Function at 0x413380
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x16cc
call fcn.00439910
mov eax, dword [0x4f62a0]
xor eax, ebp
mov dword [ebp - 8], eax
push edi
mov dword [ebp - 0x167c], ecx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
push str.GetAllFilePath_Enter.__lpSourcePath___s__lpInstallPath___s
push 0x4cebd0
push 0x2cb
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
push 0x4ceb2c
push 1
mov edx, dword [0x4fb18c]
push edx
call fcn.00406b40
add esp, 0x24
mov dword [ebp - 0x80c], 0
xor eax, eax
mov word [ebp - 0x808], ax
push 0x7fe
push 0
lea ecx, [ebp - 0x806]
push ecx
call fcn.0042efe0
add esp, 0xc
xor edx, edx
mov word [ebp - 0x1260], dx
push 0x7fe
push 0
lea eax, [ebp - 0x125e]
push eax
call fcn.0042efe0
add esp, 0xc
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x1680], ecx
lea edx, [ebp - 0x808]
mov dword [ebp - 0x1684], edx
mov eax, dword [ebp - 0x1684]
mov dword [ebp - 0x1688], eax
mov ecx, dword [ebp - 0x1680]
mov dx, word [ecx]
mov word [ebp - 0x168a], dx
mov eax, dword [ebp - 0x1684]
mov cx, word [ebp - 0x168a]
mov word [eax], cx
mov edx, dword [ebp - 0x1680]
add edx, 2
mov dword [ebp - 0x1680], edx
mov eax, dword [ebp - 0x1684]
add eax, 2
mov dword [ebp - 0x1684], eax
cmp word [ebp - 0x168a], 0
jne 0x41343b
lea ecx, [ebp - 0x808]
add ecx, 0xfffffffe
mov dword [ebp - 0x1690], ecx
mov edx, dword [ebp - 0x1690]
mov ax, word [edx + 2]
mov word [ebp - 0x1692], ax
add dword [ebp - 0x1690], 2
cmp word [ebp - 0x1692], 0
jne 0x413492
mov edi, dword [ebp - 0x1690]
mov ecx, dword [str..]
mov dword [edi], ecx
mov edx, dword [0x4cebc8]
mov dword [edi + 4], edx
mov ax, word [0x4cebcc]
mov word [edi + 8], ax
lea ecx, [ebp - 0xa60]
push ecx
lea edx, [ebp - 0x808]
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0xffffffff
je 0x413762
mov dword [ebp - 0x1698], 0x4cec14
lea eax, [ebp - 0xa34]
mov dword [ebp - 0x169c], eax
mov ecx, dword [ebp - 0x169c]
mov dx, word [ecx]
mov word [ebp - 0x169e], dx
mov eax, dword [ebp - 0x1698]
cmp dx, word [eax]
jne 0x413572
cmp word [ebp - 0x169e], 0
je 0x413566
mov ecx, dword [ebp - 0x169c]
mov dx, word [ecx + 2]
mov word [ebp - 0x16a0], dx
mov eax, dword [ebp - 0x1698]
cmp dx, word [eax + 2]
jne 0x413572
add dword [ebp - 0x169c], 4
add dword [ebp - 0x1698], 4
cmp word [ebp - 0x16a0], 0
jne 0x41350c
mov dword [ebp - 0x16a4], 0
jmp 0x41357d
sbb ecx, ecx
sbb ecx, 0xffffffff
mov dword [ebp - 0x16a4], ecx
mov edx, dword [ebp - 0x16a4]
mov dword [ebp - 0x16a8], edx
cmp dword [ebp - 0x16a8], 0
je 0x413632
mov dword [ebp - 0x16ac], 0x4cec18
lea eax, [ebp - 0xa34]
mov dword [ebp - 0x16b0], eax
mov ecx, dword [ebp - 0x16b0]
mov dx, word [ecx]
mov word [ebp - 0x16b2], dx
mov eax, dword [ebp - 0x16ac]
cmp dx, word [eax]
jne 0x413612
cmp word [ebp - 0x16b2], 0
je 0x413606
mov ecx, dword [ebp - 0x16b0]
mov dx, word [ecx + 2]
mov word [ebp - 0x16b4], dx
mov eax, dword [ebp - 0x16ac]
cmp dx, word [eax + 2]
jne 0x413612
add dword [ebp - 0x16b0], 4
add dword [ebp - 0x16ac], 4
cmp word [ebp - 0x16b4], 0
jne 0x4135ac
mov dword [ebp - 0x16b8], 0
jmp 0x41361d
sbb ecx, ecx
sbb ecx, 0xffffffff
mov dword [ebp - 0x16b8], ecx
mov edx, dword [ebp - 0x16b8]
mov dword [ebp - 0x16bc], edx
cmp dword [ebp - 0x16bc], 0
jne 0x413637
jmp 0x41373f
lea eax, [ebp - 0xa34]
push eax
mov ecx, dword [ebp + 8]
push ecx
push 0x4cec20
lea edx, [ebp - 0x1260]
push edx
call fcn.00410470
add esp, 0x10
mov eax, dword [ebp - 0xa40]
mov dword [ebp - 0x1264], eax
mov ecx, dword [ebp - 0xa60]
and ecx, 0x10
je 0x413688
mov edx, dword [ebp + 0xc]
push edx
lea eax, [ebp - 0x1260]
push eax
mov ecx, dword [ebp - 0x167c]
call fcn.00413380
jmp 0x41373f
lea ecx, [ebp - 0x1260]
mov dword [ebp - 0x16c0], ecx
lea edx, [ebp - 0x1678]
mov dword [ebp - 0x16c4], edx
mov eax, dword [ebp - 0x16c4]
mov dword [ebp - 0x16c8], eax
mov ecx, dword [ebp - 0x16c0]
mov dx, word [ecx]
mov word [ebp - 0x16ca], dx
mov eax, dword [ebp - 0x16c4]
mov cx, word [ebp - 0x16ca]
mov word [eax], cx
mov edx, dword [ebp - 0x16c0]
add edx, 2
mov dword [ebp - 0x16c0], edx
mov eax, dword [ebp - 0x16c4]
add eax, 2
mov dword [ebp - 0x16c4], eax
cmp word [ebp - 0x16ca], 0
jne 0x4136ac
lea ecx, [ebp - 0x1678]
push ecx
push str.pFile.wOldFilePath___s
push str.CModuleAidManger::GetAllFilePath
push 0x2ed
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
push 0x4ceca4
push 1
mov edx, dword [0x4fb18c]
push edx
call fcn.00406b40
add esp, 0x20
lea eax, [ebp - 0x1678]
push eax
mov ecx, dword [ebp - 0x167c]
add ecx, 0x2088
call fcn.004176b0
lea ecx, [ebp - 0xa60]
push ecx
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x4134f6
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, 1
pop edi
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.00425912
mov esp, ebp
pop ebp
ret 8