Function at 0x47faf0
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b3a21
mov eax, dword fs:[0]
push eax
sub esp, 0xd18
mov eax, dword [0x4ceb90]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xc5c], ecx
mov ecx, dword [ebp - 0xc5c]
add ecx, 0x3ead20
call fcn.00481af0
mov ecx, dword [ebp - 0xc5c]
add ecx, 0x3ead28
call fcn.00481af0
mov ecx, dword [ebp - 0xc5c]
add ecx, 0x3ead30
call fcn.00481af0
mov ecx, 0x47c64f8
call fcn.004113b0
push eax
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str._define.txt
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea edx, [ebp - 0xb50]
push edx
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0xc60], eax
cmp dword [ebp - 0xc60], 0xffffffff
jne 0x47fba6
jmp 0x47fd14
lea ecx, [ebp - 0xcdc]
call fcn.00492450
mov dword [ebp - 4], 0
mov ecx, 0x47c64f8
call fcn.004113b0
push eax
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea edx, [ebp - 0xb24]
push edx
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea ecx, [ebp - 0x114]
push ecx
lea ecx, [ebp - 0xcdc]
call fcn.00492430
lea ecx, [ebp - 0xcdc]
call fcn.00411250
mov dword [ebp - 0xc98], eax
lea ecx, [ebp - 0xcdc]
call fcn.00411230
cmp eax, dword [ebp - 0xc98]
jge 0x47fd02
mov edx, 1
imul eax, edx, 0
mov dword [ebp - 0xc7c], eax
cmp dword [ebp - 0xc7c], 0x3e8
jae 0x47fc3a
jmp 0x47fc3f
call fcn.0049b12a
mov ecx, dword [ebp - 0xc7c]
mov byte [ebp + ecx - 0xa10], 0
lea edx, [ebp - 0xa10]
push edx
lea ecx, [ebp - 0xcdc]
call fcn.004922b0
push 0x4c5d80
lea eax, [ebp - 0xa10]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x47fcfd
lea ecx, [ebp - 0xa10]
push ecx
lea ecx, [ebp - 0xcdc]
call fcn.004922b0
lea edx, [ebp - 0xa10]
push edx
lea ecx, [ebp - 0xcdc]
call fcn.004922b0
push 0x4c5d8c
lea eax, [ebp - 0xa10]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x47fcfd
lea ecx, [ebp - 0xa10]
push ecx
lea edx, [ebp - 0xc58]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov dword [ebp - 0xb54], 0
lea eax, [ebp - 0xc58]
push eax
mov ecx, dword [ebp - 0xc5c]
add ecx, 0x3ead28
call fcn.00481b50
lea ecx, [ebp - 0xa10]
push ecx
lea ecx, [ebp - 0xcdc]
call fcn.004922b0
jmp 0x47fc9d
jmp 0x47fc07
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcdc]
call fcn.00492480
mov edx, dword [ebp - 0xc60]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [ebp - 0xc5c]
cmp dword [eax + 0x165fa8], 4
jl 0x47fd35
jmp 0x480092
mov ecx, dword [ebp - 0xc5c]
add ecx, 0x3ead18
call fcn.00481af0
mov ecx, 0x47c64f8
call fcn.004113b0
push eax
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str._cg_.
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov dword [ebp - 0xc84], 0
lea eax, [ebp - 0xb50]
push eax
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0xc60], eax
cmp dword [ebp - 0xc60], 0xffffffff
jne 0x47fda2
jmp 0x47ffcf
mov dword [ebp - 0xc70], 1
cmp dword [ebp - 0xc70], 0
je 0x47ff56
cmp dword [ebp - 0xb50], 0x10
je 0x47ff37
lea edx, [ebp - 0xb24]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0xc80], eax
push 0
lea eax, [ebp - 0xb24]
push eax
lea ecx, [ebp - 0xcb0]
call fcn.00491ad0
mov dword [ebp - 4], 1
push 4
lea ecx, [ebp - 0xcb0]
call fcn.00492030
push 0x4c5d98
lea ecx, [ebp - 0xcb0]
call fcn.00411210
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x47fe21
jmp 0x47ff06
push 0x4c5da0
lea ecx, [ebp - 0xcb0]
call fcn.00411210
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x47feef
mov ecx, 0x47c64f8
call fcn.00474b50
mov dword [ebp - 0xca0], eax
mov ecx, 0x47c64f8
call fcn.00474b70
mov dword [ebp - 0xc9c], eax
mov dword [ebp - 0xc64], 0
mov dword [ebp - 0xc64], 0
jmp 0x47fe85
mov ecx, dword [ebp - 0xc64]
add ecx, 1
mov dword [ebp - 0xc64], ecx
mov edx, dword [ebp - 0xc64]
cmp edx, dword [ebp - 0xc9c]
jge 0x47febc
mov eax, dword [ebp - 0xc64]
mov ecx, dword [ebp - 0xca0]
mov edx, dword [ecx + eax*4]
push edx
mov eax, dword [ebp - 0xc5c]
add eax, 0x3ead18
push eax
mov ecx, dword [ebp - 0xc5c]
call fcn.0047fa30
jmp 0x47fe76
lea ecx, [ebp - 0xb50]
push ecx
mov edx, dword [ebp - 0xc60]
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov dword [ebp - 0xc70], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcb0]
call fcn.00491b80
jmp 0x47fdac
cmp dword [ebp - 0xc80], 4
jl 0x47ff06
mov eax, dword [ebp - 0xc80]
mov byte [ebp + eax - 0xb28], 0
lea ecx, [ebp - 0xb24]
push ecx
mov edx, dword [ebp - 0xc5c]
add edx, 0x3ead18
push edx
mov ecx, dword [ebp - 0xc5c]
call fcn.0047fa30
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcb0]
call fcn.00491b80
lea eax, [ebp - 0xb50]
push eax
mov ecx, dword [ebp - 0xc60]
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov dword [ebp - 0xc70], eax
jmp 0x47fdac
mov edx, dword [ebp - 0xc60]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [ebp - 0xc84], 1
jge 0x47ffcf
mov dword [ebp - 0xc84], 1
mov ecx, 0x47c64f8
call fcn.004113b0
push eax
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x4c5da8
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov ecx, 0x5670958
call fcn.0046e010
push eax
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x4c5dac
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
jmp 0x47fd7a
mov ecx, dword [ebp - 0xc5c]
add ecx, 0x3ead10
call fcn.00481af0
mov ecx, 0x47c64f8
call fcn.004113b0
push eax
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str._movie_.
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea eax, [ebp - 0xb50]
push eax
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0xc60], eax
cmp dword [ebp - 0xc60], 0xffffffff
jne 0x48002f
jmp 0x480092
mov dword [ebp - 0xc88], 1
cmp dword [ebp - 0xc88], 0
je 0x480085
cmp dword [ebp - 0xb50], 0x10
je 0x480069
lea edx, [ebp - 0xb24]
push edx
mov eax, dword [ebp - 0xc5c]
add eax, 0x3ead10
push eax
mov ecx, dword [ebp - 0xc5c]
call fcn.0047fa30
lea ecx, [ebp - 0xb50]
push ecx
mov edx, dword [ebp - 0xc60]
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov dword [ebp - 0xc88], eax
jmp 0x480039
mov eax, dword [ebp - 0xc60]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [ebp - 0xc5c]
cmp dword [ecx + 0x165fa8], 4
jge 0x4800a6
jmp 0x48049a
mov ecx, 0x47c64f8
call fcn.004113b0
push eax
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str._voice_.
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea ecx, [ebp - 0xb50]
push ecx
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0xc60], eax
cmp dword [ebp - 0xc60], 0xffffffff
jne 0x4800f8
jmp 0x48049a
mov dword [ebp - 0xc6c], 1
cmp dword [ebp - 0xc6c], 0
je 0x4802d7
cmp dword [ebp - 0xb50], 0x10
je 0x4802b8
lea eax, [ebp - 0xb24]
push eax
lea ecx, [ebp - 0x218]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea edx, [ebp - 0x218]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0xc68], eax
mov eax, dword [ebp - 0xc68]
lea ecx, [ebp + eax - 0xb28]
push ecx
lea edx, [ebp - 0x420]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str..pck
lea eax, [ebp - 0x420]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x4801ac
lea ecx, [ebp - 0xb24]
push ecx
lea edx, [ebp - 0x420]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea eax, [ebp - 0xb50]
push eax
mov ecx, dword [ebp - 0xc60]
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov dword [ebp - 0xc6c], eax
jmp 0x480102
push 0x4c5dd0
lea edx, [ebp - 0x420]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x480215
mov eax, dword [ebp - 0xc68]
sub eax, 4
mov dword [ebp - 0xc8c], eax
cmp dword [ebp - 0xc8c], 0x104
jae 0x4801df
jmp 0x4801e4
call fcn.0049b12a
mov ecx, dword [ebp - 0xc8c]
mov byte [ebp + ecx - 0x218], 0
lea edx, [ebp - 0x218]
push edx
mov eax, dword [ebp - 0xc5c]
add eax, 0x3ead30
push eax
mov ecx, dword [ebp - 0xc5c]
call fcn.0047fa30
jmp 0x4802b8
cmp dword [ebp - 0xc68], 4
jl 0x48024e
mov ecx, dword [ebp - 0xc68]
sub ecx, 4
mov dword [ebp - 0xc90], ecx
cmp dword [ebp - 0xc90], 0x104
jae 0x48023b
jmp 0x480240
call fcn.0049b12a
mov edx, dword [ebp - 0xc90]
mov byte [ebp + edx - 0x218], 0
push 0x4c5dd8
lea eax, [ebp - 0xb24]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x48027a
push 0x4c5ddc
lea ecx, [ebp - 0xb24]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x480299
lea edx, [ebp - 0xb50]
push edx
mov eax, dword [ebp - 0xc60]
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov dword [ebp - 0xc6c], eax
jmp 0x480102
lea ecx, [ebp - 0x218]
push ecx
mov edx, dword [ebp - 0xc5c]
add edx, 0x3ead20
push edx
mov ecx, dword [ebp - 0xc5c]
call fcn.0047fa30
lea eax, [ebp - 0xb50]
push eax
mov ecx, dword [ebp - 0xc60]
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov dword [ebp - 0xc6c], eax
jmp 0x480102
mov edx, dword [ebp - 0xc60]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
lea ecx, [ebp - 0xd24]
call fcn.00453f00
mov dword [ebp - 4], 2
lea ecx, [ebp - 0xcec]
call fcn.00491b40
mov byte [ebp - 4], 3
mov ecx, 0x47c64f8
call fcn.004113b0
push eax
lea eax, [ebp - 0x524]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str._voice_
lea ecx, [ebp - 0x524]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea edx, [ebp - 0x420]
push edx
lea eax, [ebp - 0x524]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea ecx, [ebp - 0x524]
push ecx
lea ecx, [ebp - 0xd24]
call fcn.00453fb0
lea ecx, [ebp - 0xd24]
call fcn.00453fe0
mov dword [ebp - 0xc78], eax
cmp dword [ebp - 0xc78], 0
je 0x48046e
mov edx, dword [ebp - 0xc78]
push edx
lea eax, [ebp - 0x31c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea ecx, [ebp - 0x31c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0xc74], eax
mov edx, dword [ebp - 0xc74]
lea eax, [ebp + edx - 0x320]
push eax
lea ecx, [ebp - 0x628]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp dword [ebp - 0xc74], 4
jl 0x4803ee
mov edx, dword [ebp - 0xc74]
sub edx, 4
mov dword [ebp - 0xc94], edx
cmp dword [ebp - 0xc94], 0x104
jae 0x4803db
jmp 0x4803e0
call fcn.0049b12a
mov eax, dword [ebp - 0xc94]
mov byte [ebp + eax - 0x31c], 0
push str..eog
lea ecx, [ebp - 0x628]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x480424
lea edx, [ebp - 0x31c]
push edx
mov eax, dword [ebp - 0xc5c]
add eax, 0x3ead20
push eax
mov ecx, dword [ebp - 0xc5c]
call fcn.0047fa30
jmp 0x480458
push str..csv
lea ecx, [ebp - 0x628]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x480458
lea edx, [ebp - 0x31c]
push edx
mov eax, dword [ebp - 0xc5c]
add eax, 0x3ead30
push eax
mov ecx, dword [ebp - 0xc5c]
call fcn.0047fa30
lea ecx, [ebp - 0xd24]
call fcn.00453fe0
mov dword [ebp - 0xc78], eax
jmp 0x480366
lea ecx, [ebp - 0xd24]
call fcn.00493ca0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xcec]
call fcn.00491b80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd24]
call fcn.00453f50
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0049ad38
mov esp, ebp
pop ebp
ret