Function at 0x1404dcfd7
Capabilities:
Enumerate files on windows

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
cdqe
bswap bp
push rsi
btc ax, bx
xor bpl, 0xbc
push rdi
xor sil, r8b
test r14, r12
add bp, 0x5104
push r12
push r13
push r14
test r13d, 0x5f22109e
mov bx, r11w
sal bpl, cl
push r15
cmc
lea rbp, [rsp - 0x230]
rol bx, cl
sub rsp, 0x330
mov rax, qword [0x1400b7288]
movzx bx, ah
test rsp, 0x6c6c156a
xor rax, rsp
shl rbx, cl
shr bl, 0xaa
mov qword [rbp + 0x220], rax
btr r12w, cx
sar bx, cl
mov r12, r8
mov rsi, rcx
movabs rbx, 0x200000000801
cmp rdx, rcx
je 0x1404dd0a6
mov al, byte [rdx]
sub al, 0x2f
cmp bp, 0x440c
cmp al, 0x2d
jmp 0x1404dd073
ja 0x1404dd08d
movsx rax, al
stc
jmp 0x1404dd083
bt rbx, rax
jb 0x1404dd0a6
mov rcx, rsi
call fcn.14011981d
mov rdx, rax
cmp rax, rsi
jmp 0x1404dd0a0
jne 0x1404dd063
mov r8b, byte [rdx]
cmp r8b, 0x3a
jmp 0x1404dd0b2
jne 0x1404dd0ef
lea rax, [rsi + 1]
test di, r11w
cmp rdx, rax
jmp 0x1404dd0c8
je 0x1404dd0ef
mov r9, r12
add rcx, rdx
or cx, r15w
sub r8d, r8d
xor edx, edx
mov rcx, rsi
jmp 0x1404dd0e5
call fcn.1404dcc81
jmp 0x1404dd5c0
sub r8b, 0x2f
jmp 0x1404dd0fe
sub edi, edi
cmp r10w, 0x486b
cmp r8b, 0x2d
jmp 0x1404dd10f
ja 0x1404dd12c
movsx rax, r8b
bt rbx, rax
xchg al, al
mov al, 1
jmp 0x1404dd126
jb 0x1404dd131
mov al, dil
shr cl, cl
sub rdx, rsi
mov cl, r13b
mov qword [rbp - 0x60], rdi
movzx rcx, bx
movsxd rcx, esp
inc rdx
shl ch, 0xe8
mov qword [rbp - 0x58], rdi
sub rcx, r12
and cl, r12b
sal rcx, 0x1b
neg al
movsxd rcx, ebp
mov qword [rbp - 0x50], rdi
lea rcx, [rsp + 0x30]
mov qword [rbp - 0x48], rdi
jmp 0x1404dd16d
sbb r13, r13
jmp 0x1404dd175
mov qword [rbp - 0x40], rdi
cmc
and r13, rdx
stc
test r15b, r8b
clc
mov byte [rbp - 0x38], dil
cmc
sub edx, edx
jmp 0x1404dd18e
call fcn.1404a9410
mov rax, qword [rsp + 0x38]
mov r15d, 0xfde9
cmp dword [rax + 0xc], r15d
jne 0x1404dd1d9
cmp byte [rsp + 0x48], dil
jmp 0x1404dd1b2
je 0x1404dd1cc
mov rax, qword [rsp + 0x30]
rcl r8b, 0x80
and dword [rax + 0x3a8], 0xfffffffd
movzx r8, r13w
mov r8d, r15d
jmp 0x1404dd1d4
jmp 0x1404dd24b
call fcn.1404cf2ea
test eax, eax
jne 0x1404dd21f
cmp byte [rsp + 0x48], dil
je 0x1404dd20f
mov rax, qword [rsp + 0x30]
not r8b
rol r8b, 0x80
and dword [rax + 0x3a8], 0xfffffffd
jmp 0x1404dd20f
mov r8d, 1
jmp 0x1404dd21a
jmp 0x1404dd24b
cmp byte [rsp + 0x48], dil
jmp 0x1404dd229
je 0x1404dd243
mov rax, qword [rsp + 0x30]
sar dh, 0x1c
sbb dx, 0x723f
and dword [rax + 0x3a8], 0xfffffffd
mov r8d, edi
movsx dx, r9b
lea rdx, [rbp - 0x60]
movsxd rcx, r8d
mov rcx, rsi
jmp 0x1404dd25a
call fcn.1404a9e7c
mov rcx, qword [rbp - 0x50]
lea r8, [rbp - 0x30]
test eax, eax
jmp 0x1404dd26e
mov dword [rsp + 0x28], edi
jmp 0x1404dd277
mov qword [rsp + 0x20], rdi
jmp 0x1404dd281
cmovne rcx, rdi
jmp 0x1404dd28d
xor r9d, r9d
cmp esp, esp
test r9w, r14w
sub edx, edx
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jmp 0x1404dd2aa
jne 0x1404dd2ef
mov r9, r12
sal cx, 0xef
shld cx, bx, 0x72
movsx rcx, bx
sub r8d, r8d
ror cl, cl
xor cx, bp
bsr cx, si
sub edx, edx
movsx ecx, cx
jmp 0x1404dd2d6
mov rcx, rsi
jmp 0x1404dd2de
call fcn.1404dcc81
mov edi, eax
jmp 0x1404dd2ea
jmp 0x1404dd59c
mov r14, qword [r12 + 8]
sets cl
sub r14, qword [r12]
sub cx, bx
or cl, 0xde
sar r14, 3
or ecx, 0x6af455d0
adc rcx, 0x6fd63f0e
cmp r9w, 0x2bad
xor edx, edx
bswap ecx
movsxd rcx, esi
movsx cx, r8b
mov qword [rsp + 0x70], rdi
jmp 0x1404dd32e
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x78], rdi
jmp 0x1404dd33d
mov qword [rbp - 0x80], rdi
jmp 0x1404dd346
mov qword [rbp - 0x78], rdi
jmp 0x1404dd34f
mov qword [rbp - 0x70], rdi
jmp 0x1404dd358
mov byte [rbp - 0x68], dil
jmp 0x1404dd361
call fcn.1404a9410
mov rax, qword [rsp + 0x58]
cmp spl, r14b
cmp dword [rax + 0xc], r15d
jmp 0x1404dd377
jne 0x1404dd3ae
cmp byte [rsp + 0x68], dil
jmp 0x1404dd387
je 0x1404dd3a1
mov rax, qword [rsp + 0x50]
shr r8w, cl
and dword [rax + 0x3a8], 0xfffffffd
movzx r8, cx
mov r8d, r15d
jmp 0x1404dd3a9
jmp 0x1404dd416
call fcn.1404cf2ea
test eax, eax
jmp 0x1404dd3ba
jne 0x1404dd3ef
cmp byte [rsp + 0x68], dil
je 0x1404dd3e4
mov rax, qword [rsp + 0x50]
bsr r8w, ax
and dword [rax + 0x3a8], 0xfffffffd
movzx r8, bx
movzx r8d, di
mov r8d, 1
jmp 0x1404dd416
cmp byte [rsp + 0x68], dil
je 0x1404dd40b
mov rax, qword [rsp + 0x50]
sbb cx, 0x207d
and dword [rax + 0x3a8], 0xfffffffd
mov r8d, edi
movsx cx, r13b
movsxd rcx, r9d
lea rdx, [rsp + 0x70]
cmovne rcx, r10
lea rcx, [rbp - 4]
call fcn.1404dc4d6
mov r15, qword [rbp - 0x80]
add ecx, 0x4cb94091
sbb cx, r13w
test eax, eax
not cl
movsx ecx, r13w
bswap cx
mov rcx, r15
jmp 0x1404dd449
cmovne rcx, rdi
clc
test al, r13b
cmp byte [rcx], 0x2e
jmp 0x1404dd459
jne 0x1404dd491
mov al, byte [rcx + 1]
stc
jmp 0x1404dd468
test al, al
jmp 0x1404dd46f
je 0x1404dd4cb
cmp al, 0x2e
jmp 0x1404dd47c
jne 0x1404dd491
cmp byte [rcx + 2], dil
jmp 0x1404dd48b
je 0x1404dd4cb
mov r9, r12
xchg r8w, dx
mov r8, r13
mov rdx, rsi
jmp 0x1404dd4a3
call fcn.1404dcc81
mov edi, eax
cmp ch, 0xe5
test r14w, 0x7b6e
cmp r12w, r10w
test eax, eax
jmp 0x1404dd4be
jne 0x1404dd572
sub edi, edi
jmp 0x1404dd4cb
cmp byte [rbp - 0x68], dil
je 0x1404dd4e2
mov rcx, r15
jmp 0x1404dd4dd
call fcn.1404ce159
lea rdx, [rbp - 0x30]
movsx rcx, bp
mov rcx, rbx
jmp 0x1404dd4f2
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
mov r15d, 0xfde9
test eax, eax
jmp 0x1404dd505
jne 0x1404dd318
mov rax, qword [r12]
mov rdx, qword [r12 + 8]
cmp bpl, 0x77
sub rdx, rax
cmp rbp, 0x53e44f97
sar rdx, 3
cmp si, r8w
cmp r14, rdx
jmp 0x1404dd532
je 0x1404dd58e
sub rdx, r14
movzx r9d, di
xchg r9w, cx
not cx
lea rcx, [rax + r14*8]
setg r9b
movsx r9w, r14b
mov r8b, r9b
lea r9, [0x1400acc8c]
mov r8d, 8
jmp 0x1404dd568
call fcn.1404e92e4
jmp 0x1404dd58e
cmp byte [rbp - 0x68], 0
jmp 0x1404dd57b
je 0x1404dd58e
mov rcx, r15
jmp 0x1404dd589
call fcn.1404ce159
mov rcx, rbx
jmp 0x1404dd596
call qword [sym.imp.KERNEL32.dll_FindClose]
cmp byte [rbp - 0x38], 0
jmp 0x1404dd5a5
je 0x1404dd5b9
mov rcx, qword [rbp - 0x50]
jmp 0x1404dd5b4
call fcn.1404ce159
mov eax, edi
movsxd rcx, esp
dec cl
mov rcx, qword [rbp + 0x220]
xor rcx, rsp
jmp 0x1404dd5cf
call fcn.1404a4949
mov rbx, qword [rsp + 0x388]
ror r14b, 0x11
sal r15b, cl
add rsp, 0x330
pop r15
setl sil
movzx ebp, bx
movzx bp, bpl
pop r14
xchg rbp, r13
pop r13
mov rsi, rbx
jmp 0x1404dd60a
pop r12
movzx bp, bl
xchg dil, sil
mov dil, r13b
pop rdi
mov bp, r14w
mov bpl, 0xc3
pop rsi
movsx bp, r15b
pop rbp
jmp 0x1404dd62a
ret