Function at 0x404b1c
Capabilities:
Check if file exists
Enumerate files on windows

Disassembly:
push ebp
lea ebp, [esp - 0x68]
sub esp, 0xa50
push ebx
push esi
push edi
call fcn.00406fae
mov edi, 0x1000000
test eax, eax
je 0x404ccc
mov eax, dword [ebp + 0x78]
test eax, eax
je 0x404b58
cmp word [eax], 0
je 0x404b58
push eax
lea eax, [ebp - 0x9e8]
push eax
call fcn.00409c04
jmp 0x404b68
push edi
lea eax, [ebp - 0x9e8]
push eax
push dword [ebp + 0x74]
call fcn.0040d933
mov esi, dword [ebp + 0x7c]
or ebx, 0xffffffff
lea eax, [ebp - 0x1e8]
push eax
cmp dword [ebp + 0x70], ebx
jne 0x404bb5
lea eax, [ebp - 0x9e8]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp + 0x70], eax
cmp eax, ebx
jne 0x404be0
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 2
je 0x404ba8
cmp eax, 3
je 0x404ba8
cmp eax, 0x12
je 0x404ba8
xor eax, eax
inc eax
jmp 0x404baa
xor eax, eax
mov byte [esi + 0x149c], al
jmp 0x404e60
push dword [ebp + 0x70]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x404bd7
mov dword [ebp + 0x70], ebx
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x12
setne al
mov byte [esi + 0x149c], al
cmp dword [ebp + 0x70], ebx
je 0x404e60
lea eax, [ebp - 0x9e8]
push eax
lea ebx, [esi + 0x400]
push ebx
call fcn.00409c04
lea eax, [ebp - 0x1bc]
push eax
push ebx
call fcn.0040772c
push eax
call fcn.00409c04
push edi
push esi
push ebx
call fcn.0040d901
push 1
push 0
push 0
push dword [ebp - 0x1cc]
call fcn.00401030
mov ecx, dword [ebp - 0x1c8]
xor edi, edi
add eax, ecx
mov dword [esi + 0xc00], eax
mov eax, dword [ebp - 0x1e8]
mov dword [esi + 0xc08], eax
lea eax, [ebp + 0x4c]
push eax
lea eax, [esi + 0xc80]
adc edx, edi
push eax
mov dword [esi + 0xc04], edx
call fcn.00409c04
mov eax, dword [ebp - 0x1e4]
mov dword [esi + 0x1480], eax
mov eax, dword [ebp - 0x1e0]
mov dword [esi + 0x1484], eax
mov eax, dword [ebp - 0x1dc]
mov dword [esi + 0x1488], eax
mov eax, dword [ebp - 0x1d8]
mov dword [esi + 0x148c], eax
mov eax, dword [ebp - 0x1d4]
mov dword [esi + 0x1490], eax
mov eax, dword [ebp - 0x1d0]
mov dword [esi + 0x1494], eax
lea eax, [ebp - 0x1d4]
lea edi, [esi + 0xc14]
push eax
mov ecx, edi
call fcn.0040d368
lea eax, [ebp - 0x1e4]
push eax
lea ecx, [esi + 0xc38]
call fcn.0040d368
lea eax, [ebp - 0x1dc]
jmp 0x404e47
mov eax, dword [ebp + 0x74]
test eax, eax
je 0x404ce7
cmp byte [eax], 0
je 0x404ce7
push eax
lea eax, [ebp - 0x5e8]
push eax
call fcn.00409a99
jmp 0x404cf7
push edi
lea eax, [ebp - 0x5e8]
push eax
push dword [ebp + 0x78]
call fcn.0040d901
mov esi, dword [ebp + 0x7c]
or ebx, 0xffffffff
lea eax, [ebp - 0xd8]
push eax
cmp dword [ebp + 0x70], ebx
jne 0x404d34
lea eax, [ebp - 0x5e8]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp + 0x70], eax
cmp eax, ebx
jne 0x404d5f
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 2
je 0x404ba8
cmp eax, 3
jmp 0x404ba1
push dword [ebp + 0x70]
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x404d56
mov dword [ebp + 0x70], ebx
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x12
setne al
mov byte [esi + 0x149c], al
cmp dword [ebp + 0x70], ebx
je 0x404e60
lea eax, [ebp - 0x5e8]
push eax
push esi
call fcn.00409a99
lea eax, [ebp - 0xac]
push eax
push esi
call fcn.004076d5
push eax
call fcn.00409a99
push edi
lea eax, [esi + 0x400]
push eax
push esi
call fcn.0040d933
push 1
push 0
push 0
push dword [ebp - 0xbc]
call fcn.00401030
mov ecx, dword [ebp - 0xb8]
xor ebx, ebx
add eax, ecx
mov dword [esi + 0xc00], eax
mov eax, dword [ebp - 0xd8]
mov dword [esi + 0xc08], eax
push edi
lea eax, [esi + 0xc80]
push eax
lea eax, [ebp + 0x58]
adc edx, ebx
push eax
mov dword [esi + 0xc04], edx
call fcn.0040d933
mov eax, dword [ebp - 0xd4]
mov dword [esi + 0x1480], eax
mov eax, dword [ebp - 0xd0]
mov dword [esi + 0x1484], eax
mov eax, dword [ebp - 0xcc]
mov dword [esi + 0x1488], eax
mov eax, dword [ebp - 0xc8]
mov dword [esi + 0x148c], eax
mov eax, dword [ebp - 0xc4]
mov dword [esi + 0x1490], eax
mov eax, dword [ebp - 0xc0]
mov dword [esi + 0x1494], eax
lea eax, [ebp - 0xc4]
lea edi, [esi + 0xc14]
push eax
mov ecx, edi
call fcn.0040d368
lea eax, [ebp - 0xd4]
push eax
lea ecx, [esi + 0xc38]
call fcn.0040d368
lea eax, [ebp - 0xcc]
push eax
lea ecx, [esi + 0xc5c]
call fcn.0040d368
mov ecx, edi
call fcn.0040d30b
mov dword [esi + 0xc0c], eax
and dword [esi + 0x1498], 0
mov eax, dword [ebp + 0x70]
pop edi
pop esi
pop ebx
add ebp, 0x68
leave
ret 0x10