Function at 0x140002b8a
Capabilities:
Enumerate files on windows

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x298
lea rsi, [rsp + 0xd0]
mov r12, rcx
mov rbx, rdx
mov rdx, rcx
lea rdi, [rsp + 0x110]
mov rcx, rsi
call fcn.14000154a
lea r8, [0x1400d4409]
mov rdx, rsi
mov rcx, rdi
call fcn.1400c8260
lea r14, [rsp + 0x150]
mov rcx, qword [rsp + 0x110]
mov rdx, r14
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov rcx, rdi
mov rbp, rax
call fcn.1400a8d40
mov rcx, rsi
call fcn.1400a8d40
cmp rbp, 0xffffffffffffffff
je 0x140002f07
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x68], rax
lea rdx, [0x1400d4080]
mov rcx, rbx
lea r15, [rsp + 0x17c]
call sub.msvcrt.dll_strcat
lea rdx, str._Filename_:__
mov rcx, rbx
lea r13, [0x1400d441a]
call sub.msvcrt.dll_strcat
mov rdx, r15
mov rcx, rbx
call sub.msvcrt.dll_strcat
mov rdx, r13
mov rcx, rbx
call sub.msvcrt.dll_strcat
lea rdx, str._FileType_:
mov rcx, rbx
call sub.msvcrt.dll_strcat
lea rdx, str._Directory__
test byte [rsp + 0x150], 0x10
jne 0x140002c87
lea rdx, str._File__
mov rcx, rbx
call sub.msvcrt.dll_strcat
lea rdx, str._MagicNumber_:__
mov rcx, rbx
call sub.msvcrt.dll_strcat
lea rax, [rsp + 0x90]
mov rdx, r12
mov rcx, rax
mov qword [rsp + 0x60], rax
call fcn.14000154a
mov rdx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x58]
lea r8, [0x1400d40bd]
call fcn.1400c8260
mov rdx, qword [rsp + 0x58]
mov r8, r15
mov rcx, rsi
call fcn.1400c8260
mov rdx, qword [rsp + 0xd0]
mov rcx, rdi
call fcn.14000154a
mov rcx, qword [rsp + 0x68]
mov rdx, rdi
call fcn.140002abe
mov rcx, rdi
call fcn.1400a8d40
mov rcx, rsi
call fcn.1400a8d40
mov rcx, qword [rsp + 0x58]
call fcn.1400a8d40
mov rcx, qword [rsp + 0x60]
call fcn.1400a8d40
mov rdx, qword [rsp + 0x70]
mov rcx, rbx
call sub.msvcrt.dll_strcat
mov rdx, r13
mov rcx, rbx
call sub.msvcrt.dll_strcat
lea rdx, str._CreationDate_:__
mov rcx, rbx
call sub.msvcrt.dll_strcat
mov rdx, qword [rsp + 0x58]
mov r15, qword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
lea rcx, [rsp + 0x154]
call r15
movzx eax, word [rsp + 0xbc]
lea r8, str._04d__02d__02d__02d:_02d:_02d
mov edx, 0x40
mov rcx, rsi
movzx r9d, word [rsp + 0xb0]
mov dword [rsp + 0x40], eax
movzx eax, word [rsp + 0xba]
mov dword [rsp + 0x38], eax
movzx eax, word [rsp + 0xb8]
mov dword [rsp + 0x30], eax
movzx eax, word [rsp + 0xb6]
mov dword [rsp + 0x28], eax
movzx eax, word [rsp + 0xb2]
mov dword [rsp + 0x20], eax
call fcn.140021040
mov rdx, rsi
mov rcx, rbx
call sub.msvcrt.dll_strcat
mov rdx, r13
mov rcx, rbx
call sub.msvcrt.dll_strcat
lea rdx, str._ModifiedDate_:__
mov rcx, rbx
call sub.msvcrt.dll_strcat
mov rdx, qword [rsp + 0x58]
lea rcx, [rsp + 0x164]
call r15
movzx eax, word [rsp + 0xbc]
lea r8, str._04d__02d__02d__02d:_02d:_02d
mov edx, 0x40
mov rcx, rdi
movzx r9d, word [rsp + 0xb0]
mov dword [rsp + 0x40], eax
movzx eax, word [rsp + 0xba]
mov dword [rsp + 0x38], eax
movzx eax, word [rsp + 0xb8]
mov dword [rsp + 0x30], eax
movzx eax, word [rsp + 0xb6]
mov dword [rsp + 0x28], eax
movzx eax, word [rsp + 0xb2]
mov dword [rsp + 0x20], eax
call fcn.140021040
mov rdx, rdi
mov rcx, rbx
call sub.msvcrt.dll_strcat
lea rdx, [0x1400d4495]
mov rcx, rbx
call sub.msvcrt.dll_strcat
mov rdx, r14
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
je 0x140002e8a
mov rcx, qword [rsp + 0x68]
call fcn.1400a8d40
lea rdx, [0x1400d4082]
mov rcx, rbx
call sub.msvcrt.dll_strcat
jmp 0x140002c1d
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x12
jne 0x140002e6c
mov rcx, qword [rsp + 0x68]
call fcn.1400a8d40
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_FindClose]
jmp 0x140002f07
add rsp, 0x298
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret