Function at 0x443da4
Capabilities:
Enumerate files on windows

Disassembly:
mov eax, 0x466567
call fcn.004341ac
sub esp, 0x23c
push ebx
push esi
xor esi, esi
push edi
mov dword [ebp - 0x14], esi
cmp dword [ebp + 0x14], esi
mov dword [ebp - 4], 2
mov edi, 0x469578
jne 0x443dfb
sub esp, 0x28
lea eax, [ebp + 8]
mov dword [ebp - 0x18], esp
mov ecx, esp
push esi
push eax
mov dword [ecx], 0x469580
mov dword [ecx + 0x20], edi
call fcn.00403f4f
call fcn.00443bd5
add esp, 0x28
test al, al
jne 0x443dfb
xor bl, bl
jmp 0x44413d
mov al, byte [ebp + 0x8b]
mov dword [ebp - 0x3c], esi
mov byte [ebp - 0x40], al
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x34], esi
lea eax, [ebp - 0x40]
lea ecx, [ebp + 0x34]
push eax
push 0x3b
mov byte [ebp - 4], 3
call fcn.00415a72
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x1c], eax
cmp eax, dword [ebp - 0x38]
je 0x444014
push dword [ebp - 0x1c]
lea eax, [ebp - 0xe0]
lea ecx, [ebp + 8]
push eax
call fcn.0040e53a
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 4
push ecx
mov ecx, eax
call fcn.0040316b
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
lea ecx, [ebp - 0xe0]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 3
call fcn.004020a2
cmp dword [ebp - 0x18], 0xffffffff
mov al, 1
je 0x443fff
test al, al
je 0x443fff
mov eax, dword [ebp - 0x248]
mov ecx, dword [ebp + 0x84]
and eax, dword [ebp + 0x88]
and ecx, dword [ebp + 0x88]
cmp eax, ecx
jne 0x443fe5
lea eax, [ebp - 0x1e]
push 1
push eax
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x68]
call fcn.00402dbc
lea eax, [ebp - 0x68]
push 0x46ae7c
push eax
mov byte [ebp - 4], 5
call fcn.00421cf0
pop ecx
test al, al
pop ecx
jne 0x443fd9
lea eax, [ebp - 0x68]
push 0x481fd0
push eax
call fcn.00421cf0
pop ecx
test al, al
pop ecx
jne 0x443fd9
mov eax, 0x481fc8
mov dword [ebp - 0xb8], 0x469580
mov ecx, eax
mov dword [ebp - 0x98], edi
test ecx, ecx
jne 0x443f08
mov eax, 0x483918
lea ecx, [ebp - 0x1d]
push esi
push ecx
push eax
lea ecx, [ebp - 0xb8]
call fcn.00403fe2
lea eax, [ebp - 0xb8]
lea ecx, [ebp - 0x68]
push eax
lea eax, [ebp + 0x5c]
push eax
mov byte [ebp - 4], 6
call fcn.0044b7d7
mov bl, al
lea ecx, [ebp - 0xb8]
neg bl
sbb bl, bl
mov byte [ebp - 4], 5
inc bl
call fcn.004020a2
test bl, bl
je 0x443fd9
cmp byte [ebp + 0x8c], 0
je 0x443f5d
lea ecx, [ebp + 8]
jmp 0x443f88
lea eax, [ebp - 0xd]
push esi
push eax
lea ecx, [ebp - 0x90]
mov dword [ebp - 0x90], 0x469580
mov dword [ebp - 0x70], edi
call fcn.00402c39
or dword [ebp - 0x14], 1
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 7
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x108]
push eax
call fcn.0040e53a
mov edx, dword [ebp + 0x30]
push eax
mov dword [ebp - 4], 8
mov ecx, dword [edx + 8]
push ecx
mov ecx, edx
call fcn.0044bece
lea ecx, [ebp - 0x108]
mov byte [ebp - 4], 7
call fcn.004020a2
test byte [ebp - 0x14], 1
mov dword [ebp - 4], 5
je 0x443fd9
and dword [ebp - 0x14], 0xfffffffe
lea ecx, [ebp - 0x90]
call fcn.004020a2
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 3
call fcn.004020a2
lea eax, [ebp - 0x248]
push eax
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
setne al
jmp 0x443e77
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_FindClose]
add dword [ebp - 0x1c], 0x28
mov eax, dword [ebp - 0x1c]
jmp 0x443e25
cmp byte [ebp + 0x90], 0
jne 0x444024
mov bl, 1
jmp 0x444131
mov al, byte [ebp + 0x8b]
mov dword [ebp - 0x2c], esi
mov byte [ebp - 0x30], al
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x24], esi
push esi
push 1
pop esi
lea eax, [ebp - 0xd]
push esi
push 0x10
push 0x10
mov byte [ebp - 4], 9
sub esp, 0x28
mov ecx, esp
mov dword [ebp - 0x18], esp
push esi
push eax
push 0x481fc4
call fcn.00402dbc
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0xa
push eax
lea eax, [ebp + 8]
sub esp, 0x28
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
push eax
call fcn.0040e5c5
mov byte [ebp - 4], 9
call fcn.00443d0a
mov ebx, dword [ebp - 0x2c]
add esp, 0x64
cmp ebx, dword [ebp - 0x28]
je 0x444123
push 0x46ae7c
push ebx
call fcn.00421cf0
pop ecx
test al, al
pop ecx
jne 0x444117
push 0x481fd0
push ebx
call fcn.00421cf0
pop ecx
test al, al
pop ecx
jne 0x444117
push dword [ebp + 0x90]
lea eax, [ebp + 0x5c]
push dword [ebp + 0x8c]
push dword [ebp + 0x88]
push dword [ebp + 0x84]
sub esp, 0x28
mov ecx, esp
mov dword [ebp - 0x18], esp
push esi
push eax
call fcn.0040e5c5
sub esp, 0x28
lea eax, [ebp + 0x34]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
push eax
mov byte [ebp - 4], 0xb
call fcn.0040e5c5
push dword [ebp + 0x30]
mov byte [ebp - 4], 0xc
sub esp, 0x28
mov ecx, esp
mov dword [ebp - 0x14], esp
push esi
push ebx
call fcn.0040e5c5
mov byte [ebp - 4], 9
call fcn.00443da4
add esp, 0x8c
test al, al
je 0x44411f
add ebx, 0x28
jmp 0x444083
xor bl, bl
jmp 0x444125
mov bl, 1
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 3
call fcn.00407332
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 2
call fcn.00407332
lea ecx, [ebp + 8]
mov byte [ebp - 4], 1
call fcn.004020a2
and byte [ebp - 4], 0
lea ecx, [ebp + 0x34]
call fcn.004020a2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x5c]
call fcn.004020a2
mov ecx, dword [ebp - 0xc]
pop edi
mov al, bl
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret