Function at 0x456f14
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
lea ebp, [esp - 0x6f4]
sub esp, 0x774
mov eax, dword [0x4c3a10]
xor eax, ebp
mov dword [ebp + 0x6f0], eax
push ebx
push edi
mov eax, ecx
lea ebx, [eax + 0x90]
push 0x4ab2f0
lea eax, [ebp + 0x28c]
push ebx
push eax
call fcn.0041318d
mov eax, dword [ebp + 0x290]
add esp, 0xc
cmp dword [ebp + 0x2a4], 8
jae 0x456f63
lea eax, [ebp + 0x290]
push 0x4ab2ec
push eax
call fcn.0047ac38
mov edi, eax
pop ecx
pop ecx
test edi, edi
jne 0x456f89
push eax
push 1
lea ecx, [ebp + 0x28c]
call fcn.00401a62
jmp 0x457284
push esi
lea ecx, [ebp + 0x10]
call fcn.00411eb6
mov esi, 0x104
jmp 0x45702b
lea eax, [ebp + 0x4e8]
push eax
lea ecx, [ebp + 0x2c4]
call fcn.00401900
push 1
push 3
lea eax, [ebp + 0x2c4]
push eax
lea ecx, [ebp - 0x80]
call fcn.00456d29
push 0
push 1
lea ecx, [ebp + 0x2c4]
call fcn.00401a62
lea eax, [ebp + 0x4e8]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.00456bfd
lea eax, [ebp + 0x4e8]
push eax
call fcn.0047665d
add esp, 0xc
test eax, eax
je 0x457023
lea eax, [ebp + 0x4e8]
push eax
lea ecx, [ebp + 0x2c4]
call fcn.00401900
lea eax, [ebp + 0x2c4]
push eax
lea ecx, [ebp + 0x10]
call fcn.00411dbf
push 0
push 1
lea ecx, [ebp + 0x2c4]
call fcn.00401a62
lea ecx, [ebp - 0x80]
call fcn.0040523d
push edi
lea eax, [ebp + 0x4e8]
push esi
push eax
call fcn.0047aab1
add esp, 0xc
test eax, eax
jne 0x456f9c
push edi
call fcn.0047a393
pop ecx
push ebx
lea ecx, [ebp + 0x2a8]
call fcn.00401922
mov eax, dword [ebp + 0x2bc]
dec eax
push eax
lea ecx, [ebp + 0x2a8]
call fcn.00403108
cmp word [eax], 0x5c
je 0x457080
push 0x4b30a0
lea ecx, [ebp + 0x2a8]
call fcn.00401987
push 0x4b31e4
lea ecx, [ebp + 0x2a8]
call fcn.00401987
cmp dword [ebp + 0x2c0], 8
mov eax, dword [ebp + 0x2ac]
jae 0x4570a5
lea eax, [ebp + 0x2ac]
lea ecx, [ebp + 0x3c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp + 0x30], eax
cmp eax, 0xffffffff
jne 0x4570df
push 0
push 1
lea ecx, [ebp + 0x2a8]
call fcn.00401a62
lea ecx, [ebp + 0x10]
call fcn.00412243
push dword [ebp + 0x10]
call fcn.00476220
pop ecx
push 0
jmp 0x457276
push 0x208
xor edi, edi
lea eax, [ebp + 0x2e0]
push edi
push eax
call fcn.004766d0
add esp, 0xc
mov esi, dword [sym.imp.SHLWAPI.dll_StrCmpW]
push 0x4b31e8
lea eax, [ebp + 0x68]
push eax
call esi
test eax, eax
je 0x457238
push 0x4b3098
lea eax, [ebp + 0x68]
push eax
call esi
test eax, eax
je 0x457238
cmp dword [ebx + 0x18], 8
jb 0x45712d
mov eax, dword [ebx + 4]
jmp 0x457130
lea eax, [ebx + 4]
lea ecx, [ebp + 0x68]
push ecx
push eax
lea eax, [ebp + 0x2e0]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
test byte [ebp + 0x3c], 0x10
lea eax, [ebp + 0x68]
lea ecx, [ebp + 0x2c4]
push eax
je 0x457187
call fcn.00401900
push str.download_profiles
lea ecx, [ebp + 0x2c4]
call fcn.0040c21e
test eax, eax
jne 0x45722a
push 1
push edi
lea eax, [ebp + 0x2e0]
push edi
push eax
call fcn.0040381f
add esp, 0x10
jmp 0x45722a
call fcn.00401900
lea eax, [ebp + 0x10]
push eax
push dword [ebp + 0x1c]
lea ecx, [ebp + 8]
call fcn.0041656d
mov eax, dword [ebp + 8]
mov dword [ebp + 0x34], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp + 0x38], eax
jmp 0x4571e8
cmp dword [ebp + 0x2dc], 8
mov esi, dword [ebp + 0x2c8]
jae 0x4571be
lea esi, [ebp + 0x2c8]
lea ecx, [ebp + 0x34]
call fcn.004039ef
cmp dword [eax + 0x18], 8
jb 0x4571d1
mov eax, dword [eax + 4]
jmp 0x4571d4
add eax, 4
push esi
push eax
call dword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x45722a
lea ecx, [ebp + 0x34]
call fcn.00403982
lea eax, [ebp + 0x10]
push eax
push dword [ebp + 0x20]
lea ecx, [ebp + 0x28]
call fcn.0041656d
lea eax, [ebp + 0x28]
push eax
lea ecx, [ebp + 0x34]
call fcn.004039b1
test al, al
je 0x4571a9
push 0x4ab2f0
lea ecx, [ebp + 0x2c4]
call fcn.0040c21e
test eax, eax
je 0x45722a
lea eax, [ebp + 0x2e0]
push edi
push eax
call fcn.00403863
pop ecx
pop ecx
push edi
push 1
lea ecx, [ebp + 0x2c4]
call fcn.00401a62
lea eax, [ebp + 0x3c]
push eax
push dword [ebp + 0x30]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x4570f6
push dword [ebp + 0x30]
call dword [sym.imp.KERNEL32.dll_FindClose]
push edi
push 1
lea ecx, [ebp + 0x2a8]
call fcn.00401a62
lea ecx, [ebp + 0x10]
call fcn.00412243
push dword [ebp + 0x10]
call fcn.00476220
pop ecx
push edi
push 1
lea ecx, [ebp + 0x28c]
call fcn.00401a62
pop esi
mov ecx, dword [ebp + 0x6f0]
pop edi
xor ecx, ebp
pop ebx
call fcn.0047674a
add ebp, 0x6f4
leave
ret