Function at 0x1404d8c7a
Capabilities:
Enumerate files on windows

Disassembly:
mov qword [rsp + 0x20], rbx
bswap rbx
setge ah
cmp bl, r8b
push rbp
and al, r15b
shld rax, rbx, 0xd3
push rsi
mov eax, ebx
cmovge rbx, r15
push rdi
push r12
push r13
xor bl, r12b
cdqe
not esi
push r14
add ebp, 0x2aff7018
sbb al, r11b
push r15
movzx si, spl
rcr r12b, 0xe
lea rbp, [rsp - 0x230]
adc r12b, r10b
sub rsp, 0x330
mov rax, qword [0x1400b7288]
sete bl
bt r12w, r13w
xor rax, rsp
rcl r12b, 0x8c
mov qword [rbp + 0x220], rax
mov r12, r8
bt ebx, 0xa1
mov rsi, rcx
setl bh
bts ebx, r15d
movabs rbx, 0x200000000801
jmp 0x1404d8d0a
cmp rdx, rcx
je 0x1404d8d59
mov al, byte [rdx]
cmc
sub al, 0x2f
cmc
clc
cmp r15b, 7
cmp al, 0x2d
jmp 0x1404d8d25
ja 0x1404d8d3f
movsx rax, al
clc
bt rbx, rax
jmp 0x1404d8d39
jb 0x1404d8d59
mov rcx, rsi
call fcn.1401ced14
mov rdx, rax
stc
cmp rax, rsi
jmp 0x1404d8d53
jne 0x1404d8d13
mov r8b, byte [rdx]
test r12b, 0xb7
clc
cmp r8b, 0x3a
jne 0x1404d8db2
lea rax, [rsi + 1]
cmp rdx, rax
jmp 0x1404d8d77
je 0x1404d8db2
mov r9, r12
adc cl, r9b
clc
sal rcx, 0x17
xor r8d, r8d
inc cx
movzx ecx, r14w
movzx rcx, r11w
xor edx, edx
movsx cx, r15b
setl cl
mov rcx, rsi
jmp 0x1404d8da8
call fcn.1404d88e7
jmp 0x1404d9253
sub r8b, 0x2f
sub edi, edi
cmp r8b, 0x2d
jmp 0x1404d8dc1
ja 0x1404d8dde
movsx rax, r8b
jmp 0x1404d8dd0
bt rbx, rax
mov al, 0x29
mov al, 1
jb 0x1404d8dea
mov al, dil
rcr ecx, 0x97
bswap ecx
bsf rcx, rcx
sub rdx, rsi
mov qword [rbp - 0x60], rdi
jmp 0x1404d8df6
inc rdx
xadd cx, cx
mov qword [rbp - 0x58], rdi
neg al
not ecx
mov qword [rbp - 0x50], rdi
dec cx
movzx rcx, ax
movsx ecx, cx
lea rcx, [rsp + 0x30]
jmp 0x1404d8e1d
mov qword [rbp - 0x48], rdi
sbb r13, r13
test dx, r8w
mov qword [rbp - 0x40], rdi
and r13, rdx
cmp r10b, r14b
mov byte [rbp - 0x38], dil
test r9w, 0x65b6
stc
sub edx, edx
jmp 0x1404d8e44
call fcn.1404a5078
mov rax, qword [rsp + 0x38]
rol r15b, 0xa1
mov r15d, 0xfde9
cmp dword [rax + 0xc], r15d
jmp 0x1404d8e61
jne 0x1404d8ea3
cmp byte [rsp + 0x48], dil
jmp 0x1404d8e71
je 0x1404d8e9b
mov rax, qword [rsp + 0x30]
movsx r8d, r8w
cmp spl, 0xae
not r8d
and dword [rax + 0x3a8], 0xfffffffd
setg r8b
cmovb r8w, bp
movzx r8d, di
mov r8d, r15d
jmp 0x1404d8f06
call fcn.1404cae55
test eax, eax
jmp 0x1404d8eaf
jne 0x1404d8edc
cmp byte [rsp + 0x48], dil
je 0x1404d8ecc
mov rax, qword [rsp + 0x30]
and dword [rax + 0x3a8], 0xfffffffd
mov r8d, 1
jmp 0x1404d8ed7
jmp 0x1404d8f06
cmp byte [rsp + 0x48], dil
je 0x1404d8ef8
mov rax, qword [rsp + 0x30]
and dword [rax + 0x3a8], 0xfffffffd
cdq
setnp r8b
mov r8d, edi
movsx rdx, sp
cqo
cmovnp dx, r14w
lea rdx, [rbp - 0x60]
mov cx, 0x37f0
mov rcx, rsi
jmp 0x1404d8f16
call fcn.1404a5aca
mov rcx, qword [rbp - 0x50]
lea r8, [rbp - 0x30]
test eax, eax
mov dword [rsp + 0x28], edi
jmp 0x1404d8f2e
mov qword [rsp + 0x20], rdi
jmp 0x1404d8f38
cmovne rcx, rdi
test r12w, si
sub r9d, r9d
cmp r8b, spl
sub edx, edx
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov rbx, rax
cmp bp, ax
cmp rax, 0xffffffffffffffff
jmp 0x1404d8f5d
jne 0x1404d8f9a
mov r9, r12
mov ecx, edi
sbb rcx, rbx
sar rcx, 0x32
xor r8d, r8d
xadd rcx, rcx
btc cx, 0x6f
movsx rcx, di
xor edx, edx
mov rcx, rsi
jmp 0x1404d8f89
call fcn.1404d88e7
mov edi, eax
jmp 0x1404d8f95
jmp 0x1404d923e
mov r14, qword [r12 + 8]
shrd cx, bp, 0xc8
sub r14, qword [r12]
sar r14, 3
movsx rcx, bx
sub edx, edx
mov qword [rsp + 0x70], rdi
movzx ecx, r14w
lea rcx, [rsp + 0x50]
jmp 0x1404d8fc5
mov qword [rsp + 0x78], rdi
jmp 0x1404d8fcf
mov qword [rbp - 0x80], rdi
jmp 0x1404d8fd8
mov qword [rbp - 0x78], rdi
jmp 0x1404d8fe1
mov qword [rbp - 0x70], rdi
jmp 0x1404d8fea
mov byte [rbp - 0x68], dil
call fcn.1404a5078
mov rax, qword [rsp + 0x58]
stc
cmp dword [rax + 0xc], r15d
jmp 0x1404d9002
jne 0x1404d9039
cmp byte [rsp + 0x68], dil
jmp 0x1404d9012
je 0x1404d902c
mov rax, qword [rsp + 0x50]
and dword [rax + 0x3a8], 0xfffffffd
movsx r8w, bpl
xchg r8b, r8b
mov r8d, r15d
jmp 0x1404d9034
jmp 0x1404d90b0
call fcn.1404cae55
test eax, eax
jmp 0x1404d9045
jne 0x1404d9083
cmp byte [rsp + 0x68], dil
jmp 0x1404d9055
je 0x1404d9078
mov rax, qword [rsp + 0x50]
cmp sil, 0xa0
movsx r8, r14w
and dword [rax + 0x3a8], 0xfffffffd
mov r8d, 0x5b9c116f
movsxd r8, r14d
mov r8d, 1
jmp 0x1404d90b0
cmp byte [rsp + 0x68], dil
jmp 0x1404d908d
je 0x1404d90a6
mov rax, qword [rsp + 0x50]
and dword [rax + 0x3a8], 0xfffffffd
xchg dl, dl
jmp 0x1404d90a6
mov r8d, edi
setno dh
movsx edx, r11w
lea rdx, [rsp + 0x70]
movzx rcx, r10w
mov cx, 0xb72
lea rcx, [rbp - 4]
call fcn.1404d80f0
mov r15, qword [rbp - 0x80]
or rcx, rbx
sub cl, r9b
xor cl, sil
test eax, eax
mov rcx, r15
cmovne rcx, rdi
stc
test ebx, 0xdee14a3
cmp byte [rcx], 0x2e
jmp 0x1404d90eb
jne 0x1404d911d
mov al, byte [rcx + 1]
test al, al
jmp 0x1404d90fb
je 0x1404d9160
cmp al, 0x2e
jmp 0x1404d9108
jne 0x1404d911d
cmp byte [rcx + 2], dil
jmp 0x1404d9117
je 0x1404d9160
mov r9, r12
movzx rdx, si
cmovg r8, rbx
mov r8, r13
mov dh, 0xaf
movsx rdx, r9w
mov rdx, rsi
jmp 0x1404d913a
call fcn.1404d88e7
mov edi, eax
stc
jmp 0x1404d9147
test eax, eax
jmp 0x1404d914e
jne 0x1404d9219
xor edi, edi
test esp, 0x671163ab
clc
test r9b, spl
cmp byte [rbp - 0x68], dil
jmp 0x1404d9169
je 0x1404d917c
mov rcx, r15
jmp 0x1404d9177
call fcn.1404c9d48
lea rdx, [rbp - 0x30]
cmovp ecx, r11d
movsx cx, dil
mov rcx, rbx
jmp 0x1404d9191
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
mov r15d, 0xfde9
test eax, eax
jne 0x1404d8fb0
mov rax, qword [r12]
add dl, r12b
mov rdx, qword [r12 + 8]
cmp r12w, 0x5031
test r15b, 0xc3
test rdx, r9
sub rdx, rax
cmp sp, r9w
test r11b, 0x1a
sar rdx, 3
cmp r14, rdx
jmp 0x1404d91d5
je 0x1404d9230
sub rdx, r14
mov r8b, bpl
movzx r9, r13w
cmovne r9w, r12w
lea rcx, [rax + r14*8]
movsxd r8, r10d
mov r8, r9
lea r9, [0x1400acc8c]
movsx r8d, r8w
mov r8w, 0x2317
mov r8d, 8
jmp 0x1404d920f
call fcn.1404e50f6
jmp 0x1404d9230
cmp byte [rbp - 0x68], 0
je 0x1404d9230
mov rcx, r15
jmp 0x1404d922b
call fcn.1404c9d48
mov rcx, rbx
jmp 0x1404d9238
call qword [sym.imp.KERNEL32.dll_FindClose]
cmp byte [rbp - 0x38], 0
je 0x1404d9251
mov rcx, qword [rbp - 0x50]
call fcn.1404c9d48
mov eax, edi
mov rcx, qword [rbp + 0x220]
xor rcx, rsp
jmp 0x1404d9262
call fcn.1404a0519
mov rbx, qword [rsp + 0x388]
neg r14b
sub r12w, 0x75d
movzx r14w, dil
add rsp, 0x330
pop r15
bswap bp
pop r14
movzx r12d, r12w
pop r13
not si
xchg bpl, dil
pop r12
pop rdi
xchg bpl, sil
movsx ebp, r10w
movsxd rsi, r10d
pop rsi
mov bp, 0x1dc
pop rbp
ret