Function at 0x4f0991
Capabilities:
Enumerate files on windows

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x920
mov qword [rbp + 0x10], rcx
mov qword [rbp + 0x18], rdx
mov rax, qword [rbp + 0x18]
add rax, 8
mov ecx, dword [rax]
cmp ecx, 0
jne 0x4f0ab0
mov eax, 1
mov byte [rbp - 0x48], al
movabs rax, 7
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x47]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
lea rax, [0x006783d7]
mov qword [rbp - 0x78], rax
mov eax, 0x2a
mov dword [rbp - 0x70], eax
mov eax, 1
mov dword [rbp - 0x6c], eax
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x78]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r11, [rsp + 0x20]
lea rax, [rbp - 0x68]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.00430adb
mov eax, 0x20
mov r8, rax
lea rax, [rbp - 0x68]
mov r11, rax
lea rax, [rbp - 0x40]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov eax, 0
mov byte [rbp - 0x20], al
movabs rax, 0x1f
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x1f]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
mov rax, qword [rbp + 0x10]
mov ecx, 0x48
mov r8, rcx
lea rcx, [rbp - 0x48]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
jmp 0x4f2473
mov eax, 0
mov dword [rbp - 0x530], eax
mov eax, 0
mov dword [rbp - 0x538], eax
mov eax, 0
mov dword [rbp - 0x534], eax
mov eax, 8
mov r8, rax
lea rax, [rbp - 0x538]
mov r11, rax
lea rax, [rbp - 0x52c]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov eax, 0
mov dword [rbp - 0x540], eax
mov eax, 0
mov dword [rbp - 0x53c], eax
mov eax, 8
mov r8, rax
lea rax, [rbp - 0x540]
mov r11, rax
lea rax, [rbp - 0x524]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov eax, 0
mov dword [rbp - 0x548], eax
mov eax, 0
mov dword [rbp - 0x544], eax
mov eax, 8
mov r8, rax
lea rax, [rbp - 0x548]
mov r11, rax
lea rax, [rbp - 0x51c]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov eax, 0
mov dword [rbp - 0x514], eax
mov eax, 0
mov dword [rbp - 0x510], eax
mov eax, 0
mov dword [rbp - 0x50c], eax
mov eax, 0
mov dword [rbp - 0x508], eax
mov eax, 0
mov word [rbp - 0x504], ax
mov eax, 0
mov word [rbp - 0x502], ax
mov eax, 0
mov word [rbp - 0x500], ax
mov eax, 0
mov word [rbp - 0x4fe], ax
mov eax, 0
mov word [rbp - 0x4fc], ax
mov eax, 0
mov word [rbp - 0x4fa], ax
mov eax, 0
mov word [rbp - 0x4f8], ax
mov eax, 0
mov word [rbp - 0x4f6], ax
mov eax, 0
mov word [rbp - 0x4f4], ax
mov eax, 0
mov word [rbp - 0x4f2], ax
mov eax, 0
mov word [rbp - 0x4f0], ax
mov eax, 0
mov word [rbp - 0x4ee], ax
mov eax, 0
mov word [rbp - 0x4ec], ax
mov eax, 0
mov word [rbp - 0x4ea], ax
mov eax, 0
mov word [rbp - 0x4e8], ax
mov eax, 0
mov word [rbp - 0x4e6], ax
mov eax, 0
mov word [rbp - 0x4e4], ax
mov eax, 0
mov word [rbp - 0x4e2], ax
mov eax, 0
mov word [rbp - 0x4e0], ax
mov eax, 0
mov word [rbp - 0x4de], ax
mov eax, 0
mov word [rbp - 0x4dc], ax
mov eax, 0
mov word [rbp - 0x4da], ax
mov eax, 0
mov word [rbp - 0x4d8], ax
mov eax, 0
mov word [rbp - 0x4d6], ax
mov eax, 0
mov word [rbp - 0x4d4], ax
mov eax, 0
mov word [rbp - 0x4d2], ax
mov eax, 0
mov word [rbp - 0x4d0], ax
mov eax, 0
mov word [rbp - 0x4ce], ax
mov eax, 0
mov word [rbp - 0x4cc], ax
mov eax, 0
mov word [rbp - 0x4ca], ax
mov eax, 0
mov word [rbp - 0x4c8], ax
mov eax, 0
mov word [rbp - 0x4c6], ax
mov eax, 0
mov word [rbp - 0x4c4], ax
mov eax, 0
mov word [rbp - 0x4c2], ax
mov eax, 0
mov word [rbp - 0x4c0], ax
mov eax, 0
mov word [rbp - 0x4be], ax
mov eax, 0
mov word [rbp - 0x4bc], ax
mov eax, 0
mov word [rbp - 0x4ba], ax
mov eax, 0
mov word [rbp - 0x4b8], ax
mov eax, 0
mov word [rbp - 0x4b6], ax
mov eax, 0
mov word [rbp - 0x4b4], ax
mov eax, 0
mov word [rbp - 0x4b2], ax
mov eax, 0
mov word [rbp - 0x4b0], ax
mov eax, 0
mov word [rbp - 0x4ae], ax
mov eax, 0
mov word [rbp - 0x4ac], ax
mov eax, 0
mov word [rbp - 0x4aa], ax
mov eax, 0
mov word [rbp - 0x4a8], ax
mov eax, 0
mov word [rbp - 0x4a6], ax
mov eax, 0
mov word [rbp - 0x4a4], ax
mov eax, 0
mov word [rbp - 0x4a2], ax
mov eax, 0
mov word [rbp - 0x4a0], ax
mov eax, 0
mov word [rbp - 0x49e], ax
mov eax, 0
mov word [rbp - 0x49c], ax
mov eax, 0
mov word [rbp - 0x49a], ax
mov eax, 0
mov word [rbp - 0x498], ax
mov eax, 0
mov word [rbp - 0x496], ax
mov eax, 0
mov word [rbp - 0x494], ax
mov eax, 0
mov word [rbp - 0x492], ax
mov eax, 0
mov word [rbp - 0x490], ax
mov eax, 0
mov word [rbp - 0x48e], ax
mov eax, 0
mov word [rbp - 0x48c], ax
mov eax, 0
mov word [rbp - 0x48a], ax
mov eax, 0
mov word [rbp - 0x488], ax
mov eax, 0
mov word [rbp - 0x486], ax
mov eax, 0
mov word [rbp - 0x484], ax
mov eax, 0
mov word [rbp - 0x482], ax
mov eax, 0
mov word [rbp - 0x480], ax
mov eax, 0
mov word [rbp - 0x47e], ax
mov eax, 0
mov word [rbp - 0x47c], ax
mov eax, 0
mov word [rbp - 0x47a], ax
mov eax, 0
mov word [rbp - 0x478], ax
mov eax, 0
mov word [rbp - 0x476], ax
mov eax, 0
mov word [rbp - 0x474], ax
mov eax, 0
mov word [rbp - 0x472], ax
mov eax, 0
mov word [rbp - 0x470], ax
mov eax, 0
mov word [rbp - 0x46e], ax
mov eax, 0
mov word [rbp - 0x46c], ax
mov eax, 0
mov word [rbp - 0x46a], ax
mov eax, 0
mov word [rbp - 0x468], ax
mov eax, 0
mov word [rbp - 0x466], ax
mov eax, 0
mov word [rbp - 0x464], ax
mov eax, 0
mov word [rbp - 0x462], ax
mov eax, 0
mov word [rbp - 0x460], ax
mov eax, 0
mov word [rbp - 0x45e], ax
mov eax, 0
mov word [rbp - 0x45c], ax
mov eax, 0
mov word [rbp - 0x45a], ax
mov eax, 0
mov word [rbp - 0x458], ax
mov eax, 0
mov word [rbp - 0x456], ax
mov eax, 0
mov word [rbp - 0x454], ax
mov eax, 0
mov word [rbp - 0x452], ax
mov eax, 0
mov word [rbp - 0x450], ax
mov eax, 0
mov word [rbp - 0x44e], ax
mov eax, 0
mov word [rbp - 0x44c], ax
mov eax, 0
mov word [rbp - 0x44a], ax
mov eax, 0
mov word [rbp - 0x448], ax
mov eax, 0
mov word [rbp - 0x446], ax
mov eax, 0
mov word [rbp - 0x444], ax
mov eax, 0
mov word [rbp - 0x442], ax
mov eax, 0
mov word [rbp - 0x440], ax
mov eax, 0
mov word [rbp - 0x43e], ax
mov eax, 0
mov word [rbp - 0x43c], ax
mov eax, 0
mov word [rbp - 0x43a], ax
mov eax, 0
mov word [rbp - 0x438], ax
mov eax, 0
mov word [rbp - 0x436], ax
mov eax, 0
mov word [rbp - 0x434], ax
mov eax, 0
mov word [rbp - 0x432], ax
mov eax, 0
mov word [rbp - 0x430], ax
mov eax, 0
mov word [rbp - 0x42e], ax
mov eax, 0
mov word [rbp - 0x42c], ax
mov eax, 0
mov word [rbp - 0x42a], ax
mov eax, 0
mov word [rbp - 0x428], ax
mov eax, 0
mov word [rbp - 0x426], ax
mov eax, 0
mov word [rbp - 0x424], ax
mov eax, 0
mov word [rbp - 0x422], ax
mov eax, 0
mov word [rbp - 0x420], ax
mov eax, 0
mov word [rbp - 0x41e], ax
mov eax, 0
mov word [rbp - 0x41c], ax
mov eax, 0
mov word [rbp - 0x41a], ax
mov eax, 0
mov word [rbp - 0x418], ax
mov eax, 0
mov word [rbp - 0x416], ax
mov eax, 0
mov word [rbp - 0x414], ax
mov eax, 0
mov word [rbp - 0x412], ax
mov eax, 0
mov word [rbp - 0x410], ax
mov eax, 0
mov word [rbp - 0x40e], ax
mov eax, 0
mov word [rbp - 0x40c], ax
mov eax, 0
mov word [rbp - 0x40a], ax
mov eax, 0
mov word [rbp - 0x408], ax
mov eax, 0
mov word [rbp - 0x406], ax
mov eax, 0
mov word [rbp - 0x404], ax
mov eax, 0
mov word [rbp - 0x402], ax
mov eax, 0
mov word [rbp - 0x400], ax
mov eax, 0
mov word [rbp - 0x3fe], ax
mov eax, 0
mov word [rbp - 0x3fc], ax
mov eax, 0
mov word [rbp - 0x3fa], ax
mov eax, 0
mov word [rbp - 0x3f8], ax
mov eax, 0
mov word [rbp - 0x3f6], ax
mov eax, 0
mov word [rbp - 0x3f4], ax
mov eax, 0
mov word [rbp - 0x3f2], ax
mov eax, 0
mov word [rbp - 0x3f0], ax
mov eax, 0
mov word [rbp - 0x3ee], ax
mov eax, 0
mov word [rbp - 0x3ec], ax
mov eax, 0
mov word [rbp - 0x3ea], ax
mov eax, 0
mov word [rbp - 0x3e8], ax
mov eax, 0
mov word [rbp - 0x3e6], ax
mov eax, 0
mov word [rbp - 0x3e4], ax
mov eax, 0
mov word [rbp - 0x3e2], ax
mov eax, 0
mov word [rbp - 0x3e0], ax
mov eax, 0
mov word [rbp - 0x3de], ax
mov eax, 0
mov word [rbp - 0x3dc], ax
mov eax, 0
mov word [rbp - 0x3da], ax
mov eax, 0
mov word [rbp - 0x3d8], ax
mov eax, 0
mov word [rbp - 0x3d6], ax
mov eax, 0
mov word [rbp - 0x3d4], ax
mov eax, 0
mov word [rbp - 0x3d2], ax
mov eax, 0
mov word [rbp - 0x3d0], ax
mov eax, 0
mov word [rbp - 0x3ce], ax
mov eax, 0
mov word [rbp - 0x3cc], ax
mov eax, 0
mov word [rbp - 0x3ca], ax
mov eax, 0
mov word [rbp - 0x3c8], ax
mov eax, 0
mov word [rbp - 0x3c6], ax
mov eax, 0
mov word [rbp - 0x3c4], ax
mov eax, 0
mov word [rbp - 0x3c2], ax
mov eax, 0
mov word [rbp - 0x3c0], ax
mov eax, 0
mov word [rbp - 0x3be], ax
mov eax, 0
mov word [rbp - 0x3bc], ax
mov eax, 0
mov word [rbp - 0x3ba], ax
mov eax, 0
mov word [rbp - 0x3b8], ax
mov eax, 0
mov word [rbp - 0x3b6], ax
mov eax, 0
mov word [rbp - 0x3b4], ax
mov eax, 0
mov word [rbp - 0x3b2], ax
mov eax, 0
mov word [rbp - 0x3b0], ax
mov eax, 0
mov word [rbp - 0x3ae], ax
mov eax, 0
mov word [rbp - 0x3ac], ax
mov eax, 0
mov word [rbp - 0x3aa], ax
mov eax, 0
mov word [rbp - 0x3a8], ax
mov eax, 0
mov word [rbp - 0x3a6], ax
mov eax, 0
mov word [rbp - 0x3a4], ax
mov eax, 0
mov word [rbp - 0x3a2], ax
mov eax, 0
mov word [rbp - 0x3a0], ax
mov eax, 0
mov word [rbp - 0x39e], ax
mov eax, 0
mov word [rbp - 0x39c], ax
mov eax, 0
mov word [rbp - 0x39a], ax
mov eax, 0
mov word [rbp - 0x398], ax
mov eax, 0
mov word [rbp - 0x396], ax
mov eax, 0
mov word [rbp - 0x394], ax
mov eax, 0
mov word [rbp - 0x392], ax
mov eax, 0
mov word [rbp - 0x390], ax
mov eax, 0
mov word [rbp - 0x38e], ax
mov eax, 0
mov word [rbp - 0x38c], ax
mov eax, 0
mov word [rbp - 0x38a], ax
mov eax, 0
mov word [rbp - 0x388], ax
mov eax, 0
mov word [rbp - 0x386], ax
mov eax, 0
mov word [rbp - 0x384], ax
mov eax, 0
mov word [rbp - 0x382], ax
mov eax, 0
mov word [rbp - 0x380], ax
mov eax, 0
mov word [rbp - 0x37e], ax
mov eax, 0
mov word [rbp - 0x37c], ax
mov eax, 0
mov word [rbp - 0x37a], ax
mov eax, 0
mov word [rbp - 0x378], ax
mov eax, 0
mov word [rbp - 0x376], ax
mov eax, 0
mov word [rbp - 0x374], ax
mov eax, 0
mov word [rbp - 0x372], ax
mov eax, 0
mov word [rbp - 0x370], ax
mov eax, 0
mov word [rbp - 0x36e], ax
mov eax, 0
mov word [rbp - 0x36c], ax
mov eax, 0
mov word [rbp - 0x36a], ax
mov eax, 0
mov word [rbp - 0x368], ax
mov eax, 0
mov word [rbp - 0x366], ax
mov eax, 0
mov word [rbp - 0x364], ax
mov eax, 0
mov word [rbp - 0x362], ax
mov eax, 0
mov word [rbp - 0x360], ax
mov eax, 0
mov word [rbp - 0x35e], ax
mov eax, 0
mov word [rbp - 0x35c], ax
mov eax, 0
mov word [rbp - 0x35a], ax
mov eax, 0
mov word [rbp - 0x358], ax
mov eax, 0
mov word [rbp - 0x356], ax
mov eax, 0
mov word [rbp - 0x354], ax
mov eax, 0
mov word [rbp - 0x352], ax
mov eax, 0
mov word [rbp - 0x350], ax
mov eax, 0
mov word [rbp - 0x34e], ax
mov eax, 0
mov word [rbp - 0x34c], ax
mov eax, 0
mov word [rbp - 0x34a], ax
mov eax, 0
mov word [rbp - 0x348], ax
mov eax, 0
mov word [rbp - 0x346], ax
mov eax, 0
mov word [rbp - 0x344], ax
mov eax, 0
mov word [rbp - 0x342], ax
mov eax, 0
mov word [rbp - 0x340], ax
mov eax, 0
mov word [rbp - 0x33e], ax
mov eax, 0
mov word [rbp - 0x33c], ax
mov eax, 0
mov word [rbp - 0x33a], ax
mov eax, 0
mov word [rbp - 0x338], ax
mov eax, 0
mov word [rbp - 0x336], ax
mov eax, 0
mov word [rbp - 0x334], ax
mov eax, 0
mov word [rbp - 0x332], ax
mov eax, 0
mov word [rbp - 0x330], ax
mov eax, 0
mov word [rbp - 0x32e], ax
mov eax, 0
mov word [rbp - 0x32c], ax
mov eax, 0
mov word [rbp - 0x32a], ax
mov eax, 0
mov word [rbp - 0x328], ax
mov eax, 0
mov word [rbp - 0x326], ax
mov eax, 0
mov word [rbp - 0x324], ax
mov eax, 0
mov word [rbp - 0x322], ax
mov eax, 0
mov word [rbp - 0x320], ax
mov eax, 0
mov word [rbp - 0x31e], ax
mov eax, 0
mov word [rbp - 0x31c], ax
mov eax, 0
mov word [rbp - 0x31a], ax
mov eax, 0
mov word [rbp - 0x318], ax
mov eax, 0
mov word [rbp - 0x316], ax
mov eax, 0
mov word [rbp - 0x314], ax
mov eax, 0
mov word [rbp - 0x312], ax
mov eax, 0
mov word [rbp - 0x310], ax
mov eax, 0
mov word [rbp - 0x30e], ax
mov eax, 0
mov word [rbp - 0x30c], ax
mov eax, 0
mov word [rbp - 0x30a], ax
mov eax, 0
mov word [rbp - 0x308], ax
mov eax, 0
mov word [rbp - 0x306], ax
mov eax, 0
mov word [rbp - 0x304], ax
mov eax, 0
mov word [rbp - 0x302], ax
mov eax, 0
mov word [rbp - 0x300], ax
mov eax, 0
mov word [rbp - 0x2fe], ax
mov eax, 0
mov word [rbp - 0x2fc], ax
mov eax, 0
mov word [rbp - 0x2fa], ax
mov eax, 0
mov word [rbp - 0x2f8], ax
mov eax, 0
mov word [rbp - 0x2f6], ax
mov eax, 0
mov word [rbp - 0x2f4], ax
mov eax, 0
mov word [rbp - 0x2f2], ax
mov eax, 0
mov word [rbp - 0x2f0], ax
mov eax, 0
mov word [rbp - 0x2ee], ax
mov eax, 0
mov word [rbp - 0x2ec], ax
mov eax, 0
mov word [rbp - 0x2ea], ax
mov eax, 0
mov word [rbp - 0x2e8], ax
mov eax, 0
mov word [rbp - 0x2e6], ax
mov eax, 0
mov word [rbp - 0x2e4], ax
mov eax, 0
mov word [rbp - 0x2e2], ax
mov eax, 0
mov dword [rbp - 0x2e0], eax
mov eax, 0
mov dword [rbp - 0x2dc], eax
mov eax, 0
mov word [rbp - 0x2d8], ax
movabs rax, 2
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x2d6]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
mov eax, 0x25c
mov r8, rax
lea rax, [rbp - 0x530]
mov r11, rax
lea rax, [rbp - 0x2d4]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
movabs rax, 0
mov qword [rsp + 0x20], rax
mov eax, 0x10
mov r9, rax
mov eax, 0
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x588]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.0041f110
mov eax, 0x20
mov r8, rax
lea rax, [rbp - 0x588]
mov r11, rax
lea rax, [rbp - 0x568]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
mov rcx, qword [rbp + 0x18]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r10, [rsp + 0x20]
mov rcx, r10
call fcn.004b5f8b
movzx eax, al
cmp eax, 0
jne 0x4f1c00
mov eax, 1
mov byte [rbp - 0x5d0], al
movabs rax, 7
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x5cf]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
lea rax, str.ls___couldnt_open_dir__
mov qword [rbp - 0x660], rax
mov eax, 0x17
mov dword [rbp - 0x658], eax
mov eax, 1
mov dword [rbp - 0x654], eax
mov eax, 0x10
mov r8, rax
lea rax, [rbp - 0x660]
mov r11, rax
lea rax, [rbp - 0x650]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov eax, 0xfe10
mov dword [rbp - 0x640], eax
movabs rax, 4
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x63c]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
mov eax, 0x10
mov r8, rax
mov rax, qword [rbp + 0x18]
mov r11, rax
lea rax, [rbp - 0x638]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, str._:_directory_does_not_exist
mov qword [rbp - 0x670], rax
mov eax, 0x1b
mov dword [rbp - 0x668], eax
mov eax, 1
mov dword [rbp - 0x664], eax
mov eax, 0x10
mov r8, rax
lea rax, [rbp - 0x670]
mov r11, rax
lea rax, [rbp - 0x628]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov eax, 0
mov dword [rbp - 0x618], eax
movabs rax, 4
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x614]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
mov eax, 0
mov dword [rbp - 0x610], eax
movabs rax, 0xc
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x60c]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
lea rax, [rbp - 0x650]
mov r8, rax
mov eax, 2
mov r11, rax
lea rax, [rbp - 0x600]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.004446b3
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x600]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r11, [rsp + 0x20]
lea rax, [rbp - 0x5f0]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.00430adb
mov eax, 0x20
mov r8, rax
lea rax, [rbp - 0x5f0]
mov r11, rax
lea rax, [rbp - 0x5c8]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov eax, 0
mov byte [rbp - 0x5a8], al
movabs rax, 0x1f
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x5a7]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
mov rax, qword [rbp + 0x10]
mov ecx, 0x48
mov r8, rcx
lea rcx, [rbp - 0x5d0]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
jmp 0x4f2473
lea rax, [0x00678436]
mov qword [rbp - 0x6f0], rax
mov eax, 0
mov dword [rbp - 0x6e8], eax
mov eax, 1
mov dword [rbp - 0x6e4], eax
mov eax, 0x10
mov r8, rax
lea rax, [rbp - 0x6f0]
mov r11, rax
lea rax, [rbp - 0x6e0]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov eax, 0xfe10
mov dword [rbp - 0x6d0], eax
movabs rax, 4
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x6cc]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
mov eax, 0x10
mov r8, rax
mov rax, qword [rbp + 0x18]
mov r11, rax
lea rax, [rbp - 0x6c8]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [0x00678437]
mov qword [rbp - 0x700], rax
mov eax, 2
mov dword [rbp - 0x6f8], eax
mov eax, 1
mov dword [rbp - 0x6f4], eax
mov eax, 0x10
mov r8, rax
lea rax, [rbp - 0x700]
mov r11, rax
lea rax, [rbp - 0x6b8]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov eax, 0
mov dword [rbp - 0x6a8], eax
movabs rax, 4
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x6a4]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
mov eax, 0
mov dword [rbp - 0x6a0], eax
movabs rax, 0xc
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x69c]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
lea rax, [rbp - 0x6e0]
mov r8, rax
mov eax, 2
mov r11, rax
lea rax, [rbp - 0x690]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.004446b3
mov eax, 0x10
mov r8, rax
lea rax, [rbp - 0x690]
mov r11, rax
lea rax, [rbp - 0x680]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x680]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r10, [rsp + 0x20]
mov rcx, r10
call fcn.00445a91
lea rcx, [rbp - 0x2d4]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.kernel32.dll_FindFirstFileW
mov qword [rbp - 0x708], rax
mov rax, qword [rbp - 0x708]
cmp rax, 0xffffffffffffffff
jne 0x4f1fac
mov eax, 1
mov byte [rbp - 0x750], al
movabs rax, 7
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x74f]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
lea rax, str.ls__:_Could_not_get_a_file_handle:
mov qword [rbp - 0x790], rax
mov eax, 0x23
mov dword [rbp - 0x788], eax
mov eax, 1
mov dword [rbp - 0x784], eax
call sub.kernel32.dll_GetLastError
mov r11, rax
lea rax, [rbp - 0x7a0]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.004f2d76
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x7a0]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x30]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x790]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r8, [rsp + 0x20]
lea r11, [rsp + 0x30]
lea rax, [rbp - 0x780]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.004377a2
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x780]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r11, [rsp + 0x20]
lea rax, [rbp - 0x770]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.00430adb
mov eax, 0x20
mov r8, rax
lea rax, [rbp - 0x770]
mov r11, rax
lea rax, [rbp - 0x748]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov eax, 0
mov byte [rbp - 0x728], al
movabs rax, 0x1f
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x727]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
mov rax, qword [rbp + 0x10]
mov ecx, 0x48
mov r8, rcx
lea rcx, [rbp - 0x750]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
jmp 0x4f2473
lea rax, [rbp - 0x2a8]
mov r11, rax
lea rax, [rbp - 0x7c0]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.00445b98
mov eax, 0x10
mov r8, rax
lea rax, [rbp - 0x7c0]
mov r11, rax
lea rax, [rbp - 0x7b0]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [0x0067845e]
mov qword [rbp - 0x7d0], rax
mov eax, 1
mov dword [rbp - 0x7c8], eax
mov eax, 1
mov dword [rbp - 0x7c4], eax
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x7d0]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x30]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x7b0]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r11, [rsp + 0x20]
lea r10, [rsp + 0x30]
mov rcx, r10
mov rdx, r11
call fcn.0043740c
movzx eax, al
cmp eax, 0
jne 0x4f2195
lea rax, [0x00678460]
mov qword [rbp - 0x7e0], rax
mov eax, 2
mov dword [rbp - 0x7d8], eax
mov eax, 1
mov dword [rbp - 0x7d4], eax
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x7e0]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x30]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x7b0]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r11, [rsp + 0x20]
lea r10, [rsp + 0x30]
mov rcx, r10
mov rdx, r11
call fcn.0043740c
movzx eax, al
cmp eax, 0
jne 0x4f2195
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x7b0]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r11, [rsp + 0x20]
lea rax, [rbp - 0x800]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.004351e7
mov eax, 0x10
mov r8, rax
lea rax, [rbp - 0x800]
mov r11, rax
lea rax, [rbp - 0x7f0]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rbp - 0x7f0]
mov r11, rax
lea rax, [rbp - 0x568]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.00422aa6
lea rax, [rbp - 0x2d4]
mov r11, rax
mov rax, qword [rbp - 0x708]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.kernel32.dll_FindNextFileW
cmp eax, 0
jg 0x4f21c2
jmp 0x4f23ef
lea rax, [rbp - 0x2a8]
mov r11, rax
lea rax, [rbp - 0x820]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.00445b98
mov eax, 0x10
mov r8, rax
lea rax, [rbp - 0x820]
mov r11, rax
lea rax, [rbp - 0x810]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [0x00678463]
mov qword [rbp - 0x830], rax
mov eax, 1
mov dword [rbp - 0x828], eax
mov eax, 1
mov dword [rbp - 0x824], eax
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x830]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x30]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x810]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r11, [rsp + 0x20]
lea r10, [rsp + 0x30]
mov rcx, r10
mov rdx, r11
call fcn.0043740c
movzx eax, al
cmp eax, 0
jne 0x4f23ea
lea rax, [0x00678465]
mov qword [rbp - 0x840], rax
mov eax, 2
mov dword [rbp - 0x838], eax
mov eax, 1
mov dword [rbp - 0x834], eax
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x840]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x30]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x810]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r11, [rsp + 0x20]
lea r10, [rsp + 0x30]
mov rcx, r10
mov rdx, r11
call fcn.0043740c
movzx eax, al
cmp eax, 0
jne 0x4f23ea
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x810]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r11, [rsp + 0x20]
lea rax, [rbp - 0x870]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.004351e7
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x870]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r11, [rsp + 0x20]
lea rax, [rbp - 0x860]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.004351e7
mov eax, 0x10
mov r8, rax
lea rax, [rbp - 0x860]
mov r11, rax
lea rax, [rbp - 0x850]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rbp - 0x850]
mov r11, rax
lea rax, [rbp - 0x568]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.00422aa6
jmp 0x4f2195
mov rax, qword [rbp - 0x708]
mov r10, rax
mov rcx, r10
call sub.kernel32.dll_FindClose
mov eax, 0x20
mov r8, rax
lea rax, [rbp - 0x568]
mov r11, rax
lea rax, [rbp - 0x8d8]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov eax, 0x20
mov r8, rax
lea rax, [rbp - 0x8b8]
mov r11, rax
lea rax, [rbp - 0x8d8]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.0043033a
mov rax, qword [rbp + 0x10]
mov ecx, 0x48
mov r8, rcx
lea rcx, [rbp - 0x8b8]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
leave
ret