Function at 0x4312e0
Capabilities:
Enumerate files on windows

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5badd8
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x298
mov eax, dword [0x6441a4]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, edx
mov dword [ebp - 0x28c], eax
mov esi, ecx
mov dword [ebp - 0x26c], esi
mov dword [ebp - 0x2a4], esi
lea ecx, [ebp - 0x2a0]
push eax
mov dword [ebp - 0x288], 0
call fcn.00406930
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0x29c]
cmp ecx, 1
jl 0x43137f
mov eax, dword [ebp - 0x2a0]
push 1
push 0x6294f0
lea eax, [eax + ecx*2]
add eax, 0xfffffffe
push eax
call fcn.004d9259
add esp, 0xc
test eax, eax
je 0x43138f
push 0x6294f0
lea ecx, [ebp - 0x2a0]
call fcn.00406cf0
push 0x62c4c0
lea ecx, [ebp - 0x2a0]
call fcn.00406cf0
mov dword [esi], 0
mov dword [esi + 4], 0
mov dword [esi + 8], 0
mov edi, dword [ebp - 0x2a0]
mov dword [ebp - 0x288], 1
test edi, edi
je 0x4313cf
cmp word [edi], 0
mov eax, edi
jne 0x4313d4
mov eax, 0x628fa4
lea ecx, [ebp - 0x268]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x26c], eax
cmp eax, 0xffffffff
jne 0x43144a
movups xmm0, xmmword [0x628d68]
sub esp, 0x10
mov edx, str.D:Tools_agentworkspaceWeChatUpdateWechatUpdateutilsUtils.cpp
mov eax, esp
mov ecx, 4
sub esp, 0x10
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmmword [eax], xmm0
mov eax, esp
push str.FindFirstFile_in_dir_error
push str.Utils
push str.Utils::listFilesInDir
push 0x464
movups xmmword [eax], xmm0
call fcn.00403890
add esp, 0x70
mov edi, dword [ebp - 0x26c]
test byte [ebp - 0x268], 0x10
jne 0x4314d3
push 0xffffffffffffffff
lea eax, [ebp - 0x23c]
mov dword [ebp - 0x274], 0
xorps xmm0, xmm0
lea ecx, [ebp - 0x284]
push eax
movups xmmword [ebp - 0x284], xmm0
call fcn.00406c40
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x284]
mov eax, dword [esi + 4]
push ecx
cmp eax, dword [esi + 8]
je 0x4314a1
mov ecx, eax
call fcn.00406930
add dword [esi + 4], 0x14
jmp 0x4314a9
push eax
mov ecx, esi
call fcn.00418360
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x284]
test eax, eax
je 0x4314c0
push eax
call fcn.004d2e43
add esp, 4
mov eax, dword [ebp - 0x278]
test eax, eax
je 0x4314d3
push eax
call fcn.004d2e43
add esp, 4
lea eax, [ebp - 0x268]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x431450
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, dword [ebp - 0x2a0]
mov edx, eax
cmp edx, 0x12
je 0x43155c
movups xmm0, xmmword [0x628d68]
sub esp, 0x10
mov eax, esp
sub esp, 0x10
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
mov ecx, esp
push edx
movups xmmword [eax], xmm0
call fcn.004182c0
push str.unexcept_error_happen_in_the_enumerate_progress._error_code:__d
push str.Utils
push str.Utils::listFilesInDir
push 0x477
mov edx, str.D:Tools_agentworkspaceWeChatUpdateWechatUpdateutilsUtils.cpp
mov ecx, 4
call fcn.00403890
add esp, 0x70
push dword [ebp - 0x26c]
call dword [sym.imp.KERNEL32.dll_FindClose]
push dword [ebp - 0x28c]
lea ecx, [ebp - 0x284]
call fcn.00406930
push ecx
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.00407000
movups xmm0, xmmword [0x628d68]
mov ecx, eax
sub esp, 0x10
mov eax, esp
sub esp, 0x10
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
mov dword [eax + 8], ecx
mov byte [eax], 2
mov eax, 0x66666667
mov ecx, dword [esi + 4]
sub ecx, dword [esi]
imul ecx
mov ecx, esp
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
call fcn.004182c0
push str.Totally_find__d_files_in_the__s
push str.Utils
push str.Utils::listFilesInDir
push 0x47c
mov edx, str.D:Tools_agentworkspaceWeChatUpdateWechatUpdateutilsUtils.cpp
mov ecx, 2
call fcn.00403890
mov eax, dword [ebp - 0x284]
add esp, 0x70
test eax, eax
je 0x43161d
push eax
call fcn.004d2e43
add esp, 4
mov dword [ebp - 0x284], 0
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x27c], 0
mov dword [ebp - 0x280], 0
test eax, eax
je 0x431644
push eax
call fcn.004d2e43
add esp, 4
test edi, edi
je 0x431651
push edi
call fcn.004d2e43
add esp, 4
mov eax, dword [ebp - 0x294]
test eax, eax
je 0x431664
push eax
call fcn.004d2e43
add esp, 4
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004cdf5d
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret