Function at 0x44e4ea
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
lea ebp, [esp - 0x6f4]
sub esp, 0x774
mov eax, dword [0x4b7f10]
xor eax, ebp
mov dword [ebp + 0x6f0], eax
push ebx
push edi
mov eax, ecx
lea ebx, [eax + 0x90]
push 0x4a2918
lea eax, [ebp + 0x28c]
push ebx
push eax
call fcn.0040f161
mov eax, dword [ebp + 0x290]
add esp, 0xc
cmp dword [ebp + 0x2a4], 8
jae 0x44e539
lea eax, [ebp + 0x290]
push 0x4a2914
push eax
call fcn.004712d8
mov edi, eax
pop ecx
pop ecx
test edi, edi
jne 0x44e55f
push eax
push 1
lea ecx, [ebp + 0x28c]
call fcn.00401a58
jmp 0x44e863
push esi
lea ecx, [ebp + 0x18]
call fcn.00419025
mov esi, 0x104
jmp 0x44e601
lea eax, [ebp + 0x4e8]
push eax
lea ecx, [ebp + 0x2c4]
call fcn.004018f6
push 1
push 3
lea eax, [ebp + 0x2c4]
push eax
lea ecx, [ebp - 0x80]
call fcn.0044e2ff
push 0
push 1
lea ecx, [ebp + 0x2c4]
call fcn.00401a58
lea eax, [ebp + 0x4e8]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.0044e1d3
lea eax, [ebp + 0x4e8]
push eax
call fcn.0046cb3e
add esp, 0xc
test eax, eax
je 0x44e5f9
lea eax, [ebp + 0x4e8]
push eax
lea ecx, [ebp + 0x2c4]
call fcn.004018f6
lea eax, [ebp + 0x2c4]
push eax
lea ecx, [ebp + 0x18]
call fcn.0040d9f9
push 0
push 1
lea ecx, [ebp + 0x2c4]
call fcn.00401a58
lea ecx, [ebp - 0x80]
call fcn.00404910
push edi
lea eax, [ebp + 0x4e8]
push esi
push eax
call fcn.00471151
add esp, 0xc
test eax, eax
jne 0x44e572
push edi
call fcn.00470a33
pop ecx
push ebx
lea ecx, [ebp + 0x2a8]
call fcn.00401918
mov eax, dword [ebp + 0x2bc]
xor esi, esi
inc esi
lea ecx, [ebp + 0x2a8]
cmp eax, esi
jae 0x44e661
push 0
push esi
call fcn.00401a58
lea ecx, [ebp + 0x18]
call fcn.0040de67
push dword [ebp + 0x18]
call fcn.0046c701
pop ecx
push 0
push esi
jmp 0x44e857
dec eax
push eax
call fcn.00412486
cmp word [eax], 0x5c
je 0x44e67e
push 0x4a7b78
lea ecx, [ebp + 0x2a8]
call fcn.0040197d
push 0x4a7cbc
lea ecx, [ebp + 0x2a8]
call fcn.0040197d
cmp dword [ebp + 0x2c0], 8
mov eax, dword [ebp + 0x2ac]
jae 0x44e6a3
lea eax, [ebp + 0x2ac]
lea ecx, [ebp + 0x3c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp + 0x30], eax
cmp eax, 0xffffffff
jne 0x44e6be
lea ecx, [ebp + 0x2a8]
jmp 0x44e640
push 0x208
xor edi, edi
lea eax, [ebp + 0x2e0]
push edi
push eax
call fcn.0046cbb0
add esp, 0xc
mov esi, dword [sym.imp.SHLWAPI.dll_StrCmpW]
push 0x4a7b20
lea eax, [ebp + 0x68]
push eax
call esi
test eax, eax
je 0x44e817
push 0x4a7b70
lea eax, [ebp + 0x68]
push eax
call esi
test eax, eax
je 0x44e817
cmp dword [ebx + 0x18], 8
jb 0x44e70c
mov eax, dword [ebx + 4]
jmp 0x44e70f
lea eax, [ebx + 4]
lea ecx, [ebp + 0x68]
push ecx
push eax
lea eax, [ebp + 0x2e0]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
test byte [ebp + 0x3c], 0x10
lea eax, [ebp + 0x68]
lea ecx, [ebp + 0x2c4]
push eax
je 0x44e766
call fcn.004018f6
push str.download_profiles
lea ecx, [ebp + 0x2c4]
call fcn.0040a395
test eax, eax
jne 0x44e809
push 1
push edi
lea eax, [ebp + 0x2e0]
push edi
push eax
call fcn.00403c2b
add esp, 0x10
jmp 0x44e809
call fcn.004018f6
lea eax, [ebp + 0x18]
push eax
push dword [ebp + 0x24]
lea ecx, [ebp + 8]
call fcn.00403dfb
mov eax, dword [ebp + 8]
mov dword [ebp + 0x34], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp + 0x38], eax
jmp 0x44e7c7
cmp dword [ebp + 0x2dc], 8
mov esi, dword [ebp + 0x2c8]
jae 0x44e79d
lea esi, [ebp + 0x2c8]
lea ecx, [ebp + 0x34]
call fcn.0040e19a
cmp dword [eax + 0x18], 8
jb 0x44e7b0
mov eax, dword [eax + 4]
jmp 0x44e7b3
add eax, 4
push esi
push eax
call dword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x44e809
lea ecx, [ebp + 0x34]
call fcn.00403d8e
lea eax, [ebp + 0x18]
push eax
push dword [ebp + 0x28]
lea ecx, [ebp + 0x10]
call fcn.00403dfb
lea eax, [ebp + 0x10]
push eax
lea ecx, [ebp + 0x34]
call fcn.00403dbd
test al, al
je 0x44e788
push 0x4a2918
lea ecx, [ebp + 0x2c4]
call fcn.0040a395
test eax, eax
je 0x44e809
lea eax, [ebp + 0x2e0]
push edi
push eax
call fcn.00403c6f
pop ecx
pop ecx
push edi
push 1
lea ecx, [ebp + 0x2c4]
call fcn.00401a58
lea eax, [ebp + 0x3c]
push eax
push dword [ebp + 0x30]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x44e6d5
push dword [ebp + 0x30]
call dword [sym.imp.KERNEL32.dll_FindClose]
push edi
push 1
lea ecx, [ebp + 0x2a8]
call fcn.00401a58
lea ecx, [ebp + 0x18]
call fcn.0040de67
push dword [ebp + 0x18]
call fcn.0046c701
pop ecx
push edi
push 1
lea ecx, [ebp + 0x28c]
call fcn.00401a58
pop esi
mov ecx, dword [ebp + 0x6f0]
pop edi
xor ecx, ebp
pop ebx
call fcn.0046cc2a
add ebp, 0x6f4
leave
ret