Function at 0x140093020
Capabilities:
Enumerate files on windows

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x310]
sub rsp, 0x410
mov rax, qword [0x140400788]
xor rax, rsp
mov qword [rbp + 0x300], rax
mov rax, rdx
mov qword [rsp + 0x38], rdx
mov r12, rcx
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x40], rcx
mov dword [rsp + 0x20], 1
xor ebx, ebx
mov qword [rcx], rbx
mov qword [rcx + 8], rbx
mov qword [rcx + 0x10], rbx
mov dword [rsp + 0x20], 1
lea rdx, [rbp + 0x10]
mov rcx, rax
call fcn.140092990
nop
lea r8d, [rbx + 2]
lea rdx, [0x1402a53bc]
mov rcx, rax
call fcn.1400826d0
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x78], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x78], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 7
mov word [rax], bx
mov r15d, 0x21
mov dword [rsp + 0x20], r15d
lea rcx, [rsp + 0x68]
cmp qword [rbp - 0x80], 8
cmovae rcx, qword [rsp + 0x68]
lea rdx, [rbp + 0xb0]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r13, rax
mov qword [rsp + 0x30], rax
mov rdx, qword [rbp - 0x80]
cmp rdx, 8
jb 0x140093144
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009313f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14009377f
call fcn.140249860
movdqa xmm0, xmmword [0x1402a4df0]
movdqu xmmword [rsp + 0x78], xmm0
mov word [rsp + 0x68], bx
mov rdx, qword [rbp + 0x28]
cmp rdx, 8
jb 0x140093197
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140093192
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140093785
call fcn.140249860
movdqa xmm0, xmmword [0x1402a4df0]
movdqu xmmword [rbp + 0x20], xmm0
mov word [rbp + 0x10], bx
cmp r13, 0xffffffffffffffff
je 0x14009374c
lea rdx, [rbp + 0xdc]
lea rcx, [rsp + 0x48]
call fcn.140089560
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
mov qword [rbp - 0x48], rbx
mov qword [rbp - 0x40], rbx
lea rax, [0x1402a53a8]
mov r8, rbx
nop dword [rax]
inc r8
lea rax, [rax + 4]
cmp dword [rax], 0
jne 0x1400931e0
lea rdx, [0x1402a53a8]
lea rcx, [rbp - 0x58]
call fcn.1400880b0
nop
or r15d, 2
mov dword [rsp + 0x20], r15d
lea rcx, [rbp - 0x58]
mov rsi, qword [rbp - 0x40]
cmp rsi, 4
setae r14b
mov rdi, qword [rbp - 0x58]
cmovae rcx, rdi
lea r8, [rsp + 0x48]
cmp qword [rsp + 0x60], 4
cmovae r8, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x58]
cmp rdx, qword [rbp - 0x48]
jne 0x14009325f
test rdx, rdx
je 0x140093254
sub r8, rcx
mov eax, dword [rcx]
cmp dword [r8 + rcx], eax
jne 0x14009325f
add rcx, 4
sub rdx, 1
jne 0x140093242
mov r9, qword [rbp - 0x60]
mov bl, 1
jmp 0x1400932f8
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
mov qword [rbp - 0x68], rbx
mov qword [rbp - 0x60], rbx
lea rax, [0x1402a53b0]
mov r8, rbx
nop dword [rax + rax]
inc r8
lea rax, [rax + 4]
cmp dword [rax], 0
jne 0x140093280
lea rdx, [0x1402a53b0]
lea rcx, [rbp - 0x78]
call fcn.1400880b0
or r15d, 4
mov dword [rsp + 0x20], r15d
lea rcx, [rbp - 0x78]
mov r9, qword [rbp - 0x60]
cmp r9, 4
cmovae rcx, qword [rbp - 0x78]
lea r8, [rsp + 0x48]
cmp qword [rsp + 0x60], 4
cmovae r8, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x58]
cmp rdx, qword [rbp - 0x68]
jne 0x1400932f6
test rdx, rdx
je 0x1400932f2
sub r8, rcx
nop word [rax + rax]
mov eax, dword [rcx]
cmp dword [r8 + rcx], eax
jne 0x1400932f6
add rcx, 4
sub rdx, 1
jne 0x1400932e0
mov bl, 1
jmp 0x1400932f8
xor bl, bl
test r15b, 4
je 0x140093344
and r15d, 0xfffffffb
mov dword [rsp + 0x20], r15d
cmp r9, 4
jb 0x140093344
lea rdx, [r9*4 + 4]
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009333e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14009378b
call fcn.140249860
nop
test r15b, 2
je 0x14009338d
and r15d, 0xfffffffd
mov dword [rsp + 0x20], r15d
test r14b, r14b
je 0x14009338d
lea rdx, [rsi*4 + 4]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140093385
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140093791
mov rcx, rdi
call fcn.140249860
test bl, bl
jne 0x14009371d
mov rdx, qword [r12 + 8]
cmp rdx, qword [r12 + 0x10]
je 0x1400933fa
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rdx], xmm0
movups xmmword [rdx + 0x10], xmm0
movups xmmword [rdx + 0x20], xmm0
movups xmmword [rdx + 0x30], xmm0
movups xmmword [rdx + 0x40], xmm0
movups xmmword [rdx + 0x50], xmm0
movups xmmword [rdx + 0x60], xmm0
mov qword [rdx + 0x18], 3
mov qword [rdx + 0x28], rax
mov qword [rdx + 0x30], rax
movups xmmword [rdx + 0x38], xmm0
mov qword [rdx + 0x48], rax
mov qword [rdx + 0x50], 3
mov dword [rdx + 0x38], eax
mov byte [rdx + 0x58], al
mov byte [rdx + 0x60], al
mov qword [rdx + 0x68], rax
mov qword [rdx + 0x70], rax
add qword [r12 + 8], 0x78
jmp 0x140093402
mov rcx, r12
call fcn.140091430
mov rdi, qword [r12 + 8]
sub rdi, 0x78
lea rax, [rsp + 0x48]
cmp rdi, rax
je 0x14009352d
lea r13, [rsp + 0x48]
cmp qword [rsp + 0x60], 4
cmovae r13, qword [rsp + 0x48]
mov r14, qword [rsp + 0x58]
mov rsi, qword [rdi + 0x18]
cmp r14, rsi
ja 0x14009346b
mov r12, rdi
cmp rsi, 4
jb 0x140093444
mov r12, qword [rdi]
mov qword [rdi + 0x10], r14
lea rbx, [r14*4]
mov r8, rbx
mov rdx, r13
mov rcx, r12
call fcn.14024aa30
mov dword [r12 + rbx], 0
jmp 0x140093523
movabs rdx, 0x3ffffffffffffffe
cmp r14, rdx
ja 0x140093797
mov rbx, r14
or rbx, 3
cmp rbx, rdx
jbe 0x14009348f
mov rbx, rdx
jmp 0x1400934b0
mov rcx, rsi
shr rcx, 1
mov rax, rdx
sub rax, rcx
cmp rsi, rax
jbe 0x1400934a5
mov rbx, rdx
jmp 0x1400934b0
lea rax, [rsi + rcx]
cmp rbx, rax
cmovb rbx, rax
lea rdx, [rbx + 1]
mov rcx, rdi
call fcn.140022dc4
mov r12, rax
mov qword [rdi + 0x10], r14
mov qword [rdi + 0x18], rbx
lea rbx, [r14*4]
mov r8, rbx
mov rdx, r13
mov rcx, rax
call fcn.14024aa30
mov dword [r12 + rbx], 0
cmp rsi, 4
jb 0x140093520
mov rcx, qword [rdi]
lea rdx, [rsi*4 + 4]
cmp rdx, 0x1000
jb 0x14009351b
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140093791
mov rcx, r8
call fcn.140249860
mov qword [rdi], r12
mov r12, qword [rsp + 0x28]
mov r13, qword [rsp + 0x30]
lea rdx, [rsp + 0x48]
lea rcx, [rbp + 0x70]
call fcn.140091e10
mov rsi, rax
mov rdx, qword [rsp + 0x38]
lea rcx, [rbp + 0x30]
call fcn.140091d20
mov rbx, rax
cmp byte [rsi + 0x38], 0
jne 0x140093592
mov rcx, qword [rax + 8]
mov rdx, rcx
cmp qword [rax], rcx
je 0x14009357a
cmp qword [rcx - 0x10], 0
jne 0x14009357a
add rcx, 0xffffffffffffffe0
call fcn.140011870
add qword [rbx + 8], 0xffffffffffffffe0
mov rdx, qword [rbx + 8]
mov r8, qword [rsi]
mov r9, qword [rsi + 8]
sub r9, r8
sar r9, 5
mov rcx, rbx
call fcn.1400916f0
jmp 0x1400935c1
cmp rbx, rsi
je 0x1400935ad
mov rdx, qword [rsi]
mov r8, qword [rsi + 8]
sub r8, rdx
sar r8, 5
mov rcx, rbx
call fcn.140091050
lea rdx, [rsi + 0x18]
lea rcx, [rbx + 0x18]
call fcn.1400132bc
movzx eax, byte [rsi + 0x38]
mov byte [rbx + 0x38], al
mov rdx, rbx
lea rcx, [rbp - 0x30]
call fcn.140091d20
or r15d, 0x10
lea rcx, [rbp + 0x48]
call fcn.140011870
lea rcx, [rbp + 0x30]
call fcn.140022c08
or r15d, 8
mov dword [rsp + 0x20], r15d
lea rcx, [rbp + 0x88]
call fcn.140011870
lea rcx, [rbp + 0x70]
call fcn.140022c08
lea rsi, [rdi + 0x20]
lea rax, [rbp - 0x30]
cmp rsi, rax
je 0x140093693
mov rbx, qword [rsi]
test rbx, rbx
je 0x14009366c
mov r14, qword [rsi + 8]
cmp rbx, r14
je 0x140093634
mov rcx, rbx
call fcn.140011870
add rbx, 0x20
cmp rbx, r14
jne 0x140093623
mov rcx, qword [rsi]
mov rdx, qword [rsi + 0x10]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
cmp rdx, 0x1000
jb 0x140093667
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140093779
mov rcx, r8
call fcn.140249860
mov rax, qword [rbp - 0x30]
mov qword [rsi], rax
mov rax, qword [rbp - 0x28]
mov qword [rsi + 8], rax
mov rax, qword [rbp - 0x20]
mov qword [rsi + 0x10], rax
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], 0
lea rcx, [rsi + 0x18]
lea rdx, [rbp - 0x18]
call fcn.1400132a4
movzx eax, byte [rbp + 8]
mov byte [rsi + 0x38], al
lea rcx, [rbp - 0x18]
call fcn.140011870
lea rcx, [rbp - 0x30]
call fcn.140022c08
mov r8d, dword [rbp + 0xb0]
shr r8d, 4
and r8b, 1
mov byte [rdi + 0x60], r8b
mov ecx, dword [rbp + 0xc8]
shl rcx, 0x20
mov eax, dword [rbp + 0xc4]
or rcx, rax
movabs rax, 0xd6bf94d5e57a42bd
mul rcx
shr rdx, 0x17
movabs rax, 0x2b6109100
sub rdx, rax
mov qword [rdi + 0x70], rdx
test r8b, r8b
jne 0x14009371d
mov ecx, dword [rbp + 0xcc]
shl rcx, 0x20
mov eax, dword [rbp + 0xd0]
add rcx, rax
mov qword [rdi + 0x68], rcx
lea rcx, [rsp + 0x48]
call fcn.140011870
lea rdx, [rbp + 0xb0]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x140093742
xor ebx, ebx
jmp 0x1400931b2
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
mov rax, r12
mov rcx, qword [rbp + 0x300]
xor rcx, rsp
call fcn.1402499e0
mov rbx, qword [rsp + 0x460]
add rsp, 0x410
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140250d14
nop
call fcn.140250d14
nop
call fcn.140250d14
nop
call fcn.140250d14
nop
call fcn.140250d14
int3
call fcn.140022d44
int3