Function at 0x485aca
Capabilities:
Enumerate files on windows

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x7d0
mov qword [rbp + 0x10], rcx
mov qword [rbp + 0x18], rdx
mov qword [rbp + 0x20], r8
mov eax, 0
mov byte [rbp - 1], al
mov eax, 0
mov dword [rbp - 0x4c8], eax
mov eax, 0
mov dword [rbp - 0x4d0], eax
mov eax, 0
mov dword [rbp - 0x4cc], eax
mov eax, 8
mov r8, rax
lea rax, [rbp - 0x4d0]
mov r11, rax
lea rax, [rbp - 0x4c4]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov eax, 0
mov dword [rbp - 0x4d8], eax
mov eax, 0
mov dword [rbp - 0x4d4], eax
mov eax, 8
mov r8, rax
lea rax, [rbp - 0x4d8]
mov r11, rax
lea rax, [rbp - 0x4bc]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov eax, 0
mov dword [rbp - 0x4e0], eax
mov eax, 0
mov dword [rbp - 0x4dc], eax
mov eax, 8
mov r8, rax
lea rax, [rbp - 0x4e0]
mov r11, rax
lea rax, [rbp - 0x4b4]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov eax, 0
mov dword [rbp - 0x4ac], eax
mov eax, 0
mov dword [rbp - 0x4a8], eax
mov eax, 0
mov dword [rbp - 0x4a4], eax
mov eax, 0
mov dword [rbp - 0x4a0], eax
mov eax, 0
mov word [rbp - 0x49c], ax
movabs rax, 0x206
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x49a]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
mov eax, 0
mov word [rbp - 0x294], ax
movabs rax, 0x1a
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x292]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
mov eax, 0
mov dword [rbp - 0x278], eax
mov eax, 0
mov dword [rbp - 0x274], eax
mov eax, 0
mov word [rbp - 0x270], ax
movabs rax, 2
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x26e]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
mov eax, 0x25c
mov r8, rax
lea rax, [rbp - 0x4c8]
mov r11, rax
lea rax, [rbp - 0x26c]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [0x0050ca96]
mov qword [rbp - 0x508], rax
mov eax, 1
mov dword [rbp - 0x500], eax
mov eax, 1
mov dword [rbp - 0x4fc], eax
lea rax, [0x0050ca98]
mov qword [rbp - 0x518], rax
mov eax, 1
mov dword [rbp - 0x510], eax
mov eax, 1
mov dword [rbp - 0x50c], eax
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x518]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x30]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x508]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x40]
mov ecx, 0x10
mov r8, rcx
mov rcx, qword [rbp + 0x18]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r9, [rsp + 0x20]
lea r8, [rsp + 0x30]
lea r11, [rsp + 0x40]
lea rax, [rbp - 0x4f8]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.004306c0
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x4f8]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r10, [rsp + 0x20]
mov rcx, r10
call fcn.0043f09a
mov qword [rbp - 0x4e8], rax
lea rax, [rbp - 0x26c]
mov r11, rax
mov rax, qword [rbp - 0x4e8]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.kernel32.dll_FindFirstFileW
mov qword [rbp - 0x10], rax
mov eax, 1
mov byte [rbp - 1], al
mov rax, qword [rbp - 0x10]
cmp rax, 0xffffffffffffffff
jne 0x485fdb
mov eax, 1
mov byte [rbp - 0x578], al
movabs rax, 7
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x577]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
lea rax, str.os.glob__:_Could_not_get_a_file_handle:
mov qword [rbp - 0x5b8], rax
mov eax, 0x28
mov dword [rbp - 0x5b0], eax
mov eax, 1
mov dword [rbp - 0x5ac], eax
call sub.kernel32.dll_GetLastError
mov r11, rax
lea rax, [rbp - 0x5c8]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.00487fa7
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x5c8]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x30]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x5b8]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r8, [rsp + 0x20]
lea r11, [rsp + 0x30]
lea rax, [rbp - 0x5a8]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.00432892
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x5a8]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r11, [rsp + 0x20]
lea rax, [rbp - 0x598]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.0042be7a
mov eax, 0x20
mov r8, rax
lea rax, [rbp - 0x598]
mov r11, rax
lea rax, [rbp - 0x570]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov eax, 0
mov byte [rbp - 0x550], al
movabs rax, 7
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x54f]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
mov eax, 0x30
mov r8, rax
lea rax, [rbp - 0x578]
mov r11, rax
lea rax, [rbp - 0x548]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
movzx eax, byte [rbp - 1]
cmp eax, 0
je 0x485fb2
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
call sub.kernel32.dll_FindClose
mov rax, qword [rbp + 0x10]
mov ecx, 0x30
mov r8, rcx
lea rcx, [rbp - 0x548]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
jmp 0x4867fe
lea rax, [rbp - 0x240]
mov r11, rax
lea rax, [rbp - 0x5e8]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.0043f1a1
mov eax, 0x10
mov r8, rax
lea rax, [rbp - 0x5e8]
mov r11, rax
lea rax, [rbp - 0x5d8]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [0x0050cac3]
mov qword [rbp - 0x5f8], rax
mov eax, 1
mov dword [rbp - 0x5f0], eax
mov eax, 1
mov dword [rbp - 0x5ec], eax
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x5f8]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x30]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x5d8]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r11, [rsp + 0x20]
lea r10, [rsp + 0x30]
mov rcx, r10
mov rdx, r11
call fcn.004324fc
movzx eax, al
cmp eax, 0
jne 0x486389
lea rax, [0x0050cac5]
mov qword [rbp - 0x608], rax
mov eax, 2
mov dword [rbp - 0x600], eax
mov eax, 1
mov dword [rbp - 0x5fc], eax
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x608]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x30]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x5d8]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r11, [rsp + 0x20]
lea r10, [rsp + 0x30]
mov rcx, r10
mov rdx, r11
call fcn.004324fc
movzx eax, al
cmp eax, 0
jne 0x486389
lea rax, [0x0050cac8]
mov qword [rbp - 0x638], rax
mov eax, 1
mov dword [rbp - 0x630], eax
mov eax, 1
mov dword [rbp - 0x62c], eax
lea rax, [0x0050caca]
mov qword [rbp - 0x648], rax
mov eax, 1
mov dword [rbp - 0x640], eax
mov eax, 1
mov dword [rbp - 0x63c], eax
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x648]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x30]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x638]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x40]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x5d8]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r9, [rsp + 0x20]
lea r8, [rsp + 0x30]
lea r11, [rsp + 0x40]
lea rax, [rbp - 0x628]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.004306c0
mov eax, 0x10
mov r8, rax
lea rax, [rbp - 0x628]
mov r11, rax
lea rax, [rbp - 0x618]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov eax, dword [rbp - 0x26c]
and eax, 0x10
cmp eax, 0
jbe 0x486307
lea rax, [0x0050cacc]
mov qword [rbp - 0x668], rax
mov eax, 1
mov dword [rbp - 0x660], eax
mov eax, 1
mov dword [rbp - 0x65c], eax
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x668]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x30]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x618]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r8, [rsp + 0x20]
lea r11, [rsp + 0x30]
lea rax, [rbp - 0x658]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.00432892
mov eax, 0x10
mov r8, rax
lea rax, [rbp - 0x658]
mov r11, rax
lea rax, [rbp - 0x618]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x618]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r11, [rsp + 0x20]
lea rax, [rbp - 0x688]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.00430309
mov eax, 0x10
mov r8, rax
lea rax, [rbp - 0x688]
mov r11, rax
lea rax, [rbp - 0x678]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rbp - 0x678]
mov r11, rax
mov rax, qword [rbp + 0x20]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.0041e4b4
mov eax, 0
mov dword [rbp - 0x68c], eax
lea rax, [rbp - 0x26c]
mov r11, rax
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.kernel32.dll_FindNextFileW
cmp eax, 0
jle 0x486789
jmp 0x4863d1
mov eax, dword [rbp - 0x68c]
mov ecx, eax
add eax, 1
mov dword [rbp - 0x68c], eax
jmp 0x486394
lea rax, [rbp - 0x240]
mov r11, rax
lea rax, [rbp - 0x6b0]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.0043f1a1
mov eax, 0x10
mov r8, rax
lea rax, [rbp - 0x6b0]
mov r11, rax
lea rax, [rbp - 0x6a0]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [0x0050cace]
mov qword [rbp - 0x6c0], rax
mov eax, 1
mov dword [rbp - 0x6b8], eax
mov eax, 1
mov dword [rbp - 0x6b4], eax
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x6c0]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x30]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x6a0]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r11, [rsp + 0x20]
lea r10, [rsp + 0x30]
mov rcx, r10
mov rdx, r11
call fcn.004324fc
movzx eax, al
cmp eax, 0
jne 0x486535
lea rax, [0x0050cad0]
mov qword [rbp - 0x6d0], rax
mov eax, 2
mov dword [rbp - 0x6c8], eax
mov eax, 1
mov dword [rbp - 0x6c4], eax
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x6d0]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x30]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x6a0]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r11, [rsp + 0x20]
lea r10, [rsp + 0x30]
mov rcx, r10
mov rdx, r11
call fcn.004324fc
movzx eax, al
cmp eax, 0
je 0x48653a
jmp 0x4863be
lea rax, [0x0050cad3]
mov qword [rbp - 0x700], rax
mov eax, 1
mov dword [rbp - 0x6f8], eax
mov eax, 1
mov dword [rbp - 0x6f4], eax
lea rax, [0x0050cad5]
mov qword [rbp - 0x710], rax
mov eax, 1
mov dword [rbp - 0x708], eax
mov eax, 1
mov dword [rbp - 0x704], eax
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x710]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x30]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x700]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x40]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x6a0]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r9, [rsp + 0x20]
lea r8, [rsp + 0x30]
lea r11, [rsp + 0x40]
lea rax, [rbp - 0x6f0]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.004306c0
mov eax, 0x10
mov r8, rax
lea rax, [rbp - 0x6f0]
mov r11, rax
lea rax, [rbp - 0x6e0]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov eax, dword [rbp - 0x26c]
and eax, 0x10
cmp eax, 0
jbe 0x486702
lea rax, [0x0050cad7]
mov qword [rbp - 0x730], rax
mov eax, 1
mov dword [rbp - 0x728], eax
mov eax, 1
mov dword [rbp - 0x724], eax
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x730]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x30]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x6e0]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r8, [rsp + 0x20]
lea r11, [rsp + 0x30]
lea rax, [rbp - 0x720]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.00432892
mov eax, 0x10
mov r8, rax
lea rax, [rbp - 0x720]
mov r11, rax
lea rax, [rbp - 0x6e0]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x6e0]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r11, [rsp + 0x20]
lea rax, [rbp - 0x750]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.00430309
mov eax, 0x10
mov r8, rax
lea rax, [rbp - 0x750]
mov r11, rax
lea rax, [rbp - 0x740]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rbp - 0x740]
mov r11, rax
mov rax, qword [rbp + 0x20]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.0041e4b4
jmp 0x4863be
movzx eax, byte [rbp - 1]
cmp eax, 0
je 0x4867a5
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
call sub.kernel32.dll_FindClose
mov eax, 0
mov byte [rbp - 0x780], al
movabs rax, 0x2f
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x77f]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
mov rax, qword [rbp + 0x10]
mov ecx, 0x30
mov r8, rcx
lea rcx, [rbp - 0x780]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
leave
ret