Function at 0x14048b67c
Capabilities:
Enumerate files on windows

Disassembly:
mov qword [rsp + 0x20], rbx
shr ax, cl
push rbp
adc bx, dx
push rsi
add ah, 0x51
push rdi
sub rsi, 0x2b1a2c1f
push r12
bts r12d, eax
add sil, r15b
push r13
push r14
bts r12, rbx
push r15
lea rbp, [rsp - 0x230]
shld ebx, esp, 0xf2
cbw
jmp 0x14048b6ba
sub rsp, 0x330
and sil, 0x77
shrd si, sp, 0xa2
inc rsi
mov rax, qword [0x1400b4278]
sar si, 0xcf
xchg bl, sil
shr si, 0xe4
xor rax, rsp
shl sil, cl
mov qword [rbp + 0x220], rax
mov r12, r8
mov rsi, rcx
bts rbx, r9
and rbx, 0x269c5f4f
movabs rbx, 0x200000000801
clc
cmp rdx, rcx
je 0x14048b752
mov al, byte [rdx]
stc
sub al, 0x2f
test edi, r14d
cmp al, 0x2d
jmp 0x14048b720
ja 0x14048b734
movsx rax, al
bt rbx, rax
jb 0x14048b752
mov rcx, rsi
jmp 0x14048b73c
call fcn.1400e65f4
mov rdx, rax
cmp rax, rsi
jmp 0x14048b74c
jne 0x14048b711
mov r8b, byte [rdx]
cmc
clc
cmp r8b, 0x3a
jmp 0x14048b760
jne 0x14048b7a5
lea rax, [rsi + 1]
cmp cx, 0x1c60
cmp r11w, cx
clc
cmp rdx, rax
jmp 0x14048b77c
je 0x14048b7a5
mov r9, r12
sub r8d, r8d
movzx ecx, r10w
cmc
xor edx, edx
movsx rcx, di
mov rcx, rsi
jmp 0x14048b79b
call fcn.14048b308
jmp 0x14048bc96
sub r8b, 0x2f
test r12w, r15w
cmp spl, 0x8a
sub edi, edi
cmp r8b, 0x2d
jmp 0x14048b7bc
ja 0x14048b7e2
movsx rax, r8b
stc
clc
cmc
bt rbx, rax
sete al
jmp 0x14048b7d5
mov al, 1
jmp 0x14048b7dc
jb 0x14048b7ea
mov al, dil
sbb cl, bh
mov cl, dil
sub rdx, rsi
movzx cx, r9b
inc ecx
xchg ch, cl
mov qword [rbp - 0x60], rdi
mov cl, dh
inc rdx
mov qword [rbp - 0x58], rdi
neg al
mov qword [rbp - 0x50], rdi
not cl
lea rcx, [rsp + 0x30]
jmp 0x14048b815
mov qword [rbp - 0x48], rdi
jmp 0x14048b81e
sbb r13, r13
mov qword [rbp - 0x40], rdi
test ch, 0x37
and r13, rdx
jmp 0x14048b831
mov byte [rbp - 0x38], dil
clc
xor edx, edx
jmp 0x14048b83d
call fcn.14045861f
mov rax, qword [rsp + 0x38]
neg r15b
mov r15d, 0xfde9
cmp dword [rax + 0xc], r15d
jmp 0x14048b859
jne 0x14048b89c
cmp byte [rsp + 0x48], dil
jmp 0x14048b869
je 0x14048b88f
mov rax, qword [rsp + 0x30]
sbb r8b, 0x62
dec r8b
and dword [rax + 0x3a8], 0xfffffffd
movsxd r8, eax
movzx r8w, cl
movsx r8w, r9b
mov r8d, r15d
jmp 0x14048b897
jmp 0x14048b91c
call fcn.14047d8c0
test eax, eax
jmp 0x14048b8a8
jne 0x14048b8ed
cmp byte [rsp + 0x48], dil
jmp 0x14048b8b8
je 0x14048b8e2
mov rax, qword [rsp + 0x30]
rcr r8w, 0xbd
sal r8d, 0xba
and dword [rax + 0x3a8], 0xfffffffd
movsx r8, si
mov r8, 0x4e1d32ee
movzx r8d, r8w
mov r8d, 1
jmp 0x14048b91c
cmp byte [rsp + 0x48], dil
jmp 0x14048b8f7
je 0x14048b915
mov rax, qword [rsp + 0x30]
sar dx, cl
and r8b, 0x48
and dword [rax + 0x3a8], 0xfffffffd
cqo
not r8d
mov r8d, edi
movsx edx, r10w
lea rdx, [rbp - 0x60]
movsx cx, r10b
cmovp ecx, r15d
mov cl, r11b
mov rcx, rsi
jmp 0x14048b934
call fcn.140458fd1
mov rcx, qword [rbp - 0x50]
btr r8, 0xdb
movsx r8d, bp
lea r8, [rbp - 0x30]
clc
cmc
test eax, eax
jmp 0x14048b953
mov dword [rsp + 0x28], edi
jmp 0x14048b95c
mov qword [rsp + 0x20], rdi
jmp 0x14048b966
cmovne rcx, rdi
clc
test r9d, edx
sub r9d, r9d
test r8, rbx
cmp r10b, 0x17
stc
sub edx, edx
jmp 0x14048b980
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov rbx, rax
clc
test di, r13w
cmp rax, 0xffffffffffffffff
jmp 0x14048b997
jne 0x14048b9c7
mov r9, r12
sub r8d, r8d
xor cl, r8b
xor edx, edx
movsx ecx, di
not rcx
mov rcx, rsi
jmp 0x14048b9b6
call fcn.14048b308
mov edi, eax
jmp 0x14048b9c2
jmp 0x14048bc74
mov r14, qword [r12 + 8]
mov rcx, rdi
sbb cl, sil
test r8b, 0xd0
sub r14, qword [r12]
inc cl
sar r14, 3
btc cx, r10w
ror cl, cl
sub edx, edx
mov qword [rsp + 0x70], rdi
lea rcx, [rsp + 0x50]
jmp 0x14048b9f8
mov qword [rsp + 0x78], rdi
jmp 0x14048ba02
mov qword [rbp - 0x80], rdi
jmp 0x14048ba0b
mov qword [rbp - 0x78], rdi
jmp 0x14048ba14
mov qword [rbp - 0x70], rdi
mov byte [rbp - 0x68], dil
call fcn.14045861f
mov rax, qword [rsp + 0x58]
cmp dword [rax + 0xc], r15d
jmp 0x14048ba2f
jne 0x14048ba5d
cmp byte [rsp + 0x68], dil
jmp 0x14048ba3f
je 0x14048ba55
mov rax, qword [rsp + 0x50]
setae r8b
and dword [rax + 0x3a8], 0xfffffffd
mov r8d, r15d
jmp 0x14048bacf
call fcn.14047d8c0
test eax, eax
jmp 0x14048ba69
jne 0x14048baa1
cmp byte [rsp + 0x68], dil
je 0x14048ba96
mov rax, qword [rsp + 0x50]
rcr r8d, cl
and dword [rax + 0x3a8], 0xfffffffd
cmovb r8d, r13d
jmp 0x14048ba96
mov r8d, 1
jmp 0x14048bacf
cmp byte [rsp + 0x68], dil
jmp 0x14048baab
je 0x14048bac3
mov rax, qword [rsp + 0x50]
not r8
mov ch, 0x73
and dword [rax + 0x3a8], 0xfffffffd
mov r8d, edi
cmovns ecx, r11d
movzx cx, r14b
lea rdx, [rsp + 0x70]
mov cl, 0x23
setne ch
movsxd rcx, r8d
lea rcx, [rbp - 4]
jmp 0x14048bae5
call fcn.14048ab6b
mov r15, qword [rbp - 0x80]
xchg cl, cl
bt cx, r8w
test eax, eax
movsx cx, r12b
movzx rcx, r12w
mov rcx, r15
jmp 0x14048bb08
cmovne rcx, rdi
jmp 0x14048bb15
cmp byte [rcx], 0x2e
jmp 0x14048bb1d
jne 0x14048bb56
mov al, byte [rcx + 1]
test r15w, r10w
jmp 0x14048bb32
test al, al
jmp 0x14048bb39
je 0x14048bb9a
cmp al, 0x2e
jne 0x14048bb56
cmp byte [rcx + 2], dil
jmp 0x14048bb50
je 0x14048bb9a
mov r9, r12
movsx edx, r14w
movzx rdx, sp
cqo
mov r8, r13
bswap dx
setp dh
movzx dx, r8b
mov rdx, rsi
jmp 0x14048bb79
call fcn.14048b308
mov edi, eax
test r13b, 0x86
cmp r9d, 0x57b3597f
test eax, eax
jmp 0x14048bb92
jne 0x14048bc4a
sub edi, edi
cmp byte [rbp - 0x68], dil
jmp 0x14048bba3
je 0x14048bbb6
mov rcx, r15
jmp 0x14048bbb1
call fcn.14047c775
lea rdx, [rbp - 0x30]
movzx rcx, cx
mov rcx, rbx
jmp 0x14048bbc6
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
mov r15d, 0xfde9
stc
test eax, eax
jmp 0x14048bbda
jne 0x14048b9e7
mov rax, qword [r12]
or rdx, 0x66ae5b7f
bsf edx, r15d
cmp r15d, 0x6ac24790
mov rdx, qword [r12 + 8]
cmp r15, r12
clc
sub rdx, rax
test r8b, dil
sar rdx, 3
cmp r14, rdx
jmp 0x14048bc11
je 0x14048bc66
sub rdx, r14
setp r8b
lea rcx, [rax + r14*8]
bswap r9w
jmp 0x14048bc2e
lea r9, [0x1400a9eb8]
mov r8d, 8
jmp 0x14048bc40
call fcn.140497c7c
jmp 0x14048bc66
cmp byte [rbp - 0x68], 0
jmp 0x14048bc53
je 0x14048bc66
mov rcx, r15
jmp 0x14048bc61
call fcn.14047c775
mov rcx, rbx
jmp 0x14048bc6e
call qword [sym.imp.KERNEL32.dll_FindClose]
cmp byte [rbp - 0x38], 0
jmp 0x14048bc7d
je 0x14048bc91
mov rcx, qword [rbp - 0x50]
jmp 0x14048bc8c
call fcn.14047c775
mov eax, edi
setg ch
mov rcx, qword [rbp + 0x220]
xor rcx, rsp
call fcn.1404525ed
mov rbx, qword [rsp + 0x388]
bts rdi, r12
movsx esi, di
and r14w, r15w
add rsp, 0x330
movzx r15d, r9w
xchg sil, r12b
movzx r12, bp
pop r15
movsx si, al
movzx r14, r8w
mov bp, 0x7987
pop r14
pop r13
movsx rdi, si
pop r12
movsx di, al
movzx rdi, dx
setl dil
pop rdi
movsx ebp, r13w
bswap rbp
pop rsi
movsx ebp, r13w
movzx rbp, ax
jmp 0x14048bd04
pop rbp
jmp 0x14048bd0a
ret