Function at 0x4818c0
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b57c1
mov eax, dword fs:[0]
push eax
sub esp, 0xe1c
mov eax, dword [0x4cfb90]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xd60], ecx
mov ecx, dword [ebp - 0xd60]
add ecx, 0x3ead20
call fcn.004836d0
mov ecx, dword [ebp - 0xd60]
add ecx, 0x3ead28
call fcn.004836d0
mov ecx, dword [ebp - 0xd60]
add ecx, 0x3ead30
call fcn.004836d0
mov ecx, 0x489e1d0
call fcn.00411390
push eax
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str._define.txt
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea edx, [ebp - 0xc54]
push edx
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0xd64], eax
cmp dword [ebp - 0xd64], 0xffffffff
jne 0x481976
jmp 0x481ae4
lea ecx, [ebp - 0xde0]
call fcn.004941b0
mov dword [ebp - 4], 0
mov ecx, 0x489e1d0
call fcn.00411390
push eax
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea edx, [ebp - 0xc28]
push edx
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea ecx, [ebp - 0x114]
push ecx
lea ecx, [ebp - 0xde0]
call fcn.00494190
lea ecx, [ebp - 0xde0]
call fcn.00411250
mov dword [ebp - 0xd9c], eax
lea ecx, [ebp - 0xde0]
call fcn.00411230
cmp eax, dword [ebp - 0xd9c]
jge 0x481ad2
mov edx, 1
imul eax, edx, 0
mov dword [ebp - 0xd84], eax
cmp dword [ebp - 0xd84], 0x3e8
jae 0x481a0a
jmp 0x481a0f
call fcn.0049ce8a
mov ecx, dword [ebp - 0xd84]
mov byte [ebp + ecx - 0xa10], 0
lea edx, [ebp - 0xa10]
push edx
lea ecx, [ebp - 0xde0]
call fcn.00494010
push 0x4c6c68
lea eax, [ebp - 0xa10]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x481acd
lea ecx, [ebp - 0xa10]
push ecx
lea ecx, [ebp - 0xde0]
call fcn.00494010
lea edx, [ebp - 0xa10]
push edx
lea ecx, [ebp - 0xde0]
call fcn.00494010
push 0x4c6c74
lea eax, [ebp - 0xa10]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x481acd
lea ecx, [ebp - 0xa10]
push ecx
lea edx, [ebp - 0xd5c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov dword [ebp - 0xc58], 0
lea eax, [ebp - 0xd5c]
push eax
mov ecx, dword [ebp - 0xd60]
add ecx, 0x3ead28
call fcn.00483730
lea ecx, [ebp - 0xa10]
push ecx
lea ecx, [ebp - 0xde0]
call fcn.00494010
jmp 0x481a6d
jmp 0x4819d7
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xde0]
call fcn.004941e0
mov edx, dword [ebp - 0xd64]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [ebp - 0xd60]
cmp dword [eax + 0x165fa8], 4
jl 0x481b05
jmp 0x481efd
mov ecx, dword [ebp - 0xd60]
add ecx, 0x3ead18
call fcn.004836d0
mov ecx, 0x489e1d0
call fcn.00411390
push eax
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str._cg_.
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov dword [ebp - 0xd8c], 0
lea eax, [ebp - 0xc54]
push eax
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0xd64], eax
cmp dword [ebp - 0xd64], 0xffffffff
jne 0x481b72
jmp 0x481de7
mov dword [ebp - 0xd6c], 1
cmp dword [ebp - 0xd6c], 0
je 0x481d6e
cmp dword [ebp - 0xc54], 0x10
je 0x481d4f
lea edx, [ebp - 0xc28]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0xd88], eax
push 0x4c6c80
lea eax, [ebp - 0xc28]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x481bd5
push 0x4c6c84
lea ecx, [ebp - 0xc28]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x481bf1
lea edx, [ebp - 0xc54]
push edx
mov eax, dword [ebp - 0xd64]
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov dword [ebp - 0xd6c], eax
jmp 0x481b7c
push 0
lea ecx, [ebp - 0xc28]
push ecx
lea ecx, [ebp - 0xdb4]
call fcn.004937b0
mov dword [ebp - 4], 1
push 4
lea ecx, [ebp - 0xdb4]
call fcn.00493d90
push 0x4c6c88
lea ecx, [ebp - 0xdb4]
call fcn.00411210
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x481c39
jmp 0x481d1f
push 0x4c6c90
lea ecx, [ebp - 0xdb4]
call fcn.00411210
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x481d08
mov ecx, 0x489e1d0
call fcn.00476160
mov dword [ebp - 0xda4], eax
mov ecx, 0x489e1d0
call fcn.00476180
mov dword [ebp - 0xda0], eax
mov dword [ebp - 0xd68], 0
mov dword [ebp - 0xd68], 0
jmp 0x481c9d
mov edx, dword [ebp - 0xd68]
add edx, 1
mov dword [ebp - 0xd68], edx
mov eax, dword [ebp - 0xd68]
cmp eax, dword [ebp - 0xda0]
jge 0x481cd5
mov ecx, dword [ebp - 0xd68]
mov edx, dword [ebp - 0xda4]
mov eax, dword [edx + ecx*4]
push eax
mov ecx, dword [ebp - 0xd60]
add ecx, 0x3ead18
push ecx
mov ecx, dword [ebp - 0xd60]
call fcn.00481800
jmp 0x481c8e
lea edx, [ebp - 0xc54]
push edx
mov eax, dword [ebp - 0xd64]
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov dword [ebp - 0xd6c], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xdb4]
call fcn.00493860
jmp 0x481b7c
cmp dword [ebp - 0xd88], 4
jl 0x481d1f
mov ecx, dword [ebp - 0xd88]
mov byte [ebp + ecx - 0xc2c], 0
lea edx, [ebp - 0xc28]
push edx
mov eax, dword [ebp - 0xd60]
add eax, 0x3ead18
push eax
mov ecx, dword [ebp - 0xd60]
call fcn.00481800
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xdb4]
call fcn.00493860
lea ecx, [ebp - 0xc54]
push ecx
mov edx, dword [ebp - 0xd64]
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov dword [ebp - 0xd6c], eax
jmp 0x481b7c
mov eax, dword [ebp - 0xd64]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [ebp - 0xd8c], 1
jge 0x481de7
mov dword [ebp - 0xd8c], 1
mov ecx, 0x489e1d0
call fcn.00411390
push eax
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x4c6c98
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov ecx, 0x574acd8
call fcn.0046f580
push eax
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x4c6c9c
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
jmp 0x481b4a
mov ecx, dword [ebp - 0xd60]
add ecx, 0x3ead10
call fcn.004836d0
mov ecx, 0x489e1d0
call fcn.00411390
push eax
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str._movie_.
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea ecx, [ebp - 0xc54]
push ecx
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0xd64], eax
cmp dword [ebp - 0xd64], 0xffffffff
jne 0x481e4a
jmp 0x481efd
mov dword [ebp - 0xd78], 1
cmp dword [ebp - 0xd78], 0
je 0x481ef0
cmp dword [ebp - 0xc54], 0x10
je 0x481ed1
push 0x4c6cac
lea eax, [ebp - 0xc28]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x481e96
push 0x4c6cb0
lea ecx, [ebp - 0xc28]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x481eb2
lea edx, [ebp - 0xc54]
push edx
mov eax, dword [ebp - 0xd64]
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov dword [ebp - 0xd78], eax
jmp 0x481e54
lea ecx, [ebp - 0xc28]
push ecx
mov edx, dword [ebp - 0xd60]
add edx, 0x3ead10
push edx
mov ecx, dword [ebp - 0xd60]
call fcn.00481800
lea eax, [ebp - 0xc54]
push eax
mov ecx, dword [ebp - 0xd64]
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov dword [ebp - 0xd78], eax
jmp 0x481e54
mov edx, dword [ebp - 0xd64]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [ebp - 0xd60]
cmp dword [eax + 0x165fa8], 4
jge 0x481f11
jmp 0x482308
mov ecx, 0x489e1d0
call fcn.00411390
push eax
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str._voice_.
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea eax, [ebp - 0xc54]
push eax
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0xd64], eax
cmp dword [ebp - 0xd64], 0xffffffff
jne 0x481f63
jmp 0x482308
mov dword [ebp - 0xd74], 1
cmp dword [ebp - 0xd74], 0
je 0x482143
cmp dword [ebp - 0xc54], 0x10
je 0x482124
lea edx, [ebp - 0xc28]
push edx
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea ecx, [ebp - 0x218]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0xd70], eax
mov edx, dword [ebp - 0xd70]
lea eax, [ebp + edx - 0xc2c]
push eax
lea ecx, [ebp - 0x524]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str..pck
lea edx, [ebp - 0x524]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x482017
lea eax, [ebp - 0xc28]
push eax
lea ecx, [ebp - 0xb14]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea edx, [ebp - 0xc54]
push edx
mov eax, dword [ebp - 0xd64]
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov dword [ebp - 0xd74], eax
jmp 0x481f6d
push 0x4c6cc8
lea ecx, [ebp - 0x524]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x482081
mov edx, dword [ebp - 0xd70]
sub edx, 4
mov dword [ebp - 0xd90], edx
cmp dword [ebp - 0xd90], 0x104
jae 0x48204a
jmp 0x48204f
call fcn.0049ce8a
mov eax, dword [ebp - 0xd90]
mov byte [ebp + eax - 0x218], 0
lea ecx, [ebp - 0x218]
push ecx
mov edx, dword [ebp - 0xd60]
add edx, 0x3ead30
push edx
mov ecx, dword [ebp - 0xd60]
call fcn.00481800
jmp 0x482124
cmp dword [ebp - 0xd70], 4
jl 0x4820ba
mov eax, dword [ebp - 0xd70]
sub eax, 4
mov dword [ebp - 0xd94], eax
cmp dword [ebp - 0xd94], 0x104
jae 0x4820a7
jmp 0x4820ac
call fcn.0049ce8a
mov ecx, dword [ebp - 0xd94]
mov byte [ebp + ecx - 0x218], 0
push 0x4c6cd0
lea edx, [ebp - 0xc28]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x4820e6
push 0x4c6cd4
lea eax, [ebp - 0xc28]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x482105
lea ecx, [ebp - 0xc54]
push ecx
mov edx, dword [ebp - 0xd64]
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov dword [ebp - 0xd74], eax
jmp 0x481f6d
lea eax, [ebp - 0x218]
push eax
mov ecx, dword [ebp - 0xd60]
add ecx, 0x3ead20
push ecx
mov ecx, dword [ebp - 0xd60]
call fcn.00481800
lea edx, [ebp - 0xc54]
push edx
mov eax, dword [ebp - 0xd64]
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov dword [ebp - 0xd74], eax
jmp 0x481f6d
mov ecx, dword [ebp - 0xd64]
push ecx
call dword [sym.imp.KERNEL32.dll_FindClose]
lea ecx, [ebp - 0xe28]
call fcn.004545e0
mov dword [ebp - 4], 2
lea ecx, [ebp - 0xdf0]
call fcn.00493820
mov byte [ebp - 4], 3
mov ecx, 0x489e1d0
call fcn.00411390
push eax
lea edx, [ebp - 0x420]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str._voice_
lea eax, [ebp - 0x420]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea ecx, [ebp - 0xb14]
push ecx
lea edx, [ebp - 0x420]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea eax, [ebp - 0x420]
push eax
lea ecx, [ebp - 0xe28]
call fcn.00454690
lea ecx, [ebp - 0xe28]
call fcn.004546c0
mov dword [ebp - 0xd80], eax
cmp dword [ebp - 0xd80], 0
je 0x4822dc
mov ecx, dword [ebp - 0xd80]
push ecx
lea edx, [ebp - 0x31c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea eax, [ebp - 0x31c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0xd7c], eax
mov ecx, dword [ebp - 0xd7c]
lea edx, [ebp + ecx - 0x320]
push edx
lea eax, [ebp - 0x628]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp dword [ebp - 0xd7c], 4
jl 0x48225a
mov ecx, dword [ebp - 0xd7c]
sub ecx, 4
mov dword [ebp - 0xd98], ecx
cmp dword [ebp - 0xd98], 0x104
jae 0x482247
jmp 0x48224c
call fcn.0049ce8a
mov edx, dword [ebp - 0xd98]
mov byte [ebp + edx - 0x31c], 0
push str..eog
lea eax, [ebp - 0x628]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x482291
lea ecx, [ebp - 0x31c]
push ecx
mov edx, dword [ebp - 0xd60]
add edx, 0x3ead20
push edx
mov ecx, dword [ebp - 0xd60]
call fcn.00481800
jmp 0x4822c6
push str..csv
lea eax, [ebp - 0x628]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x4822c6
lea ecx, [ebp - 0x31c]
push ecx
mov edx, dword [ebp - 0xd60]
add edx, 0x3ead30
push edx
mov ecx, dword [ebp - 0xd60]
call fcn.00481800
lea ecx, [ebp - 0xe28]
call fcn.004546c0
mov dword [ebp - 0xd80], eax
jmp 0x4821d2
lea ecx, [ebp - 0xe28]
call fcn.00495a00
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xdf0]
call fcn.00493860
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe28]
call fcn.00454630
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0049ca98
mov esp, ebp
pop ebp
ret