Function at 0x14000868c
Capabilities:
Enumerate files on windows
Get file size
Read file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x1250
call fcn.14002e9a0
sub rsp, rax
mov r12, rcx
lea rax, [0x140032e38]
mov r15, r8
mov r13, rdx
lea rcx, [rsp + 0x188]
xor esi, esi
mov r8d, 0x480
xor edx, edx
mov qword [rsp + 0x180], rax
mov r14d, esi
call fcn.14001d490
lea ebp, [rsi + 0x30]
mov rcx, rbp
call fcn.14001d8c0
mov edi, 0x400
mov ebx, 0x100
cmp rax, rsi
je 0x140008720
mov dword [rax + 0x20], edi
mov dword [rax + 0x24], ebx
mov dword [rax], esi
mov dword [rax + 4], esi
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rsi
mov dword [rax + 0x28], esi
mov dword [rax + 8], esi
mov qword [rsp + 0x5d8], rax
jmp 0x140008728
mov qword [rsp + 0x5d8], rsi
mov rcx, rbp
call fcn.14001d8c0
cmp rax, rsi
je 0x140008758
mov dword [rax + 0x20], edi
mov dword [rax + 0x24], ebx
mov dword [rax], esi
mov dword [rax + 4], esi
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rsi
mov dword [rax + 0x28], esi
mov dword [rax + 8], esi
mov qword [rsp + 0x5e0], rax
jmp 0x140008760
mov qword [rsp + 0x5e0], rsi
mov edi, 0x18
mov rcx, rdi
call fcn.14001d8c0
cmp rax, rsi
je 0x14000878b
mov dword [rax + 0x10], esi
mov qword [rax], rsi
mov dword [rax + 8], esi
mov dword [rax + 0x14], ebx
mov dword [rax + 0xc], esi
mov qword [rsp + 0x5e8], rax
jmp 0x140008793
mov qword [rsp + 0x5e8], rsi
mov rcx, rdi
call fcn.14001d8c0
cmp rax, rsi
je 0x1400087b9
mov dword [rax + 0x10], esi
mov qword [rax], rsi
mov dword [rax + 8], esi
mov dword [rax + 0x14], ebx
mov dword [rax + 0xc], esi
mov qword [rsp + 0x5f0], rax
jmp 0x1400087c1
mov qword [rsp + 0x5f0], rsi
mov rcx, rdi
call fcn.14001d8c0
cmp rax, rsi
je 0x1400087e7
mov dword [rax + 0x10], esi
mov qword [rax], rsi
mov dword [rax + 8], esi
mov dword [rax + 0x14], ebx
mov dword [rax + 0xc], esi
mov qword [rsp + 0x5f8], rax
jmp 0x1400087ef
mov qword [rsp + 0x5f8], rsi
mov rax, qword [rsp + 0x5d8]
mov ecx, 0x2000
xor edx, edx
mov dword [rax + 0x20], ecx
mov rax, qword [rsp + 0x5e0]
mov r8d, 0x6d8
mov dword [rax + 0x20], ecx
mov eax, 1
lea rcx, [rsp + 0xa2c]
mov dword [rsp + 0x1c4], eax
mov dword [rsp + 0x1c8], eax
mov dword [rsp + 0x1cc], eax
mov dword [rsp + 0x1d0], eax
lea rax, fcn.1400060c8
mov qword [rsp + 0x180], rax
call fcn.14001d490
xor edx, edx
mov rcx, r13
mov qword [rsp + 0x1108], r12
call fcn.140008cfc
cmp rax, 0xffffffffffffffff
mov rbx, rax
je 0x140008b25
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileSize]
lea rcx, [rsp + 0x180]
mov edx, eax
mov edi, eax
call fcn.14001c0a4
mov rdx, qword [rsp + 0x1a0]
lea r9, [rsp + 0x1280]
mov r8d, edi
mov rcx, rbx
mov dword [rsp + 0x1280], esi
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r11, qword [rsp + 0x1a0]
cmp byte [r11], 0xff
jne 0x140008922
cmp byte [r11 + 1], 0xfe
jne 0x140008922
lea ecx, [rdi + 3]
call fcn.14001d8c0
lea ecx, [rdi + 1]
mov qword [rsp + 0x38], rsi
mov byte [rax], sil
mov r8, qword [rsp + 0x1a0]
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], ecx
or r9d, 0xffffffff
xor edx, edx
xor ecx, ecx
mov rbx, rax
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov rcx, qword [rsp + 0x1a0]
mov rdx, rbx
call fcn.14001cde0
mov rcx, rbx
call fcn.14001d830
lea rcx, [rsp + 0x1114]
xor edx, edx
mov r8d, 0x13c
call fcn.14001d490
lea rdx, [rsp + 0x40]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp rax, 0xffffffffffffffff
mov rbx, rax
je 0x1400089ad
lea rdx, [0x140031e00]
lea rcx, [rsp + 0x6c]
call fcn.14001e150
cmp eax, esi
je 0x140008978
lea rdx, [0x140031e04]
lea rcx, [rsp + 0x6c]
call fcn.14001e150
cmp eax, esi
jne 0x14000898c
lea rdx, [rsp + 0x40]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
cmp eax, esi
je 0x1400089a4
jmp 0x14000894e
lea rcx, [rsp + 0x1110]
lea rdx, [rsp + 0x40]
mov r8d, 0x140
call fcn.14001cf80
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindClose]
lea rcx, [rsp + 0x180]
call fcn.1400060c8
cmp byte [rsp + 0x624], sil
mov r11, qword [rsp + 0x1124]
mov qword [rsp + 0x10fc], r11
je 0x140008ad3
lea rcx, [rsp + 0x624]
call fcn.14001d780
cdq
sub eax, edx
sar eax, 1
movsxd rbp, eax
mov rcx, rbp
call fcn.14001d8c0
xor edi, edi
test ebp, ebp
mov rbx, rax
jle 0x140008a49
mov cl, byte [rsp + rdi*2 + 0x624]
xor eax, eax
xor edx, edx
mov byte [rsp + 0x1280], cl
mov cl, byte [rsp + rdi*2 + 0x625]
mov dword [rsp + 0x1281], eax
mov byte [rsp + 0x1281], cl
lea r8d, [rax + 0x10]
lea rcx, [rsp + 0x1280]
mov byte [rsp + 0x1282], al
call fcn.14001e610
mov byte [rdi + rbx], al
add rdi, 1
cmp rdi, rbp
jl 0x1400089fe
lea rax, [rsp + 0xba4]
lea r9, [rsp + 0xaa4]
mov r8d, ebp
mov rdx, rbx
mov rcx, r12
mov qword [rsp + 0x20], rax
call fcn.14000759c
test eax, eax
je 0x140008ac6
lea rdx, [rsp + 0xba8]
mov r8, r15
mov rcx, r12
call fcn.140007640
lea rcx, [rsp + 0xca8]
mov r8d, 0xff
mov rdx, r15
call fcn.140009284
lea rcx, [rsp + 0xda8]
mov r8d, 0x104
mov rdx, r13
call fcn.140009284
mov rax, qword [r12]
lea rdx, [rsp + 0xa24]
mov rcx, r12
mov r14d, 1
call qword [rax]
mov rcx, rbx
call fcn.14001d830
test r14d, r14d
jne 0x140008b25
lea rdx, [rsp + 0xba8]
mov r8, r15
mov rcx, r12
call fcn.140007640
lea rcx, [rsp + 0xca8]
mov r8d, 0xff
mov rdx, r15
call fcn.140009284
lea rcx, [rsp + 0xda8]
mov r8d, 0x104
mov rdx, r13
call fcn.140009284
mov r11, qword [r12]
lea rdx, [rsp + 0xa24]
mov rcx, r12
call qword [r11 + 8]
lea rax, fcn.1400060c8
lea rcx, [rsp + 0x180]
mov qword [rsp + 0x180], rax
call fcn.14001bfe0
lea r11, [rsp + 0x1250]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret