Function at 0x4433e0
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push edi
push esi
mov esi, ecx
push ebx
sub esp, 0x20
lea eax, [esp + 0x1c]
mov dword [esp + 8], eax
lea eax, [esp + 0x18]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x30]
mov dword [esp], eax
call fcn.0043f1f0
mov eax, dword [esp + 0x1c]
add eax, 1
cmp eax, 0x3ffffffe
ja 0x4434d6
add eax, eax
mov dword [esp], eax
call fcn.006eb360
mov edx, dword [esi + 0x14]
mov dword [esi + 0x14], eax
test edx, edx
je 0x443435
mov dword [esp], edx
call fcn.006eb310
mov eax, dword [esi + 0x14]
mov ebx, dword [esp + 0x1c]
test ebx, ebx
je 0x44345a
mov edi, dword [esp + 0x18]
xor edx, edx
movsx cx, byte [edi + edx]
cmp cl, 0xd
je 0x4434c0
mov word [eax + edx*2], cx
add edx, 1
cmp edx, ebx
jne 0x443443
add ebx, ebx
xor ecx, ecx
mov word [eax + ebx], cx
mov ecx, esi
xor ebx, ebx
call fcn.00443020
mov ecx, dword [esi + 8]
test ecx, ecx
jne 0x443479
jmp 0x4434ad
add ebx, 1
cmp ebx, ecx
jae 0x4434ad
mov edx, dword [esi + 4]
lea eax, [ebx + ebx*2]
lea eax, [edx + eax*4]
mov edx, dword [eax + 8]
test edx, edx
jg 0x443472
mov eax, dword [eax]
mov dword [esp + 4], 0x728168
add ebx, 1
mov dword [esp], 0x835180
mov dword [esp + 8], eax
call fcn.0041e920
mov ecx, dword [esi + 8]
cmp ebx, ecx
jb 0x443479
add esp, 0x20
pop ebx
pop esi
pop edi
ret 4
mov ecx, 0x20
mov word [eax + edx*2], cx
add edx, 1
cmp edx, ebx
jne 0x443443
jmp 0x443458
call fcn.006ebc70
nop
lea esi, [esi]
push ebp
xor edx, edx
mov ebp, esp
push edi
push esi
push ebx
lea eax, [ebp - 0x36a]
sub esp, 0x3ac
mov ebx, dword [0x8531c0]
mov edi, dword [ebp + 8]
mov dword [ebp - 0x378], 0
mov dword [ebp - 0x374], eax
mov dword [ebp - 0x370], pe_nt_image_headers32
mov byte [ebp - 0x36c], 0
and ebx, 0x10
mov dword [ebp - 0x37c], 0x75d6e8
mov word [ebp - 0x36a], dx
je 0x443540
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret 0xc
mov eax, dword [ebp + 0xc]
mov dword [esp + 8], 0x8451c0
mov esi, ecx
mov dword [esp + 4], str.UAOv
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x37c]
mov dword [esp], eax
call fcn.00403910
lea eax, [ebp - 0x268]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x374]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
sub esp, 8
cmp eax, 0xffffffff
mov dword [ebp - 0x38c], eax
jne 0x44361b
jmp 0x4436f3
mov eax, dword [edi]
mov edx, dword [0x70c644]
mov ecx, edi
mov dword [esp], edx
call dword [eax + 0xc]
mov eax, ebx
sub esp, 4
add ebx, 1
shl eax, 8
mov ecx, eax
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0x390], ecx
mov dword [esp + 4], eax
lea eax, [esi + ecx + 0x44]
mov dword [esp], eax
call fcn.005e72b8
mov eax, dword [0x70c644]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x390]
lea eax, [esi + eax + 0x4044]
mov dword [esp], eax
call fcn.005e72b8
lea eax, [ebp - 0x268]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x38c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
sub esp, 8
test eax, eax
je 0x4436f3
test byte [ebp - 0x268], 0x10
jne 0x4435f7
lea eax, [ebp - 0x23c]
mov dword [esp + 8], 0x8451c0
mov dword [esp + 4], 0x7281b2
mov dword [esp + 0x10], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x37c]
mov dword [esp], eax
call fcn.00403910
mov eax, dword [ebp - 0x374]
cmp word [eax], 0
mov dword [ebp - 0x390], eax
je 0x4435a0
mov dword [esp], eax
mov ecx, esi
call fcn.00442af0
sub esp, 4
test al, al
je 0x4436d0
mov ecx, esi
call fcn.00443020
mov edx, dword [esi + 8]
test edx, edx
je 0x4435a0
mov eax, dword [esi + 4]
lea edx, [edx + edx*2]
mov dword [ebp - 0x394], ebx
lea ecx, [eax + edx*4]
mov dword [ebp - 0x390], eax
mov ebx, eax
mov edx, dword [eax + 8]
cmp edx, 9
jle 0x4436b5
lea edx, [edx + edx*2]
mov edx, dword [ebx + edx*4 - 0x74]
mov dword [eax + 4], edx
add eax, 0xc
cmp eax, ecx
jne 0x4436a3
mov ebx, dword [ebp - 0x394]
jmp 0x4435a0
mov eax, dword [ebp - 0x390]
mov dword [esp + 4], 0x728134
mov dword [esp], 0x835180
mov dword [esp + 8], eax
call fcn.0041e920
jmp 0x4435a0
mov eax, dword [ebp - 0x38c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_FindClose]
sub esp, 4
test ebx, ebx
je 0x443743
mov eax, dword [esi + 0x34]
mov ecx, esi
mov dword [esp], eax
call fcn.004433e0
mov eax, dword [ebp - 0x378]
sub esp, 4
mov dword [ebp - 0x37c], 0x75d500
test eax, eax
je 0x443534
mov dword [esp], eax
call fcn.006eb310
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret 0xc
mov eax, dword [edi]
mov ecx, edi
mov dword [esp], 0x7281c4
call dword [eax + 0xc]
xor eax, eax
sub esp, 4
mov word [esi + 0x44], ax
jmp 0x443709