Function at 0x14008bb11
Capabilities:
Enumerate files on windows

Disassembly:
jmp 0x140091d20
mov qword [rsp + 8], rcx
push rbp
push rdi
sub rsp, 0xd18
lea rbp, [rsp + 0x60]
lea rdi, [rsp + 0x60]
mov ecx, 0x23e
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0xd38]
mov rax, qword [section..data]
xor rax, rbp
mov qword [rbp + 0xca0], rax
lea rcx, [0x1401fa170]
call fcn.14008cd09
mov r8, qword [rbp + 0xcd0]
mov edx, 0x104
lea rcx, [rbp + 0x190]
call fcn.14008a365
lea r8, [0x1401ab7cc]
mov edx, 0x104
lea rcx, [rbp + 0x190]
call fcn.140089140
mov ecx, 0x2800
call fcn.14008b40e
mov qword [rbp + 0x2b8], rax
cmp qword [rbp + 0x2b8], 0
jne 0x140091dd4
mov ecx, 2
call fcn.14008d182
lea rdx, str.Memory_allocation_failed_n
mov rcx, rax
call fcn.14008c4bc
xor eax, eax
jmp 0x140092218
mov eax, 1
imul rax, rax, 0
mov rcx, qword [rbp + 0x2b8]
mov byte [rcx + rax], 0
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x190]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov qword [rbp + 0x168], rax
cmp qword [rbp + 0x168], 0xffffffffffffffff
jne 0x140091e29
lea rdx, [0x1401ab7d0]
mov rcx, qword [rbp + 0x2b8]
call fcn.14008c886
mov rax, qword [rbp + 0x2b8]
jmp 0x140092218
lea rdx, [0x1401ab7f4]
lea rcx, [rbp + 0x3c]
call fcn.14008d2f9
test eax, eax
je 0x1400921eb
lea rdx, [0x1401ab7f8]
lea rcx, [rbp + 0x3c]
call fcn.14008d2f9
test eax, eax
je 0x1400921eb
mov eax, dword [rbp + 0x10]
and eax, 0x4000
test eax, eax
je 0x140091e75
lea rax, str.E_CTSRNHDA
mov qword [rbp + 0xc58], rax
jmp 0x140091e83
lea rax, [0x1401ab800]
mov qword [rbp + 0xc58], rax
mov eax, dword [rbp + 0x10]
and eax, 0x800
test eax, eax
je 0x140091e9f
lea rax, [0x1401ab804]
mov qword [rbp + 0xc60], rax
jmp 0x140091ead
lea rax, [0x1401ab800]
mov qword [rbp + 0xc60], rax
mov eax, dword [rbp + 0x10]
and eax, 0x100
test eax, eax
je 0x140091ec9
lea rax, [0x1401ab808]
mov qword [rbp + 0xc68], rax
jmp 0x140091ed7
lea rax, [0x1401ab800]
mov qword [rbp + 0xc68], rax
mov eax, dword [rbp + 0x10]
and eax, 4
test eax, eax
je 0x140091ef1
lea rax, [0x1401ab80c]
mov qword [rbp + 0xc70], rax
jmp 0x140091eff
lea rax, [0x1401ab800]
mov qword [rbp + 0xc70], rax
mov eax, dword [rbp + 0x10]
and eax, 1
test eax, eax
je 0x140091f19
lea rax, [0x1401ab810]
mov qword [rbp + 0xc78], rax
jmp 0x140091f27
lea rax, [0x1401ab800]
mov qword [rbp + 0xc78], rax
mov eax, dword [rbp + 0x10]
and eax, 0x80
test eax, eax
je 0x140091f43
lea rax, [0x1401ab814]
mov qword [rbp + 0xc80], rax
jmp 0x140091f51
lea rax, [0x1401ab800]
mov qword [rbp + 0xc80], rax
mov eax, dword [rbp + 0x10]
and eax, 2
test eax, eax
je 0x140091f6b
lea rax, [0x1401ab818]
mov qword [rbp + 0xc88], rax
jmp 0x140091f79
lea rax, [0x1401ab800]
mov qword [rbp + 0xc88], rax
mov eax, dword [rbp + 0x10]
and eax, 0x10
test eax, eax
je 0x140091f93
lea rax, [0x1401ab81c]
mov qword [rbp + 0xc90], rax
jmp 0x140091fa1
lea rax, [0x1401ab800]
mov qword [rbp + 0xc90], rax
mov eax, dword [rbp + 0x10]
and eax, 0x20
test eax, eax
je 0x140091fbb
lea rax, [0x1401ab820]
mov qword [rbp + 0xc98], rax
jmp 0x140091fc9
lea rax, [0x1401ab800]
mov qword [rbp + 0xc98], rax
mov rax, qword [rbp + 0xc58]
mov qword [rsp + 0x58], rax
mov rax, qword [rbp + 0xc60]
mov qword [rsp + 0x50], rax
mov rax, qword [rbp + 0xc68]
mov qword [rsp + 0x48], rax
mov rax, qword [rbp + 0xc70]
mov qword [rsp + 0x40], rax
mov rax, qword [rbp + 0xc78]
mov qword [rsp + 0x38], rax
mov rax, qword [rbp + 0xc80]
mov qword [rsp + 0x30], rax
mov rax, qword [rbp + 0xc88]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp + 0xc90]
mov qword [rsp + 0x20], rax
mov r9, qword [rbp + 0xc98]
lea r8, [rbp + 0x3c]
lea rdx, str.FileName:__s_nAttributes:__s_s_s_s_s_s_s_s_s_n
lea rcx, [rbp + 0x2e0]
call fcn.14008c886
mov eax, dword [rbp + 0x30]
mov dword [rbp + 0x6f8], eax
mov eax, dword [rbp + 0x2c]
mov dword [rbp + 0x6fc], eax
mov r8, qword [rbp + 0x6f8]
lea rdx, str.FileSize:__lld_bytes_n
lea rcx, [rbp + 0x720]
call fcn.14008c886
lea rdx, [rbp + 0x720]
lea rcx, [rbp + 0x2e0]
call fcn.14008b15c
cmp dword [rbp + 0x24], 0
jne 0x140092092
cmp dword [rbp + 0x28], 0
je 0x14009209f
mov rax, qword [rbp + 0x24]
mov qword [rbp + 0x7b8], rax
jmp 0x1400920aa
mov rax, qword [rbp + 0x14]
mov qword [rbp + 0x7b8], rax
lea rdx, [rbp + 0x7b8]
lea rcx, [rbp + 0x7b8]
call qword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
lea rdx, [rbp + 0x7d8]
lea rcx, [rbp + 0x7b8]
call qword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
movzx eax, word [rbp + 0x7e4]
movzx ecx, word [rbp + 0x7e2]
movzx edx, word [rbp + 0x7e0]
movzx r8d, word [rbp + 0x7de]
movzx r9d, word [rbp + 0x7da]
movzx r10d, word [rbp + 0x7d8]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], ecx
mov dword [rsp + 0x28], edx
mov dword [rsp + 0x20], r8d
mov r8d, r10d
lea rdx, str.FileTime:__04d__02d__02d__02d:_02d:_02d_n_n
lea rcx, [rbp + 0x810]
call fcn.14008c886
lea rdx, [rbp + 0x810]
lea rcx, [rbp + 0x2e0]
call fcn.14008b15c
mov rcx, qword [rbp + 0x2b8]
call fcn.14008ab99
mov qword [rbp + 0xc58], rax
lea rcx, [rbp + 0x2e0]
call fcn.14008ab99
mov rcx, qword [rbp + 0xc58]
add rcx, rax
mov rax, rcx
cmp rax, 0x2800
jb 0x1400921d8
mov rcx, qword [rbp + 0x2b8]
call fcn.14008ab99
mov qword [rbp + 0xc58], rax
lea rcx, [rbp + 0x2e0]
call fcn.14008ab99
mov rcx, qword [rbp + 0xc58]
lea rax, [rcx + rax + 0x400]
mov rdx, rax
mov rcx, qword [rbp + 0x2b8]
call fcn.140089d70
mov qword [rbp + 0x2b8], rax
cmp qword [rbp + 0x2b8], 0
jne 0x1400921d8
mov ecx, 2
call fcn.14008d182
lea rdx, str.Memory_reallocation_failed_n
mov rcx, rax
call fcn.14008c4bc
xor eax, eax
jmp 0x140092218
lea rdx, [rbp + 0x2e0]
mov rcx, qword [rbp + 0x2b8]
call fcn.14008b15c
lea rdx, [rbp + 0x10]
mov rcx, qword [rbp + 0x168]
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x140091e29
mov rcx, qword [rbp + 0x168]
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rax, qword [rbp + 0x2b8]
mov rdi, rax
lea rcx, [rbp - 0x60]
lea rdx, [0x1401ab6d0]
call fcn.14008c214
mov rax, rdi
mov rcx, qword [rbp + 0xca0]
xor rcx, rbp
call fcn.14008adba
lea rsp, [rbp + 0xcb8]
pop rdi
pop rbp
ret