Function at 0x44c0a0
Capabilities:
Enumerate files on windows

Disassembly:
sub rsp, 0x5b8
mov qword [rsp + 0x5b0], rbx
mov qword [rsp + 0x5a8], rbp
mov qword [rsp + 0x5a0], rsi
mov qword [rsp + 0x598], rdi
mov qword [rsp + 0x590], r12
mov rbp, r8
mov qword [rsp + 0x588], r13
mov r12, rdx
call fcn.004545a0
test eax, eax
je 0x44c154
lea rdx, str.KINIFile::LocateINIFileNames_n
lea rcx, [rsp + 0x230]
xor r8d, r8d
call fcn.00486850
movabs rdx, 0x203a5952544e45
xor eax, eax
mov qword [rsp + 0x20], rdx
lea rdi, [rsp + 0x20]
mov rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
xor ecx, ecx
lea rdx, [rsp + 0x230]
movzx eax, byte [rdx + rcx]
inc rcx
test al, al
mov byte [rdi + rcx - 2], al
jne 0x44c126
call fcn.004546e0
mov rcx, rax
call fcn.004545b0
call fcn.004546e0
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.004548a0
call fcn.004545a0
test eax, eax
je 0x44c189
lea rdx, str.pszInstallPath___s_n
lea rcx, [rsp + 0x230]
mov r8, r12
call fcn.00486850
call fcn.004546e0
lea rdx, [rsp + 0x230]
mov rcx, rax
call fcn.004548a0
lea rdx, [rsp + 0x330]
mov rcx, r12
sub rdx, r12
movzx eax, byte [rcx]
inc rcx
test al, al
mov byte [rdx + rcx - 1], al
jne 0x44c197
xor eax, eax
lea rdi, [rsp + 0x330]
mov rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
mov eax, dword [0x004af700]
lea rdx, [rsp + 0x440]
mov dword [rdi - 1], eax
movzx eax, word [0x004af704]
lea rcx, [rsp + 0x330]
mov word [rdi + 3], ax
movzx eax, byte [0x004af706]
mov byte [rdi + 5], al
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp rax, 0xffffffffffffffff
mov r13, rax
je 0x44c326
lea rsi, [rsp + 0x120]
sub rsi, r12
mov rcx, r12
movzx eax, byte [rcx]
inc rcx
test al, al
mov byte [rsi + rcx - 1], al
jne 0x44c207
xor eax, eax
lea rdi, [rsp + 0x120]
mov rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
movzx eax, word [0x004a9dfc]
mov rcx, 0xffffffffffffffff
mov word [rdi - 1], ax
xor eax, eax
lea rdi, [rsp + 0x120]
repne scasb al, byte [rdi]
xor ecx, ecx
lea rdx, [rsp + 0x46c]
movzx eax, byte [rdx + rcx]
inc rcx
test al, al
mov byte [rdi + rcx - 2], al
jne 0x44c250
mov rbx, qword [rbp]
cmp rbx, 0x1f4
jae 0x44c2c0
cmp rbx, 0xffffffffffffffff
lea rax, [rbx + 1]
mov qword [rbp], rax
je 0x44c2c0
xor eax, eax
lea rdi, [rsp + 0x120]
mov rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
not rcx
add rcx, 4
call fcn.00486ab0
lea rdx, [rsp + 0x120]
mov qword [rbp + rbx*8 + 0x200], rax
nop
nop
movzx ecx, byte [rdx]
inc rax
inc rdx
test cl, cl
mov byte [rax - 1], cl
jne 0x44c2b0
call fcn.004545a0
test eax, eax
je 0x44c2f4
lea r8, [rsp + 0x120]
lea rdx, str.szTestFile___s_n
lea rcx, [rsp + 0x20]
call fcn.00486850
call fcn.004546e0
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.004548a0
lea rdx, [rsp + 0x440]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x44c204
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rsi, qword [rsp + 0x5a0]
mov rbx, qword [rsp + 0x5b0]
call fcn.004545a0
mov r13, qword [rsp + 0x588]
mov r12, qword [rsp + 0x590]
test eax, eax
je 0x44c3ae
mov r8, qword [rbp]
lea rdx, str.KINIFile::LocateINIFileNames_:_pkslINIFileNames__GetCount_____d_n
lea rcx, [rsp + 0x230]
call fcn.00486850
movabs rdx, 0x20203a54495845
xor eax, eax
mov qword [rsp + 0x20], rdx
lea rdi, [rsp + 0x20]
mov rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
xor ecx, ecx
lea rdx, [rsp + 0x230]
movzx eax, byte [rdx + rcx]
inc rcx
test al, al
mov byte [rdi + rcx - 2], al
jne 0x44c380
call fcn.004546e0
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.004548a0
call fcn.004546e0
mov rcx, rax
call fcn.004545c0
mov rdi, qword [rsp + 0x598]
xor eax, eax
cmp qword [rbp], rax
mov rbp, qword [rsp + 0x5a8]
seta al
add rsp, 0x5b8
ret