Function at 0x4a0785
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffd7c
push ebx
push esi
push edi
mov esi, 0x5584e6
mov dword [ebp - 0xc], 0xffffffff
push 0x7f02
push 0
call sub.USER32.dll_LoadCursorA
push eax
call sub.USER32.dll_SetCursor
mov dword [ebp - 0x10], eax
push dword [ebp + 8]
call fcn.004a06cd
push 0x55219c
push str._s.log
push esi
call sub.USER32.dll_wsprintfA
add esp, 0xc
push 0
push 0
push 0xb
push 0x67
push dword [ebp + 8]
call sub.USER32.dll_SendDlgItemMessageA
push 0
push 0
push 0x184
push 0x67
push dword [ebp + 8]
call sub.USER32.dll_SendDlgItemMessageA
xor eax, eax
mov dword [ebp - 8], eax
cmp dword [0x532a54], 0
je 0x4a0805
mov dword [ebp - 8], 1
cmp dword [ebp - 8], 0
jne 0x4a0821
push 0x37
lea edx, [ebp - 0x120]
push edx
push esi
call fcn.0051bae0
add esp, 0xc
mov edi, eax
jmp 0x4a0840
lea eax, [ebp - 0x284]
push eax
push esi
call sub.KERNEL32.dll_FindFirstFileA
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0xffffffff
jne 0x4a083e
mov edi, 1
jmp 0x4a0840
xor edi, edi
xor eax, eax
mov dword [ebp - 4], eax
jmp 0x4a0963
cmp dword [ebp - 8], 0
jne 0x4a089d
test byte [ebp - 0x118], 0x10
je 0x4a086d
lea edx, [ebp - 0x120]
push edx
call fcn.0051bba0
pop ecx
mov edi, eax
jmp 0x4a0963
push esi
push edi
lea edi, [ebp - 0x110]
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
push esi
call fcn.005207ec
pop ecx
jmp 0x4a08ee
test byte [ebp - 0x284], 0x10
je 0x4a08c7
lea eax, [ebp - 0x284]
push eax
push dword [ebp - 0xc]
call sub.KERNEL32.dll_FindNextFileA
test eax, eax
jne 0x4a0963
mov edi, 1
jmp 0x4a0963
push esi
push edi
lea edi, [ebp - 0x258]
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
push esi
push 0x55219c
push 0x532447
push 0x543bd3
call sub.USER32.dll_wsprintfA
add esp, 0x10
lea eax, [ebp - 0x144]
push eax
push 0x543bd3
call fcn.0051ef24
add esp, 8
push dword [ebp - 0x12a]
push 0
push esi
push dword [ebp - 4]
call fcn.0049d9f0
mov ebx, eax
test ebx, ebx
je 0x4a0934
mov dword [ebp - 4], ebx
cmp dword [ebp - 8], 0
jne 0x4a094b
lea eax, [ebp - 0x120]
push eax
call fcn.0051bba0
pop ecx
mov edi, eax
jmp 0x4a0963
lea eax, [ebp - 0x284]
push eax
push dword [ebp - 0xc]
call sub.KERNEL32.dll_FindNextFileA
test eax, eax
jne 0x4a0963
mov edi, 1
test edi, edi
je 0x4a084a
cmp dword [ebp - 0xc], 0xffffffff
je 0x4a0979
push dword [ebp - 0xc]
call sub.KERNEL32.dll_FindClose
push 5
push dword [ebp - 4]
call fcn.004e3f0c
mov dword [ebp - 4], eax
push esi
push 0x3e7
push 0xd
push 0x66
push dword [ebp + 8]
call sub.USER32.dll_SendDlgItemMessageA
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x4a09fa
mov edi, 1
cmp byte [esi], 0
je 0x4a09d9
push 0x53244d
push esi
call fcn.00518698
add esp, 8
test eax, eax
je 0x4a09cb
push dword [ebx]
push esi
call fcn.004f7684
test eax, eax
jne 0x4a09d9
xor edi, edi
jmp 0x4a09d9
push esi
push dword [ebx]
call fcn.00416eff
test eax, eax
jne 0x4a09d9
xor edi, edi
test edi, edi
je 0x4a09f3
push dword [ebx]
push 0
push 0x180
push 0x67
push dword [ebp + 8]
call sub.USER32.dll_SendDlgItemMessageA
inc eax
je 0x4a09fa
mov ebx, dword [ebx + 0x30]
test ebx, ebx
jne 0x4a099f
push dword [ebp - 4]
call fcn.0049dfbe
push 1
push 0x532451
push 0x67
push dword [ebp + 8]
call fcn.004f9714
push 0
push 1
push 0x185
push 0x67
push dword [ebp + 8]
call sub.USER32.dll_SendDlgItemMessageA
push 0
push 1
push 0xb
push 0x67
push dword [ebp + 8]
call sub.USER32.dll_SendDlgItemMessageA
push 0x67
push dword [ebp + 8]
call sub.USER32.dll_GetDlgItem
push eax
call sub.USER32.dll_UpdateWindow
push dword [ebp - 0x10]
call sub.USER32.dll_SetCursor
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4