Function at 0x4869ed
Capabilities:
Enumerate files on windows

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x880
mov qword [rbp + 0x10], rcx
mov qword [rbp + 0x18], rdx
mov rax, qword [rbp + 0x18]
add rax, 8
mov ecx, dword [rax]
cmp ecx, 0
jne 0x486b01
mov eax, 1
mov byte [rbp - 0x48], al
movabs rax, 7
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x47]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
lea rax, [0x0050cad9]
mov qword [rbp - 0x78], rax
mov eax, 0x2a
mov dword [rbp - 0x70], eax
mov eax, 1
mov dword [rbp - 0x6c], eax
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x78]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r11, [rsp + 0x20]
lea rax, [rbp - 0x68]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.0042be7a
mov eax, 0x20
mov r8, rax
lea rax, [rbp - 0x68]
mov r11, rax
lea rax, [rbp - 0x40]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov eax, 0
mov byte [rbp - 0x20], al
movabs rax, 0x1f
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x1f]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
mov rax, qword [rbp + 0x10]
mov ecx, 0x48
mov r8, rcx
lea rcx, [rbp - 0x48]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
jmp 0x4876a4
mov eax, 0
mov dword [rbp - 0x530], eax
mov eax, 0
mov dword [rbp - 0x538], eax
mov eax, 0
mov dword [rbp - 0x534], eax
mov eax, 8
mov r8, rax
lea rax, [rbp - 0x538]
mov r11, rax
lea rax, [rbp - 0x52c]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov eax, 0
mov dword [rbp - 0x540], eax
mov eax, 0
mov dword [rbp - 0x53c], eax
mov eax, 8
mov r8, rax
lea rax, [rbp - 0x540]
mov r11, rax
lea rax, [rbp - 0x524]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov eax, 0
mov dword [rbp - 0x548], eax
mov eax, 0
mov dword [rbp - 0x544], eax
mov eax, 8
mov r8, rax
lea rax, [rbp - 0x548]
mov r11, rax
lea rax, [rbp - 0x51c]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov eax, 0
mov dword [rbp - 0x514], eax
mov eax, 0
mov dword [rbp - 0x510], eax
mov eax, 0
mov dword [rbp - 0x50c], eax
mov eax, 0
mov dword [rbp - 0x508], eax
mov eax, 0
mov word [rbp - 0x504], ax
movabs rax, 0x206
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x502]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
mov eax, 0
mov word [rbp - 0x2fc], ax
movabs rax, 0x1a
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x2fa]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
mov eax, 0
mov dword [rbp - 0x2e0], eax
mov eax, 0
mov dword [rbp - 0x2dc], eax
mov eax, 0
mov word [rbp - 0x2d8], ax
movabs rax, 2
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x2d6]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
mov eax, 0x25c
mov r8, rax
lea rax, [rbp - 0x530]
mov r11, rax
lea rax, [rbp - 0x2d4]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
movabs rax, 0
mov qword [rsp + 0x20], rax
mov eax, 0x10
mov r9, rax
mov eax, 0
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x588]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.0041acc7
mov eax, 0x20
mov r8, rax
lea rax, [rbp - 0x588]
mov r11, rax
lea rax, [rbp - 0x568]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
mov rcx, qword [rbp + 0x18]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r10, [rsp + 0x20]
mov rcx, r10
call fcn.004792db
movzx eax, al
cmp eax, 0
jne 0x486fe5
mov eax, 1
mov byte [rbp - 0x5d0], al
movabs rax, 7
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x5cf]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
lea rax, str.ls___couldnt_open_dir__
mov qword [rbp - 0x660], rax
mov eax, 0x17
mov dword [rbp - 0x658], eax
mov eax, 1
mov dword [rbp - 0x654], eax
mov eax, 0x10
mov r8, rax
lea rax, [rbp - 0x660]
mov r11, rax
lea rax, [rbp - 0x650]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov eax, 0xfe10
mov dword [rbp - 0x640], eax
movabs rax, 4
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x63c]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
mov eax, 0x10
mov r8, rax
mov rax, qword [rbp + 0x18]
mov r11, rax
lea rax, [rbp - 0x638]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, str._:_directory_does_not_exist
mov qword [rbp - 0x670], rax
mov eax, 0x1b
mov dword [rbp - 0x668], eax
mov eax, 1
mov dword [rbp - 0x664], eax
mov eax, 0x10
mov r8, rax
lea rax, [rbp - 0x670]
mov r11, rax
lea rax, [rbp - 0x628]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov eax, 0
mov dword [rbp - 0x618], eax
movabs rax, 4
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x614]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
mov eax, 0
mov dword [rbp - 0x610], eax
movabs rax, 0xc
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x60c]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
lea rax, [rbp - 0x650]
mov r8, rax
mov eax, 2
mov r11, rax
lea rax, [rbp - 0x600]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.0043dca9
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x600]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r11, [rsp + 0x20]
lea rax, [rbp - 0x5f0]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.0042be7a
mov eax, 0x20
mov r8, rax
lea rax, [rbp - 0x5f0]
mov r11, rax
lea rax, [rbp - 0x5c8]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov eax, 0
mov byte [rbp - 0x5a8], al
movabs rax, 0x1f
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x5a7]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
mov rax, qword [rbp + 0x10]
mov ecx, 0x48
mov r8, rcx
lea rcx, [rbp - 0x5d0]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
jmp 0x4876a4
lea rax, [0x0050cb38]
mov qword [rbp - 0x6f0], rax
mov eax, 0
mov dword [rbp - 0x6e8], eax
mov eax, 1
mov dword [rbp - 0x6e4], eax
mov eax, 0x10
mov r8, rax
lea rax, [rbp - 0x6f0]
mov r11, rax
lea rax, [rbp - 0x6e0]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov eax, 0xfe10
mov dword [rbp - 0x6d0], eax
movabs rax, 4
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x6cc]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
mov eax, 0x10
mov r8, rax
mov rax, qword [rbp + 0x18]
mov r11, rax
lea rax, [rbp - 0x6c8]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [0x0050cb39]
mov qword [rbp - 0x700], rax
mov eax, 2
mov dword [rbp - 0x6f8], eax
mov eax, 1
mov dword [rbp - 0x6f4], eax
mov eax, 0x10
mov r8, rax
lea rax, [rbp - 0x700]
mov r11, rax
lea rax, [rbp - 0x6b8]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov eax, 0
mov dword [rbp - 0x6a8], eax
movabs rax, 4
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x6a4]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
mov eax, 0
mov dword [rbp - 0x6a0], eax
movabs rax, 0xc
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x69c]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
lea rax, [rbp - 0x6e0]
mov r8, rax
mov eax, 2
mov r11, rax
lea rax, [rbp - 0x690]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.0043dca9
mov eax, 0x10
mov r8, rax
lea rax, [rbp - 0x690]
mov r11, rax
lea rax, [rbp - 0x680]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x680]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r10, [rsp + 0x20]
mov rcx, r10
call fcn.0043f09a
lea rcx, [rbp - 0x2d4]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.kernel32.dll_FindFirstFileW
mov qword [rbp - 0x708], rax
lea rax, [rbp - 0x2a8]
mov r11, rax
lea rax, [rbp - 0x728]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.0043f1a1
mov eax, 0x10
mov r8, rax
lea rax, [rbp - 0x728]
mov r11, rax
lea rax, [rbp - 0x718]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [0x0050cb3c]
mov qword [rbp - 0x738], rax
mov eax, 1
mov dword [rbp - 0x730], eax
mov eax, 1
mov dword [rbp - 0x72c], eax
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x738]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x30]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x718]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r11, [rsp + 0x20]
lea r10, [rsp + 0x30]
mov rcx, r10
mov rdx, r11
call fcn.004324fc
movzx eax, al
cmp eax, 0
jne 0x4873c6
lea rax, [0x0050cb3e]
mov qword [rbp - 0x748], rax
mov eax, 2
mov dword [rbp - 0x740], eax
mov eax, 1
mov dword [rbp - 0x73c], eax
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x748]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x30]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x718]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r11, [rsp + 0x20]
lea r10, [rsp + 0x30]
mov rcx, r10
mov rdx, r11
call fcn.004324fc
movzx eax, al
cmp eax, 0
jne 0x4873c6
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x718]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r11, [rsp + 0x20]
lea rax, [rbp - 0x768]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.00430309
mov eax, 0x10
mov r8, rax
lea rax, [rbp - 0x768]
mov r11, rax
lea rax, [rbp - 0x758]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rbp - 0x758]
mov r11, rax
lea rax, [rbp - 0x568]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.0041e4b4
lea rax, [rbp - 0x2d4]
mov r11, rax
mov rax, qword [rbp - 0x708]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.kernel32.dll_FindNextFileW
cmp eax, 0
jg 0x4873f3
jmp 0x487620
lea rax, [rbp - 0x2a8]
mov r11, rax
lea rax, [rbp - 0x788]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.0043f1a1
mov eax, 0x10
mov r8, rax
lea rax, [rbp - 0x788]
mov r11, rax
lea rax, [rbp - 0x778]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [0x0050cb41]
mov qword [rbp - 0x798], rax
mov eax, 1
mov dword [rbp - 0x790], eax
mov eax, 1
mov dword [rbp - 0x78c], eax
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x798]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x30]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x778]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r11, [rsp + 0x20]
lea r10, [rsp + 0x30]
mov rcx, r10
mov rdx, r11
call fcn.004324fc
movzx eax, al
cmp eax, 0
jne 0x48761b
lea rax, [0x0050cb43]
mov qword [rbp - 0x7a8], rax
mov eax, 2
mov dword [rbp - 0x7a0], eax
mov eax, 1
mov dword [rbp - 0x79c], eax
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x7a8]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x30]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x778]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r11, [rsp + 0x20]
lea r10, [rsp + 0x30]
mov rcx, r10
mov rdx, r11
call fcn.004324fc
movzx eax, al
cmp eax, 0
jne 0x48761b
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x778]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r11, [rsp + 0x20]
lea rax, [rbp - 0x7d8]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.00430309
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x7d8]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r11, [rsp + 0x20]
lea rax, [rbp - 0x7c8]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.00430309
mov eax, 0x10
mov r8, rax
lea rax, [rbp - 0x7c8]
mov r11, rax
lea rax, [rbp - 0x7b8]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rbp - 0x7b8]
mov r11, rax
lea rax, [rbp - 0x568]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.0041e4b4
jmp 0x4873c6
mov rax, qword [rbp - 0x708]
mov r10, rax
mov rcx, r10
call sub.kernel32.dll_FindClose
mov eax, 0x20
mov r8, rax
lea rax, [rbp - 0x568]
mov r11, rax
lea rax, [rbp - 0x840]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov eax, 0x20
mov r8, rax
lea rax, [rbp - 0x820]
mov r11, rax
lea rax, [rbp - 0x840]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.0042c0a5
mov rax, qword [rbp + 0x10]
mov ecx, 0x48
mov r8, rcx
lea rcx, [rbp - 0x820]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
leave
ret