Function at 0x1400084b0
Capabilities:
Check if file exists
Enumerate files on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rsp - 0x10340]
mov eax, 0x10440
call fcn.140019180
sub rsp, rax
mov rax, qword [0x140028040]
xor rax, rsp
mov qword [rbp + 0x10330], rax
xor r15d, r15d
xor edx, edx
mov r8d, 0x10000
lea rcx, [rbp + 0x330]
call fcn.140019390
mov r8d, 0x8000
lea rdx, [rbp + 0x330]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
dec eax
cmp eax, 0x7ffe
ja 0x140008a15
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], r15
lea rax, [rbp + 0x330]
mov r12, 0xffffffffffffffff
mov r8, r12
nop dword [rax + rax]
inc r8
cmp word [rax + r8*2], r15w
jne 0x140008550
lea rdx, [rbp + 0x330]
lea rcx, [rsp + 0x38]
call fcn.1400077c0
nop
lea rdx, [rsp + 0x38]
mov r10, qword [rsp + 0x38]
mov r11, qword [rsp + 0x50]
cmp r11, 7
cmova rdx, r10
mov r9, qword [rsp + 0x48]
test r9, r9
je 0x1400085bc
lea rcx, [r9 - 1]
mov rax, r12
cmp rcx, rax
cmovb rax, rcx
lea rbx, [rdx + rax*2]
cmp word [rbx], 0x5c
je 0x1400085b4
cmp rbx, rdx
je 0x1400085bc
sub rbx, 2
cmp word [rbx], 0x5c
jne 0x1400085a5
sub rbx, rdx
sar rbx, 1
jmp 0x1400085bf
mov rbx, r12
lea rdx, [rsp + 0x38]
cmp r11, 7
cmova rdx, r10
test r9, r9
je 0x140008607
lea rcx, [r9 - 1]
mov rax, r12
cmp rcx, rax
cmovb rax, rcx
lea rcx, [rdx + rax*2]
cmp word [rcx], 0x2f
je 0x1400085ff
nop dword [rax]
cmp rcx, rdx
je 0x140008607
sub rcx, 2
cmp word [rcx], 0x2f
jne 0x1400085f0
sub rcx, rdx
sar rcx, 1
jmp 0x14000860a
mov rcx, r12
cmp rcx, 0xffffffffffffffff
cmove ecx, r12d
cmp rbx, 0xffffffffffffffff
cmove ebx, r12d
cmp ebx, ecx
cmovl ebx, ecx
test ebx, ebx
js 0x140008a32
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x78], xmm1
lea eax, [rbx + 1]
movsxd r14, eax
mov r8, r14
cmp r9, r14
cmovb r8, r9
lea rdx, [rsp + 0x38]
cmp r11, 7
cmova rdx, r10
lea rcx, [rsp + 0x78]
call fcn.1400077c0
nop
mov rsi, qword [rbp - 0x78]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
sub rax, rsi
cmp rax, 5
jb 0x1400086ad
lea rax, [rsi + 5]
mov qword [rbp - 0x78], rax
lea rdi, [rsp + 0x78]
cmp rcx, 7
cmova rdi, qword [rsp + 0x78]
lea rcx, [rdi + rsi*2]
mov r8d, 0xa
lea rdx, str..dll
call fcn.140019750
mov word [rdi + rsi*2 + 0xa], r15w
lea rax, [rsp + 0x78]
jmp 0x1400086cc
mov qword [rsp + 0x20], 5
lea r9, str..dll
mov edx, 5
lea rcx, [rsp + 0x78]
call fcn.140007a70
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x68], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x58], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x68], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
mov rdx, qword [rbp - 0x70]
cmp rdx, 7
jbe 0x14000873f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000873a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008a4f
call fcn.140009910
movdqa xmm0, xmmword [0x140024670]
movdqu xmmword [rbp - 0x78], xmm0
mov word [rsp + 0x78], r15w
xor edx, edx
mov r8d, 0x250
lea rcx, [rbp + 0xe0]
call fcn.140019390
lea rcx, [rsp + 0x58]
cmp qword [rsp + 0x70], 7
cmova rcx, qword [rsp + 0x58]
lea rdx, [rbp + 0xe0]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
jne 0x140008870
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
cmp eax, 2
jne 0x140008a55
mov rdx, qword [rsp + 0x70]
cmp rdx, 7
jbe 0x1400087e4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400087df
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008a72
call fcn.140009910
movdqa xmm0, xmmword [0x140024670]
movdqu xmmword [rsp + 0x68], xmm0
mov word [rsp + 0x58], r15w
mov rdx, qword [rsp + 0x50]
cmp rdx, 7
jbe 0x14000883a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008835
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008a0f
call fcn.140009910
mov rcx, qword [rbp + 0x10330]
xor rcx, rsp
call fcn.1400093d0
lea r11, [rsp + 0x10440]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
test byte [rbp + 0xe0], 0x10
je 0x140008931
lea rdx, [rbp + 0xe0]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x140008870
mov rdx, qword [rsp + 0x70]
cmp rdx, 7
jbe 0x1400088d3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400088ce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008a72
call fcn.140009910
movdqa xmm0, xmmword [0x140024670]
movdqu xmmword [rsp + 0x68], xmm0
mov word [rsp + 0x58], r15w
mov rdx, qword [rsp + 0x50]
cmp rdx, 7
jbe 0x14000883a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008835
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008a0f
jmp 0x140008835
mov r9, r12
mov r8, r14
lea rdx, [rbp - 0x68]
lea rcx, [rsp + 0x38]
call fcn.140006f30
nop
movsxd r9, ebx
xor r8d, r8d
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x38]
call fcn.140006f30
mov rbx, rax
lea rdx, [rbp + 0x10c]
lea rcx, [rbp - 0x48]
call fcn.140007090
nop
mov r8, rax
lea rcx, [rbp - 0x28]
call fcn.140008b30
nop
lea r8, str.__found_in_the_directory_with
mov rdx, rax
lea rcx, [rbp - 8]
call fcn.140007610
nop
lea r8, [rbp - 0x68]
mov rdx, rax
lea rcx, [rbp + 0x18]
call fcn.1400076f0
nop
lea r8, str.._n_nThis_may_be_a_virus_or_a_malicious_program.__n_nPlease_remove_all_DLL_libraries_from_this_directory:_n_n
mov rdx, rax
lea rcx, [rbp + 0x38]
call fcn.140007610
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x58]
call fcn.140008b10
nop
lea r8, str._n_nAlternatively__you_can_move
mov rdx, rax
lea rcx, [rbp + 0x78]
call fcn.140007610
nop
lea r8, [rbp - 0x68]
mov rdx, rax
lea rcx, [rbp + 0x98]
call fcn.1400076f0
nop
lea r8, str._to_a_new_directory.
mov rdx, rax
lea rcx, [rbp + 0xb8]
call fcn.140007610
nop
xor edx, edx
mov rcx, rax
call fcn.140008390
nop
call fcn.140010394
int3
lea rdx, str.Could_not_get_executable_path_
lea rcx, [rbp - 0x68]
call fcn.140007090
nop
xor edx, edx
lea rcx, [rbp - 0x68]
call fcn.140008390
nop
lea rdx, str.Could_not_get_executable_directory_
lea rcx, [rbp - 0x68]
call fcn.140007090
nop
xor edx, edx
lea rcx, [rbp - 0x68]
call fcn.140008390
nop
call fcn.140010394
int3
lea rdx, str.Could_not_enumerate_executable_path_
lea rcx, [rbp - 0x68]
call fcn.140007090
nop
mov edx, ebx
lea rcx, [rbp - 0x68]
call fcn.140008390
nop
call fcn.140010394
int3