Function at 0x47a300
Capabilities:
Enumerate files on windows
Enumerate files recursively
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4d78fb
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x330
mov eax, dword [esp + 0x344]
push ebx
push ebp
xor ebp, ebp
push esi
xor ebx, ebx
push edi
mov dword [esp + 0x14], ebp
cmp eax, 2
jne 0x47a3e0
mov dword [esp + 0x88], ebx
mov dword [esp + 0x84], ebx
mov dword [esp + 0x80], ebx
mov edi, dword [esp + 0x358]
lea eax, [esp + 0x80]
push eax
mov eax, edi
mov dword [esp + 0x34c], ebx
call fcn.004813c0
mov esi, dword [esp + 0x88]
add esp, 4
test eax, eax
je 0x47a3a1
mov ecx, dword [esp + 0x35c]
cmp ecx, ebx
jne 0x47a388
mov ecx, esi
cmp ecx, ebx
je 0x47a3a1
cmp word [ecx], bx
je 0x47a3a1
mov eax, dword [esp + 0x350]
mov eax, dword [eax]
mov edx, edi
call fcn.004b1ce0
test eax, eax
je 0x47a3a6
mov ebp, 3
cmp esi, ebx
je 0x47a3c5
mov ecx, dword [esp + 0x80]
push ecx
push ebx
push esi
call fcn.004ce290
add esp, 0xc
push esi
call fcn.004c57e5
add esp, 4
mov eax, ebp
mov ecx, dword [esp + 0x340]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x33c
ret
cmp eax, 3
jne 0x47a3c5
mov eax, dword [esp + 0x35c]
cmp eax, ebx
jne 0x47a3f5
mov eax, 0x4e1a4c
mov ebp, vtable.CKuStringT_wchar_t__class_CKuStringUtilW_.0
push eax
lea edi, [esp + 0x30]
mov dword [esp + 0x30], ebp
mov dword [esp + 0x34], ebx
mov byte [esp + 0x38], bl
call fcn.00450ff0
mov esi, dword [esp + 0x358]
mov dword [esp + 0x348], 1
push esi
lea edi, [esp + 0x20]
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], ebx
mov byte [esp + 0x28], bl
call fcn.00450ff0
mov eax, esi
mov byte [esp + 0x348], 2
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x47a445
sub eax, edx
sar eax, 1
xor edx, edx
cmp word [esi + eax*2 - 2], 0x5c
sete dl
mov eax, edx
mov dword [esp + 0x28], eax
cmp eax, ebx
je 0x47a478
lea eax, [esp + 0x1c]
push eax
mov edi, 0x4efedc
call fcn.00481bc0
mov esi, dword [esp + 0x20]
cmp esi, ebx
je 0x47a486
mov eax, dword [esi]
cmp eax, ebx
jne 0x47a48b
mov eax, 0x4e1a4c
lea ecx, [esp + 0xec]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [esp + 0x18], eax
cmp eax, 0xffffffff
je 0x47ab4e
jmp 0x47a4b0
mov esi, dword [esp + 0x28]
mov ecx, 0x4ea29c
lea eax, [esp + 0x118]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x47a4e6
cmp dx, bx
je 0x47a4e2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x47a4e6
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x47a4c0
xor eax, eax
jmp 0x47a4eb
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x47ab1f
mov ecx, 0x507290
lea eax, [esp + 0x118]
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x47a526
cmp dx, bx
je 0x47a522
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x47a526
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x47a500
xor eax, eax
jmp 0x47a52b
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x47ab1f
test byte [esp + 0xec], 0x10
je 0x47a828
lea ebp, [esp + 0x118]
cmp esi, ebx
jne 0x47a551
mov ebp, 0x4e1a4c
push 0x4e7bb8
lea edi, [esp + 0x60]
mov dword [esp + 0x60], vtable.CKuStringT_wchar_t__class_CKuStringUtilW_.0
mov dword [esp + 0x64], ebx
mov byte [esp + 0x68], bl
call fcn.00450ff0
mov edx, edi
push edx
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0xe8]
push ecx
mov byte [esp + 0x354], 3
call fcn.00481c70
add esp, 0xc
lea edx, [esp + 0x118]
push edx
push eax
lea eax, [esp + 0xb8]
push eax
mov byte [esp + 0x354], 4
call fcn.00481d50
add esp, 0xc
mov esi, eax
mov byte [esp + 0x348], 5
push ebp
lea edi, [esp + 0x78]
mov dword [esp + 0x78], vtable.CKuStringT_wchar_t__class_CKuStringUtilW_.0
mov dword [esp + 0x7c], ebx
mov byte [esp + 0x80], bl
call fcn.00450ff0
mov ecx, dword [esp + 0x358]
mov byte [esp + 0x348], 6
push ecx
lea edi, [esp + 0x6c]
mov dword [esp + 0x6c], vtable.CKuStringT_wchar_t__class_CKuStringUtilW_.0
mov dword [esp + 0x70], ebx
mov byte [esp + 0x74], bl
call fcn.00450ff0
lea edx, [esp + 0x74]
push edx
mov eax, edi
push eax
lea ecx, [esp + 0x94]
push ecx
mov byte [esp + 0x354], 7
call fcn.00481c70
add esp, 0xc
push 0x4e7bb8
push eax
lea edx, [esp + 0xd0]
push edx
mov byte [esp + 0x354], 8
call fcn.00481d50
add esp, 0xc
mov byte [esp + 0x348], 9
mov ecx, dword [esi + 4]
cmp ecx, ebx
je 0x47a653
mov ecx, dword [ecx]
cmp ecx, ebx
jne 0x47a658
mov ecx, 0x4e1a4c
mov eax, dword [eax + 4]
cmp eax, ebx
je 0x47a665
mov eax, dword [eax]
cmp eax, ebx
jne 0x47a66a
mov eax, 0x4e1a4c
push ecx
push eax
mov eax, dword [esp + 0x358]
push 3
push eax
call fcn.0047a300
mov byte [esp + 0x358], 8
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0xdc]
add esp, 0x10
mov edi, vtable.CKuStringT_wchar_t__class_CKuStringUtilW_.0
mov dword [esp + 0xc8], edi
cmp eax, ebx
je 0x47a6c6
lea ecx, [eax + 0x10]
mov esi, eax
mov eax, dword [ecx]
dec eax
mov dword [ecx], eax
jne 0x47a6c6
mov eax, dword [esi + 4]
cmp eax, ebx
je 0x47a6bd
push eax
call fcn.004c57e5
add esp, 4
push esi
call fcn.004c57da
add esp, 4
mov byte [esp + 0x348], 7
mov eax, dword [esp + 0x90]
mov dword [esp + 0x8c], edi
cmp eax, ebx
je 0x47a705
lea ecx, [eax + 0x10]
mov esi, eax
mov eax, dword [ecx]
dec eax
mov dword [ecx], eax
jne 0x47a705
mov eax, dword [esi + 4]
cmp eax, ebx
je 0x47a6fc
push eax
call fcn.004c57e5
add esp, 4
push esi
call fcn.004c57da
add esp, 4
mov byte [esp + 0x348], 6
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x68], edi
cmp eax, ebx
je 0x47a740
lea ecx, [eax + 0x10]
mov eax, dword [ecx]
dec eax
mov dword [ecx], eax
jne 0x47a740
mov esi, dword [esp + 0x6c]
mov eax, dword [esi + 4]
cmp eax, ebx
je 0x47a737
push eax
call fcn.004c57e5
add esp, 4
push esi
call fcn.004c57da
add esp, 4
mov byte [esp + 0x348], 5
mov eax, dword [esp + 0x78]
mov dword [esp + 0x74], edi
cmp eax, ebx
je 0x47a77b
lea ecx, [eax + 0x10]
mov eax, dword [ecx]
dec eax
mov dword [ecx], eax
jne 0x47a77b
mov esi, dword [esp + 0x78]
mov eax, dword [esi + 4]
cmp eax, ebx
je 0x47a772
push eax
call fcn.004c57e5
add esp, 4
push esi
call fcn.004c57da
add esp, 4
mov byte [esp + 0x348], 4
mov eax, dword [esp + 0xb4]
mov dword [esp + 0xb0], edi
cmp eax, ebx
je 0x47a7ba
lea ecx, [eax + 0x10]
mov esi, eax
mov eax, dword [ecx]
dec eax
mov dword [ecx], eax
jne 0x47a7ba
mov eax, dword [esi + 4]
cmp eax, ebx
je 0x47a7b1
push eax
call fcn.004c57e5
add esp, 4
push esi
call fcn.004c57da
add esp, 4
mov byte [esp + 0x348], 3
mov eax, dword [esp + 0xe4]
mov dword [esp + 0xe0], edi
cmp eax, ebx
je 0x47a7f9
lea ecx, [eax + 0x10]
mov esi, eax
mov eax, dword [ecx]
dec eax
mov dword [ecx], eax
jne 0x47a7f9
mov eax, dword [esi + 4]
cmp eax, ebx
je 0x47a7f0
push eax
call fcn.004c57e5
add esp, 4
push esi
call fcn.004c57da
add esp, 4
mov byte [esp + 0x348], 2
mov eax, dword [esp + 0x60]
mov dword [esp + 0x5c], edi
cmp eax, ebx
je 0x47ab19
lea ecx, [eax + 0x10]
mov eax, dword [ecx]
dec eax
mov dword [ecx], eax
jne 0x47ab19
mov esi, dword [esp + 0x60]
jmp 0x47ab00
mov ebp, 0x4e1a4c
cmp esi, ebx
jne 0x47a836
mov ebp, 0x4e7bb8
push 0x4e7bb8
lea edi, [esp + 0x3c]
mov dword [esp + 0x3c], vtable.CKuStringT_wchar_t__class_CKuStringUtilW_.0
mov dword [esp + 0x40], ebx
mov byte [esp + 0x44], bl
call fcn.00450ff0
mov ecx, edi
push ecx
lea edx, [esp + 0x30]
push edx
lea eax, [esp + 0xdc]
push eax
mov byte [esp + 0x354], 0xa
call fcn.00481c70
add esp, 0xc
lea ecx, [esp + 0x118]
push ecx
push eax
lea edx, [esp + 0xc4]
push edx
mov byte [esp + 0x354], 0xb
call fcn.00481d50
add esp, 0xc
mov esi, eax
mov byte [esp + 0x348], 0xc
push ebp
lea edi, [esp + 0x54]
mov dword [esp + 0x54], vtable.CKuStringT_wchar_t__class_CKuStringUtilW_.0
mov dword [esp + 0x58], ebx
mov byte [esp + 0x5c], bl
call fcn.00450ff0
mov eax, dword [esp + 0x358]
mov byte [esp + 0x348], 0xd
push eax
lea edi, [esp + 0x48]
mov dword [esp + 0x48], vtable.CKuStringT_wchar_t__class_CKuStringUtilW_.0
mov dword [esp + 0x4c], ebx
mov byte [esp + 0x50], bl
call fcn.00450ff0
lea ecx, [esp + 0x50]
push ecx
mov edx, edi
push edx
lea eax, [esp + 0xac]
push eax
mov byte [esp + 0x354], 0xe
call fcn.00481c70
add esp, 0xc
lea ecx, [esp + 0x118]
push ecx
push eax
lea edx, [esp + 0xa0]
push edx
mov byte [esp + 0x354], 0xf
call fcn.00481d50
add esp, 0xc
mov byte [esp + 0x348], 0x10
mov ecx, dword [esi + 4]
cmp ecx, ebx
je 0x47a938
mov ecx, dword [ecx]
cmp ecx, ebx
jne 0x47a93d
mov ecx, 0x4e1a4c
mov eax, dword [eax + 4]
cmp eax, ebx
je 0x47a94a
mov eax, dword [eax]
cmp eax, ebx
jne 0x47a94f
mov eax, 0x4e1a4c
push ecx
push eax
mov eax, dword [esp + 0x358]
push 2
push eax
call fcn.0047a300
mov byte [esp + 0x358], 0xf
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0xac]
add esp, 0x10
mov edi, vtable.CKuStringT_wchar_t__class_CKuStringUtilW_.0
mov dword [esp + 0x98], edi
cmp eax, ebx
je 0x47a9ab
lea ecx, [eax + 0x10]
mov esi, eax
mov eax, dword [ecx]
dec eax
mov dword [ecx], eax
jne 0x47a9ab
mov eax, dword [esi + 4]
cmp eax, ebx
je 0x47a9a2
push eax
call fcn.004c57e5
add esp, 4
push esi
call fcn.004c57da
add esp, 4
mov byte [esp + 0x348], 0xe
mov eax, dword [esp + 0xa8]
mov dword [esp + 0xa4], edi
cmp eax, ebx
je 0x47a9ea
lea ecx, [eax + 0x10]
mov esi, eax
mov eax, dword [ecx]
dec eax
mov dword [ecx], eax
jne 0x47a9ea
mov eax, dword [esi + 4]
cmp eax, ebx
je 0x47a9e1
push eax
call fcn.004c57e5
add esp, 4
push esi
call fcn.004c57da
add esp, 4
mov byte [esp + 0x348], 0xd
mov eax, dword [esp + 0x48]
mov dword [esp + 0x44], edi
cmp eax, ebx
je 0x47aa25
lea ecx, [eax + 0x10]
mov eax, dword [ecx]
dec eax
mov dword [ecx], eax
jne 0x47aa25
mov esi, dword [esp + 0x48]
mov eax, dword [esi + 4]
cmp eax, ebx
je 0x47aa1c
push eax
call fcn.004c57e5
add esp, 4
push esi
call fcn.004c57da
add esp, 4
mov byte [esp + 0x348], 0xc
mov eax, dword [esp + 0x54]
mov dword [esp + 0x50], edi
cmp eax, ebx
je 0x47aa60
lea ecx, [eax + 0x10]
mov eax, dword [ecx]
dec eax
mov dword [ecx], eax
jne 0x47aa60
mov esi, dword [esp + 0x54]
mov eax, dword [esi + 4]
cmp eax, ebx
je 0x47aa57
push eax
call fcn.004c57e5
add esp, 4
push esi
call fcn.004c57da
add esp, 4
mov byte [esp + 0x348], 0xb
mov eax, dword [esp + 0xc0]
mov dword [esp + 0xbc], edi
cmp eax, ebx
je 0x47aa9f
lea ecx, [eax + 0x10]
mov esi, eax
mov eax, dword [ecx]
dec eax
mov dword [ecx], eax
jne 0x47aa9f
mov eax, dword [esi + 4]
cmp eax, ebx
je 0x47aa96
push eax
call fcn.004c57e5
add esp, 4
push esi
call fcn.004c57da
add esp, 4
mov byte [esp + 0x348], 0xa
mov eax, dword [esp + 0xd8]
mov dword [esp + 0xd4], edi
cmp eax, ebx
je 0x47aade
lea ecx, [eax + 0x10]
mov esi, eax
mov eax, dword [ecx]
dec eax
mov dword [ecx], eax
jne 0x47aade
mov eax, dword [esi + 4]
cmp eax, ebx
je 0x47aad5
push eax
call fcn.004c57e5
add esp, 4
push esi
call fcn.004c57da
add esp, 4
mov byte [esp + 0x348], 2
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x38], edi
cmp eax, ebx
je 0x47ab19
lea ecx, [eax + 0x10]
mov eax, dword [ecx]
dec eax
mov dword [ecx], eax
jne 0x47ab19
mov esi, dword [esp + 0x3c]
mov eax, dword [esi + 4]
cmp eax, ebx
je 0x47ab10
push eax
call fcn.004c57e5
add esp, 4
push esi
call fcn.004c57da
add esp, 4
cmp dword [esp + 0x14], ebx
jne 0x47ab3a
mov edx, dword [esp + 0x18]
lea ecx, [esp + 0xec]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x47a4b0
mov eax, dword [esp + 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov esi, dword [esp + 0x20]
mov ebp, vtable.CKuStringT_wchar_t__class_CKuStringUtilW_.0
mov byte [esp + 0x348], 1
mov dword [esp + 0x1c], ebp
cmp esi, ebx
je 0x47ab84
mov eax, dword [esi + 0x10]
dec eax
mov dword [esi + 0x10], eax
jne 0x47ab84
mov esi, dword [esp + 0x20]
mov eax, dword [esi + 4]
cmp eax, ebx
je 0x47ab7b
push eax
call fcn.004c57e5
add esp, 4
push esi
call fcn.004c57da
add esp, 4
mov dword [esp + 0x348], 0xffffffff
mov eax, dword [esp + 0x30]
mov dword [esp + 0x2c], ebp
cmp eax, ebx
je 0x47abc2
lea ecx, [eax + 0x10]
mov eax, dword [ecx]
dec eax
mov dword [ecx], eax
jne 0x47abc2
mov esi, dword [esp + 0x30]
mov eax, dword [esi + 4]
cmp eax, ebx
je 0x47abb9
push eax
call fcn.004c57e5
add esp, 4
push esi
call fcn.004c57da
add esp, 4
mov eax, dword [esp + 0x14]
jmp 0x47a3c7