Function at 0x43ebe0
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x483e7b
mov eax, dword fs:[0]
push eax
sub esp, 0x1b8
mov eax, dword [0x4a2e84]
xor eax, ebp
mov dword [ebp - 0x14], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1c4], ecx
mov eax, dword [ebp - 0x1c4]
add eax, 0x90
push eax
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.0046ab20
add esp, 8
mov dword [ebp - 0x10], eax
mov edx, dword [ebp + 0xc]
push edx
lea ecx, [ebp - 0x30]
call fcn.00403a10
mov dword [ebp - 4], 0
push 0x48dc2c
lea ecx, [ebp - 0x30]
call fcn.00403af0
lea eax, [ebp - 0x174]
push eax
lea ecx, [ebp - 0x30]
call fcn.00403c40
push eax
call dword [sym.imp.KERNEL32.DLL_FindFirstFileA]
mov dword [ebp - 0x34], eax
mov ecx, 1
test ecx, ecx
je 0x43ee6c
lea edx, [ebp - 0x174]
push edx
mov eax, dword [ebp - 0x34]
push eax
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
test eax, eax
jne 0x43ec8c
jmp 0x43ee6c
push 0x48dc30
lea ecx, [ebp - 0x148]
push ecx
call fcn.00464b70
add esp, 8
test eax, eax
je 0x43ecbc
push 0x48dc34
lea edx, [ebp - 0x148]
push edx
call fcn.00464b70
add esp, 8
test eax, eax
jne 0x43ecbe
jmp 0x43ec65
mov eax, dword [ebp - 0x174]
and eax, 0x10
je 0x43ed71
mov ecx, dword [ebp + 0xc]
push ecx
lea ecx, [ebp - 0x30]
call fcn.00406bb0
lea edx, [ebp - 0x148]
push edx
call fcn.00480a72
add esp, 4
push eax
lea ecx, [ebp - 0x30]
call fcn.00403af0
push 0x48dc38
lea ecx, [ebp - 0x30]
call fcn.00403af0
mov eax, dword [ebp - 0x1c4]
add eax, 0x90
push eax
lea ecx, [ebp - 0x30]
call fcn.00403c40
push eax
call fcn.0046ab20
add esp, 8
mov dword [ebp - 0x1b8], eax
mov ecx, dword [ebp - 0x1c4]
add ecx, 0x90
push ecx
call fcn.00464e80
add esp, 4
add eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x1b8], eax
mov edx, dword [ebp - 0x1b8]
push edx
mov ecx, dword [ebp - 0x1c4]
call fcn.0043ea20
lea ecx, [ebp - 0x30]
call fcn.00403c40
push eax
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x1c4]
call fcn.0043ebe0
jmp 0x43ec65
cmp dword [ebp - 0x10], 0
jne 0x43ed7c
jmp 0x43ec65
mov ecx, dword [ebp - 0x1c4]
add ecx, 0x90
push ecx
call fcn.00464e80
add esp, 4
add eax, dword [ebp - 0x10]
push eax
lea ecx, [ebp - 0x198]
call fcn.00403a10
mov byte [ebp - 4], 1
lea edx, [ebp - 0x198]
push edx
lea eax, [ebp - 0x17c]
push eax
mov ecx, dword [ebp - 0x1c4]
add ecx, 0x1bc
call fcn.004412a0
lea ecx, [ebp - 0x1c0]
push ecx
mov ecx, dword [ebp - 0x1c4]
add ecx, 0x1bc
call fcn.00431980
push eax
lea ecx, [ebp - 0x17c]
call fcn.004328c0
movzx edx, al
test edx, edx
je 0x43ee02
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x198]
call fcn.00403a90
jmp 0x43ec65
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0x1b4]
call fcn.00403a10
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x148]
push ecx
call fcn.00480a72
add esp, 4
push eax
lea ecx, [ebp - 0x1b4]
call fcn.00403af0
push 0
lea ecx, [ebp - 0x1b4]
call fcn.00403c40
push eax
mov ecx, dword [ebp - 0x1c4]
call fcn.0043c9a0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1b4]
call fcn.00403a90
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x198]
call fcn.00403a90
jmp 0x43ec65
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x30]
call fcn.00403a90
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004644d6
mov esp, ebp
pop ebp
ret 8