Function at 0x40fef0
Capabilities:
Check if file exists
Enumerate files on windows
Enumerate files recursively

Disassembly:
push 0xffffffffffffffff
push 0x45f726
mov eax, dword fs:[0]
push eax
sub esp, 0x484
mov eax, dword [0x476cd4]
xor eax, esp
mov dword [esp + 0x480], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x476cd4]
xor eax, esp
push eax
lea eax, [esp + 0x498]
mov dword fs:[0], eax
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push 0xffffffffffffffff
xor ebx, ebx
push ebx
lea edx, [esp + 0x4cc]
mov esi, 7
xor eax, eax
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push edx
mov dword [esp + 0x4c8], 1
mov word [ecx + 4], ax
call fcn.00408e40
lea eax, [esp + 0x38]
push eax
call fcn.0040eb40
add esp, 0x20
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x4b4]
mov byte [esp + 0x4ac], 2
call fcn.00408e40
mov edi, 8
mov byte [esp + 0x4a0], 1
cmp dword [esp + 0x34], edi
jb 0x40ffa7
mov ecx, dword [esp + 0x20]
push ecx
call fcn.0043e711
add esp, 4
mov eax, dword [esp + 0x4ac]
cmp dword [esp + 0x4c0], edi
jae 0x40ffbe
lea eax, [esp + 0x4ac]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x41001a
cmp dword [esp + 0x4c0], edi
jb 0x40ffe2
mov edx, dword [esp + 0x4ac]
push edx
call fcn.0043e711
add esp, 4
xor eax, eax
mov dword [esp + 0x4c0], esi
mov dword [esp + 0x4bc], ebx
mov word [esp + 0x4ac], ax
cmp dword [esp + 0x4dc], edi
jb 0x410013
mov ecx, dword [esp + 0x4c8]
push ecx
call fcn.0043e711
add esp, 4
xor al, al
jmp 0x410217
cmp dword [esp + 0x4d8], ebx
je 0x40ffc9
mov ecx, dword [esp + 0x4c8]
cmp dword [esp + 0x4dc], edi
jae 0x41003a
lea ecx, [esp + 0x4c8]
mov eax, dword [esp + 0x4ac]
cmp dword [esp + 0x4c0], edi
jae 0x410051
lea eax, [esp + 0x4ac]
mov esi, dword [esp + 0x4e0]
push esi
push ecx
push eax
call fcn.0040a750
push 0x24c
lea edx, [esp + 0x4c]
push ebx
push edx
mov dword [esp + 0x50], ebx
call fcn.0043f440
push 0x208
lea ecx, [esp + 0x2a6]
xor eax, eax
push ebx
push ecx
mov word [esp + 0x2ac], ax
call fcn.0043f440
mov eax, dword [esp + 0x4d0]
add esp, 0x24
cmp dword [esp + 0x4c0], edi
jae 0x4100ab
lea eax, [esp + 0x4ac]
push 0x464f60
push eax
lea edx, [esp + 0x290]
push edx
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x28c]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov edi, eax
cmp edi, 0xffffffff
jne 0x4100f8
lea ecx, [esp + 0x4a8]
call fcn.004084b0
lea ecx, [esp + 0x4c4]
call fcn.004084b0
xor al, al
jmp 0x410217
mov ebp, dword [sym.imp.KERNEL32.dll_lstrcmpiW]
mov bl, 3
push 0x464f5c
lea edx, [esp + 0x68]
push edx
call ebp
test eax, eax
je 0x4101e2
push 0x464f54
lea eax, [esp + 0x68]
push eax
call ebp
test eax, eax
je 0x4101e2
cmp dword [esp + 0x4c0], 8
mov eax, dword [esp + 0x4ac]
jae 0x410140
lea eax, [esp + 0x4ac]
lea ecx, [esp + 0x64]
push ecx
push eax
lea edx, [esp + 0x290]
push edx
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
test byte [esp + 0x38], 0x10
je 0x4101b8
push esi
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
xor eax, eax
push 0xffffffffffffffff
push eax
lea edx, [esp + 0x4ec]
mov dword [ecx + 0x18], 7
mov dword [ecx + 0x14], 0
push edx
mov word [ecx + 4], ax
call fcn.00408e40
sub esp, 0x1c
lea eax, [esp + 0x2c4]
mov ecx, esp
mov dword [esp + 0x54], esp
push eax
mov byte [esp + 0x4e0], bl
call fcn.0040d920
mov byte [esp + 0x4dc], 1
call fcn.0040fef0
add esp, 0x3c
jmp 0x4101e2
cmp dword [esp + 0x4dc], 8
mov eax, dword [esp + 0x4c8]
jae 0x4101d0
lea eax, [esp + 0x4c8]
push esi
push eax
lea ecx, [esp + 0x290]
push ecx
call fcn.0040a750
add esp, 0xc
lea edx, [esp + 0x38]
push edx
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x410100
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
lea ecx, [esp + 0x4a8]
call fcn.004084b0
lea ecx, [esp + 0x4c4]
call fcn.004084b0
mov al, 1
mov ecx, dword [esp + 0x498]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x480]
xor ecx, esp
call fcn.0043f03d
add esp, 0x490
ret