Function at 0x484be0
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c19a1
mov eax, dword fs:[0]
push eax
mov eax, 0x1230
call fcn.004a14a0
mov eax, dword [0x4deb90]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1170], ecx
mov ecx, dword [ebp - 0x1170]
add ecx, 0x5bf8d8
call fcn.00486a00
mov ecx, dword [ebp - 0x1170]
add ecx, 0x5bf8e0
call fcn.00486a00
mov ecx, dword [ebp - 0x1170]
add ecx, 0x5bf8e8
call fcn.00486a00
mov ecx, 0x51ca6a0
call fcn.00411420
push eax
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str._define.txt
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea edx, [ebp - 0xe5c]
push edx
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x1174], eax
cmp dword [ebp - 0x1174], 0xffffffff
jne 0x484c9a
jmp 0x484e4a
lea ecx, [ebp - 0x11f4]
call fcn.00497f50
mov dword [ebp - 4], 0
mov ecx, 0x51ca6a0
call fcn.00411420
push eax
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea edx, [ebp - 0xe30]
push edx
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea ecx, [ebp - 0x114]
push ecx
lea ecx, [ebp - 0x11f4]
call fcn.00497f30
lea ecx, [ebp - 0x11f4]
call fcn.00411280
mov dword [ebp - 0x11b0], eax
lea ecx, [ebp - 0x11f4]
call fcn.00411260
cmp eax, dword [ebp - 0x11b0]
jge 0x484e38
mov edx, 1
imul eax, edx, 0
mov dword [ebp - 0x11a8], eax
cmp dword [ebp - 0x11a8], 0x3e8
jae 0x484d2e
jmp 0x484d33
call fcn.004a0c3a
mov ecx, dword [ebp - 0x11a8]
mov byte [ebp + ecx - 0xa10], 0
lea edx, [ebp - 0xa10]
push edx
lea ecx, [ebp - 0x11f4]
call fcn.00497db0
push str.SystemParts
lea eax, [ebp - 0xa10]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x484e33
lea ecx, [ebp - 0xa10]
push ecx
lea ecx, [ebp - 0x11f4]
call fcn.00497db0
lea edx, [ebp - 0xa10]
push edx
lea ecx, [ebp - 0x11f4]
call fcn.00497db0
push 0x4d4a80
lea eax, [ebp - 0xa10]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x484e33
lea ecx, [ebp - 0xa10]
push ecx
lea edx, [ebp - 0x116c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x104
lea eax, [ebp - 0xa10]
push eax
push 0x104
lea ecx, [ebp - 0xd1c]
push ecx
lea edx, [ebp - 0x11c8]
push edx
call fcn.004ac580
add esp, 0x14
lea eax, [ebp - 0xd1c]
push eax
lea ecx, [ebp - 0x1068]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov dword [ebp - 0xe60], 0
lea edx, [ebp - 0x116c]
push edx
mov ecx, dword [ebp - 0x1170]
add ecx, 0x5bf8e0
call fcn.00486a60
lea eax, [ebp - 0xa10]
push eax
lea ecx, [ebp - 0x11f4]
call fcn.00497db0
jmp 0x484d91
jmp 0x484cfb
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x11f4]
call fcn.00497f80
mov ecx, dword [ebp - 0x1174]
push ecx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov edx, dword [ebp - 0x1170]
cmp dword [edx + 0x33ab60], 4
jl 0x484e6b
jmp 0x485263
mov ecx, dword [ebp - 0x1170]
add ecx, 0x5bf8d0
call fcn.00486a00
mov ecx, 0x51ca6a0
call fcn.00411420
push eax
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str._cg_.
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov dword [ebp - 0x11a0], 0
lea edx, [ebp - 0xe5c]
push edx
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x1174], eax
cmp dword [ebp - 0x1174], 0xffffffff
jne 0x484ed8
jmp 0x48514d
mov dword [ebp - 0x117c], 1
cmp dword [ebp - 0x117c], 0
je 0x4850d4
cmp dword [ebp - 0xe5c], 0x10
je 0x4850b5
lea ecx, [ebp - 0xe30]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x11a4], eax
push 0x4d4a90
lea edx, [ebp - 0xe30]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x484f3b
push 0x4d4aa4
lea eax, [ebp - 0xe30]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x484f57
lea ecx, [ebp - 0xe5c]
push ecx
mov edx, dword [ebp - 0x1174]
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov dword [ebp - 0x117c], eax
jmp 0x484ee2
push 0
lea eax, [ebp - 0xe30]
push eax
lea ecx, [ebp - 0x11c4]
call fcn.004975e0
mov dword [ebp - 4], 1
push 4
lea ecx, [ebp - 0x11c4]
call fcn.00497b30
push 0x4d4a9c
lea ecx, [ebp - 0x11c4]
call fcn.00411240
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x484f9f
jmp 0x485084
push 0x4d4aac
lea ecx, [ebp - 0x11c4]
call fcn.00411240
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x48506d
mov ecx, 0x51ca6a0
call fcn.00477160
mov dword [ebp - 0x11b4], eax
mov ecx, 0x51ca6a0
call fcn.00477180
mov dword [ebp - 0x11ac], eax
mov dword [ebp - 0x1178], 0
mov dword [ebp - 0x1178], 0
jmp 0x485003
mov ecx, dword [ebp - 0x1178]
add ecx, 1
mov dword [ebp - 0x1178], ecx
mov edx, dword [ebp - 0x1178]
cmp edx, dword [ebp - 0x11ac]
jge 0x48503a
mov eax, dword [ebp - 0x1178]
mov ecx, dword [ebp - 0x11b4]
mov edx, dword [ecx + eax*4]
push edx
mov eax, dword [ebp - 0x1170]
add eax, 0x5bf8d0
push eax
mov ecx, dword [ebp - 0x1170]
call fcn.00484b20
jmp 0x484ff4
lea ecx, [ebp - 0xe5c]
push ecx
mov edx, dword [ebp - 0x1174]
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov dword [ebp - 0x117c], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x11c4]
call fcn.00497690
jmp 0x484ee2
cmp dword [ebp - 0x11a4], 4
jl 0x485084
mov eax, dword [ebp - 0x11a4]
mov byte [ebp + eax - 0xe34], 0
lea ecx, [ebp - 0xe30]
push ecx
mov edx, dword [ebp - 0x1170]
add edx, 0x5bf8d0
push edx
mov ecx, dword [ebp - 0x1170]
call fcn.00484b20
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x11c4]
call fcn.00497690
lea eax, [ebp - 0xe5c]
push eax
mov ecx, dword [ebp - 0x1174]
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov dword [ebp - 0x117c], eax
jmp 0x484ee2
mov edx, dword [ebp - 0x1174]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [ebp - 0x11a0], 1
jge 0x48514d
mov dword [ebp - 0x11a0], 1
mov ecx, 0x51ca6a0
call fcn.00411420
push eax
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x4d4aa8
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov ecx, 0x606c470
call fcn.004705b0
push eax
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x4d4ac0
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
jmp 0x484eb0
mov ecx, dword [ebp - 0x1170]
add ecx, 0x5bf8c8
call fcn.00486a00
mov ecx, 0x51ca6a0
call fcn.00411420
push eax
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str._movie_.
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea eax, [ebp - 0xe5c]
push eax
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x1174], eax
cmp dword [ebp - 0x1174], 0xffffffff
jne 0x4851b0
jmp 0x485263
mov dword [ebp - 0x1188], 1
cmp dword [ebp - 0x1188], 0
je 0x485256
cmp dword [ebp - 0xe5c], 0x10
je 0x485237
push 0x4d4ac8
lea edx, [ebp - 0xe30]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x4851fc
push 0x4d4ac4
lea eax, [ebp - 0xe30]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x485218
lea ecx, [ebp - 0xe5c]
push ecx
mov edx, dword [ebp - 0x1174]
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov dword [ebp - 0x1188], eax
jmp 0x4851ba
lea eax, [ebp - 0xe30]
push eax
mov ecx, dword [ebp - 0x1170]
add ecx, 0x5bf8c8
push ecx
mov ecx, dword [ebp - 0x1170]
call fcn.00484b20
lea edx, [ebp - 0xe5c]
push edx
mov eax, dword [ebp - 0x1174]
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov dword [ebp - 0x1188], eax
jmp 0x4851ba
mov ecx, dword [ebp - 0x1174]
push ecx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov edx, dword [ebp - 0x1170]
cmp dword [edx + 0x33ab60], 4
jge 0x485277
jmp 0x48566d
mov ecx, 0x51ca6a0
call fcn.00411420
push eax
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str._voice_.
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea edx, [ebp - 0xe5c]
push edx
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x1174], eax
cmp dword [ebp - 0x1174], 0xffffffff
jne 0x4852c9
jmp 0x48566d
mov dword [ebp - 0x1184], 1
cmp dword [ebp - 0x1184], 0
je 0x4854a8
cmp dword [ebp - 0xe5c], 0x10
je 0x485489
lea ecx, [ebp - 0xe30]
push ecx
lea edx, [ebp - 0x31c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea eax, [ebp - 0x31c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x1180], eax
mov ecx, dword [ebp - 0x1180]
lea edx, [ebp + ecx - 0xe34]
push edx
lea eax, [ebp - 0x628]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str..pck
lea ecx, [ebp - 0x628]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x48537d
lea edx, [ebp - 0xe30]
push edx
lea eax, [ebp - 0xb14]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea ecx, [ebp - 0xe5c]
push ecx
mov edx, dword [ebp - 0x1174]
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov dword [ebp - 0x1184], eax
jmp 0x4852d3
push 0x4d4ae4
lea eax, [ebp - 0x628]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x4853e7
mov ecx, dword [ebp - 0x1180]
sub ecx, 4
mov dword [ebp - 0x119c], ecx
cmp dword [ebp - 0x119c], 0x104
jae 0x4853b0
jmp 0x4853b5
call fcn.004a0c3a
mov edx, dword [ebp - 0x119c]
mov byte [ebp + edx - 0x31c], 0
lea eax, [ebp - 0x31c]
push eax
mov ecx, dword [ebp - 0x1170]
add ecx, 0x5bf8e8
push ecx
mov ecx, dword [ebp - 0x1170]
call fcn.00484b20
jmp 0x485489
cmp dword [ebp - 0x1180], 4
jl 0x485420
mov edx, dword [ebp - 0x1180]
sub edx, 4
mov dword [ebp - 0x1198], edx
cmp dword [ebp - 0x1198], 0x104
jae 0x48540d
jmp 0x485412
call fcn.004a0c3a
mov eax, dword [ebp - 0x1198]
mov byte [ebp + eax - 0x31c], 0
push 0x4d4ae0
lea ecx, [ebp - 0xe30]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x48544c
push 0x4d4af4
lea edx, [ebp - 0xe30]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x48546b
lea eax, [ebp - 0xe5c]
push eax
mov ecx, dword [ebp - 0x1174]
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov dword [ebp - 0x1184], eax
jmp 0x4852d3
lea edx, [ebp - 0x31c]
push edx
mov eax, dword [ebp - 0x1170]
add eax, 0x5bf8d8
push eax
mov ecx, dword [ebp - 0x1170]
call fcn.00484b20
lea ecx, [ebp - 0xe5c]
push ecx
mov edx, dword [ebp - 0x1174]
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov dword [ebp - 0x1184], eax
jmp 0x4852d3
mov eax, dword [ebp - 0x1174]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
lea ecx, [ebp - 0x123c]
call fcn.00453f80
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x1204]
call fcn.00497650
mov byte [ebp - 4], 3
mov ecx, 0x51ca6a0
call fcn.00411420
push eax
lea ecx, [ebp - 0x420]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str._voice_
lea edx, [ebp - 0x420]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea eax, [ebp - 0xb14]
push eax
lea ecx, [ebp - 0x420]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea edx, [ebp - 0x420]
push edx
lea ecx, [ebp - 0x123c]
call fcn.00454030
lea ecx, [ebp - 0x123c]
call fcn.00454060
mov dword [ebp - 0x118c], eax
cmp dword [ebp - 0x118c], 0
je 0x485641
mov eax, dword [ebp - 0x118c]
push eax
lea ecx, [ebp - 0x218]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea edx, [ebp - 0x218]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x1190], eax
mov eax, dword [ebp - 0x1190]
lea ecx, [ebp + eax - 0x21c]
push ecx
lea edx, [ebp - 0x524]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp dword [ebp - 0x1190], 4
jl 0x4855bf
mov eax, dword [ebp - 0x1190]
sub eax, 4
mov dword [ebp - 0x1194], eax
cmp dword [ebp - 0x1194], 0x104
jae 0x4855ac
jmp 0x4855b1
call fcn.004a0c3a
mov ecx, dword [ebp - 0x1194]
mov byte [ebp + ecx - 0x218], 0
push str..eog
lea edx, [ebp - 0x524]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x4855f6
lea eax, [ebp - 0x218]
push eax
mov ecx, dword [ebp - 0x1170]
add ecx, 0x5bf8d8
push ecx
mov ecx, dword [ebp - 0x1170]
call fcn.00484b20
jmp 0x48562b
push str..csv
lea edx, [ebp - 0x524]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x48562b
lea eax, [ebp - 0x218]
push eax
mov ecx, dword [ebp - 0x1170]
add ecx, 0x5bf8e8
push ecx
mov ecx, dword [ebp - 0x1170]
call fcn.00484b20
lea ecx, [ebp - 0x123c]
call fcn.00454060
mov dword [ebp - 0x118c], eax
jmp 0x485537
lea ecx, [ebp - 0x123c]
call fcn.004997a0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1204]
call fcn.00497690
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x123c]
call fcn.00453fd0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004a0848
mov esp, ebp
pop ebp
ret