Function at 0x4b39f0
Capabilities:
Enumerate files on windows
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x80
mov edi, ecx
mov eax, dword [0x7a8498]
xor eax, ebp
mov dword [esp + 0x78], eax
pcmpeqd xmm0, xmm0
movdqa xmmword [esp + 0x60], xmm0
movdqa xmmword [esp + 0x50], xmm0
movdqa xmmword [esp + 0x40], xmm0
movdqa xmmword [esp + 0x30], xmm0
lea ebx, [esp + 0x20]
push 0x82
push str..._.._base_files_file_enumerator_win.cc
push str.Next
push ebx
call fcn.0045f9a0
add esp, 0x10
lea ecx, [esp + 0x30]
push 0
push ebx
call fcn.004b4d70
lea eax, [edi + 4]
mov dword [esp + 0xc], eax
lea esi, [edi + 0x284]
lea eax, [edi + 0x258]
mov dword [esp], eax
lea eax, [edi + 0x26c]
mov dword [esp + 4], eax
lea eax, [edi + 0x30]
mov dword [esp + 0x10], eax
mov dword [esp + 8], esi
jmp 0x4b3a8b
mov ecx, ebx
call fcn.0045d3c0
mov esi, dword [esp + 8]
cmp byte [edi], 0
je 0x4b3ad0
push dword [esp + 0xc]
push dword [edi + 0x254]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x4b3bda
push dword [edi + 0x254]
call dword [sym.imp.KERNEL32.dll_FindClose]
mov dword [edi + 0x254], 0xffffffff
jmp 0x4b3bda
mov eax, dword [edi + 0x290]
cmp dword [edi + 0x28c], eax
je 0x4b3e03
test eax, eax
jne 0x4b3aec
mov eax, dword [edi + 0x288]
add eax, 0xffffffff
mov ecx, esi
push eax
call fcn.004b4320
mov ecx, dword [esp]
push eax
call fcn.0045d3e0
mov eax, dword [edi + 0x290]
test eax, eax
jne 0x4b3b10
mov eax, dword [edi + 0x288]
lea ecx, [eax - 1]
mov dword [edi + 0x290], ecx
mov ecx, esi
push eax
call fcn.004b3f70
mov ebx, eax
mov ecx, esi
push dword [edi + 0x290]
call fcn.004b3f70
mov ecx, esi
push ebx
push eax
call fcn.004b3eb0
mov ecx, esi
call fcn.004b43c0
mov dword [esp + 0x20], 0xffffffff
mov dword [esp + 0x24], 0xffffffff
mov dword [esp + 0x28], 0xffffffff
mov eax, dword [edi + 0x278]
cmp eax, 1
je 0x4b3b89
test eax, eax
jne 0x4b3b9f
movzx eax, byte [edi + 0x277]
mov edx, dword [esp + 4]
test al, al
jns 0x4b3b82
mov edx, dword [edi + 0x26c]
mov eax, dword [edi + 0x270]
mov ecx, dword [esp]
push eax
push edx
jmp 0x4b3b93
mov ecx, dword [esp]
push 1
push 0x73b65a
lea ebx, [esp + 0x28]
push ebx
call fcn.0045dee0
jmp 0x4b3baa
lea ebx, [esp + 0x20]
mov ecx, ebx
call fcn.0045d270
cmp byte [esp + 0x2b], 0
mov eax, ebx
jns 0x4b3bb7
mov eax, dword [esp + 0x20]
push 2
push 0
push 0
push dword [esp + 0x18]
push 1
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov dword [edi + 0x254], eax
mov byte [edi], 1
mov ecx, ebx
call fcn.0045d3c0
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp dword [edi + 0x254], 0xffffffff
je 0x4b3c20
mov dword [esp + 0x20], 0xffffffff
mov dword [esp + 0x24], 0xffffffff
mov dword [esp + 0x28], 0xffffffff
mov esi, dword [esp + 0x10]
test esi, esi
je 0x4b3c50
push esi
call fcn.006e6814
add esp, 4
jmp 0x4b3c7d
mov byte [edi], 0
cmp dword [edi + 0x278], 0
mov ecx, dword [esp + 4]
je 0x4b3d3d
cmp eax, 0x12
je 0x4b3a8b
jmp 0x4b3d68
push 0x6fb826
push 0x7d
push 0x731e24
lea eax, [esp + 0x20]
push eax
call fcn.00458d10
add esp, 0x10
lea ecx, [esp + 0x14]
call fcn.00458d80
lea ecx, [esp + 0x14]
call fcn.00458d90
xor eax, eax
mov ecx, ebx
push eax
push esi
call fcn.0045d300
mov ecx, edi
push ebx
call fcn.004b44a0
test al, al
jne 0x4b3a80
mov eax, ebx
mov ebx, dword [edi + 4]
mov dword [esp + 0x14], 0xffffffff
mov dword [esp + 0x18], 0xffffffff
mov dword [esp + 0x1c], 0xffffffff
mov ecx, dword [esp]
push eax
lea eax, [esp + 0x18]
push eax
call fcn.0045e9d0
test bl, 0x10
mov esi, dword [esp + 8]
je 0x4b3d90
cmp byte [edi + 0x264], 0
je 0x4b3d90
cmp byte [esp + 0x1f], 0
lea eax, [esp + 0x14]
jns 0x4b3cea
mov eax, dword [esp + 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
test eax, 0x400
jne 0x4b3d90
mov ecx, esi
push 1
call fcn.004b4010
mov ecx, esi
push dword [edi + 0x290]
call fcn.004b3f70
mov ecx, eax
lea eax, [esp + 0x14]
push eax
call fcn.0045d290
mov eax, dword [edi + 0x288]
mov edx, dword [edi + 0x290]
add eax, 0xffffffff
cmp edx, eax
jne 0x4b3d7a
mov dword [edi + 0x290], 0
jmp 0x4b3d85
cmp byte [ecx + 0xb], 0
js 0x4b3d49
mov byte [ecx + 0xb], 1
jmp 0x4b3d59
mov dword [edi + 0x270], 1
mov ecx, dword [edi + 0x26c]
mov dword [ecx], 0x2a
cmp eax, 0x12
je 0x4b3a8b
cmp dword [edi + 0x27c], 0
je 0x4b3a8b
jmp 0x4b3df4
mov ecx, edx
inc ecx
mov dword [edi + 0x290], ecx
jne 0x4b3d87
mov edx, eax
mov ecx, esi
push edx
call fcn.004b4320
nop
and ebx, 0x10
shr ebx, 4
mov ecx, edi
push ebx
call fcn.004b45a0
test al, al
lea ebx, [esp + 0x20]
je 0x4b3ddf
mov eax, dword [edi + 0x278]
cmp eax, 1
je 0x4b3db7
test eax, eax
jne 0x4b3ddf
jmp 0x4b3e0f
mov ecx, dword [esp + 4]
cmp byte [ecx + 0xb], 0
mov eax, ecx
jns 0x4b3dc5
mov eax, dword [ecx]
cmp byte [esp + 0x2b], 0
mov ecx, ebx
jns 0x4b3dd2
mov ecx, dword [esp + 0x20]
push eax
push ecx
call dword [sym.imp.SHLWAPI.dll_PathMatchSpecW]
cmp eax, 1
je 0x4b3e0f
lea ecx, [esp + 0x14]
call fcn.0045d3c0
mov ecx, ebx
call fcn.0045d3c0
jmp 0x4b3a8b
push eax
call fcn.004b4a20
add esp, 4
mov dword [edi + 0x280], eax
mov edi, dword [ebp + 8]
mov ecx, edi
call fcn.0045d270
jmp 0x4b3e2e
lea esi, [esp + 0x14]
mov edi, dword [ebp + 8]
mov ecx, edi
push esi
call fcn.0045d290
mov ecx, esi
call fcn.0045d3c0
lea ecx, [esp + 0x20]
call fcn.0045d3c0
lea ecx, [esp + 0x30]
call fcn.004b4dd0
mov ecx, dword [esp + 0x78]
xor ecx, ebp
call fcn.006c9121
mov eax, edi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 4