Function at 0x473d4c
Capabilities:
Enumerate files on windows

Disassembly:
push 0x350
mov eax, 0x510f92
call fcn.004ec79c
mov eax, dword [ebp + 8]
mov ebx, ecx
mov dword [ebp - 0x2ac], ebx
mov dword [ebp - 0x2a8], eax
call fcn.00411dd9
mov al, byte [eax]
test al, al
jne 0x473dd4
lea eax, [ebp - 0x35c]
push eax
call fcn.004071c6
and dword [ebp - 4], 0
lea eax, [ebp - 0x354]
push str.CFFConfig::GetNextFFProfile
push eax
call fcn.004058d5
pop ecx
pop ecx
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x35c]
call fcn.0040574e
lea edi, [ebp - 0x50]
mov byte [ebp - 4], 1
call fcn.00405549
push 0
push 1
mov esi, edi
call fcn.0040754f
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x35c]
call fcn.00405a60
jmp 0x473f0d
lea eax, [ebp - 0x354]
push eax
mov dword [ebp - 4], 2
call fcn.00405430
mov byte [ebp - 4], 3
call fcn.00411dd9
lea ecx, [ebp - 0x2d0]
call fcn.00405346
mov byte [ebp - 4], 4
cmp dword [eax + 0x18], 8
jb 0x473e0a
mov esi, dword [eax + 4]
jmp 0x473e0d
lea esi, [eax + 4]
lea eax, [ebp - 0x354]
push 0x5251c8
push eax
call fcn.004058d5
pop ecx
pop ecx
push esi
push eax
call fcn.004058d5
pop ecx
pop ecx
push 0x5251c0
push eax
call fcn.004058d5
pop ecx
pop ecx
push str.CFFConfig::GetNextFFProfile
push eax
call fcn.004058d5
pop ecx
pop ecx
push 0
push 1
lea esi, [ebp - 0x2d0]
mov byte [ebp - 4], 3
call fcn.0040754f
lea eax, [ebp - 0x2b4]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp - 0x2b4]
mov byte [ebp - 4], 5
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x473eb5
lea eax, [ebp - 0x2d0]
push eax
lea ecx, [ebp - 0x354]
call fcn.0040532c
push 0x5a
push str..FFConfig.cpp
push eax
push esi
lea ecx, [ebp - 0x2b4]
mov byte [ebp - 4], 6
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push 0
push 1
lea esi, [ebp - 0x2d0]
call fcn.0040754f
lea ecx, [ebp - 0x2b4]
mov byte [ebp - 4], 3
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 2
call fcn.0040539b
or dword [ebp - 4], 0xffffffff
jmp 0x473f0d
push 0x525140
push dword [ebp - 0x2a8]
call fcn.00407685
lea eax, [ebp - 0x34]
push eax
call fcn.00473819
mov dword [ebp - 4], 9
lea eax, [ebp - 0x34]
mov dword [esp], 0x52a074
push eax
call fcn.0040512d
mov eax, dword [ebx]
test eax, eax
jne 0x473f8c
cmp dword [ebp - 0x1c], 8
mov eax, dword [ebp - 0x30]
jae 0x473f4f
lea eax, [ebp - 0x30]
lea ecx, [ebp - 0x2a4]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebx], eax
cmp dword [ebx], 0xffffffff
je 0x473f9e
cmp word [ebp - 0x278], 0x2e
je 0x473f77
test byte [ebp - 0x2a4], 0x10
jne 0x473fc2
lea eax, [ebp - 0x2a4]
push eax
push dword [ebx]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x473f64
jmp 0x473f9e
lea ecx, [ebp - 0x2a4]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x473f5f
mov eax, dword [ebp - 0x2ac]
push dword [eax]
xor bl, bl
call dword [sym.imp.KERNEL32.dll_FindClose]
push 0
push 1
lea esi, [ebp - 0x34]
call fcn.0040754f
mov al, bl
call fcn.004ec7f8
ret
lea eax, [ebp - 0x278]
push eax
push dword [ebp - 0x2a8]
call fcn.00407685
mov bl, 1
jmp 0x473fae