Function at 0x47b3b0
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5cb384
mov eax, dword fs:[0]
push eax
sub esp, 0x2d4
mov eax, dword [0x6385e0]
xor eax, ebp
mov dword [ebp - 0x24], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x2b8], ecx
mov byte [ebp - 0x19], 0
push 0x5fab4c
lea ecx, [ebp - 0x298]
call fcn.004b3550
mov dword [ebp - 4], 0
lea eax, [ebp - 0x298]
push eax
mov ecx, dword [ebp + 8]
push ecx
lea edx, [ebp - 0x18]
push edx
call fcn.00412f50
add esp, 0xc
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x298]
call fcn.004b3860
lea eax, [ebp - 0x274]
push eax
lea ecx, [ebp - 0x18]
call fcn.004553f0
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xffffffff
je 0x47b69f
mov ecx, dword [ebp - 0x274]
and ecx, 0x10
je 0x47b613
mov dword [ebp - 0x2bc], 0x5fc5b0
lea edx, [ebp - 0x248]
mov dword [ebp - 0x2c0], edx
mov eax, dword [ebp - 0x2c0]
mov cx, word [eax]
mov word [ebp - 0x2c2], cx
mov edx, dword [ebp - 0x2bc]
cmp cx, word [edx]
jne 0x47b4d0
cmp word [ebp - 0x2c2], 0
je 0x47b4c4
mov eax, dword [ebp - 0x2c0]
mov cx, word [eax + 2]
mov word [ebp - 0x2c4], cx
mov edx, dword [ebp - 0x2bc]
cmp cx, word [edx + 2]
jne 0x47b4d0
add dword [ebp - 0x2c0], 4
add dword [ebp - 0x2bc], 4
cmp word [ebp - 0x2c4], 0
jne 0x47b46a
mov dword [ebp - 0x2c8], 0
jmp 0x47b4db
sbb eax, eax
sbb eax, 0xffffffff
mov dword [ebp - 0x2c8], eax
mov ecx, dword [ebp - 0x2c8]
mov dword [ebp - 0x2cc], ecx
cmp dword [ebp - 0x2cc], 0
je 0x47b590
mov dword [ebp - 0x2d0], 0x5fc5b4
lea edx, [ebp - 0x248]
mov dword [ebp - 0x2d4], edx
mov eax, dword [ebp - 0x2d4]
mov cx, word [eax]
mov word [ebp - 0x2d6], cx
mov edx, dword [ebp - 0x2d0]
cmp cx, word [edx]
jne 0x47b570
cmp word [ebp - 0x2d6], 0
je 0x47b564
mov eax, dword [ebp - 0x2d4]
mov cx, word [eax + 2]
mov word [ebp - 0x2d8], cx
mov edx, dword [ebp - 0x2d0]
cmp cx, word [edx + 2]
jne 0x47b570
add dword [ebp - 0x2d4], 4
add dword [ebp - 0x2d0], 4
cmp word [ebp - 0x2d8], 0
jne 0x47b50a
mov dword [ebp - 0x2dc], 0
jmp 0x47b57b
sbb eax, eax
sbb eax, 0xffffffff
mov dword [ebp - 0x2dc], eax
mov ecx, dword [ebp - 0x2dc]
mov dword [ebp - 0x2e0], ecx
cmp dword [ebp - 0x2e0], 0
jne 0x47b592
jmp 0x47b611
lea edx, [ebp - 0x248]
push edx
lea ecx, [ebp - 0x2a4]
call fcn.004b3550
mov byte [ebp - 4], 3
lea eax, [ebp - 0x2a4]
push eax
mov ecx, dword [ebp + 8]
push ecx
lea edx, [ebp - 0x280]
push edx
call fcn.00412f50
add esp, 0xc
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2a4]
call fcn.004b3860
lea eax, [ebp - 0x280]
push eax
mov ecx, dword [ebp - 0x2b8]
call fcn.0047b3b0
movzx ecx, al
test ecx, ecx
je 0x47b602
mov byte [ebp - 0x19], 1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x280]
call fcn.004b3860
jmp 0x47b695
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x280]
call fcn.004b3860
jmp 0x47b67c
lea edx, [ebp - 0x248]
push edx
lea ecx, [ebp - 0x2b0]
call fcn.004b3550
mov byte [ebp - 4], 6
lea eax, [ebp - 0x2b0]
push eax
mov ecx, dword [ebp + 8]
push ecx
lea edx, [ebp - 0x28c]
push edx
call fcn.00412f50
add esp, 0xc
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2b0]
call fcn.004b3860
lea ecx, [ebp - 0x28c]
call fcn.004553f0
push eax
push str._tFile_in_folder:__s_r_n
call fcn.0054eca8
add esp, 8
mov byte [ebp - 0x19], 1
lea ecx, [ebp - 0x28c]
call fcn.004b3860
jmp 0x47b695
lea eax, [ebp - 0x274]
push eax
mov ecx, dword [ebp - 0x20]
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x47b445
mov edx, dword [ebp - 0x20]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov al, byte [ebp - 0x19]
mov byte [ebp - 0x2b1], al
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.004b3860
mov al, byte [ebp - 0x2b1]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x24]
xor ecx, ebp
call fcn.0054d4f5
mov esp, ebp
pop ebp
ret 4