Function at 0x4b83a3
Capabilities:
Enumerate files on windows

Disassembly:
mov eax, 0x4ef087
call fcn.004eadec
sub esp, 0x2f0
mov eax, dword [0x516ad4]
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
push dword [ebp + 0xc]
lea edi, [ebp - 0x278]
mov dword [ebp - 0x14], eax
call fcn.004031b3
and dword [ebp - 4], 0
mov ecx, dword [ebp - 0x278]
mov eax, dword [ecx - 8]
mov ax, word [ecx + eax*2 - 2]
push 0x5c
pop ecx
cmp ax, cx
je 0x4b83fe
lea eax, [ebp + 0xc]
xor edi, edi
push eax
inc edi
lea eax, [ebp - 0x278]
mov dword [ebp + 0xc], ecx
call fcn.0040363d
push dword [ebp + 0x10]
lea edi, [ebp - 0x27c]
call fcn.004031b3
push str.ttp_.dll
lea eax, [ebp - 0x278]
push eax
lea eax, [ebp - 0x280]
push eax
call fcn.004033e6
lea eax, [ebp - 0x274]
mov byte [ebp - 4], 2
mov esi, dword [ebp - 0x280]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp eax, 0xffffffff
mov dword [ebp - 0x288], eax
jne 0x4b848e
lea eax, [esi - 0xc]
cmp eax, dword [0x51a43c]
je 0x4b8458
push eax
call fcn.004013aa
mov eax, dword [ebp - 0x27c]
add eax, 0xfffffff4
cmp eax, dword [0x51a43c]
je 0x4b846f
push eax
call fcn.004013aa
mov eax, dword [ebp - 0x278]
add eax, 0xfffffff4
cmp eax, dword [0x51a43c]
je 0x4b8486
push eax
call fcn.004013aa
xor eax, eax
inc eax
jmp 0x4b8661
test byte [ebp - 0x274], 0x10
jne 0x4b85ec
mov eax, dword [ebp - 0x27c]
xor ebx, ebx
cmp dword [eax - 8], ebx
je 0x4b84c5
lea eax, [ebp - 0x248]
push eax
xor ecx, ecx
lea esi, [ebp - 0x27c]
call fcn.00410c59
cmp eax, 0xffffffff
jne 0x4b85ec
lea eax, [ebp - 0x248]
push eax
lea eax, [ebp - 0x278]
push eax
lea eax, [ebp - 0x29c]
push eax
call fcn.004033e6
mov edi, eax
lea eax, [ebp - 0x280]
call fcn.00403223
mov eax, dword [ebp - 0x29c]
add eax, 0xfffffff4
cmp eax, dword [0x51a43c]
je 0x4b8503
push eax
call fcn.004013aa
push 0x2c
mov dword [ebp - 0x294], ebx
mov byte [ebp - 4], 3
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
cmp eax, ebx
pop ecx
je 0x4b8523
push ebx
mov esi, eax
call fcn.004b5a6d
jmp 0x4b8525
xor eax, eax
xor esi, esi
cmp eax, esi
mov ebx, eax
mov dword [ebp - 0x294], ebx
jne 0x4b854d
mov dword [ebp - 0x2a0], 0x8007000e
push 0x504b48
lea eax, [ebp - 0x2a0]
jmp 0x4b868f
mov ecx, dword [ebp - 0x280]
mov edx, eax
call fcn.004b5e2d
cmp eax, esi
jge 0x4b8574
mov dword [ebp - 0x2a8], eax
push 0x504b48
lea eax, [ebp - 0x2a8]
jmp 0x4b868f
mov dword [ebp + 0x10], esi
and dword [ebp + 0xc], 0
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x24]
push eax
push dword [ebp + 0x10]
mov ecx, ebx
mov byte [ebp - 4], 4
call fcn.004b5ea8
test eax, eax
jge 0x4b8695
mov byte [ebp - 4], 3
mov eax, dword [ebp + 0xc]
test eax, eax
je 0x4b85aa
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
test esi, esi
je 0x4b867a
test ebx, ebx
mov dword [ebp + 0xc], ebx
je 0x4b85c3
lea eax, [ebx + 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
mov edi, dword [ebp + 8]
lea eax, [ebp + 0xc]
push eax
add edi, 0x40
mov byte [ebp - 4], 0xd
call fcn.004bc1d1
test ebx, ebx
mov byte [ebp - 4], 3
je 0x4b85e5
mov esi, ebx
call fcn.004b5aa5
mov esi, ebx
call fcn.004b5aa5
lea eax, [ebp - 0x274]
push eax
push dword [ebp - 0x288]
mov dword [ebp - 4], 2
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x4b848e
push dword [ebp - 0x288]
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [ebp - 0x280]
add eax, 0xfffffff4
cmp eax, dword [0x51a43c]
je 0x4b8631
push eax
call fcn.004013aa
mov eax, dword [ebp - 0x27c]
add eax, 0xfffffff4
cmp eax, dword [0x51a43c]
je 0x4b8648
push eax
call fcn.004013aa
mov eax, dword [ebp - 0x278]
add eax, 0xfffffff4
cmp eax, dword [0x51a43c]
je 0x4b865f
push eax
call fcn.004013aa
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x14]
call fcn.004eae3c
pop edi
pop esi
pop ebx
leave
ret 0xc
mov dword [ebp - 0x2a4], 0x80004001
push 0x504b48
lea eax, [ebp - 0x2a4]
push eax
call sub.MSVCRT.dll__CxxThrowException
push 0x10
pop edi
push edi
lea eax, [ebp - 0x24]
push 0x4f84d8
push eax
call sub.MSVCRT.dll_memcmp
add esp, 0xc
test eax, eax
jne 0x4b8701
mov esi, dword [ebp + 0xc]
lea eax, [ebp - 0x298]
push eax
call fcn.004bb9b3
push dword [ebp + 0x10]
lea eax, [ebp - 0x2fc]
mov byte [ebp - 4], 5
mov edi, dword [ebp - 0x298]
push eax
call fcn.004b5afe
mov ecx, dword [ebp + 8]
push eax
mov byte [ebp - 4], 6
call fcn.004bbf0b
lea esi, [ebp - 0x2fc]
mov byte [ebp - 4], 5
call fcn.004b7ffe
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x298]
jmp 0x4b8843
push edi
lea eax, [ebp - 0x24]
push 0x4f84e8
push eax
call sub.MSVCRT.dll_memcmp
add esp, 0xc
test eax, eax
jne 0x4b8773
mov esi, dword [ebp + 0xc]
lea eax, [ebp - 0x290]
push eax
call fcn.004bb9d5
mov byte [ebp - 4], 7
push dword [ebp - 0x290]
lea eax, [ebp - 0x2b8]
push dword [ebp + 0x10]
push eax
call fcn.004bbba4
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x2b8]
push eax
add ecx, 0x10
mov byte [ebp - 4], 8
call fcn.004bbfda
lea eax, [ebp - 0x2b8]
mov byte [ebp - 4], 7
call fcn.004b5b49
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x290]
jmp 0x4b8843
push edi
lea eax, [ebp - 0x24]
push 0x4f84f8
push eax
call sub.MSVCRT.dll_memcmp
add esp, 0xc
test eax, eax
jne 0x4b87dc
mov esi, dword [ebp + 0xc]
lea eax, [ebp - 0x284]
push eax
call fcn.004bb9f7
push dword [ebp + 0x10]
lea eax, [ebp - 0x2e4]
mov byte [ebp - 4], 9
mov edi, dword [ebp - 0x284]
push eax
call fcn.004b5b77
mov ecx, dword [ebp + 8]
push eax
add ecx, 0x20
mov byte [ebp - 4], 0xa
call fcn.004bc0ac
lea esi, [ebp - 0x2e4]
mov byte [ebp - 4], 9
call fcn.004b8883
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x284]
jmp 0x4b8843
push edi
lea eax, [ebp - 0x24]
push 0x4f8508
push eax
call sub.MSVCRT.dll_memcmp
add esp, 0xc
test eax, eax
jne 0x4b8850
mov esi, dword [ebp + 0xc]
lea eax, [ebp - 0x28c]
push eax
call fcn.004bba19
push dword [ebp + 0x10]
lea eax, [ebp - 0x2cc]
mov byte [ebp - 4], 0xb
mov edi, dword [ebp - 0x28c]
push eax
call fcn.004b5bca
mov ecx, dword [ebp + 8]
push eax
add ecx, 0x30
mov byte [ebp - 4], 0xc
call fcn.004bc160
lea esi, [ebp - 0x2cc]
mov byte [ebp - 4], 0xb
call fcn.004b8883
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x28c]
xor esi, esi
inc esi
test eax, eax
je 0x4b8850
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 3
mov eax, dword [ebp + 0xc]
test eax, eax
je 0x4b8861
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
inc dword [ebp + 0x10]
jmp 0x4b8577