Function at 0x43b218
Capabilities:
Enumerate files on windows
Read file on windows

Disassembly:
push 0x2bc
mov eax, 0x4cb3d9
call fcn.0043c4f3
mov dword [ebp - 0x2c4], ecx
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x2c8], ebx
and dword [ebp - 0x2c0], 0
mov dword [ebp - 0x2bc], ebx
xor esi, esi
mov ecx, ebx
inc esi
push 0x4e8e02
mov dword [ebp - 4], esi
call fcn.00405c80
push 0x250
lea eax, [ebp - 0x2a8]
mov dword [ebp - 0x2c0], esi
push 0
push eax
call fcn.00464bd0
add esp, 0xc
lea eax, [ebp + 0xc]
cmp dword [ebp + 0x20], 0x10
lea ecx, [ebp - 0x2b0]
cmovae eax, dword [ebp + 0xc]
push eax
call fcn.00412fb6
lea ecx, [ebp - 0x2b4]
call fcn.00421870
push esi
lea eax, [ebp - 0x2ac]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x2b0]
call fcn.0042b9f9
mov edi, 0x4e8e64
push edi
push dword [eax]
call fcn.0048ccd1
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2ac]
mov esi, eax
add ecx, 0xfffffff0
call fcn.004136c2
test esi, esi
je 0x43b2e1
push edi
call fcn.004727f6
pop ecx
push eax
push edi
lea ecx, [ebp - 0x2b0]
call fcn.004256fd
push 0x4d34d0
lea eax, [ebp - 0x2b0]
push eax
lea eax, [ebp - 0x2ac]
push eax
call fcn.004242e9
add esp, 0xc
push eax
lea ecx, [ebp - 0x2b4]
mov byte [ebp - 4], 4
call fcn.00423fbb
mov ecx, dword [ebp - 0x2ac]
mov byte [ebp - 4], 3
lea ecx, [ecx - 0x10]
call fcn.004136c2
mov esi, dword [ebp - 0x2b4]
lea eax, [ebp - 0x2a8]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov edi, eax
cmp edi, 0xffffffff
je 0x43b518
mov esi, dword [ebp - 0x2bc]
lea eax, [ebp - 0x27c]
push 0x4d34d4
push eax
call fcn.0048ccd1
pop ecx
pop ecx
test eax, eax
je 0x43b4ef
lea eax, [ebp - 0x27c]
push 0x4d34d8
push eax
call fcn.0048ccd1
pop ecx
pop ecx
test eax, eax
je 0x43b4ef
test byte [ebp - 0x2a8], 2
jne 0x43b4ef
test byte [ebp - 0x2a8], 0x10
jne 0x43b4ef
mov eax, dword [ebp - 0x288]
lea ecx, [ebp - 0x58]
push dword [ebp - 0x2b0]
mov dword [ebp - 0x2ac], eax
call fcn.00404ed0
lea eax, [ebp - 0x27c]
mov byte [ebp - 4], 5
push eax
call fcn.004727f6
pop ecx
push eax
lea eax, [ebp - 0x27c]
push eax
lea ecx, [ebp - 0x58]
call fcn.00405fe0
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.00412e32
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x43b3e5
mov eax, dword [eax]
push 0x4d53f8
push eax
call fcn.0049050b
pop ecx
pop ecx
lea ecx, [ebp - 0x40]
mov ebx, eax
call fcn.00405ac0
xor eax, eax
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x18], eax
mov byte [ebp - 0x28], al
push eax
push dword [ebp - 0x2ac]
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 6
call fcn.00412c42
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
push ebx
push dword [ebp - 0x18]
cmovae eax, dword [ebp - 0x28]
push 1
push eax
call fcn.004927a7
add esp, 0x10
cmp eax, dword [ebp - 0x18]
jne 0x43b456
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
push dword [ebp - 0x18]
cmovae eax, dword [ebp - 0x28]
mov ecx, esi
push eax
call fcn.00404ba0
push ebx
call fcn.0048fb5c
pop ecx
lea eax, [ebp - 0x27c]
push eax
lea ecx, [ebp - 0x40]
call fcn.00404ed0
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 7
push eax
mov eax, dword [ebp - 0x2c4]
mov ecx, eax
push dword [eax]
call fcn.0043adff
lea ecx, [ebp - 0x40]
call fcn.00406610
mov eax, dword [ebp - 0x14]
cmp eax, 0x10
jb 0x43b4d4
mov ecx, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x2b8], eax
mov dword [ebp - 0x2ac], ecx
cmp eax, 0x1000
jb 0x43b4cb
lea eax, [ebp - 0x2b8]
push eax
lea eax, [ebp - 0x2ac]
push eax
call fcn.00406d50
mov eax, dword [ebp - 0x2b8]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2ac]
push eax
push ecx
call fcn.0043c464
pop ecx
pop ecx
and dword [ebp - 0x18], 0
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov byte [ebp - 4], 3
call fcn.00406610
lea eax, [ebp - 0x2a8]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x43b343
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov esi, dword [ebp - 0x2b4]
mov ebx, dword [ebp - 0x2bc]
lea ecx, [esi - 0x10]
call fcn.004136c2
mov ecx, dword [ebp - 0x2b0]
add ecx, 0xfffffff0
call fcn.004136c2
lea ecx, [ebp + 0xc]
call fcn.00405ac0
mov eax, ebx
call fcn.0043c4a2
ret 0x1c