Function at 0x4431c0
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x17c
mov eax, dword [0x552064]
xor eax, ebp
mov dword [ebp - 4], eax
movzx eax, word [0x5449b8]
movq xmm0, qword [str._Font_.]
mov word [ebp - 0x18], ax
mov eax, dword [str._Font_]
mov dword [ebp - 0xc], eax
movzx eax, word [0x5449c0]
mov word [ebp - 8], ax
mov al, byte [0x5449c2]
push ebx
mov byte [ebp - 6], al
mov eax, dword [0x563dac]
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x24], 9
movq qword [ebp - 0x20], xmm0
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x10], 6
mov dword [ebp - 0x16c], eax
push esi
push edi
test eax, eax
jne 0x44328c
xor esi, esi
mov edi, 6
lea ecx, [edi + 0xc]
and ecx, 0xfffffffc
call fcn.004a2590
mov byte [eax + 8], 0
lea ebx, [eax + 8]
mov dword [eax], 1
mov dword [eax + 4], edi
mov eax, dword [ebp - 0x16c]
mov byte [ebx + edi], 0
push esi
push eax
push ebx
mov dword [ebp - 0x178], ebx
call fcn.004fe1f0
push 6
lea eax, [ebp - 0xc]
push eax
lea eax, [ebx + esi]
push eax
call fcn.004fe1f0
add esp, 0x18
test ebx, ebx
jne 0x44329a
mov dword [ebp - 0x170], ebx
jmp 0x4432a3
mov esi, dword [eax - 4]
lea edi, [esi + 6]
test edi, edi
jg 0x44323b
xor ebx, ebx
jmp 0x443260
mov eax, dword [ebx - 4]
mov dword [ebp - 0x170], eax
mov edi, dword [0x563dac]
test edi, edi
jne 0x4432b1
xor esi, esi
jmp 0x4432b4
mov esi, dword [edi - 4]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x16c], eax
add eax, esi
test eax, eax
jg 0x4432c7
xor eax, eax
jmp 0x4432ee
lea ecx, [eax + 0xc]
and ecx, 0xfffffffc
call fcn.004a2590
mov ecx, dword [ebp - 0x16c]
add ecx, esi
mov byte [eax + 8], 0
mov dword [eax], 1
mov dword [eax + 4], ecx
add eax, 8
mov byte [eax + ecx], 0
push esi
push edi
push eax
mov dword [ebp - 0x174], eax
call fcn.004fe1f0
push dword [ebp - 0x16c]
mov edi, dword [ebp - 0x174]
lea eax, [ebp - 0x20]
push eax
lea eax, [edi + esi]
push eax
call fcn.004fe1f0
add esp, 0x18
lea eax, [ebp - 0x168]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x16c], eax
cmp eax, 0xffffffff
je 0x443422
xor edi, edi
nop word [eax + eax]
lea esi, [ebp - 0x13c]
lea ecx, [esi + 1]
nop dword [eax]
mov al, byte [esi]
inc esi
test al, al
jne 0x443350
sub esi, ecx
cmp esi, 4
jb 0x4433ec
mov eax, dword [ebp + esi - 0x140]
cmp eax, 0x6674742e
je 0x443377
cmp eax, 0x66746f2e
jne 0x4433ec
mov ebx, dword [ebp - 0x170]
inc ebx
add ebx, esi
test edi, edi
jne 0x44338f
mov ecx, ebx
call fcn.004a2650
mov edi, eax
jmp 0x4433b5
test ebx, ebx
jg 0x4433a0
push edi
call fcn.00501c9e
add esp, 4
xor edi, edi
jmp 0x4433b5
push ebx
push edi
call fcn.00503152
push ebx
mov edi, eax
push 0
push edi
call fcn.004fdf60
add esp, 0x14
push dword [ebp - 0x170]
mov ebx, dword [ebp - 0x178]
push ebx
push edi
call fcn.004fd9e0
push esi
lea eax, [ebp - 0x13c]
push eax
mov eax, dword [ebp - 0x170]
add eax, edi
push eax
call fcn.004fd9e0
add esp, 0x18
push 0
push 0x10
push edi
call dword [sym.imp.GDI32.dll_AddFontResourceExA]
mov esi, dword [ebp - 0x16c]
lea eax, [ebp - 0x168]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x443340
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
test edi, edi
je 0x44341c
push edi
call fcn.00501c9e
add esp, 4
mov edi, dword [ebp - 0x174]
test ebx, ebx
je 0x443441
mov eax, dword [ebx - 8]
lea ecx, [ebx - 8]
cmp eax, 0xffffffff
je 0x443441
dec eax
mov dword [ecx], eax
test eax, eax
jg 0x443441
push ecx
call fcn.00501c9e
add esp, 4
test edi, edi
je 0x443460
mov eax, dword [edi - 8]
lea ecx, [edi - 8]
cmp eax, 0xffffffff
je 0x443460
dec eax
mov dword [ecx], eax
test eax, eax
jg 0x443460
push ecx
call fcn.00501c9e
add esp, 4
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004e66f2
mov esp, ebp
pop ebp
ret