Function at 0x1400f9920
Capabilities:
Enumerate files on windows

Disassembly:
push rbp
push rsi
push rdi
push r14
push r15
sub rsp, 0x2d0
mov qword [rsp + 0x50], 0xfffffffffffffffe
mov qword [rsp + 0x310], rbx
mov rax, qword [0x1401e61d8]
xor rax, rsp
mov qword [rsp + 0x2c0], rax
mov r15, rdx
mov r14, rcx
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x60], rdx
mov dword [rsp + 0x38], 0
lea rcx, [rsp + 0x30]
call qword [sym.imp.mfc140u.dll_Ordinal_296]
nop
lea rdx, [0x14018bce4]
lea rcx, [rsp + 0x40]
call qword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
nop
mov rcx, r15
call qword [sym.imp.mfc140u.dll_CMFCRibbonUndoButton::GetIconSize]
mov rdx, rax
lea rcx, [rsp + 0x48]
call qword [sym.imp.mfc140u.dll_Ordinal_285]
mov rbp, rax
mov dword [rsp + 0x38], 1
lea rcx, [rsp + 0x40]
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
mov esi, eax
lea rcx, [rsp + 0x40]
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdi, rax
mov rcx, r15
call qword [sym.imp.mfc140u.dll_CMFCPropertyGridProperty::GetHierarchyLevel]
mov ebx, eax
mov rcx, r15
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
mov dword [rsp + 0x20], esi
mov r9, rdi
mov r8d, ebx
lea rcx, [rsp + 0x48]
call qword [sym.imp.mfc140u.dll_CMFCTasksPane::CollapseAllGroups]
mov rcx, rbp
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rcx, rax
lea rdx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rbx, rax
lea rcx, [rsp + 0x48]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
lea rcx, [rsp + 0x40]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
cmp rbx, 0xffffffffffffffff
je 0x1400f9adf
test byte [rsp + 0x70], 0x10
je 0x1400f9aa7
movzx ecx, word [rsp + 0x9c]
movzx eax, word [rsp + 0x9e]
cmp cx, word [0x14016279c]
jne 0x1400f9a56
cmp ax, word [0x14016279e]
je 0x1400f9aa7
cmp cx, word [0x140182e3c]
jne 0x1400f9a79
cmp ax, word [0x140182e3e]
jne 0x1400f9a79
movzx eax, word [rsp + 0xa0]
cmp ax, word [0x140182e40]
je 0x1400f9aa7
lea rdx, [rsp + 0x9c]
lea rcx, [rsp + 0x30]
call qword [sym.imp.mfc140u.dll_CMFCControlRendererInfo::CMFCControlRendererInfo]
mov rcx, r14
call qword [sym.imp.mfc140u.dll_CDumpContext::operator___1]
mov rdx, rax
lea rcx, [rsp + 0x30]
call qword [sym.imp.mfc140u.dll_Ordinal_2903]
test eax, eax
je 0x1400f9abc
lea rdx, [rsp + 0x70]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jmp 0x1400f9a27
lea rcx, [rsp + 0x30]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
mov rcx, r14
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
mov rcx, r15
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
mov al, 1
jmp 0x1400f9b0a
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
lea rcx, [rsp + 0x30]
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
mov rcx, r14
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
nop
mov rcx, r15
call qword [sym.imp.mfc140u.dll_CMFCRibbonInfo::XElementButtonGallery::XGalleryGroup::XGalleryGroup]
xor al, al
mov rcx, qword [rsp + 0x2c0]
xor rcx, rsp
call fcn.140113c40
mov rbx, qword [rsp + 0x310]
add rsp, 0x2d0
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret