Function at 0x1404d133c
Capabilities:
Enumerate files on windows

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
test r11w, 0x1c4
cmp r11b, dl
push rdi
movsxd rbp, r8d
push r12
or ebp, r8d
push r13
or sil, r10b
xadd bp, r12w
bt rsi, rbp
push r14
push r15
mov bx, r15w
lea rbp, [rsp - 0x230]
movzx ax, bl
bt r12d, ebx
sub rsp, 0x330
inc r12
xadd bx, si
lahf
mov rax, qword [0x1400b7288]
xor rsi, rcx
xor rax, rsp
mov qword [rbp + 0x220], rax
rcr sil, cl
sar r12w, 0x86
mov r12, r8
movsx si, al
mov rsi, rcx
movabs rbx, 0x200000000801
cmp rdx, rcx
jmp 0x1404d13c2
je 0x1404d141e
mov al, byte [rdx]
cmp r14w, di
cmp r13w, 0x28cf
jmp 0x1404d13d9
sub al, 0x2f
clc
test bx, 0x347f
cmp al, 0x2d
jmp 0x1404d13e8
ja 0x1404d1402
movsx rax, al
stc
bt rbx, rax
jmp 0x1404d13fc
jb 0x1404d141e
mov rcx, rsi
call fcn.1401b5cf3
mov rdx, rax
cmp r13b, r11b
cmp rax, rsi
jmp 0x1404d1418
jne 0x1404d13c8
mov r8b, byte [rdx]
cmc
cmp rsi, rbx
stc
cmp r8b, 0x3a
jmp 0x1404d142f
jne 0x1404d1470
lea rax, [rsi + 1]
cmp rdx, rax
je 0x1404d1470
mov r9, r12
xor rcx, rbp
shr ch, 0x1a
xor r8d, r8d
cmc
inc ecx
adc ch, bl
xor edx, edx
movsx rcx, r14w
not cl
bswap cx
mov rcx, rsi
jmp 0x1404d1466
call fcn.1404d100c
jmp 0x1404d18c7
sub r8b, 0x2f
sub edi, edi
jmp 0x1404d147b
cmp r8b, 0x2d
jmp 0x1404d1484
ja 0x1404d149a
movsx rax, r8b
bt rbx, rax
mov al, 1
jb 0x1404d14a1
mov al, dil
bts rcx, r11
sub rdx, rsi
inc cl
movzx rcx, r10w
mov qword [rbp - 0x60], rdi
movsx rcx, bp
movsxd rcx, esi
not cx
inc rdx
btc rcx, 0x8c
mov qword [rbp - 0x58], rdi
shld ecx, r8d, 0x95
clc
neg al
movzx cx, bl
mov qword [rbp - 0x50], rdi
mov cx, r8w
lea rcx, [rsp + 0x30]
mov qword [rbp - 0x48], rdi
jmp 0x1404d14e6
sbb r13, r13
mov qword [rbp - 0x40], rdi
and r13, rdx
cmp dl, 0xd4
cmc
test edi, ebx
mov byte [rbp - 0x38], dil
sub edx, edx
call fcn.14049d54e
mov rax, qword [rsp + 0x38]
mov r15d, 0xfde9
cmp dword [rax + 0xc], r15d
jne 0x1404d154a
cmp byte [rsp + 0x48], dil
jmp 0x1404d1520
je 0x1404d1542
mov rax, qword [rsp + 0x30]
add r8b, 0xd9
btc r8, r15
shr r8, 0xce
and dword [rax + 0x3a8], 0xfffffffd
movzx r8d, di
mov r8d, r15d
jmp 0x1404d15b5
call fcn.1404c33b1
test eax, eax
jmp 0x1404d1556
jne 0x1404d158b
cmp byte [rsp + 0x48], dil
jmp 0x1404d1566
je 0x1404d157b
mov rax, qword [rsp + 0x30]
and dword [rax + 0x3a8], 0xfffffffd
bswap r8
mov r8d, 1
jmp 0x1404d1586
jmp 0x1404d15b5
cmp byte [rsp + 0x48], dil
jmp 0x1404d1595
je 0x1404d15b2
mov rax, qword [rsp + 0x30]
and dword [rax + 0x3a8], 0xfffffffd
mov dl, bpl
bswap r8
movsx cx, sil
mov r8d, edi
lea rdx, [rbp - 0x60]
mov rcx, rsi
jmp 0x1404d15c1
call fcn.14049df75
mov rcx, qword [rbp - 0x50]
movsxd r8, r14d
cmc
lea r8, [rbp - 0x30]
jmp 0x1404d15db
test eax, eax
jmp 0x1404d15e2
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
cmovne rcx, rdi
test rcx, r14
sub r9d, r9d
test eax, 0x33224c7e
cmp r12d, r13d
clc
xor edx, edx
jmp 0x1404d1605
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x1404d164c
mov r9, r12
shl ch, cl
or cx, 0x135f
xchg rcx, rcx
sub r8d, r8d
xor edx, edx
jmp 0x1404d1633
mov rcx, rsi
jmp 0x1404d163b
call fcn.1404d100c
mov edi, eax
jmp 0x1404d1647
jmp 0x1404d18a5
mov r14, qword [r12 + 8]
bts ecx, r11d
setae cl
rcr ch, cl
sub r14, qword [r12]
cmp cx, 0x2dd1
sar ch, cl
rcl cl, cl
sar r14, 3
sub edx, edx
mov qword [rsp + 0x70], rdi
movzx ecx, r9w
setns cl
jmp 0x1404d167e
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x78], rdi
jmp 0x1404d168d
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x78], rdi
jmp 0x1404d169a
mov qword [rbp - 0x70], rdi
mov byte [rbp - 0x68], dil
jmp 0x1404d16a7
call fcn.14049d54e
mov rax, qword [rsp + 0x58]
cmp dword [rax + 0xc], r15d
jmp 0x1404d16ba
jne 0x1404d16e9
cmp byte [rsp + 0x68], dil
jmp 0x1404d16ca
je 0x1404d16dc
mov rax, qword [rsp + 0x50]
and dword [rax + 0x3a8], 0xfffffffd
mov r8d, r15d
jmp 0x1404d16e4
jmp 0x1404d175d
call fcn.1404c33b1
test eax, eax
jmp 0x1404d16f5
jne 0x1404d1729
cmp byte [rsp + 0x68], dil
je 0x1404d171e
mov rax, qword [rsp + 0x50]
rol r8b, cl
cmovg r8d, r15d
movsx r8w, r13b
and dword [rax + 0x3a8], 0xfffffffd
mov r8d, 1
jmp 0x1404d175d
cmp byte [rsp + 0x68], dil
jmp 0x1404d1733
je 0x1404d1756
mov rax, qword [rsp + 0x50]
movsx cx, r10b
and dword [rax + 0x3a8], 0xfffffffd
movsx cx, r13b
movzx r8d, sp
not r8b
mov r8d, edi
cdq
cmovs edx, edi
lea rdx, [rsp + 0x70]
movzx cx, r11b
not rcx
lea rcx, [rbp - 4]
call fcn.1404d0880
mov r15, qword [rbp - 0x80]
test eax, eax
mov cl, dil
movsx ecx, bp
mov rcx, r15
jmp 0x1404d1787
cmovne rcx, rdi
cmp dil, 0x3e
cmp byte [rcx], 0x2e
jne 0x1404d17c9
mov al, byte [rcx + 1]
jmp 0x1404d17a0
test al, al
jmp 0x1404d17a7
je 0x1404d17ff
cmp al, 0x2e
jmp 0x1404d17b4
jne 0x1404d17c9
cmp byte [rcx + 2], dil
jmp 0x1404d17c3
je 0x1404d17ff
mov r9, r12
movsxd rdx, ecx
setge r8b
mov r8, r13
movzx dx, dil
mov rdx, rsi
call fcn.1404d100c
mov edi, eax
cmc
test eax, eax
jmp 0x1404d17ed
jne 0x1404d1880
xor edi, edi
cmp r13b, 0x53
test r10d, edx
test bh, 0x26
cmp byte [rbp - 0x68], dil
jmp 0x1404d1808
je 0x1404d181b
mov rcx, r15
jmp 0x1404d1816
call fcn.1404c222f
lea rdx, [rbp - 0x30]
movzx rcx, r12w
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
mov r15d, 0xfde9
test eax, eax
jmp 0x1404d1839
jne 0x1404d166b
mov rax, qword [r12]
mov rdx, qword [r12 + 8]
jmp 0x1404d184d
sub rdx, rax
sar rdx, 3
cmp r14, rdx
jmp 0x1404d185c
je 0x1404d1897
sub rdx, r14
lea rcx, [rax + r14*8]
lea r9, [0x1400acc8c]
mov r8d, 8
call fcn.1404dd7c7
jmp 0x1404d1897
cmp byte [rbp - 0x68], 0
je 0x1404d1897
mov rcx, r15
jmp 0x1404d1892
call fcn.1404c222f
mov rcx, rbx
jmp 0x1404d189f
call qword [sym.imp.KERNEL32.dll_FindClose]
cmp byte [rbp - 0x38], 0
je 0x1404d18bd
mov rcx, qword [rbp - 0x50]
jmp 0x1404d18b8
call fcn.1404c222f
mov eax, edi
add cl, spl
sub cl, 0xbd
neg ecx
mov rcx, qword [rbp + 0x220]
clc
test r14w, 0x639f
xor rcx, rsp
jmp 0x1404d18dd
call fcn.140498899
mov rbx, qword [rsp + 0x388]
sbb r14, 0x9da7bf2
and r13b, 0x32
movsxd r12, ebp
add rsp, 0x330
jmp 0x1404d190b
pop r15
pop r14
movsxd r12, edi
mov si, 0x7207
movzx di, r15b
pop r13
pop r12
pop rdi
movsxd rsi, r9d
movzx ebp, bx
pop rsi
pop rbp
jmp 0x1404d192d
ret