Function at 0x43bee0
Capabilities:
Enumerate files on windows

Disassembly:
mov eax, 0x14a4
call fcn.004ac5b0
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0x149c], eax
push ebx
push ebp
push esi
push edi
push 0x288c
push dword [0x4e6030]
mov ebx, ecx
mov dword [esp + 0x18], ebx
call dword [sym.imp.USER32.dll_GetDlgItem]
mov esi, eax
xor eax, eax
push 0x7fe
push eax
mov word [esp + 0xcb0], ax
lea eax, [esp + 0xcb2]
push eax
call fcn.0048fb10
add esp, 0xc
xor eax, eax
mov word [esp + 0x4a8], ax
push 0x7fe
push eax
lea eax, [esp + 0x4b2]
push eax
call fcn.0048fb10
mov ebp, dword [sym.imp.SHLWAPI.dll_StrCpyW]
lea eax, [esp + 0xcb4]
add esp, 0xc
push ebx
push eax
call ebp
mov edi, dword [sym.imp.SHLWAPI.dll_StrCatW]
lea eax, [esp + 0xca8]
push str..scr
push eax
call edi
lea eax, [esp + 0x50]
push eax
lea eax, [esp + 0xcac]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x43c187
push dword [esp + 0x10]
lea eax, [esp + 0x4ac]
push eax
call ebp
push 0x4b3500
lea eax, [esp + 0x4ac]
push eax
call edi
lea eax, [esp + 0x7c]
push eax
lea eax, [esp + 0x4ac]
push eax
call edi
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x1004
push esi
call edi
mov dword [0x4d9e1c], eax
xor eax, eax
push 0x206
push eax
mov word [esp + 0x2a8], ax
lea eax, [esp + 0x2aa]
push eax
call fcn.0048fb10
add esp, 0xc
lea eax, [esp + 0x4a8]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
push eax
lea eax, [esp + 0x2a4]
push eax
call ebp
push 0x4d9e18
push 0
push 0x104d
lea eax, [esp + 0x2ac]
push esi
mov dword [0x4d9e2c], eax
call edi
push 0
push dword [esp + 0x74]
mov dword [esp + 0x24], 1
call fcn.00465af0
add esp, 8
mov dword [esp + 0x28], eax
lea eax, [esp + 0x14]
push eax
push dword [0x4d9e1c]
push 0x1074
push esi
call edi
lea eax, [esp + 0x4a8]
mov dword [esp + 0x1c], 2
mov dword [esp + 0x28], eax
lea eax, [esp + 0x14]
push eax
push dword [0x4d9e1c]
push 0x1074
push esi
call edi
lea eax, [esp + 0x50]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x43c180
nop word [eax + eax]
push dword [esp + 0x10]
lea eax, [esp + 0x4ac]
push eax
call ebp
push 0x4b3500
lea eax, [esp + 0x4ac]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCatW]
lea eax, [esp + 0x7c]
push eax
lea eax, [esp + 0x4ac]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCatW]
push 0
push 0
push 0x1004
push esi
call edi
mov dword [0x4d9e1c], eax
lea eax, [esp + 0x4a8]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
push eax
lea eax, [esp + 0x2a4]
push eax
call ebp
push 0x4d9e18
push 0
push 0x104d
lea eax, [esp + 0x2ac]
push esi
mov dword [0x4d9e2c], eax
call edi
push 0
push dword [esp + 0x74]
mov dword [esp + 0x24], 1
call fcn.00465af0
add esp, 8
mov dword [esp + 0x28], eax
lea eax, [esp + 0x14]
push eax
push dword [0x4d9e1c]
push 0x1074
push esi
call edi
lea eax, [esp + 0x4a8]
mov dword [esp + 0x1c], 2
mov dword [esp + 0x28], eax
lea eax, [esp + 0x14]
push eax
push dword [0x4d9e1c]
push 0x1074
push esi
call edi
lea eax, [esp + 0x50]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x43c0a0
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [esp + 0x14ac]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0048ea75
add esp, 0x14a4
ret