Function at 0x448a60
Capabilities:
Enumerate files on windows
Enumerate files recursively
Get file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x87c
mov eax, dword [0x58e5a4]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
mov esi, dword [ebp + 0xc]
xor bl, bl
mov dword [ebp - 0x87c], esi
push edi
mov edi, ecx
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0x874], edi
mov dword [ebp - 0x870], ecx
test eax, eax
jne 0x448aac
pop edi
pop esi
xor al, al
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004d2a60
mov esp, ebp
pop ebp
ret
push eax
lea eax, [ebp - 0x20c]
push 0x104
push eax
call fcn.004fee68
lea ecx, [ebp - 0x20c]
add esp, 0xc
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x448ad0
sub ecx, edx
sar ecx, 1
cmp word [ebp + ecx*2 - 0x20e], 0x5c
jne 0x448b07
lea ecx, [ecx*2 - 2]
cmp ecx, 0x208
jae 0x448d4a
xor eax, eax
mov word [ebp + ecx - 0x20c], ax
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x61c]
push 0x104
push eax
call fcn.004fee68
add esp, 0xc
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
test al, 0x10
je 0x448b4e
push str..
lea eax, [ebp - 0x20c]
push 0x104
push eax
call fcn.004fbc53
add esp, 0xc
jmp 0x448b7b
lea eax, [ebp - 0x61c]
push 0x5c
push eax
call fcn.004d547c
add esp, 8
cmp word [eax], 0
je 0x448b7b
lea eax, [ebp - 0x61c]
push 0x5c
push eax
call fcn.004d5b9d
add esp, 8
xor ecx, ecx
mov word [eax], cx
lea eax, [ebp - 0x86c]
push eax
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x878], eax
cmp eax, 0xffffffff
je 0x448d37
nop
lea eax, [ebp - 0x840]
push eax
lea eax, [ebp - 0x61c]
push eax
lea eax, [ebp - 0x414]
push str._s_s
push eax
call fcn.004499b0
add esp, 0x10
test byte [ebp - 0x86c], 0x10
jne 0x448c6d
lea eax, [ebp - 0x414]
push eax
push 0
call dword [0x598284]
test eax, eax
je 0x448d10
push 0
push 0
lea eax, [ebp - 0x414]
push eax
push edi
call dword [0x598280]
mov edi, eax
test edi, edi
je 0x448d0a
mov bl, 1
test esi, esi
je 0x448c58
cmp dword [ebp - 0x870], 0
je 0x448c58
inc dword [esi]
xor ecx, ecx
mov eax, dword [esi]
mov edx, 4
mul edx
seto cl
neg ecx
or ecx, eax
mov eax, dword [ebp - 0x870]
push ecx
push dword [eax]
call fcn.00500a52
mov ecx, dword [ebp - 0x870]
mov dword [ecx], eax
mov ecx, dword [esi]
lea esi, [eax + ecx*4]
lea eax, [ebp - 0x414]
push eax
call fcn.00500a5d
mov dword [esi - 4], eax
add esp, 0xc
mov esi, dword [ebp - 0x87c]
push 0
push edi
mov edi, dword [ebp - 0x874]
push edi
call dword [0x59826c]
jmp 0x448d10
mov ecx, 0x565b64
lea eax, [ebp - 0x840]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x448c9e
test dx, dx
je 0x448c9a
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x448c9e
add eax, 4
add ecx, 4
test dx, dx
jne 0x448c78
xor eax, eax
jmp 0x448ca3
sbb eax, eax
or eax, 1
test eax, eax
je 0x448d10
mov eax, 0x565b68
lea ecx, [ebp - 0x840]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x448cd8
test dx, dx
je 0x448cd4
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x448cd8
add ecx, 4
add eax, 4
test dx, dx
jne 0x448cb2
xor eax, eax
jmp 0x448cdd
sbb eax, eax
or eax, 1
test eax, eax
je 0x448d10
push dword [ebp - 0x870]
lea eax, [ebp - 0x414]
xor edx, edx
push esi
push eax
mov ecx, edi
call fcn.00448a60
add esp, 0xc
movzx ebx, bl
test al, al
mov eax, 1
cmovne ebx, eax
jmp 0x448d10
mov edi, dword [ebp - 0x874]
lea eax, [ebp - 0x86c]
push eax
push dword [ebp - 0x878]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x448ba0
push dword [ebp - 0x878]
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [ebp - 4]
mov al, bl
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004d2a60
mov esp, ebp
pop ebp
ret
call fcn.004d31dd
int3