Function at 0x1404d2c1b
Capabilities:
Enumerate files on windows

Disassembly:
mov qword [rsp + 0x20], rbx
rcl ax, cl
push rbp
cmp r12w, cx
movzx rbx, r15w
push rsi
or sil, 0x3e
or ax, bx
push rdi
jmp 0x1404d2c4f
push r12
stc
adc bx, cx
push r13
and bp, 0x71de
push r14
bswap si
btr rbp, 0x17
rol r12b, 0x3a
push r15
rol r12d, 0x85
dec sil
rcr rbx, cl
lea rbp, [rsp - 0x230]
movsx si, r10b
sub rsp, 0x330
sbb al, 0x98
test dil, bpl
ror bl, 0x9e
mov rax, qword [0x1400b7288]
xor rax, rsp
xadd sil, sil
adc sil, dl
mov qword [rbp + 0x220], rax
or r12b, r9b
shl sil, 0x57
btc rbx, r10
mov r12, r8
mov rsi, rcx
clc
and bl, r14b
xor bx, r8w
movabs rbx, 0x200000000801
cmp rdx, rcx
jmp 0x1404d2cd5
je 0x1404d2d36
mov al, byte [rdx]
cmp r12, 0x4c1b4191
clc
sub al, 0x2f
stc
cmp al, 0x2d
jmp 0x1404d2cef
ja 0x1404d2d0e
movsx rax, al
cmc
jmp 0x1404d2cff
bt rbx, rax
jmp 0x1404d2d08
jb 0x1404d2d36
mov rcx, rsi
jmp 0x1404d2d16
call fcn.14027dda0
mov rdx, rax
cmp r14b, 0xa1
jmp 0x1404d2d28
cmp rax, rsi
jmp 0x1404d2d30
jne 0x1404d2cdb
mov r8b, byte [rdx]
test r12w, 0x19b2
cmp r8b, 0x3a
jne 0x1404d2d80
lea rax, [rsi + 1]
stc
clc
cmp rdx, rax
je 0x1404d2d80
mov r9, r12
xor ch, 0xc0
btr cx, 0xa6
sub r8d, r8d
xor edx, edx
bswap cx
xchg cx, cx
mov rcx, rsi
jmp 0x1404d2d76
call fcn.1404d28ac
jmp 0x1404d3208
sub r8b, 0x2f
test r12b, r11b
cmp ax, r11w
sub edi, edi
test r9b, 0xa8
cmp r8b, 0x2d
ja 0x1404d2dab
movsx rax, r8b
bt rbx, rax
mov al, 1
jb 0x1404d2dba
mov al, dil
test r11w, 0x661e
sar ch, cl
cmove ecx, r15d
sub rdx, rsi
movzx cx, r9b
movsxd rcx, r13d
mov qword [rbp - 0x60], rdi
inc rdx
add cx, bx
mov qword [rbp - 0x58], rdi
sbb cl, dh
not cl
neg al
jmp 0x1404d2de5
mov qword [rbp - 0x50], rdi
mov cl, r11b
jmp 0x1404d2df1
lea rcx, [rsp + 0x30]
mov qword [rbp - 0x48], rdi
jmp 0x1404d2dff
sbb r13, r13
test r13, 0x75271226
mov qword [rbp - 0x40], rdi
cmp di, 0x1fbc
cmc
stc
and r13, rdx
mov byte [rbp - 0x38], dil
test r8, 0x39cf7aa1
xor edx, edx
jmp 0x1404d2e29
call fcn.14049ee9f
mov rax, qword [rsp + 0x38]
mov r15d, 0xfde9
cmp dword [rax + 0xc], r15d
jne 0x1404d2e82
cmp byte [rsp + 0x48], dil
jmp 0x1404d2e4d
je 0x1404d2e75
mov rax, qword [rsp + 0x30]
stc
xchg r8d, r8d
rol r8w, 0x4c
and dword [rax + 0x3a8], 0xfffffffd
movzx r8w, dil
movzx r8d, r9w
cmovno r8d, ebx
mov r8d, r15d
jmp 0x1404d2e7d
jmp 0x1404d2ed8
call fcn.1404c4dcf
test eax, eax
jne 0x1404d2eb6
cmp byte [rsp + 0x48], dil
jmp 0x1404d2e99
je 0x1404d2eab
mov rax, qword [rsp + 0x30]
and dword [rax + 0x3a8], 0xfffffffd
mov r8d, 1
jmp 0x1404d2ed8
cmp byte [rsp + 0x48], dil
je 0x1404d2ed3
mov rax, qword [rsp + 0x30]
movzx r8, di
and dword [rax + 0x3a8], 0xfffffffd
cqo
mov r8d, edi
cqo
lea rdx, [rbp - 0x60]
mov rcx, rsi
jmp 0x1404d2ee4
call fcn.14049f8ec
mov rcx, qword [rbp - 0x50]
test eax, r14d
lea r8, [rbp - 0x30]
jmp 0x1404d2ef9
test eax, eax
mov dword [rsp + 0x28], edi
jmp 0x1404d2f04
mov qword [rsp + 0x20], rdi
jmp 0x1404d2f0e
cmovne rcx, rdi
xor r9d, r9d
stc
test edx, r11d
xor edx, edx
jmp 0x1404d2f20
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov rbx, rax
test r15w, r14w
cmp r15b, r11b
cmp rax, 0xffffffffffffffff
jmp 0x1404d2f39
jne 0x1404d2f72
mov r9, r12
cmovnp cx, bp
movzx ecx, r14w
rcl ch, 0x8f
xor r8d, r8d
not ch
dec ecx
sal ch, 0x8f
xor edx, edx
mov rcx, rsi
jmp 0x1404d2f61
call fcn.1404d28ac
mov edi, eax
jmp 0x1404d2f6d
jmp 0x1404d31e1
mov r14, qword [r12 + 8]
shrd ecx, r8d, 0x60
sub r14, qword [r12]
clc
sar r14, 3
sbb ecx, ecx
bswap cx
sub edx, edx
mov qword [rsp + 0x70], rdi
lea rcx, [rsp + 0x50]
jmp 0x1404d2f9b
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x80], rdi
jmp 0x1404d2fa9
mov qword [rbp - 0x78], rdi
jmp 0x1404d2fb2
mov qword [rbp - 0x70], rdi
mov byte [rbp - 0x68], dil
call fcn.14049ee9f
mov rax, qword [rsp + 0x58]
test r10b, 0x78
cmc
cmp dword [rax + 0xc], r15d
jmp 0x1404d2fd2
jne 0x1404d300e
cmp byte [rsp + 0x68], dil
jmp 0x1404d2fe2
je 0x1404d3001
mov rax, qword [rsp + 0x50]
rcl r8b, 0xff
and dword [rax + 0x3a8], 0xfffffffd
bswap r8
xchg r8, r8
not r8b
mov r8d, r15d
jmp 0x1404d3009
jmp 0x1404d3082
call fcn.1404c4dcf
test eax, eax
jmp 0x1404d301a
jne 0x1404d3057
cmp byte [rsp + 0x68], dil
jmp 0x1404d302a
je 0x1404d3047
mov rax, qword [rsp + 0x50]
and dword [rax + 0x3a8], 0xfffffffd
movzx r8, si
mov r8w, r13w
not r8d
mov r8d, 1
jmp 0x1404d3052
jmp 0x1404d3082
cmp byte [rsp + 0x68], dil
jmp 0x1404d3061
je 0x1404d307a
mov rax, qword [rsp + 0x50]
shr ch, cl
and dword [rax + 0x3a8], 0xfffffffd
xchg dl, r8b
bswap edx
mov r8d, edi
jmp 0x1404d3082
lea rdx, [rsp + 0x70]
mov ecx, 0x47d5dad
movsx cx, cl
cmova cx, bx
lea rcx, [rbp - 4]
call fcn.1404d20f6
mov r15, qword [rbp - 0x80]
inc cx
test eax, eax
mov rcx, r15
cmovne rcx, rdi
cmp si, dx
cmc
clc
cmp byte [rcx], 0x2e
jne 0x1404d30e6
mov al, byte [rcx + 1]
test ah, 0x98
stc
test al, al
jmp 0x1404d30c9
je 0x1404d3119
cmp al, 0x2e
jmp 0x1404d30d6
jne 0x1404d30e6
cmp byte [rcx + 2], dil
je 0x1404d3119
mov r9, r12
not edx
mov r8, r13
cdq
mov rdx, rsi
jmp 0x1404d30f7
call fcn.1404d28ac
mov edi, eax
cmp r8w, 0x659a
clc
test eax, eax
jmp 0x1404d310c
jne 0x1404d31c1
xor edi, edi
jmp 0x1404d3119
cmp byte [rbp - 0x68], dil
je 0x1404d312b
mov rcx, r15
call fcn.1404c3cef
lea rdx, [rbp - 0x30]
movsx ecx, r10w
movsx cx, bh
movzx cx, bpl
mov rcx, rbx
jmp 0x1404d3144
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
mov r15d, 0xfde9
test r8, rbp
jmp 0x1404d3158
test eax, eax
jne 0x1404d2f8a
mov rax, qword [r12]
mov rdx, qword [r12 + 8]
clc
cmc
sub rdx, rax
stc
cmc
sar rdx, 3
cmp r14, rdx
jmp 0x1404d317c
je 0x1404d31d3
sub rdx, r14
cmovl r8, r10
movsxd r9, edi
movsx rcx, sp
lea rcx, [rax + r14*8]
movzx r9d, r8w
movzx r8, r14w
lea r9, [0x1400acc8c]
seta r8b
jmp 0x1404d31ac
mov r8d, 8
jmp 0x1404d31b7
call fcn.1404def80
jmp 0x1404d31d3
cmp byte [rbp - 0x68], 0
je 0x1404d31d3
mov rcx, r15
call fcn.1404c3cef
mov rcx, rbx
jmp 0x1404d31db
call qword [sym.imp.KERNEL32.dll_FindClose]
cmp byte [rbp - 0x38], 0
je 0x1404d31f9
mov rcx, qword [rbp - 0x50]
jmp 0x1404d31f4
call fcn.1404c3cef
mov eax, edi
sar cl, 0x8e
adc cx, 0x6b3b
jmp 0x1404d3208
mov rcx, qword [rbp + 0x220]
xor rcx, rsp
call fcn.14049a18d
mov rbx, qword [rsp + 0x388]
bt edi, esi
add rsp, 0x330
pop r15
pop r14
movsx di, dl
pop r13
mov si, 0x126d
mov dil, r10b
bswap di
pop r12
mov bpl, pe_nt_image_headers64
pop rdi
pop rsi
movzx bp, r13b
pop rbp
ret