Function at 0x1404d3e6d
Capabilities:
Enumerate files on windows

Disassembly:
mov qword [rsp + 0x20], rbx
or bx, 0x4d51
shl bh, cl
push rbp
push rsi
push rdi
shl al, 0xc7
push r12
inc al
push r13
test r15, rbx
movsx esi, r14w
xchg bpl, bpl
push r14
mov r12w, r14w
lahf
sub r12w, r10w
push r15
and r12b, r9b
lea rbp, [rsp - 0x230]
movsx si, r15b
sub rsp, 0x330
jmp 0x1404d3ebf
mov rax, qword [0x1400b7288]
movzx bx, r8b
test spl, 0xa6
xadd bl, sil
xor rax, rsp
sbb r12d, 0x67e8531d
rcr rsi, cl
bsr si, bx
mov qword [rbp + 0x220], rax
ror r12b, cl
movsx r12, r14w
btc bx, 0xa1
mov r12, r8
movsx rbx, di
inc bx
btr si, 0x4e
mov rsi, rcx
movzx ebx, dx
btc rbx, 0xc4
btr bx, r9w
movabs rbx, 0x200000000801
test dil, 0xc1
clc
cmp rdx, rcx
jmp 0x1404d3f2d
je 0x1404d3f6b
mov al, byte [rdx]
sub al, 0x2f
cmp al, 0x2d
jmp 0x1404d3f3e
ja 0x1404d3f57
movsx rax, al
bt rbx, rax
jmp 0x1404d3f51
jb 0x1404d3f6b
mov rcx, rsi
call fcn.140237f3c
mov rdx, rax
cmp rax, rsi
jne 0x1404d3f33
mov r8b, byte [rdx]
cmp r15, r11
cmp r8b, 0x3a
jmp 0x1404d3f7a
jne 0x1404d3fc9
lea rax, [rsi + 1]
test sil, dil
clc
cmp rdx, rax
jmp 0x1404d3f90
je 0x1404d3fc9
mov r9, r12
sar cx, 0x85
shr cl, 0xcc
add ch, 0xb
sub r8d, r8d
btr rcx, 0xac
sub edx, edx
mov rcx, r9
movsx ecx, di
movsx cx, cl
mov rcx, rsi
jmp 0x1404d3fbf
call fcn.1404d3b36
jmp 0x1404d4432
sub r8b, 0x2f
xor edi, edi
cmp r8b, 0x2d
jmp 0x1404d3fd8
ja 0x1404d3ff3
movsx rax, r8b
bt rbx, rax
not al
setle al
mov al, 1
jb 0x1404d3ffd
mov al, dil
neg ch
shl ch, cl
cmp r15b, cl
sub rdx, rsi
mov qword [rbp - 0x60], rdi
inc rdx
btr cx, 0x26
or cx, 0x626f
mov qword [rbp - 0x58], rdi
sar rcx, cl
movzx ecx, r13w
neg al
mov qword [rbp - 0x50], rdi
lea rcx, [rsp + 0x30]
jmp 0x1404d402c
mov qword [rbp - 0x48], rdi
jmp 0x1404d4035
sbb r13, r13
cmp r13, rax
mov qword [rbp - 0x40], rdi
jmp 0x1404d4048
and r13, rdx
mov byte [rbp - 0x38], dil
cmc
test cl, 0x6d
sub edx, edx
jmp 0x1404d405a
call fcn.1404a039b
mov rax, qword [rsp + 0x38]
movzx r15w, sil
mov r15d, 0xfde9
cmp dword [rax + 0xc], r15d
jmp 0x1404d4078
jne 0x1404d40ba
cmp byte [rsp + 0x48], dil
jmp 0x1404d4088
je 0x1404d40ad
mov rax, qword [rsp + 0x30]
bswap r8w
and dword [rax + 0x3a8], 0xfffffffd
mov r8w, r10w
mov r8d, 0x2d396c84
movzx r8w, r15b
mov r8d, r15d
jmp 0x1404d40b5
jmp 0x1404d4134
call fcn.1404c6176
test eax, eax
jmp 0x1404d40c6
jne 0x1404d40fe
cmp byte [rsp + 0x48], dil
je 0x1404d40ee
mov rax, qword [rsp + 0x30]
rol r8b, cl
rol r8b, 0x32
cmovo r8, r8
and dword [rax + 0x3a8], 0xfffffffd
mov r8d, 1
jmp 0x1404d40f9
jmp 0x1404d4134
cmp byte [rsp + 0x48], dil
jmp 0x1404d4108
je 0x1404d4127
mov rax, qword [rsp + 0x30]
xchg r8b, dl
and dword [rax + 0x3a8], 0xfffffffd
setno r8b
cqo
movsx r8, bx
mov r8d, edi
cwd
mov cx, 0x79a9
movsx rcx, sp
lea rdx, [rbp - 0x60]
mov rcx, rsi
call fcn.1404a0e1a
mov rcx, qword [rbp - 0x50]
adc r8b, bl
bts r8, r8
lea r8, [rbp - 0x30]
clc
cmp dh, 0x21
test eax, eax
jmp 0x1404d415a
mov dword [rsp + 0x28], edi
jmp 0x1404d4163
mov qword [rsp + 0x20], rdi
jmp 0x1404d416d
cmovne rcx, rdi
stc
xor r9d, r9d
test spl, r15b
clc
jmp 0x1404d417e
xor edx, edx
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov rbx, rax
stc
cmp sil, 0xc9
cmp rax, 0xffffffffffffffff
jmp 0x1404d4197
jne 0x1404d41d5
mov r9, r12
ror cx, cl
dec rcx
sub r8d, r8d
sub ch, 0x68
sal rcx, 0x28
and cx, r13w
xor edx, edx
mov rcx, r10
movsxd rcx, eax
mov rcx, rsi
jmp 0x1404d41c4
call fcn.1404d3b36
mov edi, eax
jmp 0x1404d41d0
jmp 0x1404d4415
mov r14, qword [r12 + 8]
movsx cx, dl
clc
sub r14, qword [r12]
sar r14, 3
xchg ch, cl
ror ecx, cl
xor edx, edx
mov cx, 0xbb3
mov qword [rsp + 0x70], rdi
movzx cx, bl
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x78], rdi
jmp 0x1404d4209
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x78], rdi
jmp 0x1404d4216
mov qword [rbp - 0x70], rdi
mov byte [rbp - 0x68], dil
jmp 0x1404d4223
call fcn.1404a039b
mov rax, qword [rsp + 0x58]
cmp dword [rax + 0xc], r15d
jmp 0x1404d4236
jne 0x1404d4269
cmp byte [rsp + 0x68], dil
jmp 0x1404d4246
je 0x1404d4261
mov rax, qword [rsp + 0x50]
bts r8, r15
movsx r8w, r9b
and dword [rax + 0x3a8], 0xfffffffd
mov r8d, r15d
jmp 0x1404d42d6
call fcn.1404c6176
test eax, eax
jne 0x1404d42ab
cmp byte [rsp + 0x68], dil
je 0x1404d429b
mov rax, qword [rsp + 0x50]
rcr r8d, 0x74
and dword [rax + 0x3a8], 0xfffffffd
xchg r8, r8
setae r8b
mov r8b, 0xe7
mov r8d, 1
jmp 0x1404d42a6
jmp 0x1404d42d6
cmp byte [rsp + 0x68], dil
jmp 0x1404d42b5
je 0x1404d42c7
mov rax, qword [rsp + 0x50]
and dword [rax + 0x3a8], 0xfffffffd
mov r8d, edi
movsx rdx, r15w
mov ch, 0x95
movsx dx, r13b
lea rdx, [rsp + 0x70]
lea rcx, [rbp - 4]
jmp 0x1404d42e4
call fcn.1404d3359
mov r15, qword [rbp - 0x80]
add ch, 0x6e
movzx ecx, r9w
test eax, eax
mov rcx, r15
jmp 0x1404d42fe
cmovne rcx, rdi
jmp 0x1404d4308
cmp byte [rcx], 0x2e
jne 0x1404d4338
mov al, byte [rcx + 1]
test al, al
jmp 0x1404d431b
je 0x1404d436d
cmp al, 0x2e
jne 0x1404d4338
cmp byte [rcx + 2], dil
jmp 0x1404d4332
je 0x1404d436d
mov r9, r12
mov r8b, r8b
movzx r8d, r9w
mov r8, r13
mov rdx, rsi
jmp 0x1404d434d
call fcn.1404d3b36
mov edi, eax
cmc
stc
test eax, eax
jmp 0x1404d435d
jne 0x1404d43f5
sub edi, edi
test r12, 0x184051df
stc
cmp byte [rbp - 0x68], dil
je 0x1404d4384
mov rcx, r15
jmp 0x1404d437f
call fcn.1404c5041
lea rdx, [rbp - 0x30]
movzx ecx, r12w
xchg ecx, ecx
mov rcx, rbx
jmp 0x1404d4396
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
mov r15d, 0xfde9
cmc
stc
cmp r14b, dl
test eax, eax
jmp 0x1404d43ae
jne 0x1404d41eb
mov rax, qword [r12]
shld dx, bp, 0x56
mov rdx, qword [r12 + 8]
sub rdx, rax
sar rdx, 3
cmp r14, rdx
je 0x1404d440c
sub rdx, r14
lea rcx, [rax + r14*8]
lea r9, [0x1400acc8c]
mov r8d, 8
jmp 0x1404d43eb
call fcn.1404e012a
jmp 0x1404d440c
cmp byte [rbp - 0x68], 0
je 0x1404d440c
mov rcx, r15
jmp 0x1404d4407
call fcn.1404c5041
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindClose]
cmp byte [rbp - 0x38], 0
jmp 0x1404d441e
je 0x1404d442d
mov rcx, qword [rbp - 0x50]
call fcn.1404c5041
mov eax, edi
sal ch, 0xdc
mov rcx, qword [rbp + 0x220]
cmp r10d, ebp
xor rcx, rsp
jmp 0x1404d4444
call fcn.14049b928
mov rbx, qword [rsp + 0x388]
add rsp, 0x330
movzx r15d, r10w
movsx edi, bp
pop r15
jmp 0x1404d4466
pop r14
mov r12w, 0x1fa
movsx r13, r12w
pop r13
movsx edi, ax
pop r12
pop rdi
movsx esi, bp
mov bp, bx
bswap bp
pop rsi
movzx bp, r10b
pop rbp
jmp 0x1404d448e
ret