Function at 0x44da80
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4da053
mov eax, dword fs:[0]
push eax
sub esp, 0x1c4
mov eax, dword [0x50e018]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0x40]
mov dword [ebp - 0x1c8], eax
mov dword [ebp - 4], 1
mov eax, dword [ebp + 8]
mov edi, 0x10
cmp dword [ebp + 0x1c], edi
jae 0x44dace
lea eax, [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
je 0x44de01
push 0x104
call fcn.004a64f8
add esp, 4
mov ebx, eax
mov eax, dword [ebp + 8]
cmp dword [ebp + 0x1c], edi
jae 0x44daf7
lea eax, [ebp + 8]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x4eba44
push ebx
call dword [sym.imp.SHLWAPI.dll_PathAppendA]
lea ecx, [ebp - 0x1c0]
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov esi, eax
mov dword [ebp - 0x1c4], esi
cmp esi, 0xffffffff
je 0x44dc26
lea ebx, [ebx]
push 0x4e457c
lea edx, [ebp - 0x194]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
je 0x44dc09
push 0x4eba48
lea eax, [ebp - 0x194]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
je 0x44dc09
mov eax, dword [ebp + 8]
cmp dword [ebp + 0x1c], edi
jae 0x44db6f
lea eax, [ebp + 8]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea ecx, [ebp - 0x194]
push ecx
push ebx
call dword [sym.imp.SHLWAPI.dll_PathAppendA]
test byte [ebp - 0x1c0], 0x10
je 0x44dc09
mov edx, dword [ebp - 0x1c8]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1d0], esp
push 0xffffffffffffffff
xor edi, edi
push edi
lea eax, [ebp + 0x24]
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], edi
push eax
mov byte [ecx], 0
call fcn.004059c0
sub esp, 0x1c
mov esi, esp
mov byte [ebp - 4], 2
mov dword [esi + 0x10], edi
mov eax, ebx
mov dword [esi + 0x14], 0xf
mov dword [ebp - 0x1cc], esp
mov byte [esi], 0
lea edi, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x44dbe0
sub eax, edi
push eax
push ebx
mov ecx, esi
call fcn.00405360
mov byte [ebp - 4], 1
call fcn.0044da80
mov esi, dword [ebp - 0x1c4]
add esp, 0x3c
mov edi, 0x10
lea ecx, [ebp - 0x1c0]
push ecx
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x44db30
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [ebp + 8]
cmp dword [ebp + 0x1c], edi
jae 0x44dc31
lea eax, [ebp + 8]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [ebp + 0x24]
cmp dword [ebp + 0x38], edi
jae 0x44dc44
lea eax, [ebp + 0x24]
push eax
push ebx
call dword [sym.imp.SHLWAPI.dll_PathAppendA]
lea edx, [ebp - 0x1c0]
push edx
push ebx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x1c4], eax
cmp eax, 0xffffffff
je 0x44ddf7
lea esp, [esp]
mov esi, dword [sym.imp.KERNEL32.dll_lstrcmpA]
push 0x4e457c
lea eax, [ebp - 0x194]
push eax
call esi
test eax, eax
je 0x44ddce
push 0x4eba48
lea ecx, [ebp - 0x194]
push ecx
call esi
test eax, eax
je 0x44ddce
mov eax, dword [ebp + 8]
cmp dword [ebp + 0x1c], edi
jae 0x44dcad
lea eax, [ebp + 8]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea edx, [ebp - 0x194]
push edx
push ebx
call dword [sym.imp.SHLWAPI.dll_PathAppendA]
mov eax, 0xf
xor edi, edi
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], edi
mov byte [ebp - 0x48], 0
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], edi
mov byte [ebp - 0x2c], 0
lea eax, [ebp - 0x194]
mov byte [ebp - 4], 3
lea esi, [eax + 1]
jmp 0x44dcf0
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x44dcf0
sub eax, esi
push eax
lea eax, [ebp - 0x194]
push eax
lea ecx, [ebp - 0x48]
call fcn.00405360
mov eax, ebx
mov dword [ebp - 0x50], 0xf
mov dword [ebp - 0x54], edi
mov byte [ebp - 0x64], 0
lea esi, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x44dd20
sub eax, esi
push eax
push ebx
lea ecx, [ebp - 0x64]
call fcn.00405360
lea ecx, [ebp - 0x64]
push ecx
lea esi, [ebp - 0x80]
mov byte [ebp - 4], 4
call fcn.0042e8a0
add esp, 4
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 5
call fcn.004045b0
cmp dword [ebp - 0x6c], 0x10
mov esi, dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
jb 0x44dd68
mov edx, dword [ebp - 0x80]
push edx
call esi
add esp, 4
mov byte [ebp - 4], 3
cmp dword [ebp - 0x50], 0x10
mov dword [ebp - 0x6c], 0xf
mov dword [ebp - 0x70], edi
mov byte [ebp - 0x80], 0
jb 0x44dd89
mov eax, dword [ebp - 0x64]
push eax
call esi
add esp, 4
mov edi, dword [ebp - 0x1c8]
lea eax, [ebp - 0x48]
call fcn.0044e580
mov edi, 0x10
mov byte [ebp - 4], 1
cmp dword [ebp - 0x18], edi
jb 0x44ddae
mov ecx, dword [ebp - 0x2c]
push ecx
call esi
add esp, 4
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], 0
mov byte [ebp - 0x2c], 0
cmp dword [ebp - 0x34], edi
jb 0x44ddce
mov edx, dword [ebp - 0x48]
push edx
call esi
add esp, 4
mov ecx, dword [ebp - 0x1c4]
lea eax, [ebp - 0x1c0]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x44dc70
mov edx, dword [ebp - 0x1c4]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
push ebx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete___void__]
add esp, 4
cmp dword [ebp + 0x1c], edi
jb 0x44de13
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp + 0x1c], 0xf
mov dword [ebp + 0x18], 0
mov byte [ebp + 8], 0
cmp dword [ebp + 0x38], edi
jb 0x44de37
mov ecx, dword [ebp + 0x24]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004a665a
mov esp, ebp
pop ebp
ret