Function at 0x10013c69
Capabilities:
Check if file exists
Enumerate files on windows
Get common file path
Get file attributes

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xa84
mov eax, dword [0x100400b0]
xor eax, esp
mov dword [esp + 0xa80], eax
push ebx
push esi
mov dword [esp + 0x10], edx
mov ebx, ecx
xor edx, edx
push edi
mov esi, edx
or edi, 0xffffffff
mov dword [esp + 0x10], esi
test ebx, ebx
je 0x10013d22
mov esi, ebx
lea ecx, [esi + 2]
mov ax, word [esi]
add esi, 2
cmp ax, dx
jne 0x10013ca4
sub esi, ecx
lea eax, [esp + 0x268]
sar esi, 1
cmp ebx, eax
je 0x10013cd4
push ecx
push ebx
mov edx, 0x104
mov ecx, eax
call fcn.1001a3af
test eax, eax
je 0x1001411e
push 0x5c
pop eax
cmp ax, word [esp + esi*2 + 0x266]
je 0x10013d06
push 0xffffffffffffffff
push 0x100393f0
lea eax, [esp + 0x270]
push 0x104
push eax
call fcn.1001a3af
add esp, 0x10
cmp eax, 0x50
je 0x1001411e
push 0x10039754
mov edx, 0x104
lea ecx, [esp + 0x26c]
call fcn.1001a3af
mov esi, dword [esp + 0x10]
jmp 0x10013d24
mov eax, edx
test eax, eax
je 0x1001411e
lea eax, [esp + 0x18]
push eax
cmp edi, 0xffffffff
jne 0x10013d50
lea eax, [esp + 0x26c]
push eax
call dword [sym.imp.kernel32.dll_FindFirstFileW]
mov edi, eax
xor eax, eax
cmp edi, 0xffffffff
setne al
jmp 0x10013d57
push edi
call dword [sym.imp.kernel32.dll_FindNextFileW]
test eax, eax
je 0x10013dd2
mov ecx, 0x10039384
lea eax, [esp + 0x44]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x10013d8a
test dx, dx
je 0x10013d86
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x10013d8a
add eax, 4
add ecx, 4
test dx, dx
jne 0x10013d64
xor eax, eax
jmp 0x10013d8f
sbb eax, eax
or eax, 1
test eax, eax
je 0x10013d2c
mov ecx, 0x10039374
lea eax, [esp + 0x44]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x10013dc2
test dx, dx
je 0x10013dbe
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x10013dc2
add eax, 4
add ecx, 4
test dx, dx
jne 0x10013d9c
xor eax, eax
jmp 0x10013dc7
sbb eax, eax
or eax, 1
test eax, eax
je 0x10013d2c
xor esi, esi
inc esi
cmp edi, 0xffffffff
je 0x10013dde
push edi
call dword [sym.imp.kernel32.dll_FindClose]
test esi, esi
je 0x10014117
test byte [esp + 0x18], 0x10
je 0x10014117
xor edi, edi
test ebx, ebx
je 0x10013e74
mov esi, ebx
lea ecx, [esi + 2]
mov ax, word [esi]
add esi, 2
cmp ax, di
jne 0x10013dfc
sub esi, ecx
lea eax, [esp + 0x268]
sar esi, 1
cmp ebx, eax
je 0x10013e2c
push ecx
push ebx
mov edx, 0x104
mov ecx, eax
call fcn.1001a3af
test eax, eax
je 0x1001411e
push 0x5c
pop eax
cmp ax, word [esp + esi*2 + 0x266]
mov esi, 0x104
je 0x10013e5f
push 0xffffffffffffffff
push 0x100393f0
lea eax, [esp + 0x270]
push esi
push eax
call fcn.1001a3af
add esp, 0x10
cmp eax, 0x50
je 0x1001411e
lea eax, [esp + 0x44]
mov edx, esi
push eax
lea ecx, [esp + 0x26c]
call fcn.1001a3af
jmp 0x10013e7b
mov eax, edi
mov esi, 0x104
test eax, eax
je 0x1001411e
lea ecx, [esp + 0x268]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, di
jne 0x10013e8d
sub ecx, edx
sar ecx, 1
push 0x5c
pop eax
cmp ax, word [esp + ecx*2 + 0x266]
je 0x10013eca
push 0xffffffffffffffff
push 0x100393f0
lea eax, [esp + 0x270]
push esi
push eax
call fcn.1001a3af
add esp, 0x10
cmp eax, 0x50
je 0x1001411e
push 0x10039754
mov edx, esi
lea ecx, [esp + 0x26c]
call fcn.1001a3af
test eax, eax
je 0x1001411e
push 0xffffffffffffffff
lea eax, [esp + 0x48]
push eax
lea eax, [esp + 0x888]
push esi
push eax
call fcn.1001a3af
add esp, 0x10
cmp eax, 0x50
je 0x1001411e
lea esi, [esp + 0x880]
lea ecx, [esi + 2]
mov ax, word [esi]
add esi, 2
cmp ax, di
jne 0x10013f10
sub esi, ecx
mov edx, str..TEM
lea ecx, [esp + 0x880]
sar esi, 1
call fcn.1001a3af
test eax, eax
je 0x10013f51
lea esi, [esi*2 - 8]
cmp esi, 0x208
jae 0x1001413a
xor eax, eax
mov word [esp + esi + 0x880], ax
xor esi, esi
lea eax, [esp + 0x470]
push esi
push 5
push eax
push esi
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
je 0x1001411e
lea ecx, [esp + 0x470]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, si
jne 0x10013f77
sub ecx, edx
sar ecx, 1
push 0x5c
pop eax
cmp ax, word [esp + ecx*2 + 0x46e]
je 0x10013fb8
push 0xffffffffffffffff
push 0x100393f0
lea eax, [esp + 0x478]
push 0x104
push eax
call fcn.1001a3af
add esp, 0x10
cmp eax, 0x50
je 0x1001411e
push str.My_Web_Sites
mov edx, 0x104
lea ecx, [esp + 0x474]
call fcn.1001a3af
test eax, eax
je 0x1001411e
push ecx
lea eax, [esp + 0x474]
push eax
push 1
push eax
lea edx, [esp + 0x890]
lea ecx, [esp + 0x278]
call fcn.1001a3af
test eax, eax
je 0x1001411e
mov ecx, ebx
call fcn.1001a3af
mov ebx, esi
mov edi, str.default.htm
jmp 0x1001400f
xor esi, esi
test edi, edi
je 0x10014090
lea esi, [esp + 0x470]
xor edx, edx
lea ecx, [esi + 2]
mov ax, word [esi]
add esi, 2
cmp ax, dx
jne 0x1001401f
push ecx
sub esi, ecx
lea eax, [esp + 0x474]
push eax
mov edx, 0x104
sar esi, 1
lea ecx, [esp + 0x680]
call fcn.1001a3af
test eax, eax
je 0x100140c5
push 0x5c
pop eax
cmp ax, word [esp + esi*2 + 0x676]
je 0x1001407a
push 0xffffffffffffffff
push 0x100393f0
lea eax, [esp + 0x680]
push 0x104
push eax
call fcn.1001a3af
add esp, 0x10
cmp eax, 0x50
je 0x100140c5
push edi
mov edx, 0x104
lea ecx, [esp + 0x67c]
call fcn.1001a3af
xor esi, esi
jmp 0x10014092
mov eax, esi
test eax, eax
je 0x100140c5
xor eax, eax
cmp ax, word [esp + 0x678]
je 0x100140bf
lea eax, [esp + 0x678]
push eax
call dword [sym.imp.kernel32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x100140bf
shr eax, 4
not eax
and eax, 1
jmp 0x100140c1
mov eax, esi
test eax, eax
jne 0x100140d7
inc ebx
imul eax, ebx, 0x1a
lea edi, [eax + str.default.htm]
test edi, edi
jne 0x1001400d
imul eax, ebx, 0x1a
lea eax, [eax + str.default.htm]
test eax, eax
je 0x1001411e
push dword [ebp + 0x10]
mov edx, dword [ebp + 8]
lea ecx, [esp + 0x474]
push dword [ebp + 0xc]
push ecx
xor ecx, ecx
push ecx
mov ecx, dword [esp + 0x24]
push eax
push str.Edit
call fcn.1001a3af
neg eax
sbb eax, eax
and eax, 0x7ffbeffd
add eax, 0x80041003
jmp 0x10014123
mov eax, 0x80040013
jmp 0x10014123
mov eax, 0x80041003
mov ecx, dword [esp + 0xa8c]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.1001c65c
mov esp, ebp
pop ebp
ret 0xc
call fcn.1001a3af
int3