Function at 0x45f4a0
Capabilities:
Check if file exists
Enumerate files on windows
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4f1ad2
mov eax, dword fs:[0]
push eax
sub esp, 0x2c
push ebx
push esi
push edi
mov eax, dword [0x541100]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0x250
call fcn.004cd074
mov edi, esp
xor esi, esi
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x24], esp
mov dword [ebp - 0x1c], edi
call fcn.004bdbe3
xor ecx, ecx
cmp eax, esi
setne cl
cmp ecx, esi
jne 0x45f4fc
push 0x80004005
call fcn.00420000
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [edi], eax
mov ecx, str.FilesDiff_PostScan_CollectSxsInfo:_In
mov dword [ebp - 4], esi
test ecx, 0xffff0000
jne 0x45f534
mov edx, ecx
movzx ebx, dx
push ebx
call fcn.004c5d7f
cmp eax, esi
je 0x45f54e
push ebx
push eax
mov ecx, edi
call fcn.00422eb3
jmp 0x45f54e
push str.FilesDiff_PostScan_CollectSxsInfo:_In
call fcn.004ccd1a
add esp, 4
push eax
push str.FilesDiff_PostScan_CollectSxsInfo:_In
mov ecx, edi
call fcn.00423404
push ecx
mov dword [ebp - 4], 1
mov edi, esp
mov dword [ebp - 0x20], esp
mov dword [ebp - 0x20], edi
call fcn.004bdbe3
xor ecx, ecx
cmp eax, esi
setne cl
cmp ecx, esi
jne 0x45f578
push 0x80004005
call fcn.00420000
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [edi], eax
mov eax, str.General
shr eax, 0x10
mov byte [ebp - 4], 2
mov dword [ebp - 0x1c], eax
cmp eax, esi
jne 0x45f5b6
mov ecx, str.General
movzx ebx, cx
push ebx
call fcn.004c5d7f
cmp eax, esi
je 0x45f5d0
push ebx
push eax
mov ecx, edi
call fcn.00422eb3
jmp 0x45f5d0
push str.General
call fcn.004ccd1a
add esp, 4
push eax
push str.General
mov ecx, edi
call fcn.00423404
mov byte [ebp - 4], 1
or esi, 0xffffffff
push 1
mov dword [ebp - 4], esi
call fcn.0047c9c0
mov eax, dword [ebp + 0xc]
add esp, 0xc
test eax, eax
je 0x45f81a
mov edi, dword [eax + 0x24]
cmp edi, dword [eax + 0x28]
jbe 0x45f5fc
call fcn.004cce91
mov ebx, dword [ebp + 0xc]
mov edx, dword [ebx + 0x18]
mov dword [ebp - 0x34], edx
mov esi, edi
mov edi, dword [ebx + 0x28]
cmp dword [ebx + 0x24], edi
jbe 0x45f614
call fcn.004cce91
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebx + 0x18]
test ecx, ecx
je 0x45f622
cmp ecx, eax
je 0x45f627
call fcn.004cce91
cmp esi, edi
je 0x45fa8d
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x45f66f
call fcn.004cce91
xor eax, eax
cmp esi, dword [eax + 0x10]
jb 0x45f647
call fcn.004cce91
mov eax, dword [esi]
sub eax, 0x10
push eax
call fcn.00423475
add esp, 4
lea edi, [eax + 0x10]
push edi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x45f673
test al, 0x10
je 0x45f673
mov ebx, 1
jmp 0x45f675
mov eax, dword [eax]
jmp 0x45f63d
xor ebx, ebx
add edi, 0xfffffff0
lea eax, [edi + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45f691
mov ecx, dword [edi]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push edi
call eax
test ebx, ebx
je 0x45f7ef
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x45f70d
call fcn.004cce91
xor eax, eax
cmp esi, dword [eax + 0x10]
jb 0x45f6b1
call fcn.004cce91
mov ecx, dword [esi]
push ecx
push ecx
mov edi, esp
mov dword [ebp - 0x24], esp
mov dword [ebp - 0x18], edi
call fcn.004bdbe3
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x45f4f2
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [edi], eax
mov ecx, str.FilesDiff_PostScan_CollectSxsInfo_SxS_:_New_product_assembly_detected:___s_
mov dword [ebp - 4], 3
test ecx, 0xffff0000
jne 0x45f711
mov edx, ecx
movzx ebx, dx
push ebx
call fcn.004c5d7f
test eax, eax
je 0x45f72b
push ebx
push eax
mov ecx, edi
call fcn.00422eb3
jmp 0x45f72b
mov eax, dword [eax]
jmp 0x45f6a7
push str.FilesDiff_PostScan_CollectSxsInfo_SxS_:_New_product_assembly_detected:___s_
call fcn.004ccd1a
add esp, 4
push eax
push str.FilesDiff_PostScan_CollectSxsInfo_SxS_:_New_product_assembly_detected:___s_
mov ecx, edi
call fcn.00423404
push ecx
mov dword [ebp - 4], 4
mov edi, esp
mov dword [ebp - 0x20], esp
mov dword [ebp - 0x20], edi
call fcn.004bdbe3
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x45f4f2
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [edi], eax
mov byte [ebp - 4], 5
cmp dword [ebp - 0x1c], 0
jne 0x45f784
mov ecx, str.General
movzx ebx, cx
push ebx
call fcn.004c5d7f
test eax, eax
je 0x45f79e
push ebx
push eax
mov ecx, edi
call fcn.00422eb3
jmp 0x45f79e
push str.General
call fcn.004ccd1a
add esp, 4
push eax
push str.General
mov ecx, edi
call fcn.00423404
mov byte [ebp - 4], 4
push 1
mov dword [ebp - 4], 0xffffffff
call fcn.0047c9c0
mov eax, dword [ebp - 0x34]
add esp, 0x10
push 0
test eax, eax
jne 0x45f812
call fcn.004cce91
xor eax, eax
cmp esi, dword [eax + 0x10]
jb 0x45f7cd
call fcn.004cce91
mov eax, dword [esi]
push ecx
sub eax, 0x10
mov dword [ebp - 0x24], esp
mov edi, esp
push eax
call fcn.00423475
mov edx, dword [ebp + 8]
add esp, 4
add eax, 0x10
push edx
mov dword [edi], eax
call fcn.0046f700
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x45f816
call fcn.004cce91
xor eax, eax
cmp esi, dword [eax + 0x10]
jb 0x45f807
call fcn.004cce91
mov ebx, dword [ebp + 0xc]
add esi, 4
jmp 0x45f607
mov eax, dword [eax]
jmp 0x45f7c3
mov eax, dword [eax]
jmp 0x45f7fd
mov eax, dword [ebp + 8]
mov eax, dword [eax]
xor edi, edi
lea ecx, [ebp - 0x14]
push ecx
push edi
push edi
push edi
push edi
push edi
lea edx, [ebp - 0x18]
push edx
push edi
push edi
push eax
mov ebx, 0x5471c0
mov dword [ebp - 0x14], edi
call fcn.0049a280
cmp eax, edi
je 0x45f847
cmp dword [ebp - 0x18], edi
jne 0x45f84a
mov dword [ebp - 0x14], edi
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x24], esp
push 0x547060
push eax
call fcn.0042aa92
mov ebx, dword [ebp + 8]
mov dword [ebp - 4], 6
mov eax, dword [ebx]
push 0
push ecx
sub eax, 0x10
mov dword [ebp - 0x18], esp
mov edi, esp
push eax
call fcn.00423475
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov dword [ebp - 4], esi
call fcn.0047b250
add esp, 0x20
test eax, eax
jne 0x45fba0
push 0x508010
lea ecx, [ebp - 0x18]
push ebx
push ecx
call fcn.00422a76
mov edx, dword [ebp - 0x10]
mov eax, dword [eax]
add esp, 0xc
push 0
push 0
push 0
push edx
push 0
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov edi, eax
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff0
mov dword [ebp - 0x24], edi
lea ecx, [eax + 0xc]
mov edx, esi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x45f8df
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp edi, esi
je 0x45fa8d
mov ebx, dword [ebp - 0x10]
add ebx, 0x2c
cmp word [ebx], 0x2e
jne 0x45f90d
mov ecx, dword [ebp - 0x10]
movzx eax, word [ecx + 0x2e]
cmp ax, 0x2e
je 0x45fa73
test ax, ax
je 0x45fa73
push 0x5f
push ebx
call fcn.004cdc18
add esp, 8
test eax, eax
je 0x45fa73
push 0x2e
push ebx
call fcn.004cdc18
add esp, 8
test eax, eax
je 0x45fa73
mov edx, dword [ebp - 0x10]
test byte [edx], 0x10
je 0x45fa73
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x45f95e
push eax
push 0x5471c0
mov eax, ebx
call fcn.00499ce0
add esp, 8
test eax, eax
jne 0x45fa73
push ecx
mov ecx, esp
mov dword [ebp - 0x28], esp
push 0x50057c
call fcn.00422827
push ecx
mov dword [ebp - 4], 7
mov ecx, esp
mov dword [ebp - 0x2c], esp
push ebx
call fcn.00422827
mov eax, dword [ebp + 8]
mov byte [ebp - 4], 8
mov eax, dword [eax]
push ecx
sub eax, 0x10
mov dword [ebp - 0x30], esp
mov edi, esp
push eax
call fcn.00423475
add eax, 0x10
mov dword [edi], eax
add esp, 4
lea edi, [ebp - 0x20]
mov dword [ebp - 4], esi
call fcn.004770a0
add esp, 0xc
mov dword [ebp - 4], 9
mov ecx, dword [eax]
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str.FilesDiff_PostScan_CollectSxsInfo_SxS_:_New_product_assembly_detected:___s_
call fcn.00422827
push ecx
mov byte [ebp - 4], 0xa
mov ecx, esp
mov dword [ebp - 0x2c], esp
push str.General
call fcn.00422827
push 1
mov byte [ebp - 4], 9
call fcn.0047c9c0
mov dword [ebp - 4], esi
mov eax, dword [ebp - 0x20]
add eax, 0xfffffff0
add esp, 0x10
lea edx, [eax + 0xc]
lock xadd dword [edx], esi
dec esi
test esi, esi
jg 0x45fa0a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push 0
push ecx
mov dword [ebp - 0x30], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push 0x50057c
call fcn.00422827
push ecx
mov dword [ebp - 4], 0xb
mov ecx, esp
mov dword [ebp - 0x2c], esp
push ebx
call fcn.00422827
push ecx
mov ecx, dword [ebp + 8]
mov byte [ebp - 4], 0xc
mov eax, dword [ecx]
sub eax, 0x10
mov dword [ebp - 0x28], esp
mov esi, esp
push eax
call fcn.00423475
add eax, 0x10
mov dword [esi], eax
add esp, 4
mov dword [ebp - 4], 0xffffffff
call fcn.004770a0
mov edx, dword [ebp + 8]
add esp, 0xc
push edx
call fcn.0046f700
mov edi, dword [ebp - 0x24]
or esi, 0xffffffff
mov eax, dword [ebp - 0x10]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x45f8ed
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
push ecx
mov edi, esp
mov dword [ebp - 0x30], esp
mov dword [ebp - 0x2c], edi
call fcn.004bdbe3
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x45fab0
push 0x80004005
call fcn.00420000
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [edi], eax
mov ecx, str.FilesDiff_PostScan_CollectSxsInfo:_Done
mov dword [ebp - 4], 0xd
test ecx, 0xffff0000
jne 0x45faec
mov edx, ecx
movzx ebx, dx
push ebx
call fcn.004c5d7f
test eax, eax
je 0x45fb06
push ebx
push eax
mov ecx, edi
call fcn.00422eb3
jmp 0x45fb06
push str.FilesDiff_PostScan_CollectSxsInfo:_Done
call fcn.004ccd1a
add esp, 4
push eax
push str.FilesDiff_PostScan_CollectSxsInfo:_Done
mov ecx, edi
call fcn.00423404
push ecx
mov dword [ebp - 4], 0xe
mov edi, esp
mov dword [ebp - 0x2c], esp
mov dword [ebp - 0x2c], edi
call fcn.004bdbe3
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x45fb30
push 0x80004005
call fcn.00420000
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [edi], eax
mov byte [ebp - 4], 0xf
cmp dword [ebp - 0x1c], 0
jne 0x45fb65
mov ecx, str.General
movzx ebx, cx
push ebx
call fcn.004c5d7f
test eax, eax
je 0x45fb7f
push ebx
push eax
mov ecx, edi
call fcn.00422eb3
jmp 0x45fb7f
push str.General
call fcn.004ccd1a
add esp, 4
push eax
push str.General
mov ecx, edi
call fcn.00423404
mov byte [ebp - 4], 0xe
push 1
mov dword [ebp - 4], 0xffffffff
call fcn.0047c9c0
mov edx, dword [ebp - 0x10]
add esp, 0xc
push edx
call fcn.004ccf97
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret