Function at 0x444530
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x158
mov eax, dword [0x6fb448]
xor eax, ebp
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0x158], 0
push 0x13c
push 0
lea eax, [ebp - 0x154]
push eax
call fcn.005b02a0
add esp, 0xc
mov dword [ebp - 0xc], 0
mov ecx, dword [ebp + 8]
push ecx
call fcn.00401389
add esp, 4
test eax, eax
je 0x444596
xor eax, eax
jmp 0x44493a
push 0x69e
push 0x659064
push 1
push 1
push 0x71c
call fcn.005b0ce0
add esp, 0x14
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x4445c1
xor eax, eax
jmp 0x44493a
push 0x6a0
push 0x659070
push 1
push 1
push 0x71c
call fcn.005b0ce0
add esp, 0x14
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x4445fa
push 1
mov edx, dword [ebp - 4]
push edx
call fcn.005b16b0
add esp, 8
xor eax, eax
jmp 0x44493a
push 0x71c
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 4]
push ecx
call fcn.00402725
add esp, 0xc
mov edx, dword [ebp - 4]
push edx
call fcn.00403076
add esp, 4
mov eax, dword [ebp - 4]
push eax
call fcn.00402ec8
add esp, 4
push 0x22
mov ecx, dword [ebp - 4]
push ecx
call fcn.004012f3
add esp, 8
mov edx, dword [ebp - 4]
push edx
call fcn.00401b77
add esp, 4
test eax, eax
je 0x44469f
push str._
mov eax, dword [ebp - 4]
push eax
call fcn.005b0770
add esp, 8
test eax, eax
jne 0x44469f
mov ecx, dword [ebp - 4]
push ecx
call fcn.005b4690
add esp, 4
mov edx, dword [ebp - 4]
movsx eax, byte [edx + eax - 1]
cmp eax, 0x5c
je 0x444689
push 0x71c
push 0x659080
mov ecx, dword [ebp - 4]
push ecx
call fcn.004014f1
add esp, 0xc
push 0x71c
push 0x659084
mov edx, dword [ebp - 4]
push edx
call fcn.004014f1
add esp, 0xc
lea eax, [ebp - 0x158]
push eax
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffff
jne 0x4446f6
cmp dword [ebp - 4], 0
je 0x4446d4
push 1
mov edx, dword [ebp - 4]
push edx
call fcn.005b16b0
add esp, 8
mov dword [ebp - 4], 0
cmp dword [ebp - 8], 0
je 0x4446ef
push 1
mov eax, dword [ebp - 8]
push eax
call fcn.005b16b0
add esp, 8
mov dword [ebp - 8], 0
xor eax, eax
jmp 0x44493a
lea ecx, [ebp - 0x12c]
push ecx
call fcn.00401389
add esp, 4
test eax, eax
je 0x44470e
jmp 0x4447d2
movsx edx, byte [ebp - 0x12c]
cmp edx, 0x2e
jne 0x44471f
jmp 0x4447d2
cmp dword [ebp + 0xc], 0
je 0x444735
mov eax, dword [ebp - 0x158]
and eax, 2
je 0x444735
jmp 0x4447d2
mov ecx, dword [ebp - 0x158]
and ecx, 0x10
je 0x444745
jmp 0x4447d2
mov edx, dword [ebp - 0xc]
add edx, 1
mov dword [ebp - 0xc], edx
cmp dword [ebp + 0x14], 0
je 0x4447d2
push 0x71c
lea eax, [ebp - 0x12c]
push eax
mov ecx, dword [ebp - 8]
push ecx
call fcn.00402725
add esp, 0xc
push 0x104
mov edx, dword [ebp - 4]
push edx
lea eax, [ebp - 0x12c]
push eax
call fcn.00402725
add esp, 0xc
lea ecx, [ebp - 0x12c]
push ecx
call fcn.00402338
add esp, 4
lea edx, [ebp - 0x12c]
push edx
mov eax, dword [ebp - 8]
push eax
call fcn.00402293
add esp, 8
push 0x104
mov ecx, dword [ebp - 8]
push ecx
lea edx, [ebp - 0x12c]
push edx
call fcn.00402725
add esp, 0xc
mov eax, dword [ebp + 0x18]
push eax
lea ecx, [ebp - 0x158]
push ecx
call dword [ebp + 0x14]
test eax, eax
jne 0x4447d2
jmp 0x4447eb
lea edx, [ebp - 0x158]
push edx
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x4446f6
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov dword [ebp - 0x10], 0
cmp dword [ebp + 0x10], 0
je 0x444901
mov edx, dword [ebp - 4]
push edx
mov eax, dword [ebp - 8]
push eax
call fcn.005b4720
add esp, 8
mov ecx, dword [ebp - 8]
push ecx
call fcn.00402338
add esp, 4
push 0x659088
mov edx, dword [ebp - 8]
push edx
call fcn.005b4730
add esp, 8
lea eax, [ebp - 0x158]
push eax
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffff
je 0x444901
lea edx, [ebp - 0x12c]
push edx
call fcn.00401389
add esp, 4
test eax, eax
je 0x444866
jmp 0x4448d7
movsx eax, byte [ebp - 0x12c]
cmp eax, 0x2e
jne 0x444874
jmp 0x4448d7
cmp dword [ebp + 0xc], 0
je 0x444887
mov ecx, dword [ebp - 0x158]
and ecx, 2
je 0x444887
jmp 0x4448d7
mov edx, dword [ebp - 0x158]
and edx, 0x10
je 0x4448d7
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 8]
push ecx
call fcn.005b4720
add esp, 8
lea edx, [ebp - 0x12c]
push edx
mov eax, dword [ebp - 8]
push eax
call fcn.004029eb
add esp, 8
mov ecx, dword [ebp + 0x18]
push ecx
mov edx, dword [ebp + 0x14]
push edx
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp - 8]
push edx
call fcn.00403184
add esp, 0x14
add eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x158]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x444851
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov dword [ebp - 0x10], 0
cmp dword [ebp - 4], 0
je 0x44491c
push 1
mov eax, dword [ebp - 4]
push eax
call fcn.005b16b0
add esp, 8
mov dword [ebp - 4], 0
cmp dword [ebp - 8], 0
je 0x444937
push 1
mov ecx, dword [ebp - 8]
push ecx
call fcn.005b16b0
add esp, 8
mov dword [ebp - 8], 0
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.005b0290
mov esp, ebp
pop ebp
ret