4d7
mov edi, esi
call fcn.0041a56b
test eax, eax
jne 0x44a015
mov edi, dword [ebp - 0x468]
call fcn.0041a56b
test eax, eax
je 0x44a4d7
push esi
call fcn.0041a61c
test eax, eax
pop ecx
mov edi, 0x1e61
jne 0x44a041
push edi
mov ecx, esi
call fcn.0041a8fa
test eax, eax
pop ecx
jne 0x44a041
mov eax, esi
call fcn.0041aa49
test eax, eax
jne 0x44a4d7
push dword [ebp - 0x468]
call fcn.0041a61c
test eax, eax
pop ecx
jne 0x44a075
mov ecx, dword [ebp - 0x468]
push edi
call fcn.0041a8fa
test eax, eax
pop ecx
jne 0x44a075
mov eax, dword [ebp - 0x468]
call fcn.0041aa49
test eax, eax
jne 0x44a4d7
push esi
call fcn.004bf880
cmp byte [eax + esi - 1], 0x5c
pop ecx
push esi
lea eax, [ebp - 0x114]
jne 0x44a091
push 0x4f87a4
jmp 0x44a096
push 0x4f8990
push eax
call fcn.004c054e
add esp, 0xc
push 0x2826
lea eax, [ebp - 0x494]
push str..Network.c
push eax
call fcn.004b0243
add esp, 0xc
push ebx
lea edi, [ebp - 0x324]
call fcn.004458c4
pop ecx
mov eax, edi
push eax
push dword [ebp - 0x468]
call fcn.00486428
pop ecx
mov edi, eax
pop ecx
neg edi
lea eax, [ebp - 0x464]
push eax
sbb edi, edi
lea eax, [ebp - 0x114]
neg edi
push eax
mov dword [ebp - 0x484], edi
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp eax, 0xffffffff
mov dword [ebp - 0x480], eax
jne 0x44a12d
cmp dword [ebp + 0x14], ebx
jne 0x44a10f
xor eax, eax
inc eax
jmp 0x44a4d9
push dword [ebp + 0x18]
push ebx
push dword [ebp - 0x478]
push esi
push dword [ebp - 0x468]
call fcn.00449ec5
add esp, 0x14
jmp 0x44a4d9
mov ebx, dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
jmp 0x44a13b
mov edi, dword [ebp - 0x484]
xor esi, esi
cmp dword [ebp - 0x470], esi
je 0x44a177
call fcn.004af84c
sub eax, dword [ebp - 0x47c]
cmp eax, 0x1388
jbe 0x44a177
cmp dword [ebp + 0x18], esi
je 0x44a177
push dword [ebp + 0x18]
call fcn.00449c8b
mov dword [ebp - 0x470], esi
mov dword [esp], 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [ebp - 0x474]
push esi
call fcn.004bf880
cmp byte [eax + esi - 1], 0x5c
pop ecx
lea eax, [ebp - 0x438]
push eax
push esi
lea eax, [ebp - 0x114]
jne 0x44a1a0
push 0x4df748
jmp 0x44a1a5
push 0x4e5404
push eax
call fcn.004c054e
mov esi, dword [ebp - 0x468]
add esp, 0x10
push esi
call fcn.004bf880
cmp byte [eax + esi - 1], 0x5c
pop ecx
lea eax, [ebp - 0x438]
push eax
push esi
lea eax, [ebp - 0x21c]
jne 0x44a1d7
push 0x4df748
jmp 0x44a1dc
push 0x4e5404
push eax
call fcn.004c054e
add esp, 0x10
test edi, edi
je 0x44a2a1
lea eax, [ebp - 0x4a4]
push eax
lea ecx, [ebp - 0x450]
call fcn.004b0ee3
sub esp, 0xc
mov edi, esp
lea esi, [ebp - 0x4a4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
lea esi, [ebp - 0x494]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004aec16
add esp, 0x20
test eax, eax
je 0x44a2a1
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x494]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
lea esi, [ebp - 0x4a4]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004aef99
add esp, 0x20
cmp eax, 0x927c0
jle 0x44a2a1
lea esi, [ebp - 0x494]
lea edi, [ebp - 0x4b4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x450]
movsd dword es:[edi], dword [esi]
push eax
lea eax, [ebp - 0x4b4]
xor esi, esi
push eax
mov word [ebp - 0x4a8], si
mov word [ebp - 0x4aa], si
call fcn.004b101f
lea eax, [ebp - 0x114]
push esi
push eax
lea eax, [ebp - 0x450]
xor ecx, ecx
call fcn.0041ad6f
add esp, 0x10
push dword [ebp - 0x478]
lea ecx, [ebp - 0x464]
push dword [ebp - 0x468]
call fcn.0044a4e8
test eax, eax
pop ecx
pop ecx
je 0x44a47f
lea eax, [ebp - 0x438]
push eax
push str._n__Syncing__s...
call fcn.0044d0c4
cmp dword [ebp - 0x470], 0
pop ecx
pop ecx
jne 0x44a304
push 0x286f
push str..Network.c
push dword [ebp + 0x18]
call fcn.00449056
add esp, 0xc
mov dword [ebp - 0x470], eax
call fcn.004af84c
mov dword [ebp - 0x47c], eax
mov edi, 0x120
push edi
lea eax, [ebp - 0x114]
push eax
call ebx
test eax, eax
jne 0x44a33e
lea eax, [ebp - 0x114]
call fcn.0041aa49
test eax, eax
jne 0x44a33e
mov esi, 0x1f4
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
push edi
lea eax, [ebp - 0x114]
push eax
call ebx
jmp 0x44a343
mov esi, 0x1f4
push edi
lea eax, [ebp - 0x21c]
push eax
call ebx
test eax, eax
jne 0x44a380
lea eax, [ebp - 0x21c]
call fcn.0041aa49
test eax, eax
jne 0x44a380
lea edi, [ebp - 0x21c]
call fcn.0041a56b
test eax, eax
je 0x44a380
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x120
mov eax, edi
push eax
call ebx
lea edi, [ebp - 0x21c]
lea ecx, [ebp - 0x114]
call fcn.00419c48
mov edi, eax
test edi, edi
mov dword [ebp - 0x46c], edi
jne 0x44a3bd
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
lea edi, [ebp - 0x21c]
lea ecx, [ebp - 0x114]
call fcn.00419c48
mov dword [ebp - 0x46c], eax
mov edi, eax
push 0x20
lea eax, [ebp - 0x114]
push eax
call ebx
test eax, eax
jne 0x44a408
lea eax, [ebp - 0x114]
call fcn.0041aa49
test eax, eax
jne 0x44a408
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x20
lea eax, [ebp - 0x114]
push eax
call ebx
test eax, eax
jne 0x44a408
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea edi, [ebp - 0x114]
call fcn.0041a56b
mov edi, dword [ebp - 0x46c]
neg edi
sbb edi, edi
and edi, 0xfffffefe
add edi, 0x122
push edi
lea eax, [ebp - 0x21c]
push eax
mov dword [ebp - 0x46c], edi
call ebx
test eax, eax
jne 0x44a46b
lea eax, [ebp - 0x21c]
call fcn.0041aa49
test eax, eax
jne 0x44a46b
lea edi, [ebp - 0x21c]
call fcn.0041a56b
test eax, eax
je 0x44a46b
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
push dword [ebp - 0x46c]
mov eax, edi
push eax
call ebx
test eax, eax
jne 0x44a46b
call dword [sym.imp.KERNEL32.dll_GetLastError]
call fcn.0041a56b
test byte [ebp - 0x46c], 2
je 0x44a47f
lea eax, [ebp - 0x21c]
call fcn.0041a0f3
lea eax, [ebp - 0x464]
push eax
push dword [ebp - 0x480]
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x44a135
xor esi, esi
cmp dword [ebp - 0x470], esi
je 0x44a4ad
push dword [ebp + 0x18]
call fcn.00449c8b
pop ecx
push dword [ebp - 0x480]
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [ebp + 0x14], esi
je 0x44a107
push dword [ebp + 0x18]
push esi
push dword [ebp - 0x478]
push dword [ebp - 0x474]
jmp 0x44a11a
xor eax, eax
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004bfeb5
leave
ret