Function at 0x7436de
Capabilities:
Enumerate files on windows
Get common file path

Disassembly:
push 0x740
mov eax, 0x7b5c6e
call fcn.00774621
push 0x5f
pop ecx
mov esi, str.qcWqA43bN0nMWEfNZeA9vnndz5Kj78iFEcfCs4hH8kR3BO7tnfCIGqtvdLxwYdRAlfP53kEJTHXFyYfPHbux1F67gYDArmd2VtzR7sHtvvShZFLYa9YlvfE5x33X8070TidTZRGtWSG2JJlkmSfUmyZWZGLbHMUhJnWGtu9oXOXcyx6eq9MTUxrDO59Qkt99d0c6vGCkRnJsT4cpAsyhlS8MedO5pUgVLBKozujLTfnp6ovJtqoKGn4SqgqwvJBQP3Xyw0VkrGXJKLZ7lzRTuGYQc2N6S11WmBo5Dr6vrHhvxWFWv4JZX0tBONp4CBuqCM5bfCjgFo4F9NZHuNFXRfz9uZ8s09Kvv9Ob6MSRROVnO0HVlqNUPhH1Wy9Rvu
mov eax, dword [ebp + 8]
lea edi, [ebp - 0x4bc]
mov dword [ebp - 0x740], eax
rep movsd dword es:[edi], dword [esi]
push 0x49
xor ebx, ebx
pop ecx
movsw word es:[edi], word [esi]
mov dword [ebp - 0x74c], ebx
mov dword [ebp - 0x748], ebx
mov dword [ebp - 0x744], ebx
movsb byte es:[edi], byte [esi]
mov esi, str.GkPNf7N66tourywm6KkJUrCpwiruaSX9Ax6VXoqsQkqL3SndDFKg6DQnn7Jy7Y4dVaMPfn0lVYx4TGZLhisKlr59OG2ZSkWNkvNpDrP7FnoM3Pk5WRHHmktOiIKoGkaHWQq5O6WcyiXWf0mUtqKYjQgRQHpEHR9gYeDa5AOuj7FsQscAbGjlj9H1EU1yjMgsrBROm12LFa6Q4WUYhjfolooFgLS9x6fLVRXnajDpyVzB46CgpbG9tEmfcTHTnXVx6R57Ov4vPOXTRcl6kVAGoxUGHOSVJCjAHHi
lea edi, [ebp - 0x33c]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x4bc]
mov dword [ebp - 4], ebx
push eax
lea ecx, [ebp - 0x4d4]
call fcn.00405a00
lea eax, [ebp - 0x4d4]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x74c]
call fcn.00407ea0
push ebx
push 1
lea ecx, [ebp - 0x4d4]
mov byte [ebp - 4], bl
call fcn.006eb1be
lea eax, [ebp - 0x33c]
push eax
lea ecx, [ebp - 0x4d4]
call fcn.00405a00
lea eax, [ebp - 0x4d4]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x74c]
call fcn.00407ea0
push ebx
push 1
lea ecx, [ebp - 0x4d4]
mov byte [ebp - 4], bl
call fcn.006eb1be
push 0x208
lea eax, [ebp - 0x218]
push ebx
push eax
call fcn.007512b0
add esp, 0xc
lea eax, [ebp - 0x218]
push ebx
push 0x19
push eax
push ebx
mov ebx, dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
call ebx
mov edi, dword [sym.imp.KERNEL32.dll_FindClose]
mov esi, 0x89d6cc
test eax, eax
je 0x743988
lea eax, [ebp - 0x218]
push 0x8b5784
push eax
call fcn.00761506
and dword [ebp - 0x4dc], 0
xor eax, eax
pop ecx
pop ecx
mov dword [ebp - 0x4d8], 7
mov word [ebp - 0x4ec], ax
cmp word [ebp - 0x218], ax
je 0x743820
lea eax, [ebp - 0x218]
push eax
call fcn.00761599
pop ecx
push eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x4ec]
call fcn.00402820
push esi
mov byte [ebp - 4], 3
call fcn.00761599
pop ecx
push eax
push esi
lea ecx, [ebp - 0x4ec]
call fcn.00404470
cmp dword [ebp - 0x4d8], 8
lea ecx, [ebp - 0x73c]
lea eax, [ebp - 0x4ec]
cmovae eax, dword [ebp - 0x4ec]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x74396d
mov ebx, dword [ebp - 0x740]
push 0x2e
pop edi
lea eax, [ebp - 0x73c]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x743961
cmp word [ebp - 0x710], di
je 0x743881
cmp word [ebp - 0x70e], 0
je 0x743881
cmp word [ebp - 0x70e], di
jne 0x7438bd
cmp word [ebp - 0x70c], 0
je 0x743881
test byte [ebp - 0x73c], 0x10
jne 0x743881
and dword [ebp - 0x4c4], 0
xor eax, eax
mov dword [ebp - 0x4c0], 7
mov word [ebp - 0x4d4], ax
cmp word [ebp - 0x218], ax
je 0x7438f6
lea eax, [ebp - 0x218]
push eax
call fcn.00761599
pop ecx
push eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x4d4]
call fcn.00402820
cmp word [ebp - 0x710], 0
mov byte [ebp - 4], 4
jne 0x74391b
xor eax, eax
jmp 0x743928
lea eax, [ebp - 0x710]
push eax
call fcn.00761599
pop ecx
push eax
lea eax, [ebp - 0x710]
push eax
lea ecx, [ebp - 0x4d4]
call fcn.00404470
lea eax, [ebp - 0x4d4]
mov ecx, ebx
push eax
call fcn.006002d0
push 0
push 1
lea ecx, [ebp - 0x4d4]
mov byte [ebp - 4], 3
call fcn.00402760
jmp 0x743881
mov edi, dword [sym.imp.KERNEL32.dll_FindClose]
mov ebx, dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
push esi
call edi
push 0
push 1
lea ecx, [ebp - 0x4ec]
mov byte [ebp - 4], 0
call fcn.00402760
mov esi, 0x89d6cc
push 0
push 0x10
lea eax, [ebp - 0x218]
push eax
push 0
call ebx
test eax, eax
je 0x743b3d
lea eax, [ebp - 0x218]
push 0x8b5784
push eax
call fcn.00761506
xor eax, eax
mov dword [ebp - 0x4d8], 7
xor ebx, ebx
mov word [ebp - 0x4ec], ax
pop ecx
pop ecx
mov dword [ebp - 0x4dc], ebx
cmp word [ebp - 0x218], ax
je 0x7439e3
lea eax, [ebp - 0x218]
push eax
call fcn.00761599
pop ecx
push eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x4ec]
call fcn.00402820
push esi
mov byte [ebp - 4], 5
call fcn.00761599
pop ecx
push eax
push esi
lea ecx, [ebp - 0x4ec]
call fcn.00404470
cmp dword [ebp - 0x4d8], 8
lea ecx, [ebp - 0x73c]
lea eax, [ebp - 0x4ec]
cmovae eax, dword [ebp - 0x4ec]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x743b2c
mov edi, dword [ebp - 0x740]
lea eax, [ebp - 0x73c]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x743b26
push 0x2e
pop eax
cmp word [ebp - 0x710], ax
je 0x743a41
cmp word [ebp - 0x70e], 0
je 0x743a41
cmp word [ebp - 0x70e], ax
jne 0x743a80
cmp word [ebp - 0x70c], 0
je 0x743a41
test byte [ebp - 0x73c], 0x10
jne 0x743a41
xor eax, eax
mov dword [ebp - 0x4c0], 7
mov dword [ebp - 0x4c4], ebx
mov word [ebp - 0x4d4], ax
cmp word [ebp - 0x218], ax
jne 0x743aaf
mov eax, ebx
jmp 0x743abc
lea eax, [ebp - 0x218]
push eax
call fcn.00761599
pop ecx
push eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x4d4]
call fcn.00402820
cmp word [ebp - 0x710], 0
mov byte [ebp - 4], 6
jne 0x743ae1
mov eax, ebx
jmp 0x743aee
lea eax, [ebp - 0x710]
push eax
call fcn.00761599
pop ecx
push eax
lea eax, [ebp - 0x710]
push eax
lea ecx, [ebp - 0x4d4]
call fcn.00404470
lea eax, [ebp - 0x4d4]
mov ecx, edi
push eax
call fcn.006002d0
push ebx
push 1
lea ecx, [ebp - 0x4d4]
mov byte [ebp - 4], 5
call fcn.00402760
jmp 0x743a41
mov edi, dword [sym.imp.KERNEL32.dll_FindClose]
push esi
call edi
push ebx
push 1
lea ecx, [ebp - 0x4ec]
call fcn.00402760
lea ecx, [ebp - 0x74c]
call fcn.006eb210
call fcn.007745cb
ret