Function at 0x47e1d0
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b1a31
mov eax, dword fs:[0]
push eax
sub esp, 0xd18
mov eax, dword [0x4ca010]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xc5c], ecx
mov ecx, dword [ebp - 0xc5c]
add ecx, 0x3ead20
call fcn.0047fea0
mov ecx, dword [ebp - 0xc5c]
add ecx, 0x3ead28
call fcn.0047fea0
mov ecx, dword [ebp - 0xc5c]
add ecx, 0x3ead30
call fcn.0047fea0
mov ecx, 0x45cfa60
call fcn.004113b0
push eax
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str._define.txt
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea edx, [ebp - 0xb50]
push edx
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0xc60], eax
cmp dword [ebp - 0xc60], 0xffffffff
jne 0x47e286
jmp 0x47e3f4
lea ecx, [ebp - 0xcdc]
call fcn.00490450
mov dword [ebp - 4], 0
mov ecx, 0x45cfa60
call fcn.004113b0
push eax
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea edx, [ebp - 0xb24]
push edx
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea ecx, [ebp - 0x114]
push ecx
lea ecx, [ebp - 0xcdc]
call fcn.00490430
lea ecx, [ebp - 0xcdc]
call fcn.00411250
mov dword [ebp - 0xc98], eax
lea ecx, [ebp - 0xcdc]
call fcn.00411230
cmp eax, dword [ebp - 0xc98]
jge 0x47e3e2
mov edx, 1
imul eax, edx, 0
mov dword [ebp - 0xc7c], eax
cmp dword [ebp - 0xc7c], 0x3e8
jae 0x47e31a
jmp 0x47e31f
call fcn.00499124
mov ecx, dword [ebp - 0xc7c]
mov byte [ebp + ecx - 0xa10], 0
lea edx, [ebp - 0xa10]
push edx
lea ecx, [ebp - 0xcdc]
call fcn.004902b0
push 0x4c3d44
lea eax, [ebp - 0xa10]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x47e3dd
lea ecx, [ebp - 0xa10]
push ecx
lea ecx, [ebp - 0xcdc]
call fcn.004902b0
lea edx, [ebp - 0xa10]
push edx
lea ecx, [ebp - 0xcdc]
call fcn.004902b0
push 0x4c3d50
lea eax, [ebp - 0xa10]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x47e3dd
lea ecx, [ebp - 0xa10]
push ecx
lea edx, [ebp - 0xc58]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov dword [ebp - 0xb54], 0
lea eax, [ebp - 0xc58]
push eax
mov ecx, dword [ebp - 0xc5c]
add ecx, 0x3ead28
call fcn.0047ff00
lea ecx, [ebp - 0xa10]
push ecx
lea ecx, [ebp - 0xcdc]
call fcn.004902b0
jmp 0x47e37d
jmp 0x47e2e7
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcdc]
call fcn.00490480
mov edx, dword [ebp - 0xc60]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [ebp - 0xc5c]
cmp dword [eax + 0x165fa8], 4
jl 0x47e415
jmp 0x47e772
mov ecx, dword [ebp - 0xc5c]
add ecx, 0x3ead18
call fcn.0047fea0
mov ecx, 0x45cfa60
call fcn.004113b0
push eax
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str._cg_.
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov dword [ebp - 0xc84], 0
lea eax, [ebp - 0xb50]
push eax
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0xc60], eax
cmp dword [ebp - 0xc60], 0xffffffff
jne 0x47e482
jmp 0x47e6af
mov dword [ebp - 0xc70], 1
cmp dword [ebp - 0xc70], 0
je 0x47e636
cmp dword [ebp - 0xb50], 0x10
je 0x47e617
lea edx, [ebp - 0xb24]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0xc80], eax
push 0
lea eax, [ebp - 0xb24]
push eax
lea ecx, [ebp - 0xcb0]
call fcn.0048fad0
mov dword [ebp - 4], 1
push 4
lea ecx, [ebp - 0xcb0]
call fcn.00490030
push 0x4c3d5c
lea ecx, [ebp - 0xcb0]
call fcn.00411210
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x47e501
jmp 0x47e5e6
push 0x4c3d64
lea ecx, [ebp - 0xcb0]
call fcn.00411210
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x47e5cf
mov ecx, 0x45cfa60
call fcn.004735e0
mov dword [ebp - 0xca0], eax
mov ecx, 0x45cfa60
call fcn.00473600
mov dword [ebp - 0xc9c], eax
mov dword [ebp - 0xc64], 0
mov dword [ebp - 0xc64], 0
jmp 0x47e565
mov ecx, dword [ebp - 0xc64]
add ecx, 1
mov dword [ebp - 0xc64], ecx
mov edx, dword [ebp - 0xc64]
cmp edx, dword [ebp - 0xc9c]
jge 0x47e59c
mov eax, dword [ebp - 0xc64]
mov ecx, dword [ebp - 0xca0]
mov edx, dword [ecx + eax*4]
push edx
mov eax, dword [ebp - 0xc5c]
add eax, 0x3ead18
push eax
mov ecx, dword [ebp - 0xc5c]
call fcn.0047e110
jmp 0x47e556
lea ecx, [ebp - 0xb50]
push ecx
mov edx, dword [ebp - 0xc60]
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov dword [ebp - 0xc70], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcb0]
call fcn.0048fb80
jmp 0x47e48c
cmp dword [ebp - 0xc80], 4
jl 0x47e5e6
mov eax, dword [ebp - 0xc80]
mov byte [ebp + eax - 0xb28], 0
lea ecx, [ebp - 0xb24]
push ecx
mov edx, dword [ebp - 0xc5c]
add edx, 0x3ead18
push edx
mov ecx, dword [ebp - 0xc5c]
call fcn.0047e110
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcb0]
call fcn.0048fb80
lea eax, [ebp - 0xb50]
push eax
mov ecx, dword [ebp - 0xc60]
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov dword [ebp - 0xc70], eax
jmp 0x47e48c
mov edx, dword [ebp - 0xc60]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [ebp - 0xc84], 1
jge 0x47e6af
mov dword [ebp - 0xc84], 1
mov ecx, 0x45cfa60
call fcn.004113b0
push eax
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x4c3d6c
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov ecx, 0x54796a0
call fcn.0046c9e0
push eax
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x4c3d70
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
jmp 0x47e45a
mov ecx, dword [ebp - 0xc5c]
add ecx, 0x3ead10
call fcn.0047fea0
mov ecx, 0x45cfa60
call fcn.004113b0
push eax
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str._movie_.
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea eax, [ebp - 0xb50]
push eax
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0xc60], eax
cmp dword [ebp - 0xc60], 0xffffffff
jne 0x47e70f
jmp 0x47e772
mov dword [ebp - 0xc88], 1
cmp dword [ebp - 0xc88], 0
je 0x47e765
cmp dword [ebp - 0xb50], 0x10
je 0x47e749
lea edx, [ebp - 0xb24]
push edx
mov eax, dword [ebp - 0xc5c]
add eax, 0x3ead10
push eax
mov ecx, dword [ebp - 0xc5c]
call fcn.0047e110
lea ecx, [ebp - 0xb50]
push ecx
mov edx, dword [ebp - 0xc60]
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov dword [ebp - 0xc88], eax
jmp 0x47e719
mov eax, dword [ebp - 0xc60]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [ebp - 0xc5c]
cmp dword [ecx + 0x165fa8], 4
jge 0x47e786
jmp 0x47eb7a
mov ecx, 0x45cfa60
call fcn.004113b0
push eax
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str._voice_.
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea ecx, [ebp - 0xb50]
push ecx
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0xc60], eax
cmp dword [ebp - 0xc60], 0xffffffff
jne 0x47e7d8
jmp 0x47eb7a
mov dword [ebp - 0xc6c], 1
cmp dword [ebp - 0xc6c], 0
je 0x47e9b7
cmp dword [ebp - 0xb50], 0x10
je 0x47e998
lea eax, [ebp - 0xb24]
push eax
lea ecx, [ebp - 0x218]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea edx, [ebp - 0x218]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0xc68], eax
mov eax, dword [ebp - 0xc68]
lea ecx, [ebp + eax - 0xb28]
push ecx
lea edx, [ebp - 0x420]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str..pck
lea eax, [ebp - 0x420]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x47e88c
lea ecx, [ebp - 0xb24]
push ecx
lea edx, [ebp - 0x420]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea eax, [ebp - 0xb50]
push eax
mov ecx, dword [ebp - 0xc60]
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov dword [ebp - 0xc6c], eax
jmp 0x47e7e2
push 0x4c3d94
lea edx, [ebp - 0x420]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x47e8f5
mov eax, dword [ebp - 0xc68]
sub eax, 4
mov dword [ebp - 0xc8c], eax
cmp dword [ebp - 0xc8c], 0x104
jae 0x47e8bf
jmp 0x47e8c4
call fcn.00499124
mov ecx, dword [ebp - 0xc8c]
mov byte [ebp + ecx - 0x218], 0
lea edx, [ebp - 0x218]
push edx
mov eax, dword [ebp - 0xc5c]
add eax, 0x3ead30
push eax
mov ecx, dword [ebp - 0xc5c]
call fcn.0047e110
jmp 0x47e998
cmp dword [ebp - 0xc68], 4
jl 0x47e92e
mov ecx, dword [ebp - 0xc68]
sub ecx, 4
mov dword [ebp - 0xc90], ecx
cmp dword [ebp - 0xc90], 0x104
jae 0x47e91b
jmp 0x47e920
call fcn.00499124
mov edx, dword [ebp - 0xc90]
mov byte [ebp + edx - 0x218], 0
push 0x4c3d9c
lea eax, [ebp - 0xb24]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x47e95a
push 0x4c3da0
lea ecx, [ebp - 0xb24]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x47e979
lea edx, [ebp - 0xb50]
push edx
mov eax, dword [ebp - 0xc60]
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov dword [ebp - 0xc6c], eax
jmp 0x47e7e2
lea ecx, [ebp - 0x218]
push ecx
mov edx, dword [ebp - 0xc5c]
add edx, 0x3ead20
push edx
mov ecx, dword [ebp - 0xc5c]
call fcn.0047e110
lea eax, [ebp - 0xb50]
push eax
mov ecx, dword [ebp - 0xc60]
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov dword [ebp - 0xc6c], eax
jmp 0x47e7e2
mov edx, dword [ebp - 0xc60]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
lea ecx, [ebp - 0xd24]
call fcn.00452bd0
mov dword [ebp - 4], 2
lea ecx, [ebp - 0xcec]
call fcn.0048fb40
mov byte [ebp - 4], 3
mov ecx, 0x45cfa60
call fcn.004113b0
push eax
lea eax, [ebp - 0x524]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str._voice_
lea ecx, [ebp - 0x524]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea edx, [ebp - 0x420]
push edx
lea eax, [ebp - 0x524]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea ecx, [ebp - 0x524]
push ecx
lea ecx, [ebp - 0xd24]
call fcn.00452c80
lea ecx, [ebp - 0xd24]
call fcn.00452cb0
mov dword [ebp - 0xc78], eax
cmp dword [ebp - 0xc78], 0
je 0x47eb4e
mov edx, dword [ebp - 0xc78]
push edx
lea eax, [ebp - 0x31c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea ecx, [ebp - 0x31c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0xc74], eax
mov edx, dword [ebp - 0xc74]
lea eax, [ebp + edx - 0x320]
push eax
lea ecx, [ebp - 0x628]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp dword [ebp - 0xc74], 4
jl 0x47eace
mov edx, dword [ebp - 0xc74]
sub edx, 4
mov dword [ebp - 0xc94], edx
cmp dword [ebp - 0xc94], 0x104
jae 0x47eabb
jmp 0x47eac0
call fcn.00499124
mov eax, dword [ebp - 0xc94]
mov byte [ebp + eax - 0x31c], 0
push str..eog
lea ecx, [ebp - 0x628]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x47eb04
lea edx, [ebp - 0x31c]
push edx
mov eax, dword [ebp - 0xc5c]
add eax, 0x3ead20
push eax
mov ecx, dword [ebp - 0xc5c]
call fcn.0047e110
jmp 0x47eb38
push str..csv
lea ecx, [ebp - 0x628]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x47eb38
lea edx, [ebp - 0x31c]
push edx
mov eax, dword [ebp - 0xc5c]
add eax, 0x3ead30
push eax
mov ecx, dword [ebp - 0xc5c]
call fcn.0047e110
lea ecx, [ebp - 0xd24]
call fcn.00452cb0
mov dword [ebp - 0xc78], eax
jmp 0x47ea46
lea ecx, [ebp - 0xd24]
call fcn.00491ca0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xcec]
call fcn.0048fb80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd24]
call fcn.00452c20
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00498d32
mov esp, ebp
pop ebp
ret