Function at 0x418020
Capabilities:
Check if file exists
Enumerate files on windows
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x44f85d
mov eax, dword fs:[0]
push eax
mov eax, 0x104e0
call fcn.00445b20
mov eax, dword [0x46166c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
push 0x104
lea ecx, [ebp - 0x224]
push ecx
push str.APPDATA
mov dword [ebp - 0x10434], eax
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
xor ebx, ebx
mov dword [ebp - 0x22c], 0xf
mov dword [ebp - 0x230], ebx
mov byte [ebp - 0x240], bl
lea eax, [ebp - 0x224]
mov dword [ebp - 4], ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x418096
sub eax, edx
push eax
lea edx, [ebp - 0x224]
push edx
lea ecx, [ebp - 0x240]
call fcn.0040aae0
push 0x17
push str.Baidu_browserUserData
lea ecx, [ebp - 0x240]
call fcn.0040aae0
cmp dword [ebp - 0x22c], 0x10
mov eax, dword [ebp - 0x240]
jae 0x4180d9
lea eax, [ebp - 0x240]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
je 0x41831f
mov eax, dword [ebp - 0x240]
mov esi, 0x10
cmp dword [ebp - 0x22c], esi
jae 0x418101
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x11c]
push 0x104
push eax
call fcn.00430087
add esp, 0xc
push str..
lea ecx, [ebp - 0x11c]
push 0x104
push ecx
call fcn.004300e6
add esp, 0xc
lea edx, [ebp - 0x3d4]
push edx
lea eax, [ebp - 0x11c]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x10420], eax
cmp eax, 0xffffffff
jne 0x418160
cmp dword [ebp - 0x22c], esi
jmp 0x418326
test byte [ebp - 0x3d4], 0x10
je 0x418303
cmp byte [ebp - 0x3a8], 0x2e
je 0x418303
mov dword [ebp - 0x248], 0xf
mov dword [ebp - 0x24c], ebx
mov byte [ebp - 0x25c], bl
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x240]
mov edi, 0x10
cmp dword [ebp - 0x22c], edi
jae 0x4181ad
lea edx, [ebp - 0x240]
mov eax, edx
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4181b2
sub eax, esi
push eax
push edx
lea ecx, [ebp - 0x25c]
call fcn.0040aae0
push 1
push 0x45496c
lea ecx, [ebp - 0x25c]
call fcn.0040aae0
lea eax, [ebp - 0x3a8]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4181e3
sub eax, edx
push eax
lea edx, [ebp - 0x3a8]
push edx
lea ecx, [ebp - 0x25c]
call fcn.0040aae0
push 0xc
push str.userpref_v2
lea ecx, [ebp - 0x25c]
call fcn.0040aae0
mov ecx, dword [ebp - 0x25c]
cmp dword [ebp - 0x248], edi
jae 0x418225
lea ecx, [ebp - 0x25c]
lea edi, [ebp - 0x10430]
call fcn.0041ad90
lea eax, [ebp - 0x103e0]
mov dword [ebp - 0x103ec], eax
neg eax
and eax, 3
lea ecx, [ebp + eax - 0x103e0]
lea edx, [ebp - 0x3e0]
mov dword [ebp - 0x1041c], ebx
mov dword [ebp - 0x10418], ebx
mov dword [ebp - 0x1040c], ebx
mov dword [ebp - 0x10408], ebx
mov dword [ebp - 0x10404], ebx
mov dword [ebp - 0x103fc], ebx
mov dword [ebp - 0x3e0], ebx
mov dword [ebp - 0x3dc], ebx
mov dword [ebp - 0x103e8], ecx
mov dword [ebp - 0x103e4], edx
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x10430]
push eax
lea edi, [ebp - 0x1041c]
call fcn.0041cb50
mov eax, dword [ebp - 0x10404]
mov dword [ebp - 0x1043c], eax
cmp eax, ebx
jne 0x418357
lea esi, [ebp - 0x103ec]
mov byte [ebp - 4], 2
call fcn.0041c090
mov eax, dword [ebp - 0x10430]
cmp eax, ebx
je 0x4182d6
push eax
call fcn.0042f0d0
add esp, 4
mov byte [ebp - 4], bl
cmp dword [ebp - 0x248], 0x10
mov dword [ebp - 0x10430], ebx
mov dword [ebp - 0x1042c], ebx
mov dword [ebp - 0x10428], ebx
jb 0x418303
mov ecx, dword [ebp - 0x25c]
push ecx
call fcn.0042f0d0
add esp, 4
mov eax, dword [ebp - 0x10420]
lea edx, [ebp - 0x3d4]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x418160
cmp dword [ebp - 0x22c], 0x10
jb 0x418337
mov ecx, dword [ebp - 0x240]
push ecx
call fcn.0042f0d0
add esp, 4
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0042ed1f
mov esp, ebp
pop ebp
ret 4
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x10420], esi
cmp esi, ebx
je 0x4185f7
jmp 0x418376
mov esi, dword [ebp - 0x10420]
push esi
mov ebx, 0x4564c8
call fcn.0041afd0
mov eax, dword [eax + 4]
test eax, eax
jne 0x41838d
mov eax, 0x464948
push str.homePage
push eax
call fcn.004303ff
add esp, 8
push esi
test eax, eax
jne 0x41852a
mov ebx, str.value
call fcn.0041afd0
test eax, eax
je 0x4183bb
mov edx, eax
mov ecx, esi
call fcn.0041b0e0
mov eax, str.value
inc eax
cmp byte [eax], 0
jne 0x4183c0
sub eax, str.value
lea ebx, [eax + 1]
lea esi, [ebp - 0x103ec]
call fcn.0041c0f0
mov dword [ebp - 0x10438], eax
test ebx, ebx
je 0x4183f9
mov ecx, str.value
sub ecx, eax
mov esi, ebx
lea esp, [esp]
mov dl, byte [ecx + eax]
mov byte [eax], dl
inc eax
dec esi
jne 0x4183f0
mov eax, dword [ebp - 0x10434]
push eax
lea ecx, [ebp - 0x278]
push 0x4564d8
push ecx
call fcn.0041ca40
add esp, 0xc
push 0x4564d4
push eax
lea edx, [ebp - 0x294]
push edx
mov byte [ebp - 4], 4
call fcn.00410c50
add esp, 0xc
mov byte [ebp - 4], 5
cmp dword [eax + 0x14], 0x10
jb 0x418439
mov eax, dword [eax]
push eax
push 0x10
push 5
mov ecx, str.homePage
call fcn.00419c20
mov edi, eax
cmp byte [edi], 0
je 0x418456
nop
inc eax
cmp byte [eax], 0
jne 0x418450
sub eax, edi
lea ebx, [eax + 1]
lea esi, [ebp - 0x103ec]
call fcn.0041c0f0
mov esi, eax
test ebx, ebx
je 0x418479
sub edi, esi
mov edi, edi
mov cl, byte [edi + eax]
mov byte [eax], cl
inc eax
dec ebx
jne 0x418470
mov ebx, 0x10
cmp dword [ebp - 0x280], ebx
jb 0x418495
mov edx, dword [ebp - 0x294]
push edx
call fcn.0042f0d0
add esp, 4
mov edi, 0xf
mov byte [ebp - 4], 3
mov dword [ebp - 0x280], edi
mov dword [ebp - 0x284], 0
mov byte [ebp - 0x294], 0
cmp dword [ebp - 0x264], ebx
jb 0x4184cc
mov eax, dword [ebp - 0x278]
push eax
call fcn.0042f0d0
add esp, 4
mov dword [ebp - 0x264], edi
mov edi, dword [ebp - 0x10438]
push esi
lea esi, [ebp - 0x103ec]
mov dword [ebp - 0x268], 0
mov byte [ebp - 0x278], 0
call fcn.0041b1f0
mov ecx, dword [ebp - 0x10420]
xor edx, edx
cmp dword [ecx + 0x20], edx
je 0x418519
mov esi, dword [ecx + 0x24]
mov dword [eax + 0x14], esi
mov esi, dword [ecx + 0x24]
mov dword [esi + 0x18], eax
mov dword [ecx + 0x24], eax
mov dword [eax + 0x18], edx
jmp 0x4185d3
mov dword [eax + 0x14], edx
mov dword [ecx + 0x20], eax
mov dword [ecx + 0x24], eax
mov dword [eax + 0x18], edx
jmp 0x4185d3
mov ebx, 0x4564c8
call fcn.0041afd0
mov eax, dword [eax + 4]
test eax, eax
jne 0x418540
mov eax, 0x464948
push str.startMethod
push eax
call fcn.004303ff
add esp, 8
test eax, eax
jne 0x4185dc
push esi
mov ebx, str.value
call fcn.0041afd0
xor ebx, ebx
cmp eax, ebx
je 0x418570
mov edx, eax
mov ecx, esi
call fcn.0041b0e0
lea ecx, [ebp - 0x103ec]
push ecx
mov eax, str.value
call fcn.0041b2b0
push 0x4564e8
push 0x16
push 2
mov ecx, str.startMethod
mov edi, eax
call fcn.00419c20
lea edx, [ebp - 0x103ec]
push edx
call fcn.0041b2b0
push eax
lea esi, [ebp - 0x103ec]
call fcn.0041b1f0
mov ecx, dword [ebp - 0x10420]
cmp dword [ecx + 0x20], ebx
je 0x4185c7
mov edx, dword [ecx + 0x24]
mov dword [eax + 0x14], edx
mov edx, dword [ecx + 0x24]
mov dword [edx + 0x18], eax
jmp 0x4185cd
mov dword [eax + 0x14], ebx
mov dword [ecx + 0x20], eax
mov dword [ecx + 0x24], eax
mov dword [eax + 0x18], ebx
mov esi, dword [ebp - 0x10420]
mov dword [eax + 0x10], ecx
push esi
mov ebx, str.Item
call fcn.0041af50
mov dword [ebp - 0x10420], eax
test eax, eax
jne 0x418370
xor ebx, ebx
lea eax, [ebp - 0x103ec]
push eax
mov eax, str.xml_version_1.0__encoding_utf_8_
call fcn.0041b2b0
push 7
mov edi, eax
lea esi, [ebp - 0x103ec]
call fcn.0041b150
mov edx, dword [ebp - 0x1043c]
lea ecx, [ebp - 0x1041c]
call fcn.0041b050
cmp dword [ebp - 0x248], 0x10
mov eax, dword [ebp - 0x25c]
jae 0x41863d
lea eax, [ebp - 0x25c]
push eax
lea ecx, [ebp - 0x104ec]
push ecx
call fcn.0041ab40
push ebx
push ebx
lea edx, [ebp - 0x1041c]
push edx
lea ecx, [ebp - 0x104ec]
xor eax, eax
push ecx
push eax
lea eax, [ebp - 0x10440]
push eax
mov byte [ebp - 4], 6
call fcn.0041dc10
add esp, 0x18
lea esi, [ebp - 0x104ec]
call fcn.0041ad50
lea ecx, [ebp - 0x1048c]
mov byte [ebp - 4], 3
call fcn.0041aca0
lea ecx, [ebp - 0x1048c]
push ecx
mov dword [ebp - method.std::ios_base.virtual_0], vtable.std::ios_base.0
call fcn.0042e431
add esp, 4
lea esi, [ebp - 0x103ec]
mov byte [ebp - 4], 2
call fcn.0041c090
mov eax, dword [ebp - 0x10430]
cmp eax, ebx
je 0x4186c5
push eax
call fcn.0042f0d0
add esp, 4
mov esi, 0x10
mov dword [ebp - 0x10430], ebx
mov dword [ebp - 0x1042c], ebx
mov dword [ebp - 0x10428], ebx
cmp dword [ebp - 0x248], esi
jb 0x4186f3
mov edx, dword [ebp - 0x25c]
push edx
call fcn.0042f0d0
add esp, 4
mov dword [ebp - 0x248], 0xf
mov dword [ebp - 0x24c], ebx
mov byte [ebp - 0x25c], bl
cmp dword [ebp - 0x22c], esi
jb 0x418720
mov eax, dword [ebp - 0x240]
push eax
call fcn.0042f0d0
add esp, 4
mov al, 1
jmp 0x418339