Function at 0x4d7478
Capabilities:
Enumerate files on windows

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x7d0
mov qword [rbp + 0x10], rcx
mov qword [rbp + 0x18], rdx
mov qword [rbp + 0x20], r8
mov eax, 0
mov byte [rbp - 1], al
mov eax, 0
mov dword [rbp - 0x4c8], eax
mov eax, 0
mov dword [rbp - 0x4d0], eax
mov eax, 0
mov dword [rbp - 0x4cc], eax
mov eax, 8
mov r8, rax
lea rax, [rbp - 0x4d0]
mov r11, rax
lea rax, [rbp - 0x4c4]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov eax, 0
mov dword [rbp - 0x4d8], eax
mov eax, 0
mov dword [rbp - 0x4d4], eax
mov eax, 8
mov r8, rax
lea rax, [rbp - 0x4d8]
mov r11, rax
lea rax, [rbp - 0x4bc]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov eax, 0
mov dword [rbp - 0x4e0], eax
mov eax, 0
mov dword [rbp - 0x4dc], eax
mov eax, 8
mov r8, rax
lea rax, [rbp - 0x4e0]
mov r11, rax
lea rax, [rbp - 0x4b4]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov eax, 0
mov dword [rbp - 0x4ac], eax
mov eax, 0
mov dword [rbp - 0x4a8], eax
mov eax, 0
mov dword [rbp - 0x4a4], eax
mov eax, 0
mov dword [rbp - 0x4a0], eax
mov eax, 0
mov word [rbp - 0x49c], ax
movabs rax, 0x206
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x49a]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
mov eax, 0
mov word [rbp - 0x294], ax
movabs rax, 0x1a
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x292]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
mov eax, 0
mov dword [rbp - 0x278], eax
mov eax, 0
mov dword [rbp - 0x274], eax
mov eax, 0
mov word [rbp - 0x270], ax
movabs rax, 2
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x26e]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
mov eax, 0x25c
mov r8, rax
lea rax, [rbp - 0x4c8]
mov r11, rax
lea rax, [rbp - 0x26c]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [0x00550eaa]
mov qword [rbp - 0x508], rax
mov eax, 1
mov dword [rbp - 0x500], eax
mov eax, 1
mov dword [rbp - 0x4fc], eax
lea rax, [0x00550eac]
mov qword [rbp - 0x518], rax
mov eax, 1
mov dword [rbp - 0x510], eax
mov eax, 1
mov dword [rbp - 0x50c], eax
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x518]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x30]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x508]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x40]
mov ecx, 0x10
mov r8, rcx
mov rcx, qword [rbp + 0x18]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r9, [rsp + 0x20]
lea r8, [rsp + 0x30]
lea r11, [rsp + 0x40]
lea rax, [rbp - 0x4f8]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.004679bd
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x4f8]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r10, [rsp + 0x20]
mov rcx, r10
call fcn.00476e52
mov qword [rbp - 0x4e8], rax
lea rax, [rbp - 0x26c]
mov r11, rax
mov rax, qword [rbp - 0x4e8]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.kernel32.dll_FindFirstFileW
mov qword [rbp - 0x10], rax
mov eax, 1
mov byte [rbp - 1], al
mov rax, qword [rbp - 0x10]
cmp rax, 0xffffffffffffffff
jne 0x4d7994
mov eax, 1
mov byte [rbp - 0x578], al
movabs rax, 7
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x577]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
lea rax, str.os.glob__:_Could_not_get_a_file_handle:
mov qword [rbp - 0x5b8], rax
mov eax, 0x28
mov dword [rbp - 0x5b0], eax
mov eax, 1
mov dword [rbp - 0x5ac], eax
call sub.kernel32.dll_GetLastError
mov r11, rax
lea rax, [rbp - 0x5c8]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.004d9960
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x5c8]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x30]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x5b8]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r8, [rsp + 0x20]
lea r11, [rsp + 0x30]
lea rax, [rbp - 0x5a8]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.00469b8f
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x5a8]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r11, [rsp + 0x20]
lea rax, [rbp - 0x598]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.00463177
mov eax, 0x20
mov r8, rax
lea rax, [rbp - 0x598]
mov r11, rax
lea rax, [rbp - 0x570]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov eax, 0
mov byte [rbp - 0x550], al
movabs rax, 7
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x54f]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
mov eax, 0x30
mov r8, rax
lea rax, [rbp - 0x578]
mov r11, rax
lea rax, [rbp - 0x548]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
movzx eax, byte [rbp - 1]
cmp eax, 0
je 0x4d796b
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
call sub.kernel32.dll_FindClose
mov rax, qword [rbp + 0x10]
mov ecx, 0x30
mov r8, rcx
lea rcx, [rbp - 0x548]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
jmp 0x4d81b7
lea rax, [rbp - 0x240]
mov r11, rax
lea rax, [rbp - 0x5e8]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.00476f59
mov eax, 0x10
mov r8, rax
lea rax, [rbp - 0x5e8]
mov r11, rax
lea rax, [rbp - 0x5d8]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [0x00550ed7]
mov qword [rbp - 0x5f8], rax
mov eax, 1
mov dword [rbp - 0x5f0], eax
mov eax, 1
mov dword [rbp - 0x5ec], eax
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x5f8]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x30]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x5d8]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r11, [rsp + 0x20]
lea r10, [rsp + 0x30]
mov rcx, r10
mov rdx, r11
call fcn.004697f9
movzx eax, al
cmp eax, 0
jne 0x4d7d42
lea rax, [0x00550ed9]
mov qword [rbp - 0x608], rax
mov eax, 2
mov dword [rbp - 0x600], eax
mov eax, 1
mov dword [rbp - 0x5fc], eax
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x608]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x30]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x5d8]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r11, [rsp + 0x20]
lea r10, [rsp + 0x30]
mov rcx, r10
mov rdx, r11
call fcn.004697f9
movzx eax, al
cmp eax, 0
jne 0x4d7d42
lea rax, [0x00550edc]
mov qword [rbp - 0x638], rax
mov eax, 1
mov dword [rbp - 0x630], eax
mov eax, 1
mov dword [rbp - 0x62c], eax
lea rax, [0x00550ede]
mov qword [rbp - 0x648], rax
mov eax, 1
mov dword [rbp - 0x640], eax
mov eax, 1
mov dword [rbp - 0x63c], eax
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x648]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x30]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x638]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x40]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x5d8]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r9, [rsp + 0x20]
lea r8, [rsp + 0x30]
lea r11, [rsp + 0x40]
lea rax, [rbp - 0x628]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.004679bd
mov eax, 0x10
mov r8, rax
lea rax, [rbp - 0x628]
mov r11, rax
lea rax, [rbp - 0x618]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov eax, dword [rbp - 0x26c]
and eax, 0x10
cmp eax, 0
jbe 0x4d7cc0
lea rax, [0x00550ee0]
mov qword [rbp - 0x668], rax
mov eax, 1
mov dword [rbp - 0x660], eax
mov eax, 1
mov dword [rbp - 0x65c], eax
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x668]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x30]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x618]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r8, [rsp + 0x20]
lea r11, [rsp + 0x30]
lea rax, [rbp - 0x658]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.00469b8f
mov eax, 0x10
mov r8, rax
lea rax, [rbp - 0x658]
mov r11, rax
lea rax, [rbp - 0x618]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x618]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r11, [rsp + 0x20]
lea rax, [rbp - 0x688]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.00467606
mov eax, 0x10
mov r8, rax
lea rax, [rbp - 0x688]
mov r11, rax
lea rax, [rbp - 0x678]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rbp - 0x678]
mov r11, rax
mov rax, qword [rbp + 0x20]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.004557ba
mov eax, 0
mov dword [rbp - 0x68c], eax
lea rax, [rbp - 0x26c]
mov r11, rax
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.kernel32.dll_FindNextFileW
cmp eax, 0
jle 0x4d8142
jmp 0x4d7d8a
mov eax, dword [rbp - 0x68c]
mov ecx, eax
add eax, 1
mov dword [rbp - 0x68c], eax
jmp 0x4d7d4d
lea rax, [rbp - 0x240]
mov r11, rax
lea rax, [rbp - 0x6b0]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.00476f59
mov eax, 0x10
mov r8, rax
lea rax, [rbp - 0x6b0]
mov r11, rax
lea rax, [rbp - 0x6a0]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [0x00550ee2]
mov qword [rbp - 0x6c0], rax
mov eax, 1
mov dword [rbp - 0x6b8], eax
mov eax, 1
mov dword [rbp - 0x6b4], eax
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x6c0]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x30]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x6a0]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r11, [rsp + 0x20]
lea r10, [rsp + 0x30]
mov rcx, r10
mov rdx, r11
call fcn.004697f9
movzx eax, al
cmp eax, 0
jne 0x4d7eee
lea rax, [0x00550ee4]
mov qword [rbp - 0x6d0], rax
mov eax, 2
mov dword [rbp - 0x6c8], eax
mov eax, 1
mov dword [rbp - 0x6c4], eax
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x6d0]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x30]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x6a0]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r11, [rsp + 0x20]
lea r10, [rsp + 0x30]
mov rcx, r10
mov rdx, r11
call fcn.004697f9
movzx eax, al
cmp eax, 0
je 0x4d7ef3
jmp 0x4d7d77
lea rax, [0x00550ee7]
mov qword [rbp - 0x700], rax
mov eax, 1
mov dword [rbp - 0x6f8], eax
mov eax, 1
mov dword [rbp - 0x6f4], eax
lea rax, [0x00550ee9]
mov qword [rbp - 0x710], rax
mov eax, 1
mov dword [rbp - 0x708], eax
mov eax, 1
mov dword [rbp - 0x704], eax
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x710]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x30]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x700]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x40]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x6a0]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r9, [rsp + 0x20]
lea r8, [rsp + 0x30]
lea r11, [rsp + 0x40]
lea rax, [rbp - 0x6f0]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.004679bd
mov eax, 0x10
mov r8, rax
lea rax, [rbp - 0x6f0]
mov r11, rax
lea rax, [rbp - 0x6e0]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
mov eax, dword [rbp - 0x26c]
and eax, 0x10
cmp eax, 0
jbe 0x4d80bb
lea rax, [0x00550eeb]
mov qword [rbp - 0x730], rax
mov eax, 1
mov dword [rbp - 0x728], eax
mov eax, 1
mov dword [rbp - 0x724], eax
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x730]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x30]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x6e0]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r8, [rsp + 0x20]
lea r11, [rsp + 0x30]
lea rax, [rbp - 0x720]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.00469b8f
mov eax, 0x10
mov r8, rax
lea rax, [rbp - 0x720]
mov r11, rax
lea rax, [rbp - 0x6e0]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rsp + 0x20]
mov ecx, 0x10
mov r8, rcx
lea rcx, [rbp - 0x6e0]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea r11, [rsp + 0x20]
lea rax, [rbp - 0x750]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.00467606
mov eax, 0x10
mov r8, rax
lea rax, [rbp - 0x750]
mov r11, rax
lea rax, [rbp - 0x740]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
lea rax, [rbp - 0x740]
mov r11, rax
mov rax, qword [rbp + 0x20]
mov r10, rax
mov rcx, r10
mov rdx, r11
call fcn.004557ba
jmp 0x4d7d77
movzx eax, byte [rbp - 1]
cmp eax, 0
je 0x4d815e
mov rax, qword [rbp - 0x10]
mov r10, rax
mov rcx, r10
call sub.kernel32.dll_FindClose
mov eax, 0
mov byte [rbp - 0x780], al
movabs rax, 0x2f
mov r8, rax
mov eax, 0
mov r11, rax
lea rax, [rbp - 0x77f]
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memset
mov rax, qword [rbp + 0x10]
mov ecx, 0x30
mov r8, rcx
lea rcx, [rbp - 0x780]
mov r11, rcx
mov r10, rax
mov rcx, r10
mov rdx, r11
call sub.msvcrt.dll_memmove
leave
ret