Function at 0x437628
Capabilities:
Enumerate files on windows
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x9ecc
call fcn.00612c90
mov eax, dword [0x6ffe74]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push ecx
mov ebx, ecx
xor edx, edx
push 6
pop ecx
mov dword [ebp - 0x9ecc], ebx
call fcn.00404481
pop ecx
test al, al
je 0x437879
call fcn.0040a646
test eax, eax
jne 0x43768d
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0xffffffffffffffff
mov eax, 0x6c5bb9
mov ecx, ebx
push eax
push eax
push str.Error:_Not_enough_permission._Try_running_this_application_as_Administrator
push eax
push eax
push 0xffffffffffffffff
push 9
call fcn.0043ee6b
jmp 0x437879
push 0xd
pop ecx
mov esi, str.C:ProgramDataMicrosoftWlansvcProfilesInterfaces
lea edi, [ebp - 0x4e28]
rep movsd dword es:[edi], dword [esi]
push 0x26db
lea eax, [ebp - 0x4df3]
push 0
push eax
movsb byte es:[edi], byte [esi]
call fcn.006390b0
add esp, 0xc
lea eax, [ebp - 0x9c48]
mov ebx, 0x2710
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
test eax, eax
je 0x4376d7
mov al, byte [ebp - 0x9c48]
mov byte [ebp - 0x4e28], al
push 0x6c7624
lea eax, [ebp - 0x4e28]
push ebx
push eax
call fcn.006500a8
add esp, 0xc
lea eax, [ebp - 0x9d88]
push eax
lea eax, [ebp - 0x4e28]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x437873
mov edi, dword [sym.imp.KERNEL32.dll_FindClose]
test byte [ebp - 0x9d88], 0x10
je 0x43785a
lea eax, [ebp - 0x9d5c]
push 0x6c94b4
push eax
call fcn.00650fe0
pop ecx
pop ecx
test eax, eax
je 0x43785a
lea eax, [ebp - 0x9d5c]
push 0x6c94b8
push eax
call fcn.00650fe0
pop ecx
pop ecx
test eax, eax
je 0x43785a
lea eax, [ebp - 0x4e28]
push eax
lea eax, [ebp - 0x2718]
push ebx
push eax
call fcn.006494f3
add esp, 0xc
lea eax, [ebp - 0x2718]
push eax
call fcn.00643470
dec eax
pop ecx
cmp eax, ebx
jae 0x437888
mov byte [ebp + eax - 0x2718], 0
lea eax, [ebp - 0x9d5c]
push eax
lea eax, [ebp - 0x2718]
push ebx
push eax
call fcn.006500a8
add esp, 0xc
lea eax, [ebp - 0x2718]
push 0x6c7624
push ebx
push eax
call fcn.006500a8
add esp, 0xc
lea eax, [ebp - 0x9ec8]
push eax
lea eax, [ebp - 0x2718]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x437870
test byte [ebp - 0x9ec8], 0x10
jne 0x437840
lea eax, [ebp - 0x2718]
push eax
lea eax, [ebp - 0x7538]
push 0x2710
push eax
call fcn.006494f3
add esp, 0xc
lea eax, [ebp - 0x7538]
push eax
call fcn.00643470
pop ecx
dec eax
mov ecx, 0x2710
cmp eax, ecx
jae 0x437888
mov byte [ebp + eax - 0x7538], 0
lea eax, [ebp - 0x9e9c]
push eax
push ecx
lea eax, [ebp - 0x7538]
push eax
call fcn.006500a8
mov ecx, dword [ebp - 0x9ecc]
lea eax, [ebp - 0x7538]
add esp, 0xc
push eax
call fcn.00436f3b
lea eax, [ebp - 0x9ec8]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x4377d4
push ebx
call edi
mov ebx, 0x2710
lea eax, [ebp - 0x9d88]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x437711
push esi
call edi
call dword [sym.imp.ADVAPI32.dll_RevertToSelf]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.006122f0
leave
ret
call fcn.00612782
int3