Function at 0x444fa0
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x56bbf1
mov eax, dword fs:[0]
push eax
sub esp, 0xebc
mov eax, dword [0x5f969c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xec8], ecx
xor eax, eax
mov word [ebp - 0x21c], ax
push 0x206
push 0
lea ecx, [ebp - 0x21a]
push ecx
call fcn.0053c870
add esp, 0xc
xor edx, edx
mov word [ebp - 0x42c], dx
push 0x206
push 0
lea eax, [ebp - 0x42a]
push eax
call fcn.0053c870
add esp, 0xc
push 0x104
push str.Lang
lea ecx, [ebp - 0x21c]
push ecx
call fcn.00446480
add esp, 0xc
lea edx, [ebp - 0x21c]
push edx
lea eax, [ebp - 0x42c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str..dll
lea ecx, [ebp - 0x42c]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
mov dword [ebp - 0x67c], 0
push 0x24c
push 0
lea edx, [ebp - 0x678]
push edx
call fcn.0053c870
add esp, 0xc
lea eax, [ebp - 0x67c]
push eax
lea ecx, [ebp - 0x42c]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffff
jne 0x445092
xor eax, eax
jmp 0x445300
xor edx, edx
mov word [ebp - 0x884], dx
push 0x206
push 0
lea eax, [ebp - 0x882]
push eax
call fcn.0053c870
add esp, 0xc
push 1
push 0x58047c
lea ecx, [ebp - 0x88c]
call fcn.004ccc50
mov dword [ebp - 4], 0
push 0x208
lea ecx, [ebp - 0x884]
push ecx
push str.LangModule
lea ecx, [ebp - 0x88c]
call fcn.004cd2f0
mov dword [ebp - 0x220], 0xffffffff
mov dword [ebp - 0x224], 0xffffffff
push 0x5804a8
lea edx, [ebp - 0x650]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x445126
push 0x5804ac
lea eax, [ebp - 0x650]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x44512b
jmp 0x445267
mov ecx, dword [ebp - 0x67c]
and ecx, 0x10
je 0x44513b
jmp 0x445267
lea edx, [ebp - 0x21c]
push edx
lea eax, [ebp - 0xa9c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea ecx, [ebp - 0x650]
push ecx
lea edx, [ebp - 0xa9c]
push edx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push 0
lea eax, [ebp - 0xa9c]
push eax
call fcn.00568e20
add esp, 8
mov dword [ebp - 0xaac], eax
push str.GetLanguageName
mov ecx, dword [ebp - 0xaac]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xec0], eax
cmp dword [ebp - 0xec0], 0
jne 0x4451ad
mov edx, dword [ebp - 0xaac]
push edx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x445267
xor eax, eax
mov word [ebp - 0xebc], ax
push 0x104
lea ecx, [ebp - 0xebc]
push ecx
call dword [ebp - 0xec0]
mov dword [ebp - 0x890], eax
lea edx, [ebp - 0x650]
push edx
lea eax, [ebp - 0xcb4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
call fcn.00445320
mov dword [ebp - 0xaa0], eax
mov ecx, dword [ebp - 0xaa0]
cmp ecx, dword [ebp - 0x890]
jne 0x44520c
mov ecx, dword [ebp - 0xec8]
call fcn.004454a0
mov dword [ebp - 0x224], eax
lea edx, [ebp - 0x650]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
lea eax, [ebp - 0x650]
push eax
lea ecx, [ebp - 0x884]
push ecx
call dword [sym.imp.SHLWAPI.dll_StrCmpNIW]
test eax, eax
jne 0x445243
mov ecx, dword [ebp - 0xec8]
call fcn.004454a0
mov dword [ebp - 0x220], eax
lea edx, [ebp - 0xebc]
push edx
mov ecx, dword [ebp - 0xec8]
call fcn.00445500
mov ecx, dword [ebp - 0xec8]
call fcn.004454a0
cmp eax, 0xa
jbe 0x445267
jmp 0x445280
lea eax, [ebp - 0x67c]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x4450fa
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [ebp - 0x220], 0
jl 0x4452a4
mov eax, dword [ebp - 0xec8]
mov ecx, dword [ebp - 0x220]
mov dword [eax + 0x18], ecx
jmp 0x4452cb
cmp dword [ebp - 0x224], 0
jl 0x4452be
mov edx, dword [ebp - 0xec8]
mov eax, dword [ebp - 0x224]
mov dword [edx + 0x18], eax
jmp 0x4452cb
mov ecx, dword [ebp - 0xec8]
mov dword [ecx + 0x18], 0
mov ecx, dword [ebp - 0xec8]
call fcn.004454a0
mov dword [ebp - 0x888], eax
mov edx, dword [ebp - 0x888]
mov dword [ebp - 0xec4], edx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x88c]
call fcn.004ccd70
mov eax, dword [ebp - 0xec4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0053c85d
mov esp, ebp
pop ebp
ret