Function at 0x41309d
Capabilities:
Check if file exists
Enumerate files on windows
Enumerate files recursively
Get file attributes

Disassembly:
push ebp
lea ebp, [esp - 0x4f0]
sub esp, 0x570
mov eax, dword [0x47e5d0]
xor eax, ebp
mov dword [ebp + 0x4ec], eax
mov eax, dword [ebp + 0x500]
push ebx
push esi
push edi
mov edi, dword [ebp + 0x4f8]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp + 0x504]
mov esi, 0x103
xor ebx, ebx
push esi
mov dword [ebp - 0x7c], eax
lea eax, [ebp + 0x3e9]
push ebx
push eax
mov dword [ebp - 0x68], edi
mov byte [ebp + 0x3e8], bl
call fcn.00452e00
push esi
lea eax, [ebp + 0x2e5]
push ebx
push eax
mov byte [ebp + 0x2e4], bl
call fcn.00452e00
push esi
lea eax, [ebp + 0x1e1]
push ebx
push eax
mov byte [ebp + 0x1e0], bl
call fcn.00452e00
push esi
lea eax, [ebp + 0xdd]
push ebx
push eax
mov byte [ebp + 0xdc], bl
call fcn.00452e00
push 0x13c
lea eax, [ebp - 0x60]
push ebx
push eax
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x64], ebx
call fcn.00452e00
add esp, 0x3c
push edi
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
call edi
inc eax
cmp eax, esi
jle 0x413160
mov eax, esi
jmp 0x413166
push dword [ebp - 0x68]
call edi
inc eax
push eax
push dword [ebp - 0x68]
lea eax, [ebp + 0x3e8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatA]
cmp byte [ebp + 0x3e8], bl
je 0x4131c8
lea eax, [ebp + 0x3e8]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
test al, 0x10
je 0x4131c8
lea eax, [ebp + 0x3e8]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x4131c8
lea eax, [ebp + 0x3e8]
push eax
call edi
lea ecx, [ebp + 0x3e8]
cmp byte [eax + ecx - 1], 0x5c
je 0x4131c8
push 0x4648e0
mov eax, ecx
push eax
call esi
lea eax, [ebp + 0x3e8]
push eax
call edi
lea ecx, [ebp + 0x3e8]
dec ecx
cmp byte [eax + ecx], 0x5c
je 0x413209
cmp byte [ebp + 0x3e8], bl
je 0x413209
lea eax, [ebp + 0x3e8]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
test al, 0x10
je 0x413217
lea eax, [ebp + 0x3e8]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x413217
push 0x467b20
lea eax, [ebp + 0x3e8]
push eax
call esi
lea eax, [ebp + 0x3e8]
push eax
lea eax, [ebp + 0x2e4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea eax, [ebp + 0x2e4]
push eax
call edi
dec eax
lea edi, [ebp + eax + 0x2e4]
cmp byte [edi], bl
je 0x413260
cmp eax, ebx
jle 0x413260
mov cl, byte [ebp + eax + 0x2e3]
cmp cl, 0x5c
je 0x41325a
cmp cl, 0x3a
je 0x41325a
cmp cl, 0xa
jne 0x413234
mov byte [edi], bl
xor eax, eax
jmp 0x413235
push 0xc
lea eax, [ebp + 0xdc]
push eax
push dword [ebp - 0x68]
call fcn.00411eca
cmp byte [ebp + 0xdc], bl
jne 0x41328b
push 0x467b20
lea eax, [ebp + 0xdc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edi, dword [sym.imp.KERNEL32.dll_FindFirstFileA]
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp + 0x3e8]
push eax
call edi
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0xffffffff
je 0x4132ec
push 0x466c80
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
je 0x4132db
push 0x467414
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
je 0x4132db
test byte [ebp - 0x64], 0x10
je 0x4132d8
inc dword [ebp - 0x70]
jmp 0x4132db
inc dword [ebp - 0x6c]
lea eax, [ebp - 0x64]
push eax
push dword [ebp - 0x68]
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x4132a1
push dword [ebp - 0x68]
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [ebp + 0x4fc], ebx
je 0x4133f3
lea eax, [ebp + 0x2e4]
push eax
lea eax, [ebp + 0x3e8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x467b20
lea eax, [ebp + 0x3e8]
push eax
call esi
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp + 0x3e8]
push eax
call edi
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0xffffffff
je 0x4133ea
cmp byte [ebp - 0x38], bl
je 0x4133d5
mov edi, dword [sym.imp.KERNEL32.dll_lstrcmpA]
push 0x466c80
lea eax, [ebp - 0x38]
push eax
call edi
test eax, eax
je 0x4133d5
push 0x467414
lea eax, [ebp - 0x38]
push eax
call edi
test eax, eax
je 0x4133d5
test byte [ebp - 0x64], 0x10
je 0x4133d5
lea eax, [ebp + 0x2e4]
push eax
lea eax, [ebp + 0x1e0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp + 0x1e0]
push eax
call esi
push 0x4648e0
lea eax, [ebp + 0x1e0]
push eax
call esi
lea eax, [ebp + 0xdc]
push eax
lea eax, [ebp + 0x1e0]
push eax
call esi
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x80]
push eax
push dword [ebp + 0x4fc]
lea eax, [ebp + 0x1e0]
push eax
call fcn.0041309d
mov eax, dword [ebp - 0x80]
add dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x78]
add dword [ebp - 0x70], eax
lea eax, [ebp - 0x64]
push eax
push dword [ebp - 0x68]
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x413333
push dword [ebp - 0x68]
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [ebp - 0x74], ebx
je 0x413409
push 4
lea eax, [ebp - 0x6c]
push eax
push dword [ebp - 0x74]
call fcn.00452790
add esp, 0xc
cmp dword [ebp - 0x7c], ebx
pop edi
pop esi
pop ebx
je 0x413427
push 4
lea eax, [ebp - 0x70]
push eax
push dword [ebp - 0x7c]
call fcn.00452790
mov eax, dword [ebp - 0x70]
add esp, 0xc
jmp 0x41342a
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp + 0x4ec]
xor ecx, ebp
call fcn.00452dee
add ebp, 0x4f0
leave
ret 0x10