Function at 0x1000849b
Capabilities:
Check if file exists
Enumerate files on windows
Get file attributes

Disassembly:
sub esp, 0x268
mov eax, dword [0x1001ff00]
xor eax, esp
mov dword [esp + 0x264], eax
push ebx
push ebp
push esi
mov esi, dword [esp + 0x280]
push edi
mov edi, dword [esp + 0x27c]
push edi
call sym.java.dll__JNU_ClassString_4
mov ebp, eax
mov dword [esp + 0x18], ebp
test ebp, ebp
je 0x10008738
push dword [0x1001ff58]
push esi
push edi
call fcn.1000a1e8
mov ebx, eax
add esp, 0xc
test ebx, ebx
je 0x10008738
push ebx
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
lea eax, [eax*2 + 6]
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
pop ecx
mov esi, eax
pop ecx
push ebx
test esi, esi
jne 0x10008531
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [esp], str.native_memory_allocation_faiuled
push edi
mov dword [eax], 0xc
call sym.java.dll__JNU_ThrowOutOfMemoryError_8
jmp 0x10008738
push esi
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy]
push ebx
mov ebx, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call ebx
add esp, 0xc
push esi
call dword [sym.imp.kernel32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x10008734
test al, 0x10
je 0x10008734
push esi
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
pop ecx
push 0x20
pop edx
lea ecx, [eax - 1]
lea ecx, [esi + ecx*2]
jmp 0x10008573
dec eax
lea ecx, [ecx - 2]
cmp word [ecx], dx
je 0x1000856f
xor ecx, ecx
push 0x5c
pop edx
mov word [esi + eax*2], cx
cmp word [esi], dx
jne 0x1000858c
cmp word [esi + 2], cx
je 0x100085a7
cmp word [esi + 2], 0x3a
jne 0x100085ae
movzx eax, word [esi + 4]
test ax, ax
je 0x100085a7
cmp ax, dx
jne 0x100085ae
cmp word [esi + 6], cx
jne 0x100085ae
push 0x10017990
jmp 0x100085b3
push 0x10017994
push esi
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscat]
pop ecx
pop ecx
lea eax, [esp + 0x24]
push eax
push esi
call dword [sym.imp.kernel32.dll_FindFirstFileW]
mov ebx, eax
push esi
mov dword [esp + 0x14], ebx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
pop ecx
cmp ebx, 0xffffffff
jne 0x100085fd
call dword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 2
jne 0x10008738
mov eax, dword [edi]
push 0
push ebp
push 0
push edi
call dword [eax + 0x2b0]
jmp 0x1000873a
mov eax, dword [edi]
xor ebx, ebx
push 0x10
pop ecx
push ebx
push ebp
push ecx
push edi
mov dword [esp + 0x24], ecx
call dword [eax + 0x2b0]
mov ebp, eax
test ebp, ebp
je 0x10008728
lea eax, [esp + 0x50]
push 0x1001799c
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscmp]
pop ecx
pop ecx
test eax, eax
je 0x100086d3
lea eax, [esp + 0x50]
push 0x100179a0
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscmp]
pop ecx
pop ecx
test eax, eax
je 0x100086d3
mov esi, dword [edi]
lea eax, [esp + 0x50]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
pop ecx
push eax
lea eax, [esp + 0x54]
push eax
push edi
call dword [esi + 0x28c]
mov dword [esp + 0x20], eax
test eax, eax
je 0x10008728
mov esi, dword [esp + 0x14]
cmp ebx, esi
jne 0x100086bb
mov ecx, dword [edi]
add esi, esi
push 0
push dword [esp + 0x1c]
mov dword [esp + 0x24], ebp
push esi
push edi
mov dword [esp + 0x24], esi
call dword [ecx + 0x2b0]
mov ebp, eax
test ebp, ebp
je 0x10008728
mov esi, dword [esp + 0x1c]
push ebx
push esi
push ebp
push edi
call fcn.10012330
test eax, eax
js 0x10008728
mov eax, dword [edi]
push esi
push edi
call dword [eax + 0x5c]
mov esi, dword [esp + 0x20]
mov eax, dword [edi]
push esi
push ebx
push ebp
push edi
call dword [eax + 0x2b8]
mov eax, dword [edi]
inc ebx
push esi
push edi
call dword [eax + 0x5c]
lea eax, [esp + 0x24]
push eax
push dword [esp + 0x14]
call dword [sym.imp.kernel32.dll_FindNextFileW]
test eax, eax
jne 0x1000861c
call dword [sym.imp.kernel32.dll_GetLastError]
push dword [esp + 0x10]
mov esi, eax
call dword [sym.imp.kernel32.dll_FindClose]
cmp esi, 0x12
jne 0x10008738
mov eax, dword [edi]
push 0
push dword [esp + 0x1c]
push ebx
push edi
call dword [eax + 0x2b0]
mov esi, eax
test esi, esi
je 0x10008738
push ebx
push ebp
push esi
push edi
call fcn.10012330
test eax, eax
js 0x10008738
mov eax, esi
jmp 0x1000873a
push dword [esp + 0x10]
call dword [sym.imp.kernel32.dll_FindClose]
jmp 0x10008738
push esi
call ebx
pop ecx
xor eax, eax
mov ecx, dword [esp + 0x274]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.10014785
add esp, 0x268
ret 0xc