Function at 0x14048d3f4
Capabilities:
Enumerate files on windows

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
rcl ebx, 0xd4
movsx rax, r10w
push rsi
bsr esi, edx
push rdi
neg ax
push r12
test r14w, 0x17a
push r13
cmp r14w, 0x468f
push r14
test r11b, 0x25
cbw
shr ax, 0x9c
push r15
lahf
sbb bpl, 0xb9
movsxd r12, r10d
lea rbp, [rsp - 0x230]
rcl rsi, 0x3a
sbb eax, eax
sub rsp, 0x330
xor bl, spl
test bp, r14w
mov rax, qword [0x1400b6278]
xor rax, rsp
adc r12d, 0x16ea1338
dec sil
mov qword [rbp + 0x220], rax
bswap bx
mov r12, r8
mov rsi, rcx
xadd bx, bx
movsx bx, r9b
movabs rbx, 0x200000000801
cmp rdx, rcx
je 0x14048d4e0
mov al, byte [rdx]
stc
test r14, 0x4e0a1264
sub al, 0x2f
cmp al, 0x2d
jmp 0x14048d49e
ja 0x14048d4bd
movsx rax, al
clc
jmp 0x14048d4ae
bt rbx, rax
jmp 0x14048d4b7
jb 0x14048d4e0
mov rcx, rsi
jmp 0x14048d4c5
call fcn.1401a5e4c
mov rdx, rax
jmp 0x14048d4d2
cmp rax, rsi
jmp 0x14048d4da
jne 0x14048d48b
mov r8b, byte [rdx]
cmp r8b, 0x3a
jmp 0x14048d4ec
jne 0x14048d522
lea rax, [rsi + 1]
cmp r11b, 0x70
cmp rdx, rax
je 0x14048d522
mov r9, r12
rcl cl, 0xb9
sub r8d, r8d
xor edx, edx
xchg ch, cl
mov rcx, rsi
jmp 0x14048d518
call fcn.14048d0e7
jmp 0x14048d9ee
sub r8b, 0x2f
cmp ch, 0x5e
test r14b, r10b
sub edi, edi
cmp r8b, 0x2d
jmp 0x14048d537
ja 0x14048d55b
movsx rax, r8b
jmp 0x14048d546
bt rbx, rax
xchg al, al
mov al, 0xb2
mov al, 1
jmp 0x14048d555
jb 0x14048d55e
mov al, dil
sub rdx, rsi
mov qword [rbp - 0x60], rdi
movsx rcx, r12w
inc rdx
bt rcx, rsi
mov qword [rbp - 0x58], rdi
movsx rcx, r12w
rcr ecx, 0x36
xor ecx, edx
neg al
mov qword [rbp - 0x50], rdi
movzx ecx, r12w
lea rcx, [rsp + 0x30]
jmp 0x14048d591
mov qword [rbp - 0x48], rdi
jmp 0x14048d59a
sbb r13, r13
mov qword [rbp - 0x40], rdi
clc
and r13, rdx
mov byte [rbp - 0x38], dil
stc
cmc
xor edx, edx
call fcn.14045aa1f
mov rax, qword [rsp + 0x38]
rcr r15d, cl
cmovnp r15, rdi
shl r15d, cl
mov r15d, 0xfde9
stc
test ecx, 0x9dc1fc6
cmp dword [rax + 0xc], r15d
jmp 0x14048d5d7
jne 0x14048d614
cmp byte [rsp + 0x48], dil
jmp 0x14048d5e7
je 0x14048d607
mov rax, qword [rsp + 0x30]
bswap r8d
cmp r10b, r10b
and dword [rax + 0x3a8], 0xfffffffd
mov r8w, 0x6c0b
xchg r8b, r8b
mov r8d, r15d
jmp 0x14048d60f
jmp 0x14048d680
call fcn.14047f727
test eax, eax
jmp 0x14048d620
jne 0x14048d65f
cmp byte [rsp + 0x48], dil
jmp 0x14048d630
je 0x14048d654
mov rax, qword [rsp + 0x30]
adc r8b, 0x72
sal r8b, cl
stc
and dword [rax + 0x3a8], 0xfffffffd
mov r8w, sp
not r8d
mov r8b, 0xe0
mov r8d, 1
jmp 0x14048d680
cmp byte [rsp + 0x48], dil
jmp 0x14048d669
je 0x14048d67b
mov rax, qword [rsp + 0x30]
and dword [rax + 0x3a8], 0xfffffffd
mov r8d, edi
cwd
lea rdx, [rbp - 0x60]
movsx rcx, r15w
mov rcx, rsi
jmp 0x14048d690
call fcn.14045b433
mov rcx, qword [rbp - 0x50]
rcr r8b, cl
lea r8, [rbp - 0x30]
cmp sil, r14b
test r13b, 0xc6
test eax, eax
jmp 0x14048d6ae
mov dword [rsp + 0x28], edi
jmp 0x14048d6b7
mov qword [rsp + 0x20], rdi
jmp 0x14048d6c1
cmovne rcx, rdi
jmp 0x14048d6cb
sub r9d, r9d
xor edx, edx
jmp 0x14048d6d5
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jmp 0x14048d6e7
jne 0x14048d71c
mov r9, r12
rcl cl, cl
movsx ecx, si
movsxd rcx, edx
sub r8d, r8d
xor edx, edx
movsxd rcx, r10d
setg cl
mov rcx, rsi
jmp 0x14048d70b
call fcn.14048d0e7
mov edi, eax
jmp 0x14048d717
jmp 0x14048d9cc
mov r14, qword [r12 + 8]
shr ch, 0x55
movzx ecx, r15w
sbb cl, spl
sub r14, qword [r12]
movzx cx, r9b
sar r14, 3
movzx cx, bl
ror cl, 0xf6
sal cl, cl
xor edx, edx
not cx
mov cl, 2
mov qword [rsp + 0x70], rdi
bswap cx
movzx ecx, ax
mov cx, di
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x80], rdi
jmp 0x14048d769
mov qword [rbp - 0x78], rdi
mov qword [rbp - 0x70], rdi
jmp 0x14048d776
mov byte [rbp - 0x68], dil
jmp 0x14048d77f
call fcn.14045aa1f
mov rax, qword [rsp + 0x58]
clc
test r11b, 0x43
cmp dword [rax + 0xc], r15d
jmp 0x14048d797
jne 0x14048d7d0
cmp byte [rsp + 0x68], dil
jmp 0x14048d7a7
je 0x14048d7c3
mov rax, qword [rsp + 0x50]
movzx r8w, al
and dword [rax + 0x3a8], 0xfffffffd
movsx r8w, r14b
mov r8d, r15d
jmp 0x14048d7cb
jmp 0x14048d83e
call fcn.14047f727
test eax, eax
jne 0x14048d80d
cmp byte [rsp + 0x68], dil
jmp 0x14048d7e7
je 0x14048d7fd
mov rax, qword [rsp + 0x50]
ror r8b, 0x69
and dword [rax + 0x3a8], 0xfffffffd
mov r8d, 1
jmp 0x14048d808
jmp 0x14048d83e
cmp byte [rsp + 0x68], dil
je 0x14048d838
mov rax, qword [rsp + 0x50]
xor dx, 0x6a8f
shld r8w, r12w, 0x33
and dword [rax + 0x3a8], 0xfffffffd
cwd
xchg r8b, r8b
movsx r8d, r10w
mov r8d, edi
movsx ecx, sp
lea rdx, [rsp + 0x70]
mov cx, 0x5d1a
movzx ecx, sp
lea rcx, [rbp - 4]
jmp 0x14048d853
call fcn.14048c92e
mov r15, qword [rbp - 0x80]
neg cx
sbb cx, r12w
test eax, eax
cmovo cx, r15w
movsx rcx, r9w
movzx cx, r10b
mov rcx, r15
jmp 0x14048d87b
cmovne rcx, rdi
stc
cmp dx, bx
cmp byte [rcx], 0x2e
jmp 0x14048d88b
jne 0x14048d8c3
mov al, byte [rcx + 1]
test r13b, 0x25
cmc
clc
test al, al
jmp 0x14048d8a1
je 0x14048d8f7
cmp al, 0x2e
jmp 0x14048d8ae
jne 0x14048d8c3
cmp byte [rcx + 2], dil
jmp 0x14048d8bd
je 0x14048d8f7
mov r9, r12
setb dh
movsxd rdx, esp
movzx r8, r10w
mov r8, r13
movsx edx, ax
movsxd rdx, edi
mov rdx, rsi
jmp 0x14048d8e1
call fcn.14048d0e7
mov edi, eax
test eax, eax
jmp 0x14048d8ef
jne 0x14048d9a2
xor edi, edi
cmp byte [rbp - 0x68], dil
jmp 0x14048d900
je 0x14048d913
mov rcx, r15
jmp 0x14048d90e
call fcn.14047e5e7
lea rdx, [rbp - 0x30]
movzx rcx, r10w
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
mov r15d, 0xfde9
test eax, eax
jmp 0x14048d931
jne 0x14048d741
mov rax, qword [r12]
cwd
mov rdx, qword [r12 + 8]
cmp r8b, al
clc
sub rdx, rax
cmp r14w, dx
jmp 0x14048d952
sar rdx, 3
cmp r14, rdx
jmp 0x14048d95e
je 0x14048d9be
sub rdx, r14
mov r8w, bp
bswap rcx
lea rcx, [rax + r14*8]
bswap r9w
movzx r8d, bp
lea r9, [0x1400abeb8]
movzx r8, r9w
cmove r8d, edx
movsx r8d, dx
mov r8d, 8
jmp 0x14048d998
call fcn.1404996c9
jmp 0x14048d9be
cmp byte [rbp - 0x68], 0
jmp 0x14048d9ab
je 0x14048d9be
mov rcx, r15
jmp 0x14048d9b9
call fcn.14047e5e7
mov rcx, rbx
jmp 0x14048d9c6
call qword [sym.imp.KERNEL32.dll_FindClose]
cmp byte [rbp - 0x38], 0
jmp 0x14048d9d5
je 0x14048d9e9
mov rcx, qword [rbp - 0x50]
jmp 0x14048d9e4
call fcn.14047e5e7
mov eax, edi
adc ecx, r12d
mov rcx, qword [rbp + 0x220]
xor rcx, rsp
jmp 0x14048d9fd
call fcn.140454a7f
mov rbx, qword [rsp + 0x388]
and r15b, 0x34
mov r14b, 0xb9
add rsp, 0x330
pop r15
pop r14
not dil
pop r13
pop r12
movsxd rsi, r12d
pop rdi
movsxd rbp, ebp
setns bpl
pop rsi
movsx rbp, r15w
movzx ebp, r13w
pop rbp
jmp 0x14048da3d
ret