Function at 0x47d4a0
Capabilities:
Enumerate files on windows
Enumerate files recursively
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4dc6fb
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x330
mov eax, dword [esp + 0x344]
push ebx
push ebp
xor ebp, ebp
push esi
xor ebx, ebx
push edi
mov dword [esp + 0x14], ebp
cmp eax, 2
jne 0x47d580
mov dword [esp + 0x88], ebx
mov dword [esp + 0x84], ebx
mov dword [esp + 0x80], ebx
mov edi, dword [esp + 0x358]
lea eax, [esp + 0x80]
push eax
mov eax, edi
mov dword [esp + 0x34c], ebx
call fcn.00485af0
mov esi, dword [esp + 0x88]
add esp, 4
test eax, eax
je 0x47d541
mov ecx, dword [esp + 0x35c]
cmp ecx, ebx
jne 0x47d528
mov ecx, esi
cmp ecx, ebx
je 0x47d541
cmp word [ecx], bx
je 0x47d541
mov eax, dword [esp + 0x350]
mov eax, dword [eax]
mov edx, edi
call fcn.004b69f0
test eax, eax
je 0x47d546
mov ebp, 3
cmp esi, ebx
je 0x47d565
mov ecx, dword [esp + 0x80]
push ecx
push ebx
push esi
call fcn.004d2f90
add esp, 0xc
push esi
call fcn.004ca991
add esp, 4
mov eax, ebp
mov ecx, dword [esp + 0x340]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x33c
ret
cmp eax, 3
jne 0x47d565
mov eax, dword [esp + 0x35c]
cmp eax, ebx
jne 0x47d595
mov eax, 0x4f5ac4
mov ebp, vtable.CKuStringT_wchar_t__class_CKuStringUtilW_.0
push eax
lea edi, [esp + 0x30]
mov dword [esp + 0x30], ebp
mov dword [esp + 0x34], ebx
mov byte [esp + 0x38], bl
call fcn.00486cc0
mov esi, dword [esp + 0x358]
mov dword [esp + 0x348], 1
push esi
lea edi, [esp + 0x20]
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], ebx
mov byte [esp + 0x28], bl
call fcn.00486cc0
mov eax, esi
mov byte [esp + 0x348], 2
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x47d5e5
sub eax, edx
sar eax, 1
xor edx, edx
cmp word [esi + eax*2 - 2], 0x5c
sete dl
mov eax, edx
mov dword [esp + 0x28], eax
cmp eax, ebx
je 0x47d618
lea eax, [esp + 0x1c]
push eax
mov edi, 0x509da8
call fcn.004869d0
mov esi, dword [esp + 0x20]
cmp esi, ebx
je 0x47d626
mov eax, dword [esi]
cmp eax, ebx
jne 0x47d62b
mov eax, 0x4f5ac4
lea ecx, [esp + 0xec]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [esp + 0x18], eax
cmp eax, 0xffffffff
je 0x47dcee
jmp 0x47d650
mov esi, dword [esp + 0x28]
mov ecx, 0x4eef9c
lea eax, [esp + 0x118]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x47d686
cmp dx, bx
je 0x47d682
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x47d686
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x47d660
xor eax, eax
jmp 0x47d68b
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x47dcbf
mov ecx, 0x50c870
lea eax, [esp + 0x118]
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x47d6c6
cmp dx, bx
je 0x47d6c2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x47d6c6
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x47d6a0
xor eax, eax
jmp 0x47d6cb
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x47dcbf
test byte [esp + 0xec], 0x10
je 0x47d9c8
lea ebp, [esp + 0x118]
cmp esi, ebx
jne 0x47d6f1
mov ebp, 0x4f5ac4
push 0x4ec878
lea edi, [esp + 0x60]
mov dword [esp + 0x60], vtable.CKuStringT_wchar_t__class_CKuStringUtilW_.0
mov dword [esp + 0x64], ebx
mov byte [esp + 0x68], bl
call fcn.00486cc0
mov edx, edi
push edx
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0xe8]
push ecx
mov byte [esp + 0x354], 3
call fcn.00486a80
add esp, 0xc
lea edx, [esp + 0x118]
push edx
push eax
lea eax, [esp + 0xb8]
push eax
mov byte [esp + 0x354], 4
call fcn.00486b60
add esp, 0xc
mov esi, eax
mov byte [esp + 0x348], 5
push ebp
lea edi, [esp + 0x78]
mov dword [esp + 0x78], vtable.CKuStringT_wchar_t__class_CKuStringUtilW_.0
mov dword [esp + 0x7c], ebx
mov byte [esp + 0x80], bl
call fcn.00486cc0
mov ecx, dword [esp + 0x358]
mov byte [esp + 0x348], 6
push ecx
lea edi, [esp + 0x6c]
mov dword [esp + 0x6c], vtable.CKuStringT_wchar_t__class_CKuStringUtilW_.0
mov dword [esp + 0x70], ebx
mov byte [esp + 0x74], bl
call fcn.00486cc0
lea edx, [esp + 0x74]
push edx
mov eax, edi
push eax
lea ecx, [esp + 0x94]
push ecx
mov byte [esp + 0x354], 7
call fcn.00486a80
add esp, 0xc
push 0x4ec878
push eax
lea edx, [esp + 0xd0]
push edx
mov byte [esp + 0x354], 8
call fcn.00486b60
add esp, 0xc
mov byte [esp + 0x348], 9
mov ecx, dword [esi + 4]
cmp ecx, ebx
je 0x47d7f3
mov ecx, dword [ecx]
cmp ecx, ebx
jne 0x47d7f8
mov ecx, 0x4f5ac4
mov eax, dword [eax + 4]
cmp eax, ebx
je 0x47d805
mov eax, dword [eax]
cmp eax, ebx
jne 0x47d80a
mov eax, 0x4f5ac4
push ecx
push eax
mov eax, dword [esp + 0x358]
push 3
push eax
call fcn.0047d4a0
mov byte [esp + 0x358], 8
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0xdc]
add esp, 0x10
mov edi, vtable.CKuStringT_wchar_t__class_CKuStringUtilW_.0
mov dword [esp + 0xc8], edi
cmp eax, ebx
je 0x47d866
lea ecx, [eax + 0x10]
mov esi, eax
mov eax, dword [ecx]
dec eax
mov dword [ecx], eax
jne 0x47d866
mov eax, dword [esi + 4]
cmp eax, ebx
je 0x47d85d
push eax
call fcn.004ca991
add esp, 4
push esi
call fcn.004cb3e6
add esp, 4
mov byte [esp + 0x348], 7
mov eax, dword [esp + 0x90]
mov dword [esp + 0x8c], edi
cmp eax, ebx
je 0x47d8a5
lea ecx, [eax + 0x10]
mov esi, eax
mov eax, dword [ecx]
dec eax
mov dword [ecx], eax
jne 0x47d8a5
mov eax, dword [esi + 4]
cmp eax, ebx
je 0x47d89c
push eax
call fcn.004ca991
add esp, 4
push esi
call fcn.004cb3e6
add esp, 4
mov byte [esp + 0x348], 6
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x68], edi
cmp eax, ebx
je 0x47d8e0
lea ecx, [eax + 0x10]
mov eax, dword [ecx]
dec eax
mov dword [ecx], eax
jne 0x47d8e0
mov esi, dword [esp + 0x6c]
mov eax, dword [esi + 4]
cmp eax, ebx
je 0x47d8d7
push eax
call fcn.004ca991
add esp, 4
push esi
call fcn.004cb3e6
add esp, 4
mov byte [esp + 0x348], 5
mov eax, dword [esp + 0x78]
mov dword [esp + 0x74], edi
cmp eax, ebx
je 0x47d91b
lea ecx, [eax + 0x10]
mov eax, dword [ecx]
dec eax
mov dword [ecx], eax
jne 0x47d91b
mov esi, dword [esp + 0x78]
mov eax, dword [esi + 4]
cmp eax, ebx
je 0x47d912
push eax
call fcn.004ca991
add esp, 4
push esi
call fcn.004cb3e6
add esp, 4
mov byte [esp + 0x348], 4
mov eax, dword [esp + 0xb4]
mov dword [esp + 0xb0], edi
cmp eax, ebx
je 0x47d95a
lea ecx, [eax + 0x10]
mov esi, eax
mov eax, dword [ecx]
dec eax
mov dword [ecx], eax
jne 0x47d95a
mov eax, dword [esi + 4]
cmp eax, ebx
je 0x47d951
push eax
call fcn.004ca991
add esp, 4
push esi
call fcn.004cb3e6
add esp, 4
mov byte [esp + 0x348], 3
mov eax, dword [esp + 0xe4]
mov dword [esp + 0xe0], edi
cmp eax, ebx
je 0x47d999
lea ecx, [eax + 0x10]
mov esi, eax
mov eax, dword [ecx]
dec eax
mov dword [ecx], eax
jne 0x47d999
mov eax, dword [esi + 4]
cmp eax, ebx
je 0x47d990
push eax
call fcn.004ca991
add esp, 4
push esi
call fcn.004cb3e6
add esp, 4
mov byte [esp + 0x348], 2
mov eax, dword [esp + 0x60]
mov dword [esp + 0x5c], edi
cmp eax, ebx
je 0x47dcb9
lea ecx, [eax + 0x10]
mov eax, dword [ecx]
dec eax
mov dword [ecx], eax
jne 0x47dcb9
mov esi, dword [esp + 0x60]
jmp 0x47dca0
mov ebp, 0x4f5ac4
cmp esi, ebx
jne 0x47d9d6
mov ebp, 0x4ec878
push 0x4ec878
lea edi, [esp + 0x3c]
mov dword [esp + 0x3c], vtable.CKuStringT_wchar_t__class_CKuStringUtilW_.0
mov dword [esp + 0x40], ebx
mov byte [esp + 0x44], bl
call fcn.00486cc0
mov ecx, edi
push ecx
lea edx, [esp + 0x30]
push edx
lea eax, [esp + 0xdc]
push eax
mov byte [esp + 0x354], 0xa
call fcn.00486a80
add esp, 0xc
lea ecx, [esp + 0x118]
push ecx
push eax
lea edx, [esp + 0xc4]
push edx
mov byte [esp + 0x354], 0xb
call fcn.00486b60
add esp, 0xc
mov esi, eax
mov byte [esp + 0x348], 0xc
push ebp
lea edi, [esp + 0x54]
mov dword [esp + 0x54], vtable.CKuStringT_wchar_t__class_CKuStringUtilW_.0
mov dword [esp + 0x58], ebx
mov byte [esp + 0x5c], bl
call fcn.00486cc0
mov eax, dword [esp + 0x358]
mov byte [esp + 0x348], 0xd
push eax
lea edi, [esp + 0x48]
mov dword [esp + 0x48], vtable.CKuStringT_wchar_t__class_CKuStringUtilW_.0
mov dword [esp + 0x4c], ebx
mov byte [esp + 0x50], bl
call fcn.00486cc0
lea ecx, [esp + 0x50]
push ecx
mov edx, edi
push edx
lea eax, [esp + 0xac]
push eax
mov byte [esp + 0x354], 0xe
call fcn.00486a80
add esp, 0xc
lea ecx, [esp + 0x118]
push ecx
push eax
lea edx, [esp + 0xa0]
push edx
mov byte [esp + 0x354], 0xf
call fcn.00486b60
add esp, 0xc
mov byte [esp + 0x348], 0x10
mov ecx, dword [esi + 4]
cmp ecx, ebx
je 0x47dad8
mov ecx, dword [ecx]
cmp ecx, ebx
jne 0x47dadd
mov ecx, 0x4f5ac4
mov eax, dword [eax + 4]
cmp eax, ebx
je 0x47daea
mov eax, dword [eax]
cmp eax, ebx
jne 0x47daef
mov eax, 0x4f5ac4
push ecx
push eax
mov eax, dword [esp + 0x358]
push 2
push eax
call fcn.0047d4a0
mov byte [esp + 0x358], 0xf
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0xac]
add esp, 0x10
mov edi, vtable.CKuStringT_wchar_t__class_CKuStringUtilW_.0
mov dword [esp + 0x98], edi
cmp eax, ebx
je 0x47db4b
lea ecx, [eax + 0x10]
mov esi, eax
mov eax, dword [ecx]
dec eax
mov dword [ecx], eax
jne 0x47db4b
mov eax, dword [esi + 4]
cmp eax, ebx
je 0x47db42
push eax
call fcn.004ca991
add esp, 4
push esi
call fcn.004cb3e6
add esp, 4
mov byte [esp + 0x348], 0xe
mov eax, dword [esp + 0xa8]
mov dword [esp + 0xa4], edi
cmp eax, ebx
je 0x47db8a
lea ecx, [eax + 0x10]
mov esi, eax
mov eax, dword [ecx]
dec eax
mov dword [ecx], eax
jne 0x47db8a
mov eax, dword [esi + 4]
cmp eax, ebx
je 0x47db81
push eax
call fcn.004ca991
add esp, 4
push esi
call fcn.004cb3e6
add esp, 4
mov byte [esp + 0x348], 0xd
mov eax, dword [esp + 0x48]
mov dword [esp + 0x44], edi
cmp eax, ebx
je 0x47dbc5
lea ecx, [eax + 0x10]
mov eax, dword [ecx]
dec eax
mov dword [ecx], eax
jne 0x47dbc5
mov esi, dword [esp + 0x48]
mov eax, dword [esi + 4]
cmp eax, ebx
je 0x47dbbc
push eax
call fcn.004ca991
add esp, 4
push esi
call fcn.004cb3e6
add esp, 4
mov byte [esp + 0x348], 0xc
mov eax, dword [esp + 0x54]
mov dword [esp + 0x50], edi
cmp eax, ebx
je 0x47dc00
lea ecx, [eax + 0x10]
mov eax, dword [ecx]
dec eax
mov dword [ecx], eax
jne 0x47dc00
mov esi, dword [esp + 0x54]
mov eax, dword [esi + 4]
cmp eax, ebx
je 0x47dbf7
push eax
call fcn.004ca991
add esp, 4
push esi
call fcn.004cb3e6
add esp, 4
mov byte [esp + 0x348], 0xb
mov eax, dword [esp + 0xc0]
mov dword [esp + 0xbc], edi
cmp eax, ebx
je 0x47dc3f
lea ecx, [eax + 0x10]
mov esi, eax
mov eax, dword [ecx]
dec eax
mov dword [ecx], eax
jne 0x47dc3f
mov eax, dword [esi + 4]
cmp eax, ebx
je 0x47dc36
push eax
call fcn.004ca991
add esp, 4
push esi
call fcn.004cb3e6
add esp, 4
mov byte [esp + 0x348], 0xa
mov eax, dword [esp + 0xd8]
mov dword [esp + 0xd4], edi
cmp eax, ebx
je 0x47dc7e
lea ecx, [eax + 0x10]
mov esi, eax
mov eax, dword [ecx]
dec eax
mov dword [ecx], eax
jne 0x47dc7e
mov eax, dword [esi + 4]
cmp eax, ebx
je 0x47dc75
push eax
call fcn.004ca991
add esp, 4
push esi
call fcn.004cb3e6
add esp, 4
mov byte [esp + 0x348], 2
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x38], edi
cmp eax, ebx
je 0x47dcb9
lea ecx, [eax + 0x10]
mov eax, dword [ecx]
dec eax
mov dword [ecx], eax
jne 0x47dcb9
mov esi, dword [esp + 0x3c]
mov eax, dword [esi + 4]
cmp eax, ebx
je 0x47dcb0
push eax
call fcn.004ca991
add esp, 4
push esi
call fcn.004cb3e6
add esp, 4
cmp dword [esp + 0x14], ebx
jne 0x47dcda
mov edx, dword [esp + 0x18]
lea ecx, [esp + 0xec]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x47d650
mov eax, dword [esp + 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov esi, dword [esp + 0x20]
mov ebp, vtable.CKuStringT_wchar_t__class_CKuStringUtilW_.0
mov byte [esp + 0x348], 1
mov dword [esp + 0x1c], ebp
cmp esi, ebx
je 0x47dd24
mov eax, dword [esi + 0x10]
dec eax
mov dword [esi + 0x10], eax
jne 0x47dd24
mov esi, dword [esp + 0x20]
mov eax, dword [esi + 4]
cmp eax, ebx
je 0x47dd1b
push eax
call fcn.004ca991
add esp, 4
push esi
call fcn.004cb3e6
add esp, 4
mov dword [esp + 0x348], 0xffffffff
mov eax, dword [esp + 0x30]
mov dword [esp + 0x2c], ebp
cmp eax, ebx
je 0x47dd62
lea ecx, [eax + 0x10]
mov eax, dword [ecx]
dec eax
mov dword [ecx], eax
jne 0x47dd62
mov esi, dword [esp + 0x30]
mov eax, dword [esi + 4]
cmp eax, ebx
je 0x47dd59
push eax
call fcn.004ca991
add esp, 4
push esi
call fcn.004cb3e6
add esp, 4
mov eax, dword [esp + 0x14]
jmp 0x47d567