Function at 0x496d4c
Capabilities:
Check if file exists
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffd74
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x280], ebx
mov dword [ebp - 0x288], ebx
mov dword [ebp - 0x28c], ebx
mov dword [ebp - 0x284], ebx
mov dword [ebp - 0x278], ebx
mov dword [ebp - 0x27c], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x10], edx
mov dword [ebp - 0xc], eax
xor eax, eax
push ebp
push 0x4970e8
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x274], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x270], eax
lea eax, [ebp - 0x274]
lea ecx, [ebp - 4]
mov edx, 1
call fcn.00495430
lea eax, [ebp - 0x26c]
push eax
mov eax, dword [ebp - 4]
call fcn.004088b0
push eax
call sub.kernel32.dll_FindFirstFileW_1
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xffffffff
jne 0x496df6
call sub.kernel32.dll_GetLastError_2
cmp eax, 2
je 0x496ed6
call fcn.00426e34
jmp 0x496ed6
xor eax, eax
push ebp
push 0x496ecf
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 8]
lea edx, [ebp - 0x240]
mov ecx, 0x104
call fcn.0040895c
test byte [ebp - 0x26c], 0x10
jne 0x496e91
movzx eax, byte [0x4970f8]
push eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x274], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x270], eax
lea eax, [ebp - 0x274]
lea ecx, [ebp - 0x278]
mov edx, 1
call fcn.00495430
mov eax, dword [ebp - 0x278]
push eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x274], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x270], eax
lea eax, [ebp - 0x274]
lea ecx, [ebp - 0x27c]
mov edx, 1
call fcn.00495430
mov edx, dword [ebp - 0x27c]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
pop ecx
call fcn.00496b74
lea eax, [ebp - 0x26c]
push eax
mov eax, dword [ebp - 0x18]
push eax
call sub.kernel32.dll_FindNextFileW
test eax, eax
jne 0x496e04
call sub.kernel32.dll_GetLastError_2
cmp eax, 0x12
je 0x496eb8
call fcn.00426e34
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x496ed6
mov eax, dword [ebp - 0x18]
push eax
call sub.kernel32.dll_FindClose_1
ret
mov eax, dword [ebp + 8]
test byte [eax + 8], 1
je 0x4970bd
mov dl, 1
mov eax, dword [0x43bd60]
call fcn.004488d0
mov dword [ebp - 0x1c], eax
xor eax, eax
push ebp
push 0x4970b6
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x274], eax
mov eax, 0x497108
mov dword [ebp - 0x270], eax
lea eax, [ebp - 0x274]
lea ecx, [ebp - 4]
mov edx, 1
call fcn.00495430
lea eax, [ebp - 0x26c]
push eax
mov eax, dword [ebp - 4]
call fcn.004088b0
push eax
call sub.kernel32.dll_FindFirstFileW_1
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xffffffff
jne 0x496f5d
call sub.kernel32.dll_GetLastError_2
cmp eax, 2
je 0x4970a0
call fcn.00426e34
jmp 0x4970a0
xor eax, eax
push ebp
push 0x496fea
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 8]
lea edx, [ebp - 0x240]
mov ecx, 0x104
call fcn.0040895c
test byte [ebp - 0x26c], 0x10
je 0x496fb0
mov eax, dword [ebp - 8]
mov edx, 0x497118
call fcn.00408ca4
je 0x496fb0
mov eax, dword [ebp - 8]
mov edx, 0x497128
call fcn.00408ca4
je 0x496fb0
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea eax, [ebp - 0x26c]
push eax
mov eax, dword [ebp - 0x18]
push eax
call sub.kernel32.dll_FindNextFileW
test eax, eax
jne 0x496f6b
call sub.kernel32.dll_GetLastError_2
cmp eax, 0x12
je 0x496fd3
call fcn.00426e34
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x496ff1
mov eax, dword [ebp - 0x18]
push eax
call sub.kernel32.dll_FindClose_1
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4970bd
mov eax, dword [ebp - 0x1c]
call fcn.00405fbc
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4970ef
lea eax, [ebp - 0x28c]
mov edx, 6
call fcn.00407c90
lea eax, [ebp - 8]
mov edx, 2
call fcn.00407c90
ret