Function at 0x43e436
Capabilities:
Enumerate files on windows

Disassembly:
push 0xac0
mov eax, 0x476e38
call fcn.00476acd
mov dword [ebp - 0xaa0], edx
push 7
xor ebx, ebx
xor eax, eax
pop edx
mov dword [ebp - 0x830], ebx
mov dword [ebp - 0x82c], edx
mov word [ebp - 0x840], ax
mov dword [ebp - 4], ebx
mov dword [ebp - 0x818], ebx
mov dword [ebp - 0x814], edx
mov word [ebp - 0x828], ax
mov edx, ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xa98]
mov dword [ebp - 0xa9c], ebx
call fcn.004404af
push dword [ebp - 0xa94]
lea ecx, [ebp - 0xacc]
push dword [ebp - 0xa98]
call fcn.00440366
mov esi, dword [ebp - 0xac4]
lea eax, [ebp - 0x840]
mov ebx, dword [ebp - 0xacc]
sub esi, ebx
and dword [ebp - 0x830], 0
sar esi, 1
cmp dword [ebp - 0x82c], 8
jb 0x43e4d5
mov eax, dword [ebp - 0x840]
xor ecx, ecx
mov dword [ebp - 0xa98], ebx
mov word [eax], cx
mov edx, 0x401b98
lea ecx, [ebp - 0xaa8]
mov dword [ebp - 0xa94], esi
call fcn.004404af
push eax
mov edx, 0x401ba0
lea ecx, [ebp - 0xab0]
call fcn.004404af
push eax
lea eax, [ebp - 0xa98]
mov edx, 0x402458
push eax
lea ecx, [ebp - 0xab8]
call fcn.004404af
mov edx, eax
lea ecx, [ebp - 0x840]
call fcn.004404cb
cmp byte [0x47f87e], 0
je 0x43e561
cmp dword [ebp - 0x82c], 8
lea eax, [ebp - 0x840]
jb 0x43e54a
mov eax, dword [ebp - 0x840]
push eax
push 0x401ba4
push 1
call sub.api_ms_win_crt_private_l1_1_0.dll__o___acrt_iob_func
pop ecx
push eax
call fcn.00476657
add esp, 0xc
cmp dword [ebp - 0x82c], 8
lea eax, [ebp - 0x840]
jb 0x43e576
mov eax, dword [ebp - 0x840]
xor edx, edx
lea ecx, [ebp - 0xa90]
push edx
push edx
push edx
push ecx
push edx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov edi, eax
cmp edi, 0xffffffff
jne 0x43e5c2
cmp dword [ebp - 0x82c], 8
lea ecx, [ebp - 0x840]
jb 0x43e5a6
mov ecx, dword [ebp - 0x840]
push ecx
push 0x401bb8
push 2
call sub.api_ms_win_crt_private_l1_1_0.dll__o___acrt_iob_func
pop ecx
push eax
call fcn.00476657
add esp, 0xc
jmp 0x43e775
mov dword [ebp - 0xa98], ebx
mov dword [ebp - 0xa94], esi
and dword [ebp - 0x818], 0
lea eax, [ebp - 0x828]
cmp dword [ebp - 0x814], 8
jb 0x43e5ea
mov eax, dword [ebp - 0x828]
xor ecx, ecx
mov ebx, 0x402458
mov word [eax], cx
mov edx, ebx
lea ecx, [ebp - 0xab8]
call fcn.004404af
push eax
lea edx, [ebp - 0xa64]
lea ecx, [ebp - 0xab0]
call fcn.004404af
push eax
lea eax, [ebp - 0xa98]
mov edx, ebx
push eax
lea ecx, [ebp - 0xaa8]
call fcn.004404af
mov edx, eax
lea ecx, [ebp - 0x828]
call fcn.004404cb
cmp dword [ebp - 0x814], 8
lea eax, [ebp - 0x828]
jb 0x43e64a
mov eax, dword [ebp - 0x828]
push 0x20
push 0x401aec
push eax
xor bl, bl
call dword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o__wfsopen]
add esp, 0xc
mov esi, eax
push esi
lea eax, [ebp - 0x810]
push 0x400
push eax
call dword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o_fgetws]
add esp, 0xc
test eax, eax
je 0x43e693
lea eax, [ebp - 0x810]
push 0x401b0c
push eax
call dword [sym.imp.api_ms_win_crt_private_l1_1_0.dll_wcsstr]
pop ecx
pop ecx
test eax, eax
je 0x43e65f
mov bl, 1
push esi
call dword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o_fclose]
pop ecx
test bl, bl
je 0x43e728
cmp byte [0x47f87e], 0
je 0x43e6d8
cmp dword [ebp - 0x814], 8
lea eax, [ebp - 0x828]
jb 0x43e6c1
mov eax, dword [ebp - 0x828]
push eax
push 0x401bd0
push 2
call sub.api_ms_win_crt_private_l1_1_0.dll__o___acrt_iob_func
pop ecx
push eax
call fcn.00476657
add esp, 0xc
cmp dword [ebp - 0x814], 8
lea ecx, [ebp - 0x828]
jb 0x43e6ed
mov ecx, dword [ebp - 0x828]
mov edx, dword [ebp - 0xaa0]
call fcn.0043e3f6
test al, al
jne 0x43e728
cmp dword [ebp - 0x814], 8
lea eax, [ebp - 0x828]
jb 0x43e711
mov eax, dword [ebp - 0x828]
push eax
push 0x401bdc
push 2
call sub.api_ms_win_crt_private_l1_1_0.dll__o___acrt_iob_func
pop ecx
push eax
call fcn.00476657
add esp, 0xc
lea eax, [ebp - 0xa90]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x43e767
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x12
je 0x43e75c
push eax
push 0x401bfc
push 2
call sub.api_ms_win_crt_private_l1_1_0.dll__o___acrt_iob_func
pop ecx
push eax
call fcn.00476657
add esp, 0xc
xor eax, eax
inc eax
mov dword [ebp - 0xa9c], eax
jmp 0x43e76d
mov eax, dword [ebp - 0xa9c]
test eax, eax
je 0x43e5ce
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
lea ecx, [ebp - 0x828]
call fcn.00440d4a
lea ecx, [ebp - 0x840]
call fcn.00440d4a
xor eax, eax
call fcn.00476a77
ret