Function at 0x445eb5
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffac0
push ebx
push esi
push edi
mov esi, dword [ebp + 0x14]
mov ebx, dword [ebp + 0x10]
xor eax, eax
mov dword [ebp - 0x14], eax
xor edx, edx
mov dword [ebp - 0x10], edx
xor ecx, ecx
mov dword [ebp - 0xc], ecx
mov edi, 1
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 4]
test eax, eax
je 0x445f23
cmp byte [eax], 0x2d
jne 0x445f23
push 0x6f
push eax
call fcn.0054c230
add esp, 8
test eax, eax
je 0x445f00
mov dword [ebp - 0x10], 1
push 0x61
mov edx, dword [ebp + 0xc]
push dword [edx + 4]
call fcn.0054c230
add esp, 8
test eax, eax
je 0x445f22
mov dword [ebp - 0xc], 1
mov dword [ebp - 0x10], 1
inc edi
mov ecx, dword [ebp + 0xc]
cmp dword [ecx + edi*4], 0
jne 0x445f41
push 0
push 0
mov eax, dword [ebp + 0xc]
push dword [eax]
push 0
call fcn.00479c10
jmp 0x4462fe
push 0
push 0x104
push ebx
push edi
push dword [ebp + 0xc]
call fcn.004e5393
mov edi, eax
test edi, edi
jge 0x445f6d
push 3
push 0
mov edx, dword [ebp + 0xc]
push dword [edx]
push 0
call fcn.00479c10
jmp 0x4462fe
push ebx
push ebx
call fcn.0042cd5e
test eax, eax
jne 0x445f8d
push 3
push 0
mov ecx, dword [ebp + 0xc]
push dword [ecx]
push 0
call fcn.00479c10
jmp 0x4462fe
push 0
push 0x104
push esi
inc edi
push edi
push dword [ebp + 0xc]
call fcn.004e5393
mov edi, eax
test edi, edi
jge 0x445fba
push 3
push 0
mov eax, dword [ebp + 0xc]
push dword [eax]
push 0
call fcn.00479c10
jmp 0x4462fe
push 0x586e7f
push 0x586d7f
push 0x586c7f
push 0x586c7c
push esi
call fcn.0050ca44
add esp, 0x14
cmp byte [0x586c7c], 0
jne 0x44603c
cmp byte [0x586c7f], 0x5c
je 0x44603c
cmp byte [0x586c7f], 0x2f
je 0x44603c
cmp byte [0x586c7f], 0
je 0x44601f
push 0x586e7f
push 0x586d7f
push 0x586c7f
push 0x57fd38
push 0x55ff0b
push esi
call sub.USER32.dll_wsprintfA
add esp, 0x18
jmp 0x44603c
push 0x586e7f
push 0x586d7f
push 0x57fd38
push 0x55ff15
push esi
call sub.USER32.dll_wsprintfA
add esp, 0x14
cmp byte [0x586d7f], 0
jne 0x44605b
cmp byte [0x586e7f], 0
jne 0x44605b
push esi
call fcn.0042e417
mov dword [ebp - 0x14], 1
xor edx, edx
mov dword [ebp - 4], edx
lea ecx, [ebp - 0x540]
push ecx
push ebx
call sub.KERNEL32.dll_FindFirstFileA
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xffffffff
jne 0x446082
mov dword [ebp - 8], 1
jmp 0x44629b
xor eax, eax
mov dword [ebp - 8], eax
jmp 0x44629b
test byte [ebp - 0x540], 0x10
je 0x4460b8
lea edx, [ebp - 0x540]
push edx
push dword [ebp - 0x18]
call sub.KERNEL32.dll_FindNextFileA
test eax, eax
jne 0x44629b
mov dword [ebp - 8], 1
jmp 0x44629b
cmp dword [ebp - 0x14], 0
je 0x4460fa
push 0x586e7f
push 0x586d7f
push 0x586c7f
push 0x586c7c
push esi
call fcn.0050ca44
add esp, 0x14
lea ecx, [ebp - 0x514]
push ecx
push 0x586c7f
push 0x586c7c
push 0x55ff1d
push esi
call sub.USER32.dll_wsprintfA
add esp, 0x14
cmp dword [ebp - 0x10], 0
jne 0x44617c
push 3
push esi
call fcn.0042c9b5
test eax, eax
je 0x44617c
cmp dword [ebp - 4], 1
jge 0x446120
push dword [0x55f89c]
push dword [ebp + 8]
call fcn.004ee341
push esi
push 0
push 0x2cf
call fcn.0042c564
push eax
lea eax, [ebp - 0x400]
push eax
call sub.USER32.dll_wsprintfA
add esp, 0xc
xor edx, edx
mov dword [0x56ac00], edx
push dword [0x55f89c]
lea ecx, [ebp - 0x400]
push ecx
push dword [ebp + 8]
call fcn.004ee447
lea eax, [ebp - 0x540]
push eax
push dword [ebp - 0x18]
call sub.KERNEL32.dll_FindNextFileA
test eax, eax
jne 0x446174
mov dword [ebp - 8], 1
inc dword [ebp - 4]
jmp 0x44629b
push 0x586e7f
push 0x586d7f
push 0x586c7f
push 0x586c7c
push ebx
call fcn.0050ca44
add esp, 0x14
lea edx, [ebp - 0x514]
push edx
push 0x586c7f
push 0x586c7c
push 0x55ff25
push ebx
call sub.USER32.dll_wsprintfA
add esp, 0x14
push dword [ebp - 0xc]
push esi
push ebx
call fcn.0042d1cf
mov edi, eax
test edi, edi
jle 0x44620d
push dword [ebp - 0x18]
call sub.KERNEL32.dll_FindClose
mov dword [ebp - 0x18], 0xffffffff
cmp edi, 1
jne 0x4461f0
push 1
push ebx
mov eax, dword [ebp + 0xc]
push dword [eax]
push 0
call fcn.00479c10
jmp 0x4462fe
cmp edi, 2
jne 0x4462a5
push 4
push esi
mov edx, dword [ebp + 0xc]
push dword [edx]
push 0
call fcn.00479c10
jmp 0x4462fe
inc dword [ebp - 4]
cmp dword [ebp + 0x18], 0
je 0x446250
push esi
push ebx
push 0
push 0x2d0
call fcn.0042c564
push eax
lea ecx, [ebp - 0x400]
push ecx
call sub.USER32.dll_wsprintfA
add esp, 0x10
xor eax, eax
mov dword [0x56ac00], eax
push dword [0x55f89c]
lea edx, [ebp - 0x400]
push edx
push dword [ebp + 8]
call fcn.004ee447
push 0x586e7f
push 0x586d7f
push 0x586c7f
push 0x586c7c
push 0x55ff2d
push ebx
call sub.USER32.dll_wsprintfA
add esp, 0x18
cmp dword [ebp - 0x14], 0
jne 0x446281
mov dword [ebp - 8], 1
jmp 0x4462a5
lea ecx, [ebp - 0x540]
push ecx
push dword [ebp - 0x18]
call sub.KERNEL32.dll_FindNextFileA
test eax, eax
jne 0x44629b
mov dword [ebp - 8], 1
cmp dword [ebp - 8], 0
je 0x44608c
cmp dword [ebp - 0x18], 0xffffffff
je 0x4462b3
push dword [ebp - 0x18]
call sub.KERNEL32.dll_FindClose
cmp dword [ebp - 4], 0
jle 0x4462cd
cmp dword [ebp + 0x18], 0
je 0x4462cd
push dword [0x55f89c]
push dword [ebp + 8]
call fcn.004ee341
cmp dword [ebp - 4], 0
je 0x4462e0
cmp dword [ebp - 8], 0
je 0x4462e0
mov eax, 1
jmp 0x4462fe
push esi
push ebx
push 0
push 0x2d1
call fcn.0042c564
push eax
push 0x57e17c
call sub.USER32.dll_wsprintfA
add esp, 0x10
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14