Function at 0x1404d71af
Capabilities:
Enumerate files on windows

Disassembly:
mov qword [rsp + 0x20], rbx
stc
movsx rbx, ax
jmp 0x1404d71df
push rbp
sbb ebx, 0x7da46788
mov ax, 0x4e73
push rsi
mov si, r11w
rcr bx, cl
push rdi
push r12
sub sil, 0x3e
push r13
shrd si, dx, 0x6b
mov r12w, 0x6982
push r14
rol ax, cl
bsf rax, r9
stc
push r15
shr bx, cl
lea rbp, [rsp - 0x230]
shr ebx, cl
add esi, ecx
sub rsp, 0x330
mov r12, r14
rcr r12w, 0x47
adc ah, 0x3b
mov rax, qword [0x1400b7288]
xor rax, rsp
mov r12b, bl
shl r12, 0x1e
mov qword [rbp + 0x220], rax
mov r12, r8
and sil, 0x1a
test rsp, r12
movsx rsi, r14w
mov rsi, rcx
movabs rbx, 0x200000000801
cmp rdx, rcx
jmp 0x1404d726d
je 0x1404d72b3
mov al, byte [rdx]
sub al, 0x2f
stc
cmp spl, r11b
cmp al, 0x2d
jmp 0x1404d7282
ja 0x1404d7296
movsx rax, al
bt rbx, rax
jb 0x1404d72b3
mov rcx, rsi
jmp 0x1404d729e
call fcn.140250134
mov rdx, rax
test rbp, r15
cmc
cmp rax, rsi
jne 0x1404d7273
mov r8b, byte [rdx]
test spl, sil
jmp 0x1404d72be
cmp r8b, 0x3a
jne 0x1404d72fd
lea rax, [rsi + 1]
cmp rdx, rax
jmp 0x1404d72d4
je 0x1404d72fd
mov r9, r12
mov cx, ax
and cl, 0x19
sub r8d, r8d
sub edx, edx
bswap rcx
mov rcx, rsi
jmp 0x1404d72f3
call fcn.1404d6e56
jmp 0x1404d77e8
sub r8b, 0x2f
cmc
jmp 0x1404d7307
sub edi, edi
cmp eax, r13d
cmp r11b, 0x49
cmp r8b, 0x2d
jmp 0x1404d7319
ja 0x1404d7330
movsx rax, r8b
stc
bt rbx, rax
mov al, 1
jb 0x1404d7333
mov al, dil
sub rdx, rsi
movsx cx, r14b
movzx cx, r15b
movsx rcx, r13w
mov qword [rbp - 0x60], rdi
movsxd rcx, r13d
jmp 0x1404d7355
inc rdx
cmp sil, r13b
bt rcx, 0xa4
rcl cl, cl
mov qword [rbp - 0x58], rdi
shrd rcx, rdi, 0xd9
shr cl, 0xa2
neg al
mov ch, 0x3b
movzx rcx, r13w
mov qword [rbp - 0x50], rdi
bswap ecx
movsx cx, sil
mov cl, 0xfe
lea rcx, [rsp + 0x30]
jmp 0x1404d738e
mov qword [rbp - 0x48], rdi
jmp 0x1404d7397
sbb r13, r13
cmp dil, 0xd
mov qword [rbp - 0x40], rdi
jmp 0x1404d73a9
and r13, rdx
jmp 0x1404d73b2
mov byte [rbp - 0x38], dil
xor edx, edx
jmp 0x1404d73bd
call fcn.1404a31d1
mov rax, qword [rsp + 0x38]
or r15b, 0xf7
or r15w, r11w
mov r15d, 0xfde9
test si, 0x1e15
cmp bl, r13b
cmp dword [rax + 0xc], r15d
jne 0x1404d741c
cmp byte [rsp + 0x48], dil
jmp 0x1404d73f1
je 0x1404d740f
mov rax, qword [rsp + 0x30]
bsf r8w, bx
and dword [rax + 0x3a8], 0xfffffffd
xchg r8b, r8b
movsx r8, r14w
mov r8d, r15d
jmp 0x1404d7417
jmp 0x1404d7485
call fcn.1404c940d
test eax, eax
jmp 0x1404d7428
jne 0x1404d7460
cmp byte [rsp + 0x48], dil
je 0x1404d7450
mov rax, qword [rsp + 0x30]
and dword [rax + 0x3a8], 0xfffffffd
cmovne r8d, r11d
movsx r8d, r9w
movsxd r8, esp
mov r8d, 1
jmp 0x1404d745b
jmp 0x1404d7485
cmp byte [rsp + 0x48], dil
jmp 0x1404d746a
je 0x1404d747c
mov rax, qword [rsp + 0x30]
and dword [rax + 0x3a8], 0xfffffffd
mov r8d, edi
bswap cx
mov ecx, r15d
lea rdx, [rbp - 0x60]
jmp 0x1404d748e
mov rcx, rsi
jmp 0x1404d7496
call fcn.1404a3c60
mov rcx, qword [rbp - 0x50]
adc r8w, 0x3a48
shl r8w, cl
sbb r8b, r10b
lea r8, [rbp - 0x30]
test eax, eax
jmp 0x1404d74b7
mov dword [rsp + 0x28], edi
jmp 0x1404d74c0
mov qword [rsp + 0x20], rdi
jmp 0x1404d74ca
cmovne rcx, rdi
test cl, r15b
clc
cmp r10d, eax
xor r9d, r9d
test spl, r9b
clc
jmp 0x1404d74e1
sub edx, edx
jmp 0x1404d74e8
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jmp 0x1404d74fa
jne 0x1404d7538
mov r9, r12
shrd ecx, esi, 0xf5
bts cx, r9w
sub r8d, r8d
or cl, bpl
movzx cx, al
shl cl, cl
xor edx, edx
movsx ecx, sp
mov cl, 0x5f
mov rcx, rsi
jmp 0x1404d7527
call fcn.1404d6e56
mov edi, eax
jmp 0x1404d7533
jmp 0x1404d77c9
mov r14, qword [r12 + 8]
sub r14, qword [r12]
btr cx, 0x20
sar r14, 3
adc rcx, 0x5a7a294f
xor edx, edx
movzx ecx, r11w
mov qword [rsp + 0x70], rdi
bswap rcx
jmp 0x1404d7568
lea rcx, [rsp + 0x50]
jmp 0x1404d7572
mov qword [rsp + 0x78], rdi
jmp 0x1404d757c
mov qword [rbp - 0x80], rdi
jmp 0x1404d7585
mov qword [rbp - 0x78], rdi
jmp 0x1404d758e
mov qword [rbp - 0x70], rdi
mov byte [rbp - 0x68], dil
jmp 0x1404d759b
call fcn.1404a31d1
mov rax, qword [rsp + 0x58]
cmp dword [rax + 0xc], r15d
jmp 0x1404d75ae
jne 0x1404d75e8
cmp byte [rsp + 0x68], dil
jmp 0x1404d75be
je 0x1404d75db
mov rax, qword [rsp + 0x50]
movzx r8d, r15w
rcl r8b, cl
and dword [rax + 0x3a8], 0xfffffffd
movzx r8, si
mov r8d, r15d
jmp 0x1404d75e3
jmp 0x1404d7668
call fcn.1404c940d
test eax, eax
jne 0x1404d7639
cmp byte [rsp + 0x68], dil
jmp 0x1404d75ff
je 0x1404d7629
mov rax, qword [rsp + 0x50]
sal r8w, 0xed
btc r8, 0xeb
movzx r8, bp
and dword [rax + 0x3a8], 0xfffffffd
seta r8b
mov r8b, 0xc6
xchg r8, r8
mov r8d, 1
jmp 0x1404d7634
jmp 0x1404d7668
cmp byte [rsp + 0x68], dil
jmp 0x1404d7643
je 0x1404d765e
mov rax, qword [rsp + 0x50]
and dword [rax + 0x3a8], 0xfffffffd
movzx ecx, si
movsx ecx, si
not rcx
mov r8d, edi
movsxd rdx, r10d
movsx cx, bh
lea rdx, [rsp + 0x70]
setb cl
movzx ecx, ax
movsx rcx, r10w
lea rcx, [rbp - 4]
call fcn.1404d66ab
mov r15, qword [rbp - 0x80]
movsx rcx, r11w
sar cl, cl
rcr cx, 0x5f
test eax, eax
mov rcx, r15
cmovne rcx, rdi
cmp byte [rcx], 0x2e
jmp 0x1404d769f
jne 0x1404d76cd
mov al, byte [rcx + 1]
clc
test al, al
jmp 0x1404d76b0
je 0x1404d76f9
cmp al, 0x2e
jmp 0x1404d76bd
jne 0x1404d76cd
cmp byte [rcx + 2], dil
je 0x1404d76f9
mov r9, r12
mov r8, r13
mov rdx, rsi
call fcn.1404d6e56
mov edi, eax
stc
jmp 0x1404d76e3
test eax, eax
jmp 0x1404d76ea
jne 0x1404d77a4
sub edi, edi
test r15b, 0x64
test r9b, cl
cmp byte [rbp - 0x68], dil
jmp 0x1404d7702
je 0x1404d7715
mov rcx, r15
jmp 0x1404d7710
call fcn.1404c8273
lea rdx, [rbp - 0x30]
movsx rcx, bp
mov rcx, rbx
jmp 0x1404d7725
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
mov r15d, 0xfde9
cmp edi, esi
stc
test r12b, r14b
test eax, eax
jmp 0x1404d773e
jne 0x1404d7551
mov rax, qword [r12]
neg dl
mov rdx, qword [r12 + 8]
cmp dil, 0x94
sub rdx, rax
stc
sar rdx, 3
clc
cmp r14, rdx
jmp 0x1404d7764
je 0x1404d77bb
sub rdx, r14
movsx r8d, r10w
jmp 0x1404d7776
lea rcx, [rax + r14*8]
movzx r9w, r12b
mov r8, r15
not r9b
lea r9, [0x1400acc8c]
movsxd r8, ecx
mov r8d, 8
jmp 0x1404d779a
call fcn.1404e35b5
jmp 0x1404d77bb
cmp byte [rbp - 0x68], 0
je 0x1404d77bb
mov rcx, r15
jmp 0x1404d77b6
call fcn.1404c8273
mov rcx, rbx
jmp 0x1404d77c3
call qword [sym.imp.KERNEL32.dll_FindClose]
cmp byte [rbp - 0x38], 0
jmp 0x1404d77d2
je 0x1404d77e6
mov rcx, qword [rbp - 0x50]
jmp 0x1404d77e1
call fcn.1404c8273
mov eax, edi
mov rcx, qword [rbp + 0x220]
test rcx, rdx
clc
cmp r12b, 0x75
xor rcx, rsp
jmp 0x1404d77ff
call fcn.14049e6a7
mov rbx, qword [rsp + 0x388]
xor r12b, dil
add rsp, 0x330
movzx r13, r9w
not r14b
pop r15
movsx esi, sp
mov bpl, 0x64
cmovg rdi, r9
pop r14
bswap bp
jmp 0x1404d7837
pop r13
mov dil, 0xae
movsx rdi, si
pop r12
mov bpl, r13b
movsx rbp, di
movzx ebp, r8w
pop rdi
movsxd rbp, r9d
xchg si, bp
pop rsi
setno bpl
pop rbp
jmp 0x1404d785f
ret