Function at 0x4eee0d
Capabilities:
Enumerate files on windows

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x7d0
mov qword [rbp + 0x10], rcx
mov qword [rbp + 0x18], rdx
mov qword [rbp + 0x20], r8
mov eax, 0
mov byte [rbp - 1], al
mov eax, 0
mov dword [rbp - 0x4c8], eax
mov eax, 0
mov dword [rbp - 0x4d0], eax
mov eax, 0
mov dword [rbp - 0x4cc], eax
mov eax, 8
mov r8, rax
lea rax, [rbp - 0x4d0]
mov r11, rax
lea rax, [rbp - 0x4c4]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov eax, 0
mov dword [rbp - 0x4d8], eax
mov eax, 0
mov dword [rbp - 0x4d4], eax
mov eax, 8
mov r8, rax
lea rax, [rbp - 0x4d8]
mov r11, rax
lea rax, [rbp - 0x4bc]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov eax, 0
mov dword [rbp - 0x4e0], eax
mov eax, 0
mov dword [rbp - 0x4dc], eax
mov eax, 8
mov r8, rax
lea rax, [rbp - 0x4e0]
mov r11, rax
lea rax, [rbp - 0x4b4]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov eax, 0
mov dword [rbp - 0x4ac], eax
mov eax, 0
mov dword [rbp - 0x4a8], eax
mov eax, 0
mov dword [rbp - 0x4a4], eax
mov eax, 0
mov dword [rbp - 0x4a0], eax
mov eax, 0
mov word [rbp - 0x49c], ax
mov eax, 0
mov word [rbp - 0x49a], ax
mov eax, 0
mov word [rbp - 0x498], ax
mov eax, 0
mov word [rbp - 0x496], ax
mov eax, 0
mov word [rbp - 0x494], ax
mov eax, 0
mov word [rbp - 0x492], ax
mov eax, 0
mov word [rbp - 0x490], ax
mov eax, 0
mov word [rbp - 0x48e], ax
mov eax, 0
mov word [rbp - 0x48c], ax
mov eax, 0
mov word [rbp - 0x48a], ax
mov eax, 0
mov word [rbp - 0x488], ax
mov eax, 0
mov word [rbp - 0x486], ax
mov eax, 0
mov word [rbp - 0x484], ax
mov eax, 0
mov word [rbp - 0x482], ax
mov eax, 0
mov word [rbp - 0x480], ax
mov eax, 0
mov word [rbp - 0x47e], ax
mov eax, 0
mov word [rbp - 0x47c], ax
mov eax, 0
mov word [rbp - 0x47a], ax
mov eax, 0
mov word [rbp - 0x478], ax
mov eax, 0
mov word [rbp - 0x476], ax
mov eax, 0
mov word [rbp - 0x474], ax
mov eax, 0
mov word [rbp - 0x472], ax
mov eax, 0
mov word [rbp - 0x470], ax
mov eax, 0
mov word [rbp - 0x46e], ax
mov eax, 0
mov word [rbp - 0x46c], ax
mov eax, 0
mov word [rbp - 0x46a], ax
mov eax, 0
mov word [rbp - 0x468], ax
mov eax, 0
mov word [rbp - 0x466], ax
mov eax, 0
mov word [rbp - 0x464], ax
mov eax, 0
mov word [rbp - 0x462], ax
mov eax, 0
mov word [rbp - 0x460], ax
mov eax, 0
mov word [rbp - 0x45e], ax
mov eax, 0
mov word [rbp - 0x45c], ax
mov eax, 0
mov word [rbp - 0x45a], ax
mov eax, 0
mov word [rbp - 0x458], ax
mov eax, 0
mov word [rbp - 0x456], ax
mov eax, 0
mov word [rbp - 0x454], ax
mov eax, 0
mov word [rbp - 0x452], ax
mov eax, 0
mov word [rbp - 0x450], ax
mov eax, 0
mov word [rbp - 0x44e], ax
mov eax, 0
mov word [rbp - 0x44c], ax
mov eax, 0
mov word [rbp - 0x44a], ax
mov eax, 0
mov word [rbp - 0x448], ax
mov eax, 0
mov word [rbp - 0x446], ax
mov eax, 0
mov word [rbp - 0x444], ax
mov eax, 0
mov word [rbp - 0x442], ax
mov eax, 0
mov word [rbp - 0x440], ax
mov eax, 0
mov word [rbp - 0x43e], ax
mov eax, 0
mov word [rbp - 0x43c], ax
mov eax, 0
mov word [rbp - 0x43a], ax
mov eax, 0
mov word [rbp - 0x438], ax
mov eax, 0
mov word [rbp - 0x436], ax
mov eax, 0
mov word [rbp - 0x434], ax
mov eax, 0
mov word [rbp - 0x432], ax
mov eax, 0
mov word [rbp - 0x430], ax
mov eax, 0
mov word [rbp - 0x42e], ax
mov eax, 0
mov word [rbp - 0x42c], ax
mov eax, 0
mov word [rbp - 0x42a], ax
mov eax, 0
mov word [rbp - 0x428], ax
mov eax, 0
mov word [rbp - 0x426], ax
mov eax, 0
mov word [rbp - 0x424], ax
mov eax, 0
mov word [rbp - 0x422], ax
mov eax, 0
mov word [rbp - 0x420], ax
mov eax, 0
mov word [rbp - 0x41e], ax
mov eax, 0
mov word [rbp - 0x41c], ax
mov eax, 0
mov word [rbp - 0x41a], ax
mov eax, 0
mov word [rbp - 0x418], ax
mov eax, 0
mov word [rbp - 0x416], ax
mov eax, 0
mov word [rbp - 0x414], ax
mov eax, 0
mov word [rbp - 0x412], ax
mov eax, 0
mov word [rbp - 0x410], ax
mov eax, 0
mov word [rbp - 0x40e], ax
mov eax, 0
mov word [rbp - 0x40c], ax
mov eax, 0
mov word [rbp - 0x40a], ax
mov eax, 0
mov word [rbp - 0x408], ax
mov eax, 0
mov word [rbp - 0x406], ax
mov eax, 0
mov word [rbp - 0x404], ax
mov eax, 0
mov word [rbp - 0x402], ax
mov eax, 0
mov word [rbp - 0x400], ax
mov eax, 0
mov word [rbp - 0x3fe], ax
mov eax, 0
mov word [rbp - 0x3fc], ax
mov eax, 0
mov word [rbp - 0x3fa], ax
mov eax, 0
mov word [rbp - 0x3f8], ax
mov eax, 0
mov word [rbp - 0x3f6], ax
mov eax, 0
mov word [rbp - 0x3f4], ax
mov eax, 0
mov word [rbp - 0x3f2], ax
mov eax, 0
mov word [rbp - 0x3f0], ax
mov eax, 0
mov word [rbp - 0x3ee], ax
mov eax, 0
mov word [rbp - 0x3ec], ax
mov eax, 0
mov word [rbp - 0x3ea], ax
mov eax, 0
mov word [rbp - 0x3e8], ax
mov eax, 0
mov word [rbp - 0x3e6], ax
mov eax, 0
mov word [rbp - 0x3e4], ax
mov eax, 0
mov word [rbp - 0x3e2], ax
mov eax, 0
mov word [rbp - 0x3e0], ax
mov eax, 0
mov word [rbp - 0x3de], ax
mov eax, 0
mov word [rbp - 0x3dc], ax
mov eax, 0
mov word [rbp - 0x3da], ax
mov eax, 0
mov word [rbp - 0x3d8], ax
mov eax, 0
mov word [rbp - 0x3d6], ax
mov eax, 0
mov word [rbp - 0x3d4], ax
mov eax, 0
mov word [rbp - 0x3d2], ax
mov eax, 0
mov word [rbp - 0x3d0], ax
mov eax, 0
mov word [rbp - 0x3ce], ax
mov eax, 0
mov word [rbp - 0x3cc], ax
mov eax, 0
mov word [rbp - 0x3ca], ax
mov eax, 0
mov word [rbp - 0x3c8], ax
mov eax, 0
mov word [rbp - 0x3c6], ax
mov eax, 0
mov word [rbp - 0x3c4], ax
mov eax, 0
mov word [rbp - 0x3c2], ax
mov eax, 0
mov word [rbp - 0x3c0], ax
mov eax, 0
mov word [rbp - 0x3be], ax
mov eax, 0
mov word [rbp - 0x3bc], ax
mov eax, 0
mov word [rbp - 0x3ba], ax
mov eax, 0
mov word [rbp - 0x3b8], ax
mov eax, 0
mov word [rbp - 0x3b6], ax
mov eax, 0
mov word [rbp - 0x3b4], ax
mov eax, 0
mov word [rbp - 0x3b2], ax
mov eax, 0
mov word [rbp - 0x3b0], ax
mov eax, 0
mov word [rbp - 0x3ae], ax
mov eax, 0
mov word [rbp - 0x3ac], ax
mov eax, 0
mov word [rbp - 0x3aa], ax
mov eax, 0
mov word [rbp - 0x3a8], ax
mov eax, 0
mov word [rbp - 0x3a6], ax
mov eax, 0
mov word [rbp - 0x3a4], ax
mov eax, 0
mov word [rbp - 0x3a2], ax
mov eax, 0
mov word [rbp - 0x3a0], ax
mov eax, 0
mov word [rbp - 0x39e], ax
mov eax, 0
mov word [rbp - 0x39c], ax
mov eax, 0
mov word [rbp - 0x39a], ax
mov eax, 0
mov word [rbp - 0x398], ax
mov eax, 0
mov word [rbp - 0x396], ax
mov eax, 0
mov word [rbp - 0x394], ax
mov eax, 0
mov word [rbp - 0x392], ax
mov eax, 0
mov word [rbp - 0x390], ax
mov eax, 0
mov word [rbp - 0x38e], ax
mov eax, 0
mov word [rbp - 0x38c], ax
mov eax, 0
mov word [rbp - 0x38a], ax
mov eax, 0
mov word [rbp - 0x388], ax
mov eax, 0
mov word [rbp - 0x386], ax
mov eax, 0
mov word [rbp - 0x384], ax
mov eax, 0
mov word [rbp - 0x382], ax
mov eax, 0
mov word [rbp - 0x380], ax
mov eax, 0
mov word [rbp - 0x37e], ax
mov eax, 0
mov word [rbp - 0x37c], ax
mov eax, 0
mov word [rbp - 0x37a], ax
mov eax, 0
mov word [rbp - 0x378], ax
mov eax, 0
mov word [rbp - 0x376], ax
mov eax, 0
mov word [rbp - 0x374], ax
mov eax, 0
mov word [rbp - 0x372], ax
mov eax, 0
mov word [rbp - 0x370], ax
mov eax, 0
mov word [rbp - 0x36e], ax
mov eax, 0
mov word [rbp - 0x36c], ax
mov eax, 0
mov word [rbp - 0x36a], ax
mov eax, 0
mov word [rbp - 0x368], ax
mov eax, 0
mov word [rbp - 0x366], ax
mov eax, 0
mov word [rbp - 0x364], ax
mov eax, 0
mov word [rbp - 0x362], ax
mov eax, 0
mov word [rbp - 0x360], ax
mov eax, 0
mov word [rbp - 0x35e], ax
mov eax, 0
mov word [rbp - 0x35c], ax
mov eax, 0
mov word [rbp - 0x35a], ax
mov eax, 0
mov word [rbp - 0x358], ax
mov eax, 0
mov word [rbp - 0x356], ax
mov eax, 0
mov word [rbp - 0x354], ax
mov eax, 0
mov word [rbp - 0x352], ax
mov eax, 0
mov word [rbp - 0x350], ax
mov eax, 0
mov word [rbp - 0x34e], ax
mov eax, 0
mov word [rbp - 0x34c], ax
mov eax, 0
mov word [rbp - 0x34a], ax
mov eax, 0
mov word [rbp - 0x348], ax
mov eax, 0
mov word [rbp - 0x346], ax
mov eax, 0
mov word [rbp - 0x344], ax
mov eax, 0
mov word [rbp - 0x342], ax
mov eax, 0
mov word [rbp - 0x340], ax
mov eax, 0
mov word [rbp - 0x33e], ax
mov eax, 0
mov word [rbp - 0x33c], ax
mov eax, 0
mov word [rbp - 0x33a], ax
mov eax, 0
mov word [rbp - 0x338], ax
mov eax, 0
mov word [rbp - 0x336], ax
mov eax, 0
mov word [rbp - 0x334], ax
mov eax, 0
mov word [rbp - 0x332], ax
mov eax, 0
mov word [rbp - 0x330], ax
mov eax, 0
mov word [rbp - 0x32e], ax
mov eax, 0
mov word [rbp - 0x32c], ax
mov eax, 0
mov word [rbp - 0x32a], ax
mov eax, 0
mov word [rbp - 0x328], ax
mov eax, 0
mov word [rbp - 0x326], ax
mov eax, 0
mov word [rbp - 0x324], ax
mov eax, 0
mov word [rbp - 0x322], ax
mov eax, 0
mov word [rbp - 0x320], ax
mov eax, 0
mov word [rbp - 0x31e], ax
mov eax, 0
mov word [rbp - 0x31c], ax
mov eax, 0
mov word [rbp - 0x31a], ax
mov eax, 0
mov word [rbp - 0x318], ax
mov eax, 0
mov word [rbp - 0x316], ax
mov eax, 0
mov word [rbp - 0x314], ax
mov eax, 0
mov word [rbp - 0x312], ax
mov eax, 0
mov word [rbp - 0x310], ax
mov eax, 0
mov word [rbp - 0x30e], ax
mov eax, 0
mov word [rbp - 0x30c], ax
mov eax, 0
mov word [rbp - 0x30a], ax
mov eax, 0
mov word [rbp - 0x308], ax
mov eax, 0
mov word [rbp - 0x306], ax
mov eax, 0
mov word [rbp - 0x304], ax
mov eax, 0
mov word [rbp - 0x302], ax
mov eax, 0
mov word [rbp - 0x300], ax
mov eax, 0
mov word [rbp - 0x2fe], ax
mov eax, 0
mov word [rbp - 0x2fc], ax
mov eax, 0
mov word [rbp - 0x2fa], ax
mov eax, 0
mov word [rbp - 0x2f8], ax
mov eax, 0
mov word [rbp - 0x2f6], ax
mov eax, 0
mov word [rbp - 0x2f4], ax
mov eax, 0
mov word [rbp - 0x2f2], ax
mov eax, 0
mov word [rbp - 0x2f0], ax
mov eax, 0
mov word [rbp - 0x2ee], ax
mov eax, 0
mov word [rbp - 0x2ec], ax
mov eax, 0
mov word [rbp - 0x2ea], ax
mov eax, 0
mov word [rbp - 0x2e8], ax
mov eax, 0
mov word [rbp - 0x2e6], ax
mov eax, 0
mov word [rbp - 0x2e4], ax
mov eax, 0
mov word [rbp - 0x2e2], ax
mov eax, 0
mov word [rbp - 0x2e0], ax
mov eax, 0
mov word [rbp - 0x2de], ax
mov eax, 0
mov word [rbp - 0x2dc], ax
mov eax, 0
mov word [rbp - 0x2da], ax
mov eax, 0
mov word [rbp - 0x2d8], ax
mov eax, 0
mov word [rbp - 0x2d6], ax
mov eax, 0
mov word [rbp - 0x2d4], ax
mov eax, 0
mov word [rbp - 0x2d2], ax
mov eax, 0
mov word [rbp - 0x2d0], ax
mov eax, 0
mov word [rbp - 0x2ce], ax
mov eax, 0
mov word [rbp - 0x2cc], ax
mov eax, 0
mov word [rbp - 0x2ca], ax
mov eax, 0
mov word [rbp - 0x2c8], ax
mov eax, 0
mov word [rbp - 0x2c6], ax
mov eax, 0
mov word [rbp - 0x2c4], ax
mov eax, 0
mov word [rbp - 0x2c2], ax
mov eax, 0
mov word [rbp - 0x2c0], ax
mov eax, 0
mov word [rbp - 0x2be], ax
mov eax, 0
mov word [rbp - 0x2bc], ax
mov eax, 0
mov word [rbp - 0x2ba], ax
mov eax, 0
mov word [rbp - 0x2b8], ax
mov eax, 0
mov word [rbp - 0x2b6], ax
mov eax, 0
mov word [rbp - 0x2b4], ax
mov eax, 0
mov word [rbp - 0x2b2], ax
mov eax, 0
mov word [rbp - 0x2b0], ax
mov eax, 0
mov word [rbp - 0x2ae], ax
mov eax, 0
mov word [rbp - 0x2ac], ax
mov eax, 0
mov word [rbp - 0x2aa], ax
mov eax, 0
mov word [rbp - 0x2a8], ax
mov eax, 0
mov word [rbp - 0x2a6], ax
mov eax, 0
mov word [rbp - 0x2a4], ax
mov eax, 0
mov word [rbp - 0x2a2], ax
mov eax, 0
mov word [rbp - 0x2a0], ax
mov eax, 0
mov word [rbp - 0x29e], ax
mov eax, 0
mov word [rbp - 0x29c], ax
mov eax, 0
mov word [rbp - 0x29a], ax
mov eax, 0
mov word [rbp - 0x298], ax
mov eax, 0
mov word [rbp - 0x296], ax
mov eax, 0
mov word [rbp - 0x294], ax
mov eax, 0
mov word [rbp - 0x292], ax
mov eax, 0
mov word [rbp - 0x290], ax
mov eax, 0
mov word [rbp - 0x28e], ax
mov eax, 0
mov word [rbp - 0x28c], ax
mov eax, 0
mov word [rbp - 0x28a], ax
mov eax, 0
mov word [rbp - 0x288], ax
mov eax, 0
mov word [rbp - 0x286], ax
mov eax, 0
mov word [rbp - 0x284], ax
mov eax, 0
mov word [rbp - 0x282], ax
mov eax, 0
mov word [rbp - 0x280], ax
mov eax, 0
mov word [rbp - 0x27e], ax
mov eax, 0
mov word [rbp - 0x27c], ax
mov eax, 0
mov word [rbp - 0x27a], ax
mov eax, 0
mov dword [rbp - 0x278], eax
mov eax, 0
mov dword [rbp - 0x274], eax
mov eax, 0
mov word [rbp - 0x270], ax
movabs rax, 2
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x26e]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
mov eax, 0x25c
mov r8, rax
lea rax, [rbp - 0x4c8]
mov r11, rax
lea rax, [rbp - 0x26c]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [0x00678394]
mov qword [rbp - 0x508], rax
mov eax, 1
mov dword [rbp - 0x500], eax
mov eax, 1
mov dword [rbp - 0x4fc], eax
lea rax, [0x00678396]
mov qword [rbp - 0x518], rax
mov eax, 1
mov dword [rbp - 0x510], eax
mov eax, 1
mov dword [rbp - 0x50c], eax
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x518]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x30]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x508]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x40]
mov ecx, 0x10
mov r8, rcx
mov rcx, qword [rbp + 0x18]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r9, [rsp + 0x20]
lea r8, [rsp + 0x30]
lea r11, [rsp + 0x40]
lea rax, [rbp - 0x4f8]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.0043559e
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x4f8]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r10, [rsp + 0x20]
mov rcx, r10
call fcn.00445a91
mov qword [rbp - 0x4e8], rax
lea rax, [rbp - 0x26c]
mov r11, rax
mov rax, qword [rbp - 0x4e8]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.kernel32.dll_FindFirstFileW
mov qword [rbp - 0x10], rax
mov eax, 1
mov byte [rbp - 1], al
mov rax, qword [rbp - 0x10]
cmp rax, 0xffffffffffffffff
jne 0x4eff8a
mov eax, 1
mov byte [rbp - 0x578], al
movabs rax, 7
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x577]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
lea rax, str.os.glob__:_Could_not_get_a_file_handle:
mov qword [rbp - 0x5b8], rax
mov eax, 0x28
mov dword [rbp - 0x5b0], eax
mov eax, 1
mov dword [rbp - 0x5ac], eax
call sub.kernel32.dll_GetLastError
mov r11, rax
lea rax, [rbp - 0x5c8]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.004f2d76
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x5c8]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x30]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x5b8]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r8, [rsp + 0x20]
lea r11, [rsp + 0x30]
lea rax, [rbp - 0x5a8]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.004377a2
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x5a8]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r11, [rsp + 0x20]
lea rax, [rbp - 0x598]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.00430adb
mov eax, 0x20
mov r8, rax
lea rax, [rbp - 0x598]
mov r11, rax
lea rax, [rbp - 0x570]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov eax, 0
mov byte [rbp - 0x550], al
movabs rax, 7
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x54f]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
mov eax, 0x30
mov r8, rax
lea rax, [rbp - 0x578]
mov r11, rax
lea rax, [rbp - 0x548]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
movzx eax, byte [rbp - 1]
cmp eax, 0
je 0x4eff61
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
call sub.kernel32.dll_FindClose
mov rax, qword [rbp + 0x10]
mov ecx, 0x30
mov r8, rcx
lea rcx, [rbp - 0x548]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
jmp 0x4f07ad
lea rax, [rbp - 0x240]
mov r11, rax
lea rax, [rbp - 0x5e8]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.00445b98
mov eax, 0x10
mov r8, rax
lea rax, [rbp - 0x5e8]
mov r11, rax
lea rax, [rbp - 0x5d8]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [0x006783c1]
mov qword [rbp - 0x5f8], rax
mov eax, 1
mov dword [rbp - 0x5f0], eax
mov eax, 1
mov dword [rbp - 0x5ec], eax
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x5f8]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x30]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x5d8]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r11, [rsp + 0x20]
lea r10, [rsp + 0x30]
mov rcx, r10
mov rdx, r11
call fcn.0043740c
movzx eax, al
cmp eax, 0
jne 0x4f0338
lea rax, [0x006783c3]
mov qword [rbp - 0x608], rax
mov eax, 2
mov dword [rbp - 0x600], eax
mov eax, 1
mov dword [rbp - 0x5fc], eax
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x608]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x30]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x5d8]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r11, [rsp + 0x20]
lea r10, [rsp + 0x30]
mov rcx, r10
mov rdx, r11
call fcn.0043740c
movzx eax, al
cmp eax, 0
jne 0x4f0338
lea rax, [0x006783c6]
mov qword [rbp - 0x638], rax
mov eax, 1
mov dword [rbp - 0x630], eax
mov eax, 1
mov dword [rbp - 0x62c], eax
lea rax, [0x006783c8]
mov qword [rbp - 0x648], rax
mov eax, 1
mov dword [rbp - 0x640], eax
mov eax, 1
mov dword [rbp - 0x63c], eax
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x648]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x30]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x638]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x40]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x5d8]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r9, [rsp + 0x20]
lea r8, [rsp + 0x30]
lea r11, [rsp + 0x40]
lea rax, [rbp - 0x628]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.0043559e
mov eax, 0x10
mov r8, rax
lea rax, [rbp - 0x628]
mov r11, rax
lea rax, [rbp - 0x618]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov eax, dword [rbp - 0x26c]
and eax, 0x10
cmp eax, 0
jbe 0x4f02b6
lea rax, [0x006783ca]
mov qword [rbp - 0x668], rax
mov eax, 1
mov dword [rbp - 0x660], eax
mov eax, 1
mov dword [rbp - 0x65c], eax
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x668]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x30]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x618]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r8, [rsp + 0x20]
lea r11, [rsp + 0x30]
lea rax, [rbp - 0x658]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.004377a2
mov eax, 0x10
mov r8, rax
lea rax, [rbp - 0x658]
mov r11, rax
lea rax, [rbp - 0x618]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x618]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r11, [rsp + 0x20]
lea rax, [rbp - 0x688]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.004351e7
mov eax, 0x10
mov r8, rax
lea rax, [rbp - 0x688]
mov r11, rax
lea rax, [rbp - 0x678]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rbp - 0x678]
mov r11, rax
mov rax, qword [rbp + 0x20]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.00422aa6
mov eax, 0
mov dword [rbp - 0x68c], eax
lea rax, [rbp - 0x26c]
mov r11, rax
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.kernel32.dll_FindNextFileW
cmp eax, 0
jle 0x4f0738
jmp 0x4f0380
mov eax, dword [rbp - 0x68c]
mov ecx, eax
add eax, 1
mov dword [rbp - 0x68c], eax
jmp 0x4f0343
lea rax, [rbp - 0x240]
mov r11, rax
lea rax, [rbp - 0x6b0]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.00445b98
mov eax, 0x10
mov r8, rax
lea rax, [rbp - 0x6b0]
mov r11, rax
lea rax, [rbp - 0x6a0]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [0x006783cc]
mov qword [rbp - 0x6c0], rax
mov eax, 1
mov dword [rbp - 0x6b8], eax
mov eax, 1
mov dword [rbp - 0x6b4], eax
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x6c0]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x30]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x6a0]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r11, [rsp + 0x20]
lea r10, [rsp + 0x30]
mov rcx, r10
mov rdx, r11
call fcn.0043740c
movzx eax, al
cmp eax, 0
jne 0x4f04e4
lea rax, [0x006783ce]
mov qword [rbp - 0x6d0], rax
mov eax, 2
mov dword [rbp - 0x6c8], eax
mov eax, 1
mov dword [rbp - 0x6c4], eax
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x6d0]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x30]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x6a0]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r11, [rsp + 0x20]
lea r10, [rsp + 0x30]
mov rcx, r10
mov rdx, r11
call fcn.0043740c
movzx eax, al
cmp eax, 0
je 0x4f04e9
jmp 0x4f036d
lea rax, [0x006783d1]
mov qword [rbp - 0x700], rax
mov eax, 1
mov dword [rbp - 0x6f8], eax
mov eax, 1
mov dword [rbp - 0x6f4], eax
lea rax, [0x006783d3]
mov qword [rbp - 0x710], rax
mov eax, 1
mov dword [rbp - 0x708], eax
mov eax, 1
mov dword [rbp - 0x704], eax
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x710]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x30]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x700]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x40]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x6a0]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r9, [rsp + 0x20]
lea r8, [rsp + 0x30]
lea r11, [rsp + 0x40]
lea rax, [rbp - 0x6f0]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.0043559e
mov eax, 0x10
mov r8, rax
lea rax, [rbp - 0x6f0]
mov r11, rax
lea rax, [rbp - 0x6e0]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov eax, dword [rbp - 0x26c]
and eax, 0x10
cmp eax, 0
jbe 0x4f06b1
lea rax, [0x006783d5]
mov qword [rbp - 0x730], rax
mov eax, 1
mov dword [rbp - 0x728], eax
mov eax, 1
mov dword [rbp - 0x724], eax
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x730]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x30]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x6e0]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r8, [rsp + 0x20]
lea r11, [rsp + 0x30]
lea rax, [rbp - 0x720]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.004377a2
mov eax, 0x10
mov r8, rax
lea rax, [rbp - 0x720]
mov r11, rax
lea rax, [rbp - 0x6e0]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x6e0]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r11, [rsp + 0x20]
lea rax, [rbp - 0x750]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.004351e7
mov eax, 0x10
mov r8, rax
lea rax, [rbp - 0x750]
mov r11, rax
lea rax, [rbp - 0x740]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rbp - 0x740]
mov r11, rax
mov rax, qword [rbp + 0x20]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.00422aa6
jmp 0x4f036d
movzx eax, byte [rbp - 1]
cmp eax, 0
je 0x4f0754
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
call sub.kernel32.dll_FindClose
mov eax, 0
mov byte [rbp - 0x780], al
movabs rax, 0x2f
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x77f]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
mov rax, qword [rbp + 0x10]
mov ecx, 0x30
mov r8, rcx
lea rcx, [rbp - 0x780]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
leave
ret