Function at 0x44f053
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
lea ebp, [esp - 0x6f4]
sub esp, 0x774
mov eax, dword [0x4b7f60]
xor eax, ebp
mov dword [ebp + 0x6f0], eax
push ebx
push edi
mov eax, ecx
lea ebx, [eax + 0x90]
push 0x4a2a48
lea eax, [ebp + 0x28c]
push ebx
push eax
call fcn.0040f2de
mov eax, dword [ebp + 0x290]
add esp, 0xc
cmp dword [ebp + 0x2a4], 8
jae 0x44f0a2
lea eax, [ebp + 0x290]
push 0x4a2a44
push eax
call fcn.00471e48
mov edi, eax
pop ecx
pop ecx
test edi, edi
jne 0x44f0c8
push eax
push 1
lea ecx, [ebp + 0x28c]
call fcn.00401a1c
jmp 0x44f3cc
push esi
lea ecx, [ebp + 0x18]
call fcn.0040d9a4
mov esi, 0x104
jmp 0x44f16a
lea eax, [ebp + 0x4e8]
push eax
lea ecx, [ebp + 0x2c4]
call fcn.004018ba
push 1
push 3
lea eax, [ebp + 0x2c4]
push eax
lea ecx, [ebp - 0x80]
call fcn.0044ee68
push 0
push 1
lea ecx, [ebp + 0x2c4]
call fcn.00401a1c
lea eax, [ebp + 0x4e8]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.0044ed3c
lea eax, [ebp + 0x4e8]
push eax
call fcn.0046d6ae
add esp, 0xc
test eax, eax
je 0x44f162
lea eax, [ebp + 0x4e8]
push eax
lea ecx, [ebp + 0x2c4]
call fcn.004018ba
lea eax, [ebp + 0x2c4]
push eax
lea ecx, [ebp + 0x18]
call fcn.0040da6b
push 0
push 1
lea ecx, [ebp + 0x2c4]
call fcn.00401a1c
lea ecx, [ebp - 0x80]
call fcn.00404938
push edi
lea eax, [ebp + 0x4e8]
push esi
push eax
call fcn.00471cc1
add esp, 0xc
test eax, eax
jne 0x44f0db
push edi
call fcn.004715a3
pop ecx
push ebx
lea ecx, [ebp + 0x2a8]
call fcn.004018dc
mov eax, dword [ebp + 0x2bc]
xor esi, esi
inc esi
lea ecx, [ebp + 0x2a8]
cmp eax, esi
jae 0x44f1ca
push 0
push esi
call fcn.00401a1c
lea ecx, [ebp + 0x18]
call fcn.0040df35
push dword [ebp + 0x18]
call fcn.0046d271
pop ecx
push 0
push esi
jmp 0x44f3c0
dec eax
push eax
call fcn.0041258c
cmp word [eax], 0x5c
je 0x44f1e7
push 0x4a7ca8
lea ecx, [ebp + 0x2a8]
call fcn.00401941
push 0x4a7dec
lea ecx, [ebp + 0x2a8]
call fcn.00401941
cmp dword [ebp + 0x2c0], 8
mov eax, dword [ebp + 0x2ac]
jae 0x44f20c
lea eax, [ebp + 0x2ac]
lea ecx, [ebp + 0x3c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp + 0x30], eax
cmp eax, 0xffffffff
jne 0x44f227
lea ecx, [ebp + 0x2a8]
jmp 0x44f1a9
push 0x208
xor edi, edi
lea eax, [ebp + 0x2e0]
push edi
push eax
call fcn.0046d720
add esp, 0xc
mov esi, dword [sym.imp.SHLWAPI.dll_StrCmpW]
push 0x4a7c50
lea eax, [ebp + 0x68]
push eax
call esi
test eax, eax
je 0x44f380
push 0x4a7ca0
lea eax, [ebp + 0x68]
push eax
call esi
test eax, eax
je 0x44f380
cmp dword [ebx + 0x18], 8
jb 0x44f275
mov eax, dword [ebx + 4]
jmp 0x44f278
lea eax, [ebx + 4]
lea ecx, [ebp + 0x68]
push ecx
push eax
lea eax, [ebp + 0x2e0]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
test byte [ebp + 0x3c], 0x10
lea eax, [ebp + 0x68]
lea ecx, [ebp + 0x2c4]
push eax
je 0x44f2cf
call fcn.004018ba
push str.download_profiles
lea ecx, [ebp + 0x2c4]
call fcn.0040a41f
test eax, eax
jne 0x44f372
push 1
push edi
lea eax, [ebp + 0x2e0]
push edi
push eax
call fcn.00403c21
add esp, 0x10
jmp 0x44f372
call fcn.004018ba
lea eax, [ebp + 0x18]
push eax
push dword [ebp + 0x24]
lea ecx, [ebp + 8]
call fcn.0040ebaf
mov eax, dword [ebp + 8]
mov dword [ebp + 0x34], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp + 0x38], eax
jmp 0x44f330
cmp dword [ebp + 0x2dc], 8
mov esi, dword [ebp + 0x2c8]
jae 0x44f306
lea esi, [ebp + 0x2c8]
lea ecx, [ebp + 0x34]
call fcn.0040e287
cmp dword [eax + 0x18], 8
jb 0x44f319
mov eax, dword [eax + 4]
jmp 0x44f31c
add eax, 4
push esi
push eax
call dword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x44f372
lea ecx, [ebp + 0x34]
call fcn.00403d84
lea eax, [ebp + 0x18]
push eax
push dword [ebp + 0x28]
lea ecx, [ebp + 0x10]
call fcn.0040ebaf
lea eax, [ebp + 0x10]
push eax
lea ecx, [ebp + 0x34]
call fcn.00403db3
test al, al
je 0x44f2f1
push 0x4a2a48
lea ecx, [ebp + 0x2c4]
call fcn.0040a41f
test eax, eax
je 0x44f372
lea eax, [ebp + 0x2e0]
push edi
push eax
call fcn.00403c65
pop ecx
pop ecx
push edi
push 1
lea ecx, [ebp + 0x2c4]
call fcn.00401a1c
lea eax, [ebp + 0x3c]
push eax
push dword [ebp + 0x30]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x44f23e
push dword [ebp + 0x30]
call dword [sym.imp.KERNEL32.dll_FindClose]
push edi
push 1
lea ecx, [ebp + 0x2a8]
call fcn.00401a1c
lea ecx, [ebp + 0x18]
call fcn.0040df35
push dword [ebp + 0x18]
call fcn.0046d271
pop ecx
push edi
push 1
lea ecx, [ebp + 0x28c]
call fcn.00401a1c
pop esi
mov ecx, dword [ebp + 0x6f0]
pop edi
xor ecx, ebp
pop ebx
call fcn.0046d79a
add ebp, 0x6f4
leave
ret