Function at 0x1400894bd
Capabilities:
Authenticate hmac
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively
Hash data using murmur3

Disassembly:
push rax
pushf
mov eax, 0xf78c33e0
pushf
not eax
add eax, 0xce262da
xor eax, 0x46bdf0ba
rol eax, 0x63
popf
pushf
not eax
add eax, 0x692fa7a0
xor eax, 0x104349a0
rol eax, 0x4d
popf
pushf
not eax
add eax, 0x6b60ee40
xor eax, 0x54b0da78
rol eax, 0xa2
popf
pushf
not eax
add eax, 0x3c899d0d
xor eax, 0x3ed5f736
rol eax, 0xa8
popf
cmp eax, 2
jne 0x140089520
popf
pop rax
jmp 0x14008983d
cmp eax, 0xf
jne 0x14008952f
popf
pop rax
jmp 0x140089ec3
cmp eax, 3
jne 0x14008953e
popf
pop rax
jmp 0x140089885
cmp eax, 0xd
jne 0x14008954d
popf
pop rax
jmp 0x140089e03
cmp eax, 1
jne 0x14008955c
popf
pop rax
jmp 0x140089772
cmp eax, 8
jne 0x14008956b
popf
pop rax
jmp 0x140089b42
cmp eax, 6
jne 0x14008957a
popf
pop rax
jmp 0x140089a30
cmp eax, 0x10
jne 0x140089589
popf
pop rax
jmp 0x140089f66
cmp eax, 0xe
jne 0x140089598
popf
pop rax
jmp 0x140089e6e
cmp eax, 4
jne 0x1400895a7
popf
pop rax
jmp 0x14008990e
cmp eax, 0
jne 0x1400895b6
popf
pop rax
jmp 0x14008962e
cmp eax, 0x11
jne 0x1400895c5
popf
pop rax
jmp 0x140089fb9
cmp eax, 0xc
jne 0x1400895d4
popf
pop rax
jmp 0x140089dbc
cmp eax, 0xb
jne 0x1400895e3
popf
pop rax
jmp 0x140089d26
cmp eax, 9
jne 0x1400895f2
popf
pop rax
jmp 0x140089c13
cmp eax, 7
jne 0x140089601
popf
pop rax
jmp 0x140089aae
cmp eax, 0x12
jne 0x140089610
popf
pop rax
jmp 0x14008a050
cmp eax, 0xa
jne 0x14008961f
popf
pop rax
jmp 0x140089c81
cmp eax, 5
jne 0x14008962e
popf
pop rax
jmp 0x14008999f
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
mov eax, 0x321a68a4
pushf
not eax
add eax, 0x37389f9d
xor eax, 0x6df49763
rol eax, 0x56
popf
pushf
not eax
add eax, 0x7fdfaa23
xor eax, 0x19054dfa
rol eax, 0xc0
popf
call fcn.14009b7ed
sub rsp, rax
mov rax, qword [0x14003e040]
xor rax, rsp
mov qword [rsp + 0x2270], rax
mov rbp, rcx
lea r8, [0x1abc17e22]
pushf
sub r8, 0x6bbea4c2
popf
mov r9, rcx
mov ebx, 0x8b901a11
pushf
not ebx
add ebx, 0x568bfa50
xor ebx, 0x1d5dca86
rol ebx, 0x81
popf
pushf
not ebx
add ebx, 0x6ef72311
xor ebx, 0x743eb49a
rol ebx, 0x82
popf
pushf
not ebx
add ebx, 0x456c37d3
xor ebx, 0x171a53b3
rol ebx, 0xa9
popf
mov edx, ebx
lea rcx, [rsp + 0x270]
call fcn.14006f552
mov edi, eax
cmp eax, ebx
jge 0x14008973e
push rax
pushf
mov eax, 0x61e48256
pushf
not eax
add eax, 0x4b3c857a
xor eax, 0xea88164
rol eax, 0xee
popf
pushf
not eax
add eax, 0x674eda0b
xor eax, 0x37063016
rol eax, 0xb2
popf
pushf
not eax
add eax, 0x6544dc12
xor eax, 0x24e39526
rol eax, 0xf1
popf
jmp 0x140089511
push rax
pushf
mov eax, 0x3fcfb9e5
pushf
not eax
add eax, 0x701bf00f
xor eax, 0x1acfbf66
rol eax, 0x5e
popf
pushf
not eax
add eax, 0x6351e8c
xor eax, 0x3b9cbc38
rol eax, 0xb1
popf
jmp 0x140089511
dec edi
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x270]
push rdi
not edi
add ebx, edi
pop rdi
add ebx, 1
jmp 0x14008978b
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rsi, rax
cmp rax, 0xffffffffffffffff
je 0x1400897f7
push rax
pushf
mov eax, 0x7f6b8a76
pushf
not eax
add eax, 0x4f3aee3b
xor eax, 0x6107d744
rol eax, 0xb0
popf
pushf
not eax
add eax, 0x4b918844
xor eax, 0x607f9618
rol eax, 0xd8
popf
pushf
not eax
add eax, 0x1d9980cb
xor eax, 0x32dd8155
rol eax, 0x7d
popf
pushf
not eax
add eax, 0x3ba87e9
xor eax, 0x324a9563
rol eax, 0x7a
popf
jmp 0x140089511
push rax
pushf
mov eax, 0x594f7066
pushf
not eax
add eax, 0x3749f2a3
xor eax, 0x58d134ab
rol eax, 0x89
popf
pushf
not eax
add eax, 0x4fe0de3c
xor eax, 0x468ad5ef
rol eax, 0x49
popf
pushf
not eax
add eax, 0xeef7ce5
xor eax, 0x1bfb9f67
rol eax, 0x93
popf
jmp 0x140089511
nop
push rax
pushf
mov eax, 0xcb1ee46e
pushf
not eax
add eax, 0x6f2b9e
xor eax, 0x7f82b631
rol eax, 0xd8
popf
pushf
not eax
add eax, 0xf3d5bb
xor eax, 0xf40e0cc
rol eax, 0x39
popf
pushf
not eax
add eax, 0x1b2156be
xor eax, 0xf4582e1
rol eax, 0x1d
popf
jmp 0x140089511
movzx edx, word [rsp + 0x4c]
movzx ecx, word [rsp + 0x4e]
cmp dx, 0x2e
jne 0x1400898db
push rax
pushf
mov eax, 0x44554d7d
pushf
not eax
add eax, 0x1c33a344
xor eax, 0xefdfdae
rol eax, 0x3c
popf
pushf
not eax
add eax, 0x5f8d5f45
xor eax, 0xcc22529
rol eax, 0xa4
popf
pushf
not eax
add eax, 0x464d0a17
xor eax, 0x72bcf0b9
rol eax, 0xbd
popf
jmp 0x140089511
push rax
pushf
mov eax, 0xe31f3ada
pushf
not eax
add eax, 0x657b6168
xor eax, 0x857c307
rol eax, 0x1f
popf
pushf
not eax
add eax, 0x5f2a9ef8
xor eax, 0x1824ac32
rol eax, 0x8a
popf
jmp 0x140089511
test cx, cx
je 0x140089959
push rax
pushf
mov eax, 0x2ac814c
pushf
not eax
add eax, 0x4c23e505
xor eax, 0x3f62ea45
rol eax, 0xa4
popf
pushf
not eax
add eax, 0x125e1172
xor eax, 0x52496c8c
rol eax, 0x11
popf
pushf
not eax
add eax, 0x71f59f39
xor eax, 0x37c778a0
rol eax, 0x73
popf
jmp 0x140089511
push rax
pushf
mov eax, 0x1e58f885
pushf
not eax
add eax, 0x24fee1b5
xor eax, 0x2db30ebd
rol eax, 0xb4
popf
pushf
not eax
add eax, 0x626569d4
xor eax, 0x17e3847d
rol eax, 0xed
popf
pushf
not eax
add eax, 0x76de2cbd
xor eax, 0x4f670ce8
rol eax, 0xee
popf
jmp 0x140089511
cmp dx, dx
jne 0x1400899d7
push rax
pushf
mov eax, 0x4d81f9df
pushf
not eax
add eax, 0x76ed61c7
xor eax, 0x4c7b3217
rol eax, 0x5c
popf
pushf
not eax
add eax, 0x146c1a3d
xor eax, 0xe2b14dd
rol eax, 0x8d
popf
jmp 0x140089511
push rax
pushf
mov eax, 0x7c774242
pushf
not eax
add eax, 0xb2eab2c
xor eax, 0x2cde3ee
rol eax, 0xfa
popf
pushf
not eax
add eax, 0x30412ca1
xor eax, 0x273ca144
rol eax, 0x6a
popf
pushf
not eax
add eax, 0x4821ff7c
xor eax, 0x7ded0aa
rol eax, 0x58
popf
pushf
not eax
add eax, 0x6bccacc1
xor eax, 0x5e4d68d2
rol eax, 0x58
popf
jmp 0x140089511
cmp cx, dx
jne 0x140089a7b
push rax
pushf
mov eax, 0x1d839225
pushf
not eax
add eax, 0x4dd2ed18
xor eax, 0x3922e091
rol eax, 0x6e
popf
pushf
not eax
add eax, 0x55d558a3
xor eax, 0x84fedae
rol eax, 0x60
popf
pushf
not eax
add eax, 0x1ff3a982
xor eax, 0x30803198
rol eax, 0x36
popf
jmp 0x140089511
push rax
pushf
mov eax, 0x5758d9a6
pushf
not eax
add eax, 0x2bef774c
xor eax, 0x367e9566
rol eax, 0xff
popf
pushf
not eax
add eax, 0x50fc9933
xor eax, 0x5f8894d5
rol eax, 0x41
popf
jmp 0x140089511
cmp word [rsp + 0x50], 0
je 0x140089b0f
push rax
pushf
mov eax, 0x124d205
pushf
not eax
add eax, 0x3a4fbc40
xor eax, 0x3c9b8a41
rol eax, 0x43
popf
pushf
not eax
add eax, 0x7a774fcd
xor eax, 0x78b6aec4
rol eax, 0xa7
popf
pushf
not eax
add eax, 0x14e9e1c7
xor eax, 0x6d451a26
rol eax, 0x96
popf
pushf
not eax
add eax, 0x9407daa
xor eax, 0x269df111
rol eax, 0x61
popf
jmp 0x140089511
push rax
pushf
mov eax, 0xaaa11aa4
pushf
not eax
add eax, 0x1c5e7360
xor eax, 0x7fafc2cf
rol eax, 0xa0
popf
pushf
not eax
add eax, 0x23b629da
xor eax, 0x15bd8f65
rol eax, 0xf
popf
jmp 0x140089511
movsxd rax, edi
lea rcx, [rsp + 0x270]
movsxd rdx, ebx
lea r9, [rsp + 0x4c]
lea r8, [0x19479f4c3]
pushf
sub r8, 0x54771b57
popf
lea rcx, [rcx + rax*2]
call fcn.14006f552
cmp eax, ebx
jge 0x140089bcd
push rax
pushf
mov eax, 0x825d6419
pushf
not eax
add eax, 0xdd03d6d
xor eax, 0x71f97e76
rol eax, 4
popf
pushf
not eax
add eax, 0x7faf7274
xor eax, 0x556f5d48
rol eax, 0xd
popf
pushf
not eax
add eax, 0x60de62be
xor eax, 0x1c22288e
rol eax, 0xc1
popf
pushf
not eax
add eax, 0x6adefe80
xor eax, 0x58bd01f7
rol eax, 0xd8
popf
jmp 0x140089511
push rax
pushf
mov eax, 0x1c2ac071
pushf
not eax
add eax, 0x551020d3
xor eax, 0x780751cf
rol eax, 0x19
popf
pushf
not eax
add eax, 0x7c522622
xor eax, 0x68b23a06
rol eax, 0x85
popf
pushf
not eax
add eax, 0x1aa3d253
xor eax, 0x56585b44
rol eax, 0x65
popf
jmp 0x140089511
mov eax, dword [rsp + 0x20]
test al, 0x10
je 0x140089c4e
push rax
pushf
mov eax, 0x87a16406
pushf
not eax
add eax, 0x40eb7708
xor eax, 0x10b32fe9
rol eax, 0x8d
popf
pushf
not eax
add eax, 0x7f8dd337
xor eax, 0x57f5bdf7
rol eax, 0x51
popf
jmp 0x140089511
push rax
pushf
mov eax, 0xb698b955
pushf
not eax
add eax, 0x1cbe5adb
xor eax, 0x677947f2
rol eax, 0xbb
popf
pushf
not eax
add eax, 0x18f93004
xor eax, 0x6eee48d0
rol eax, 0xc8
popf
jmp 0x140089511
bt eax, 0xa
jae 0x140089ccd
push rax
pushf
mov eax, 0x5fbc78b1
pushf
not eax
add eax, 0x35759b06
xor eax, 0x7b8b434
rol eax, 0xa2
popf
pushf
not eax
add eax, 0x4e6bb5ac
xor eax, 0x737df0c1
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xce68463
xor eax, 0x7594d594
rol eax, 0x96
popf
jmp 0x140089511
push rax
pushf
mov eax, 0x7997fe66
pushf
not eax
add eax, 0x704174c7
xor eax, 0x25d9e0bb
rol eax, 0x15
popf
pushf
not eax
add eax, 0x4180d0b6
xor eax, 0x6e58d6f8
rol eax, 0x9d
popf
pushf
not eax
add eax, 0x2dd8c486
xor eax, 0x4d40a413
rol eax, 0xa3
popf
pushf
not eax
add eax, 0x5c5cf892
xor eax, 0x4ffaa971
rol eax, 0xde
popf
jmp 0x140089511
cmp dword [rsp + 0x44], 0xa000000c
jne 0x140089d89
push rax
pushf
mov eax, 0x64d97196
pushf
not eax
add eax, 0x73298e3d
xor eax, 0x2b52e4a6
rol eax, 0x2e
popf
pushf
not eax
add eax, 0x196467e9
xor eax, 0x2803e3d5
rol eax, 0x1a
popf
pushf
not eax
add eax, 0x8bcc335
xor eax, 0xe3839d8
rol eax, 0x93
popf
pushf
not eax
add eax, 0x3bab8884
xor eax, 0x7c72a1cb
rol eax, 6
popf
jmp 0x140089511
push rax
pushf
mov eax, 0x3447b595
pushf
not eax
add eax, 0x3581da11
xor eax, 0x148f74e
rol eax, 0x31
popf
pushf
not eax
add eax, 0x1f015c0f
xor eax, 0x78975b1d
rol eax, 0x9e
popf
jmp 0x140089511
lea rcx, [rsp + 0x270]
jmp 0x140089dc5
call qword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
jmp 0x140089ec3
lea rcx, [rsp + 0x270]
call fcn.1400894bd
jmp 0x140089ec3
lea rcx, [rsp + 0x270]
jmp 0x140089e77
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
push rax
pushf
mov eax, 0x330e04a1
pushf
not eax
add eax, 0x40a8995b
xor eax, 0x57dd5eff
rol eax, 0xd7
popf
pushf
not eax
add eax, 0x23935d68
xor eax, 0xb58b047
rol eax, 0x22
popf
pushf
not eax
add eax, 0x71035759
xor eax, 0x5a093044
rol eax, 0x27
popf
jmp 0x140089511
lea rdx, [rsp + 0x20]
mov rcx, rsi
jmp 0x140089ecc
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x140089f20
push rax
pushf
mov eax, 0xdc6ce3f3
pushf
not eax
add eax, 0x1d651bbc
xor eax, 0xbffcd57
rol eax, 0xf2
popf
pushf
not eax
add eax, 0x2f591735
xor eax, 0xf7f777c
rol eax, 0x22
popf
pushf
not eax
add eax, 0x3b22f92d
xor eax, 0xc108787
rol eax, 0xd
popf
jmp 0x140089511
push rax
pushf
mov eax, 0xd996b117
pushf
not eax
add eax, 0x3e5ef255
xor eax, 0xdfedce1
rol eax, 0x3e
popf
pushf
not eax
add eax, 0x1abd5485
xor eax, 0x1ceb598f
rol eax, 0x5b
popf
pushf
not eax
add eax, 0x27ecbce6
xor eax, 0x17049541
rol eax, 0x8e
popf
jmp 0x140089511
mov rcx, rsi
jmp 0x140089f6a
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rcx, rbp
jmp 0x140089f74
call qword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
jmp 0x140089f7b
dec eax
neg eax
sbb eax, eax
jmp 0x14008a050
mov eax, 0x178cbb14
pushf
not eax
add eax, 0x3f4b13b0
xor eax, 0xa6a1223
rol eax, 0xa7
popf
pushf
not eax
add eax, 0x528d9e1e
xor eax, 0x266d54d5
rol eax, 0x87
popf
pushf
not eax
add eax, 0x4ee708fb
xor eax, 0x6c917cf2
rol eax, 0x3e
popf
pushf
not eax
add eax, 0x1db705f5
xor eax, 0x2a7bb2d3
rol eax, 0x82
popf
push rax
pushf
mov eax, 0xc9d7348d
pushf
not eax
add eax, 0x11548936
xor eax, 0x45f97490
rol eax, 0xf2
popf
pushf
not eax
add eax, 0x26b4fbbb
xor eax, 0x25a8fbda
rol eax, 0xd0
popf
pushf
not eax
add eax, 0x2b455773
xor eax, 0x20d696f6
rol eax, 0x73
popf
jmp 0x140089511
mov rcx, qword [rsp + 0x2270]
xor rcx, rsp
call fcn.140098ae9
lea r11, [rsp + 0x2280]
mov rbx, qword [r11 + 0x18]
mov rbp, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop rdi
ret