Function at 0x413ae0
Capabilities:
Enumerate files on windows
Enumerate files recursively
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c7d91
mov eax, dword fs:[0]
push eax
sub esp, 0x6c0
mov eax, dword [0x50545c]
xor eax, ebp
mov dword [ebp - 0x18], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x6c4], ecx
mov ax, word [0x4d5650]
mov word [ebp - 0x11c], ax
push 0xfd
push 0
lea ecx, [ebp - 0x11a]
push ecx
call fcn.004931a0
add esp, 0xc
mov edx, dword [ebp + 0xc]
push edx
lea ecx, [ebp - 0x388]
call fcn.00416560
mov dword [ebp - 4], 0
push 0x4d5648
call fcn.004939fc
add esp, 4
mov dword [ebp - 0x5d8], eax
mov eax, dword [ebp - 0x5d8]
push eax
push 0x4d5648
lea ecx, [ebp - 0x388]
call fcn.0041c6c0
cmp dword [ebp - 0x370], 8
jb 0x413b8b
mov ecx, dword [ebp - 0x384]
mov dword [ebp - 0x6c8], ecx
jmp 0x413b97
lea edx, [ebp - 0x384]
mov dword [ebp - 0x6c8], edx
lea eax, [ebp - 0x36c]
push eax
mov ecx, dword [ebp - 0x6c8]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffff
jne 0x413bcd
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.Invalid_file_handle._Error_is__u._n
call fcn.004927ef
add esp, 8
jmp 0x413dc1
lea edx, [ebp - 0x36c]
push edx
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x413db7
push 0x4d55f8
lea ecx, [ebp - 0x340]
push ecx
call fcn.00493a63
add esp, 8
test eax, eax
je 0x413db2
mov edx, dword [ebp + 0xc]
push edx
push 0xff
lea eax, [ebp - 0x58c]
push eax
call fcn.0049515a
add esp, 0xc
lea ecx, [ebp - 0x340]
push ecx
push 0xff
lea edx, [ebp - 0x58c]
push edx
call fcn.004950dd
add esp, 0xc
lea eax, [ebp - 0x58c]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
and ecx, 0x10
je 0x413ce2
lea edx, [ebp - 0x58c]
push edx
lea ecx, [ebp - 0x5a8]
call fcn.00416560
mov byte [ebp - 4], 1
push 0x4d1934
call fcn.004939fc
add esp, 4
mov dword [ebp - 0x5f8], eax
mov eax, dword [ebp - 0x5f8]
push eax
push 0x4d1934
lea ecx, [ebp - 0x5a8]
call fcn.0041c6c0
cmp dword [ebp - 0x590], 8
jb 0x413ca8
mov ecx, dword [ebp - 0x5a4]
mov dword [ebp - 0x6cc], ecx
jmp 0x413cb4
lea edx, [ebp - 0x5a4]
mov dword [ebp - 0x6cc], edx
mov eax, dword [ebp - 0x6cc]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0x6c4]
call fcn.00413ae0
mov byte [ebp - 4], 0
push 0
push 1
lea ecx, [ebp - 0x5a8]
call fcn.0041aa50
jmp 0x413db2
lea edx, [ebp - 0x58c]
push edx
lea ecx, [ebp - 0x5c4]
call fcn.00416560
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x6c4]
add eax, 0x1c
mov dword [ebp - 0x698], eax
mov ecx, dword [ebp - 0x698]
mov edx, dword [ecx + 0x14]
mov dword [ebp - 0x640], edx
mov eax, dword [ebp - 0x698]
push eax
mov ecx, dword [ebp - 0x640]
push ecx
lea ecx, [ebp - 0x63c]
call fcn.0041d3f0
mov edx, dword [ebp - 0x63c]
mov eax, dword [ebp - 0x638]
mov dword [ebp - 0x634], edx
mov dword [ebp - 0x630], eax
lea ecx, [ebp - 0x5c4]
push ecx
mov edx, dword [ebp - 0x630]
push edx
mov eax, dword [ebp - 0x634]
push eax
mov ecx, dword [ebp - 0x698]
call fcn.0041b5f0
lea ecx, [ebp - 0x58c]
push ecx
push str.CEstArchieve::GetDir___file:__s
push str.CEstArchieve::GetDir
push 0x69
push 8
call fcn.00424f80
push eax
call fcn.004247e0
add esp, 0x18
mov edx, dword [ebp - 0x6c4]
mov eax, dword [edx + 0x14]
add eax, 1
mov ecx, dword [ebp - 0x6c4]
mov dword [ecx + 0x14], eax
mov byte [ebp - 4], 0
push 0
push 1
lea ecx, [ebp - 0x5c4]
call fcn.0041aa50
jmp 0x413bcd
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov dword [ebp - 4], 0xffffffff
push 0
push 1
lea ecx, [ebp - 0x388]
call fcn.0041aa50
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x18]
xor ecx, ebp
call fcn.0049318c
mov esp, ebp
pop ebp
ret 8