Function at 0x1401092a4
Capabilities:
Enumerate files on windows

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1e0]
sub rsp, 0x2e0
mov rax, qword [0x140238598]
xor rax, rsp
mov qword [rbp + 0x1d0], rax
xor r14d, r14d
xor al, al
or rdi, 0xffffffffffffffff
mov dword [rsp + 0x38], r14d
mov r15, r8
mov r13, rdx
mov rsi, rcx
lea r12d, [r14 + 1]
cmp qword [rcx + 0x10], rdi
jne 0x1401094d7
cmp byte [rcx + 0x20], r14b
jne 0x1401094d7
lea rcx, [rsp + 0x50]
mov byte [rsp + 0x30], r12b
call fcn.14012e1d4
mov rcx, rax
mov eax, dword [0x1402368f0]
cmp dword [rcx], eax
jne 0x14010932f
lea rdx, [0x1402368f0]
call fcn.14012e198
test eax, eax
jns 0x140109332
xor r12d, r12d
xor edi, edi
lea ebx, [r12 + r12]
cmp byte [rsi + 0x28], dil
mov rcx, rsi
setne dil
call fcn.14014385c
mov rcx, rax
mov dword [rsp + 0x28], ebx
and qword [rsp + 0x20], r14
lea r8, [rbp - 0x80]
mov r9d, edi
mov edx, r12d
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
or rdi, 0xffffffffffffffff
mov qword [rsi + 0x10], rax
cmp rax, rdi
jne 0x140109693
lea rbx, str._UNC_
mov rcx, rbx
call fcn.14016a910
mov dword [rsp + 0x50], eax
lea r12d, [rdi + 2]
mov qword [rsp + 0x58], rbx
lea rdx, [rsp + 0x50]
movaps xmm0, xmmword [rsp + 0x50]
mov r8d, r12d
mov rcx, rsi
movdqa xmmword [rsp + 0x50], xmm0
call fcn.140141fa0
test al, al
je 0x1401094d4
lea r8d, [rdi + 0x5d]
mov dword [rsp + 0x20], r12d
mov r9d, r12d
lea rdx, [rsp + 0x38]
mov rcx, rsi
call fcn.140141d3c
mov rdx, qword [rsp + 0x38]
cmp dword [rdx + 4], 4
jne 0x14010943a
lea rbx, [0x140193c98]
mov rcx, rbx
call fcn.14016a910
mov dword [rsp + 0x50], eax
lea edx, [rdi + 3]
mov qword [rsp + 0x58], rbx
lea rcx, [rsp + 0x38]
movaps xmm0, xmmword [rsp + 0x50]
lea rbx, [rsi + 0x18]
movdqa xmmword [rsp + 0x50], xmm0
mov r14d, r12d
call fcn.140006860
mov r8, rax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x40]
call fcn.14003816c
mov rcx, rax
mov rdx, rbx
call fcn.140108ca0
mov rdx, qword [rsp + 0x38]
test al, al
je 0x14010943a
mov bl, r12b
jmp 0x14010943c
xor bl, bl
test r12b, r14b
je 0x140109473
mov rcx, qword [rsp + 0x40]
and r14d, 0xfffffffe
mov eax, dword [rcx]
test eax, eax
je 0x140109460
cmp eax, edi
je 0x140109473
sub eax, r12d
mov dword [rcx], eax
jne 0x14010946e
mov rcx, qword [rsp + 0x40]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14010b388
mov rdx, qword [rsp + 0x38]
test bl, bl
je 0x1401094b4
mov rcx, qword [rsi + 0x18]
mov eax, dword [rcx + 8]
cmp dword [rcx + 0xc], eax
jne 0x1401094b0
mov eax, dword [rdx]
test eax, eax
je 0x1401094a1
cmp eax, edi
je 0x1401096b4
sub eax, r12d
mov dword [rdx], eax
jne 0x1401096b4
mov rdx, qword [rsp + 0x38]
lea rcx, [rsp + 0x38]
call fcn.140008134
jmp 0x1401096b4
mov byte [rsi + 0x20], r12b
mov eax, dword [rdx]
test eax, eax
je 0x1401094ca
cmp eax, edi
je 0x1401094d4
sub eax, r12d
mov dword [rdx], eax
jne 0x1401094d4
mov rdx, qword [rsp + 0x38]
lea rcx, [rsp + 0x38]
call fcn.140008134
mov al, r12b
mov rcx, qword [rsi + 0x10]
cmp rcx, rdi
jne 0x1401094ea
cmp byte [rsi + 0x20], 0
je 0x1401096b4
test al, al
jne 0x14010950e
cmp byte [rsi + 0x20], al
je 0x1401096a2
add dword [rsi + 0x24], r12d
mov rax, qword [rsi + 0x18]
mov ecx, dword [rax + 0xc]
sub ecx, dword [rax + 8]
cmp dword [rsi + 0x24], ecx
jge 0x1401096b4
cmp byte [rsi + 0x20], 0
je 0x1401096bb
movsxd rbx, dword [rsi + 0x24]
test ebx, ebx
js 0x14010952e
mov rax, qword [rsi + 0x18]
mov ecx, dword [rax + 0xc]
sub ecx, dword [rax + 8]
cmp ebx, ecx
jl 0x14010954e
mov r9d, 0x21d
lea r8, str.c:qt64qt_1544645195969workqtbaseincludeqtcore.._.._src_corelib_tools_qlist.h
lea rdx, str.index_out_of_range
lea rcx, str.QList_T_::at
call fcn.1401225ac
mov rdx, qword [rsi + 0x18]
movsxd rcx, dword [rdx + 8]
add rcx, rbx
lea rbx, [rdx + rcx*8]
lea rcx, [rsi + 8]
mov rax, qword [rcx]
lea rdx, [rsp + 0x38]
mov qword [rsp + 0x38], rax
cmp rcx, rdx
jne 0x140109591
mov r8d, 0x38b
lea rdx, str.c:qt64qt_1544645195969workqtbaseincludeqtcore.._.._src_corelib_tools_qstring.h
lea rcx, str.other___this
call fcn.140122564
mov rax, qword [rsp + 0x38]
mov r8d, dword [rax]
lea ecx, [r8 + 1]
cmp ecx, r12d
jbe 0x1401095a3
lea ecx, [r8 + 1]
mov dword [rax], ecx
lea rdx, [rbx + 0x10]
lea rcx, [rsp + 0x38]
call fcn.140139ed4
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x50]
call fcn.14010444c
mov rcx, qword [r13]
mov rdx, rax
mov rax, qword [rax]
mov qword [r13], rax
mov qword [rdx], rcx
mov rax, qword [rdx + 8]
mov rcx, qword [r13 + 8]
mov qword [r13 + 8], rax
mov qword [rdx + 8], rcx
movzx eax, word [rdx + 0x10]
mov rcx, qword [rsp + 0x58]
mov word [r13 + 0x10], ax
movzx eax, word [rdx + 0x12]
mov word [r13 + 0x12], ax
movzx eax, word [rdx + 0x14]
mov word [r13 + 0x14], ax
mov eax, dword [rcx]
test eax, eax
je 0x140109617
cmp eax, edi
je 0x140109625
sub eax, 1
mov dword [rcx], eax
jne 0x140109625
mov rcx, qword [rsp + 0x58]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14010b388
mov rcx, qword [rsp + 0x50]
mov eax, dword [rcx]
test eax, eax
je 0x140109640
cmp eax, edi
je 0x14010964e
sub eax, 1
mov dword [rcx], eax
jne 0x14010964e
mov rcx, qword [rsp + 0x50]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14010b388
mov rcx, qword [rsp + 0x38]
mov eax, dword [rcx]
test eax, eax
je 0x140109669
cmp eax, edi
je 0x140109677
sub eax, 1
mov dword [rcx], eax
jne 0x140109677
mov rcx, qword [rsp + 0x38]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14010b388
mov dword [r15 + 0x10], 0x10
or dword [r15 + 4], 0x440000
or dword [r15], 0x560000
jmp 0x1401098ef
mov al, byte [rsp + 0x30]
mov r12d, 1
jmp 0x1401094d7
lea rdx, [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x14010950e
xor al, al
jmp 0x1401098f2
mov r8d, edi
lea rdx, [rbp - 0x54]
lea rcx, [rsp + 0x38]
or r14d, 2
call fcn.14013c1dc
mov rcx, qword [rax]
mov qword [rsp + 0x40], rcx
lea rcx, [0x1401a5d88]
mov qword [rax], rcx
test r14b, 4
je 0x140109711
mov rcx, qword [rsp + 0x50]
mov eax, dword [rcx]
test eax, eax
je 0x140109703
cmp eax, edi
je 0x140109711
sub eax, 1
mov dword [rcx], eax
jne 0x140109711
mov rcx, qword [rsp + 0x50]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14010b388
mov rcx, qword [rsp + 0x38]
mov eax, dword [rcx]
test eax, eax
je 0x14010972c
cmp eax, edi
je 0x14010973a
sub eax, 1
mov dword [rcx], eax
jne 0x14010973a
mov rcx, qword [rsp + 0x38]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14010b388
lea rcx, [rsi + 8]
mov rax, qword [rcx]
lea rdx, [rsp + 0x38]
mov qword [rsp + 0x38], rax
cmp rcx, rdx
jne 0x14010976e
mov r8d, 0x38b
lea rdx, str.c:qt64qt_1544645195969workqtbaseincludeqtcore.._.._src_corelib_tools_qstring.h
lea rcx, str.other___this
call fcn.140122564
mov rax, qword [rsp + 0x38]
mov edx, dword [rax]
lea ecx, [rdx + 1]
cmp ecx, r12d
jbe 0x14010977d
lea ecx, [rdx + 1]
mov dword [rax], ecx
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x38]
call fcn.140139ed4
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x50]
call fcn.14010444c
mov rdx, qword [r13]
mov rcx, qword [rax]
mov qword [r13], rcx
mov qword [rax], rdx
mov rcx, qword [rax + 8]
mov rdx, qword [r13 + 8]
mov qword [r13 + 8], rcx
mov qword [rax + 8], rdx
movzx ecx, word [rax + 0x10]
mov word [r13 + 0x10], cx
movzx ecx, word [rax + 0x12]
mov word [r13 + 0x12], cx
movzx eax, word [rax + 0x14]
mov rcx, qword [rsp + 0x58]
mov word [r13 + 0x14], ax
mov eax, dword [rcx]
test eax, eax
je 0x1401097ef
cmp eax, edi
je 0x1401097fd
sub eax, 1
mov dword [rcx], eax
jne 0x1401097fd
mov rcx, qword [rsp + 0x58]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14010b388
mov rcx, qword [rsp + 0x50]
mov eax, dword [rcx]
test eax, eax
je 0x140109818
cmp eax, edi
je 0x140109826
sub eax, 1
mov dword [rcx], eax
jne 0x140109826
mov rcx, qword [rsp + 0x50]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14010b388
mov rcx, qword [rsp + 0x38]
mov eax, dword [rcx]
test eax, eax
je 0x140109841
cmp eax, edi
je 0x14010984f
sub eax, 1
mov dword [rcx], eax
jne 0x14010984f
mov rcx, qword [rsp + 0x38]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14010b388
movups xmm1, xmmword [rsp + 0x60]
and dword [rsp + 0x50], 0
lea rbx, str..lnk
and dword [rsp + 0x54], 0
mov rcx, rbx
mov qword [rsp + 0x58], rdi
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [r15], xmm0
movups xmm0, xmmword [rsp + 0x70]
movups xmmword [r15 + 0x10], xmm1
movups xmmword [r15 + 0x20], xmm0
call fcn.14016a910
mov dword [rsp + 0x50], eax
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x58], rbx
lea rcx, [rsp + 0x40]
movaps xmm0, xmmword [rsp + 0x50]
mov r8d, r12d
movdqa xmmword [rsp + 0x50], xmm0
call fcn.14013b508
test al, al
jne 0x1401098c6
xor r9d, r9d
lea rdx, [rbp - 0x80]
mov r8b, r12b
mov rcx, r15
call fcn.1401067dc
mov rcx, qword [rsp + 0x40]
mov eax, dword [rcx]
test eax, eax
je 0x1401098e1
cmp eax, edi
je 0x1401098ef
sub eax, 1
mov dword [rcx], eax
jne 0x1401098ef
mov rcx, qword [rsp + 0x40]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14010b388
mov al, r12b
mov rcx, qword [rbp + 0x1d0]
xor rcx, rsp
call fcn.1401666e0
mov rbx, qword [rsp + 0x338]
add rsp, 0x2e0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret