Function at 0x430a10
Capabilities:
Enumerate files on windows

Disassembly:
push 0xffffffffffffffff
push 0x43bceb
mov eax, dword fs:[0]
push eax
mov eax, 0x2268
call fcn.004196a0
mov eax, dword [0x444fe0]
xor eax, esp
mov dword [esp + 0x2264], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x444fe0]
xor eax, esp
push eax
lea eax, [esp + 0x227c]
mov dword fs:[0], eax
mov eax, dword [esp + 0x2290]
mov ecx, dword [esp + 0x2294]
mov ebx, dword [esp + 0x228c]
lea edx, [esp + 0x26c]
push 0x2002
mov dword [esp + 0x18], eax
mov eax, edx
push 0
push eax
mov dword [esp + 0x24], ecx
mov dword [esp + 0x227c], edx
mov dword [esp + 0x2280], 0x2002
call fcn.00419120
add esp, 0xc
mov eax, ebx
mov dword [esp + 0x2284], 0
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x430aa7
sub eax, edx
sar eax, 1
mov esi, eax
cmp esi, 0x104
jl 0x430ae3
add esi, 8
push esi
lea ecx, [esp + 0x270]
call fcn.0042b010
mov edi, eax
test edi, edi
je 0x430ae3
push esi
push edi
push ebx
call fcn.0042c6d0
add esp, 0xc
mov ebx, edi
push 0x250
lea ecx, [esp + 0x20]
push 0
push ecx
call fcn.00419120
add esp, 0xc
cmp dword [0x448660], 0
mov esi, 1
jne 0x430b32
mov eax, dword [0x448650]
test eax, eax
jne 0x430b18
call fcn.0042a410
mov dword [0x448650], eax
cmp eax, 0x10
jge 0x430b25
sub dword [0x448660], esi
jmp 0x430b2b
add dword [0x448660], esi
cmp dword [0x448660], 0
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, dword [sym.imp.KERNEL32.dll_FindClose]
jle 0x430bd9
push 2
push 0
push 0
lea edx, [esp + 0x28]
push edx
push esi
push ebx
call dword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov esi, eax
cmp esi, 0xffffffff
jne 0x430bc7
call edi
cmp eax, 0x4c7
jg 0x430b7b
je 0x430b74
test eax, eax
je 0x430b9d
cmp eax, 0xe1
jne 0x430b82
lea edx, [esp + 0x1c]
push edx
jmp 0x430bde
cmp eax, 0x579
je 0x430b9d
cmp eax, 0x57
jne 0x430b98
lea edx, [esp + 0x1c]
mov dword [0x448660], 0xffffffff
push edx
jmp 0x430bde
cmp eax, 3
jne 0x430b74
lea eax, [esp + 0x26c]
cmp dword [esp + 0x2270], eax
je 0x430bbd
lea ecx, [esp + 0x2270]
push ecx
call fcn.00429d00
add esp, 4
mov eax, 3
jmp 0x430c50
cmp word [esp + 0x48], 0
jne 0x430be7
push esi
call ebp
lea eax, [esp + 0x1c]
push eax
jmp 0x430bde
lea ecx, [esp + 0x1c]
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, eax
cmp esi, 0xffffffff
jne 0x430c78
call edi
cmp eax, 0x4c7
jg 0x430c14
je 0x430c0d
test eax, eax
je 0x430c1b
cmp eax, 0xe1
jne 0x430c20
mov eax, 0x1e
jmp 0x430c20
mov eax, 0x4d3
jmp 0x430c20
cmp eax, 0x579
jne 0x430c20
mov eax, 3
mov ebx, eax
cmp eax, 2
je 0x430c2c
cmp eax, 0x12
jne 0x430c2e
xor ebx, ebx
lea edx, [esp + 0x26c]
cmp dword [esp + 0x2270], edx
je 0x430c4e
lea eax, [esp + 0x2270]
push eax
call fcn.00429d00
add esp, 4
mov eax, ebx
mov ecx, dword [esp + 0x227c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x2264]
xor ecx, esp
call fcn.0041919a
add esp, 0x2274
ret
mov edi, dword [sym.imp.KERNEL32.dll_FindNextFileW]
xor ebx, ebx
mov edx, dword [esp + 0x18]
push edx
lea eax, [esp + 0x20]
push eax
call dword [esp + 0x1c]
add esp, 8
test eax, eax
jne 0x430ca1
lea ecx, [esp + 0x1c]
push ecx
push esi
call edi
test eax, eax
jne 0x430c80
push esi
call ebp
jmp 0x430c2e