Function at 0x1404d71e6
Capabilities:
Enumerate files on windows

Disassembly:
mov qword [rsp + 0x20], rbx
adc ax, 0x6f1b
or bh, bl
push rbp
sar rax, 0xa8
push rsi
btr ebp, r12d
cwde
push rdi
push r12
push r13
movsx r12w, al
push r14
cwde
push r15
lea rbp, [rsp - 0x230]
rcl r12d, 0xe
movsx bx, r14b
sub rsp, 0x330
mov rax, qword [0x1400b7288]
add esi, 0x557a4bef
mov bl, al
rcr r12d, cl
xor rax, rsp
shl bx, 0xeb
movsx esi, sp
shld esi, r15d, 0x3b
mov qword [rbp + 0x220], rax
mov r12, r8
mov si, sp
mov rsi, rcx
movabs rbx, 0x200000000801
cmc
test esi, 0x62e5698f
test spl, r12b
cmp rdx, rcx
je 0x1404d72ad
mov al, byte [rdx]
sub al, 0x2f
cmp al, 0x2d
ja 0x1404d7290
movsx rax, al
jmp 0x1404d7286
bt rbx, rax
jb 0x1404d72ad
mov rcx, rsi
call fcn.1401c25e4
mov rdx, rax
cmc
test ah, 0xe9
cmp rax, rsi
jmp 0x1404d72a7
jne 0x1404d7271
mov r8b, byte [rdx]
cmp r8b, 0x3a
jmp 0x1404d72b9
jne 0x1404d72ee
lea rax, [rsi + 1]
cmp rdx, rax
jmp 0x1404d72cb
je 0x1404d72ee
mov r9, r12
sub r8d, r8d
or cx, bx
sub edx, edx
mov rcx, rsi
jmp 0x1404d72e4
call fcn.1404d6e8b
jmp 0x1404d7784
sub r8b, 0x2f
cmp r13b, r9b
cmp rsi, 0x610d6ec7
xor edi, edi
cmp r12b, 0x17
cmp r8b, 0x2d
jmp 0x1404d730b
ja 0x1404d732c
movsx rax, r8b
jmp 0x1404d731b
bt rbx, rax
mov al, r13b
mov al, 0xd8
mov al, 1
jb 0x1404d7334
mov al, dil
add cl, 0x61
rol cl, cl
sub rdx, rsi
mov qword [rbp - 0x60], rdi
movsxd rcx, eax
inc rdx
shl ch, cl
dec ch
mov qword [rbp - 0x58], rdi
cmovno cx, bx
ror ch, 0x52
neg al
setnp cl
mov qword [rbp - 0x50], rdi
mov rcx, 0x43937a17
lea rcx, [rsp + 0x30]
mov qword [rbp - 0x48], rdi
jmp 0x1404d736e
sbb r13, r13
cmp sp, 0x6090
cmp cl, r12b
mov qword [rbp - 0x40], rdi
and r13, rdx
mov byte [rbp - 0x38], dil
jmp 0x1404d7389
xor edx, edx
call fcn.1404a3660
mov rax, qword [rsp + 0x38]
mov r15d, 0xfde9
clc
cmc
jmp 0x1404d73a2
cmp dword [rax + 0xc], r15d
jne 0x1404d73da
cmp byte [rsp + 0x48], dil
je 0x1404d73d2
mov rax, qword [rsp + 0x30]
movsxd r8, r11d
shl r8b, cl
and dword [rax + 0x3a8], 0xfffffffd
movsx r8, r15w
movzx r8w, bpl
mov r8d, r15d
jmp 0x1404d7455
call fcn.1404c9497
test eax, eax
jne 0x1404d7424
cmp byte [rsp + 0x48], dil
jmp 0x1404d73f1
je 0x1404d7414
mov rax, qword [rsp + 0x30]
rcl r8b, cl
and dword [rax + 0x3a8], 0xfffffffd
movsx r8w, r14b
movsx r8d, r15w
jmp 0x1404d7414
mov r8d, 1
jmp 0x1404d741f
jmp 0x1404d7455
cmp byte [rsp + 0x48], dil
jmp 0x1404d742e
je 0x1404d7452
mov rax, qword [rsp + 0x30]
sbb dl, r11b
movsx ecx, r13w
btc dx, dx
and dword [rax + 0x3a8], 0xfffffffd
not cl
cwd
setg dh
mov r8d, edi
lea rdx, [rbp - 0x60]
not cx
mov rcx, rsi
jmp 0x1404d7464
call fcn.1404a408f
mov rcx, qword [rbp - 0x50]
shl r8b, 0x8e
sal r8b, cl
sub r8b, r11b
lea r8, [rbp - 0x30]
cmc
test eax, eax
jmp 0x1404d7483
mov dword [rsp + 0x28], edi
jmp 0x1404d748c
mov qword [rsp + 0x20], rdi
jmp 0x1404d7496
cmovne rcx, rdi
sub r9d, r9d
sub edx, edx
jmp 0x1404d74a4
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jmp 0x1404d74b6
jne 0x1404d74e1
mov r9, r12
or cl, r9b
xor r8d, r8d
clc
xor edx, edx
mov cl, 0x18
bswap cx
mov rcx, rsi
call fcn.1404d6e8b
mov edi, eax
jmp 0x1404d74dc
jmp 0x1404d775d
mov r14, qword [r12 + 8]
sub r14, qword [r12]
rcr ecx, cl
shr cl, cl
sar r14, 3
sub edx, edx
movsx rcx, r8w
mov qword [rsp + 0x70], rdi
not ch
mov cx, r9w
lea rcx, [rsp + 0x50]
jmp 0x1404d750d
mov qword [rsp + 0x78], rdi
jmp 0x1404d7517
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x78], rdi
mov qword [rbp - 0x70], rdi
jmp 0x1404d7528
mov byte [rbp - 0x68], dil
jmp 0x1404d7531
call fcn.1404a3660
mov rax, qword [rsp + 0x58]
cmp dword [rax + 0xc], r15d
jmp 0x1404d7544
jne 0x1404d7576
cmp byte [rsp + 0x68], dil
je 0x1404d7569
mov rax, qword [rsp + 0x50]
and dword [rax + 0x3a8], 0xfffffffd
xchg r8d, r8d
movsx r8w, cl
mov r8d, r15d
jmp 0x1404d7571
jmp 0x1404d75e2
call fcn.1404c9497
test eax, eax
jmp 0x1404d7582
jne 0x1404d75bf
cmp byte [rsp + 0x68], dil
jmp 0x1404d7592
je 0x1404d75af
mov rax, qword [rsp + 0x50]
sub r8, 0x7b5f10a7
and dword [rax + 0x3a8], 0xfffffffd
cmovg r8d, edi
mov r8d, 1
jmp 0x1404d75ba
jmp 0x1404d75e2
cmp byte [rsp + 0x68], dil
jmp 0x1404d75c9
je 0x1404d75df
mov rax, qword [rsp + 0x50]
btr rcx, rsi
and dword [rax + 0x3a8], 0xfffffffd
mov r8d, edi
lea rdx, [rsp + 0x70]
movsx cx, r11b
movsx rcx, r9w
lea rcx, [rbp - 4]
jmp 0x1404d75f9
call fcn.1404d66f5
mov r15, qword [rbp - 0x80]
cmovae ecx, r10d
ror ecx, cl
test eax, eax
movsxd rcx, esp
xchg ecx, ecx
movzx cx, r8b
mov rcx, r15
jmp 0x1404d761c
cmovne rcx, rdi
stc
cmp byte [rcx], 0x2e
jne 0x1404d7656
mov al, byte [rcx + 1]
test al, al
jmp 0x1404d7634
je 0x1404d768a
cmp al, 0x2e
jmp 0x1404d7641
jne 0x1404d7656
cmp byte [rcx + 2], dil
jmp 0x1404d7650
je 0x1404d768a
mov r9, r12
cwd
cdq
mov r8, r13
seta dh
mov rdx, rsi
jmp 0x1404d766a
call fcn.1404d6e8b
mov edi, eax
test r10b, r13b
cmp si, 0x5834
test eax, eax
jmp 0x1404d7680
jne 0x1404d7733
sub edi, edi
clc
stc
cmp byte [rbp - 0x68], dil
jmp 0x1404d7693
je 0x1404d76a6
mov rcx, r15
jmp 0x1404d76a1
call fcn.1404c8319
lea rdx, [rbp - 0x30]
movsxd rcx, r9d
cmovne rcx, r8
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
mov r15d, 0xfde9
test eax, eax
jmp 0x1404d76c7
jne 0x1404d74f2
mov rax, qword [r12]
btr edx, r12d
shr edx, cl
mov rdx, qword [r12 + 8]
sub rdx, rax
sar rdx, 3
jmp 0x1404d76e9
cmp r14, rdx
jmp 0x1404d76f1
je 0x1404d774f
sub rdx, r14
setl cl
jmp 0x1404d7706
lea rcx, [rax + r14*8]
movsxd r8, edx
lea r9, [0x1400acc8c]
movzx r8w, cl
jmp 0x1404d771e
mov r8d, 8
jmp 0x1404d7729
call fcn.1404e35cf
jmp 0x1404d774f
cmp byte [rbp - 0x68], 0
jmp 0x1404d773c
je 0x1404d774f
mov rcx, r15
jmp 0x1404d774a
call fcn.1404c8319
mov rcx, rbx
jmp 0x1404d7757
call qword [sym.imp.KERNEL32.dll_FindClose]
cmp byte [rbp - 0x38], 0
jmp 0x1404d7766
je 0x1404d777a
mov rcx, qword [rbp - 0x50]
jmp 0x1404d7775
call fcn.1404c8319
mov eax, edi
sbb cl, 0x36
cmp si, 0x1d38
mov rcx, qword [rbp + 0x220]
test r9d, r11d
xor rcx, rsp
jmp 0x1404d7796
call fcn.14049eb1e
mov rbx, qword [rsp + 0x388]
add rsp, 0x330
xchg r15b, dil
movzx rsi, ax
pop r15
movzx r12w, cl
mov r13b, 0x84
movsx di, cl
pop r14
pop r13
movzx edi, r15w
movsx bp, r11b
pop r12
movzx di, r15b
not si
movsx rsi, bx
pop rdi
pop rsi
mov bp, bx
mov bpl, 0x32
movsxd rbp, edi
pop rbp
jmp 0x1404d77eb
ret