Function at 0x413080
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1678
call fcn.00437cf0
mov eax, dword [0x4f2500]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 0xc]
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
push eax
push edi
push str.GetAllFilePath_Enter.__lpSourcePath___s__lpInstallPath___s
mov ebx, ecx
push 0x192
mov dword [ebp - 0x1670], ebx
mov dword [ebp - 0x1678], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
mov eax, dword [0x4f6d14]
push str.ModuleAid.cpp
push 1
push eax
mov eax, str.CModuleAidManger::ReadFilesThatNeedCopy
call fcn.00403090
xor ecx, ecx
push 0x7fe
push ecx
lea edx, [ebp - 0x100a]
push edx
mov word [ebp - 0x100c], cx
call fcn.004276b0
add esp, 0x2c
xor eax, eax
push 0x7fe
push eax
lea ecx, [ebp - 0x80a]
push ecx
mov word [ebp - 0x80c], ax
call fcn.004276b0
lea ecx, [ebp - 0x100c]
add esp, 0xc
mov eax, edi
sub ecx, edi
mov edi, edi
movzx edx, word [eax]
mov word [ecx + eax], dx
add eax, 2
test dx, dx
jne 0x413120
lea eax, [ebp - 0x100c]
add eax, 0xfffffffe
jmp 0x413140
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x413140
mov edx, dword [0x4cbc14]
mov ecx, dword [0x4cbc18]
mov dword [eax], edx
mov dx, word [0x4cbc1c]
mov dword [eax + 4], ecx
mov word [eax + 8], dx
lea eax, [ebp - 0x125c]
push eax
lea ecx, [ebp - 0x100c]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x1674], eax
cmp eax, 0xffffffff
je 0x413309
mov esi, dword [ebp + 0x10]
mov edi, edi
mov ecx, 0x4cbc2c
lea eax, [ebp - 0x1230]
jmp 0x4131a0
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4131c6
test dx, dx
je 0x4131c2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4131c6
add eax, 4
add ecx, 4
test dx, dx
jne 0x4131a0
xor eax, eax
jmp 0x4131cb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4132e0
mov ecx, 0x4cbc30
lea eax, [ebp - 0x1230]
mov edi, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x413206
test dx, dx
je 0x413202
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x413206
add eax, 4
add ecx, 4
test dx, dx
jne 0x4131e0
xor eax, eax
jmp 0x41320b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4132e0
lea edx, [ebp - 0x1230]
push edx
push edi
push str._s_s
lea edx, [ebp - 0x80c]
call fcn.00411e20
add esp, 0xc
test byte [ebp - 0x125c], 0x10
je 0x413252
mov eax, dword [ebp - 0x1678]
push esi
push eax
lea ecx, [ebp - 0x80c]
push ecx
mov ecx, ebx
call fcn.00413080
jmp 0x4132e0
xor eax, eax
jmp 0x413260
movzx ecx, word [ebp + eax - 0x80c]
mov word [ebp + eax - 0x166c], cx
add eax, 2
test cx, cx
jne 0x413260
lea edx, [ebp - 0x166c]
push edx
push str.pFile.wOldFilePath___s
push 0x1b3
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
mov eax, dword [0x4f6d14]
push str.ModuleAid.cpp
push 1
push eax
mov eax, str.CModuleAidManger::ReadFilesThatNeedCopy
call fcn.00403090
add esp, 0x1c
cmp esi, 1
jne 0x4132b7
add ebx, 0x2290
jmp 0x4132cf
cmp esi, 2
jne 0x4132c4
add ebx, 0x22a0
jmp 0x4132cf
cmp esi, 3
jne 0x4132e0
add ebx, 0x22b0
lea eax, [ebp - 0x166c]
call fcn.00417150
mov ebx, dword [ebp - 0x1670]
mov edx, dword [ebp - 0x1674]
lea ecx, [ebp - 0x125c]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x413190
mov eax, dword [ebp - 0x1674]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
mov eax, 1
pop ebx
call fcn.0042292e
mov esp, ebp
pop ebp
ret 0xc