now expands the files we are looking for correctly. doesn't decrypt yet.