Function at 0x1404dc73e
Capabilities:
Enumerate files on windows

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
sar rbx, 0x66
bt ebx, ecx
rcr bl, cl
push rsi
rcr bh, 0xc7
push rdi
dec bx
push r12
ror sil, 0xe3
sub ah, 0x32
push r13
btc r12w, ax
movzx rax, si
push r14
sub bx, 0xf5c
push r15
lea rbp, [rsp - 0x230]
movzx rbx, sp
bswap rsi
movzx ebx, r10w
sub rsp, 0x330
mov rax, qword [0x1400b7288]
stc
sbb r12b, 0x6c
xor rax, rsp
sbb si, 0x1618
mov qword [rbp + 0x220], rax
add bx, r15w
clc
mov r12, r8
btc bx, r13w
mov rsi, rcx
movzx bx, ah
jmp 0x1404dc7c4
movabs rbx, 0x200000000801
jmp 0x1404dc7d3
cmp rdx, rcx
jmp 0x1404dc7db
je 0x1404dc831
mov al, byte [rdx]
jmp 0x1404dc7eb
sub al, 0x2f
test dl, 0xcf
cmp al, 0x2d
jmp 0x1404dc7f7
ja 0x1404dc813
movsx rax, al
cmc
clc
stc
bt rbx, rax
jmp 0x1404dc80d
jb 0x1404dc831
mov rcx, rsi
jmp 0x1404dc81b
call fcn.1401ff330
mov rdx, rax
cmp rax, rsi
jmp 0x1404dc82b
jne 0x1404dc7e1
mov r8b, byte [rdx]
stc
cmp r8b, 0x3a
jmp 0x1404dc83e
jne 0x1404dc877
lea rax, [rsi + 1]
cmp rdx, rax
je 0x1404dc877
mov r9, r12
sub r8d, r8d
bt rcx, r11
xor edx, edx
movsx ecx, r11w
movzx cx, ch
mov rcx, rsi
jmp 0x1404dc86d
call fcn.1404dc3ea
jmp 0x1404dcd05
sub r8b, 0x2f
xor edi, edi
cmp r8b, 0x2d
ja 0x1404dc8a0
movsx rax, r8b
stc
bt rbx, rax
mov al, r10b
mov al, 1
jmp 0x1404dc89a
jb 0x1404dc8a8
mov al, dil
shrd ecx, r8d, 0x7f
sub rdx, rsi
movzx ecx, cx
movsxd rcx, r14d
mov cx, 0x2a47
mov qword [rbp - 0x60], rdi
inc cl
inc rdx
bt rcx, r9
sbb ch, 0x6b
mov qword [rbp - 0x58], rdi
inc ecx
shr cx, 0xa3
neg al
bswap cx
mov qword [rbp - 0x50], rdi
movzx ecx, r13w
setl cl
lea rcx, [rsp + 0x30]
jmp 0x1404dc8e9
mov qword [rbp - 0x48], rdi
jmp 0x1404dc8f2
sbb r13, r13
stc
test r8, 0x17b66c3c
mov qword [rbp - 0x40], rdi
test esi, 0x5e7e791a
and r13, rdx
mov byte [rbp - 0x38], dil
sub edx, edx
jmp 0x1404dc915
call fcn.1404a8a13
mov rax, qword [rsp + 0x38]
movzx r15, cx
bts r15w, r9w
movsx r15w, r13b
mov r15d, 0xfde9
cmp dword [rax + 0xc], r15d
jne 0x1404dc971
cmp byte [rsp + 0x48], dil
jmp 0x1404dc947
je 0x1404dc969
mov rax, qword [rsp + 0x30]
test r12, 0x30dc710f
and dword [rax + 0x3a8], 0xfffffffd
movsxd r8, esp
mov r8b, 0xd1
mov r8b, dl
mov r8d, r15d
jmp 0x1404dc9db
call fcn.1404ce961
test eax, eax
jmp 0x1404dc97d
jne 0x1404dc9b0
cmp byte [rsp + 0x48], dil
je 0x1404dc9a5
mov rax, qword [rsp + 0x30]
movsx r8d, di
and dword [rax + 0x3a8], 0xfffffffd
bswap r8w
not r8b
mov r8d, 1
jmp 0x1404dc9db
cmp byte [rsp + 0x48], dil
jmp 0x1404dc9ba
je 0x1404dc9d0
mov rax, qword [rsp + 0x30]
bts r8, rsi
and dword [rax + 0x3a8], 0xfffffffd
mov r8d, edi
movsxd rdx, r14d
jmp 0x1404dc9db
lea rdx, [rbp - 0x60]
movsx rcx, sp
mov rcx, rsi
call fcn.1404a946e
mov rcx, qword [rbp - 0x50]
lea r8, [rbp - 0x30]
test eax, eax
jmp 0x1404dc9fa
mov dword [rsp + 0x28], edi
jmp 0x1404dca03
mov qword [rsp + 0x20], rdi
jmp 0x1404dca0d
cmovne rcx, rdi
test r15b, r9b
cmc
xor r9d, r9d
cmp r9b, 0xdb
stc
jmp 0x1404dca22
xor edx, edx
jmp 0x1404dca29
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov rbx, rax
cmp dil, r12b
test spl, r10b
cmp rax, 0xffffffffffffffff
jmp 0x1404dca41
jne 0x1404dca72
mov r9, r12
sal ch, cl
movsx cx, ah
movsx rcx, r13w
sub r8d, r8d
sub edx, edx
movsx cx, r10b
mov rcx, rsi
jmp 0x1404dca66
call fcn.1404dc3ea
mov edi, eax
jmp 0x1404dcce2
mov r14, qword [r12 + 8]
sub r14, qword [r12]
sar r14, 3
clc
btr cx, 0x8f
xor edx, edx
movsx ecx, r13w
bswap cx
mov qword [rsp + 0x70], rdi
movsx rcx, bx
lea rcx, [rsp + 0x50]
jmp 0x1404dcaa1
mov qword [rsp + 0x78], rdi
jmp 0x1404dcaab
mov qword [rbp - 0x80], rdi
jmp 0x1404dcab4
mov qword [rbp - 0x78], rdi
jmp 0x1404dcabd
mov qword [rbp - 0x70], rdi
jmp 0x1404dcac6
mov byte [rbp - 0x68], dil
jmp 0x1404dcacf
call fcn.1404a8a13
mov rax, qword [rsp + 0x58]
cmp dword [rax + 0xc], r15d
jmp 0x1404dcae2
jne 0x1404dcb19
cmp byte [rsp + 0x68], dil
jmp 0x1404dcaf2
je 0x1404dcb11
mov rax, qword [rsp + 0x50]
and dword [rax + 0x3a8], 0xfffffffd
jmp 0x1404dcb11
mov r8d, r15d
jmp 0x1404dcb89
call fcn.1404ce961
test eax, eax
jmp 0x1404dcb25
jne 0x1404dcb63
cmp byte [rsp + 0x68], dil
jmp 0x1404dcb35
je 0x1404dcb53
mov rax, qword [rsp + 0x50]
xchg r8w, r8w
and dword [rax + 0x3a8], 0xfffffffd
movsxd r8, ebx
movsx r8w, r15b
mov r8d, 1
jmp 0x1404dcb5e
jmp 0x1404dcb89
cmp byte [rsp + 0x68], dil
jmp 0x1404dcb6d
je 0x1404dcb80
mov rax, qword [rsp + 0x50]
cmc
and dword [rax + 0x3a8], 0xfffffffd
mov r8d, edi
sets dh
mov rdx, r10
lea rdx, [rsp + 0x70]
movsxd rcx, r8d
movsx ecx, r12w
mov ecx, r10d
lea rcx, [rbp - 4]
jmp 0x1404dcba1
call fcn.1404dbc42
mov r15, qword [rbp - 0x80]
test eax, eax
mov cx, 0x5a9c
movzx rcx, r10w
mov rcx, r15
jmp 0x1404dcbbc
cmovne rcx, rdi
jmp 0x1404dcbc8
cmp byte [rcx], 0x2e
jmp 0x1404dcbd0
jne 0x1404dcc03
mov al, byte [rcx + 1]
cmp r11w, 0x5b98
test al, al
je 0x1404dcc31
cmp al, 0x2e
jmp 0x1404dcbee
jne 0x1404dcc03
cmp byte [rcx + 2], dil
jmp 0x1404dcbfd
je 0x1404dcc31
mov r9, r12
movsx r8, bx
bswap r8d
mov r8, r13
not dx
movzx edx, r9w
cdq
mov rdx, rsi
call fcn.1404dc3ea
mov edi, eax
test eax, eax
jmp 0x1404dcc29
jne 0x1404dccc2
xor edi, edi
cmp byte [rbp - 0x68], dil
jmp 0x1404dcc3a
je 0x1404dcc48
mov rcx, r15
call fcn.1404cd7c2
lea rdx, [rbp - 0x30]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
mov r15d, 0xfde9
cmp edx, r15d
test eax, eax
jmp 0x1404dcc65
jne 0x1404dca85
mov rax, qword [r12]
mov rdx, qword [r12 + 8]
sub rdx, rax
cmp ebx, ebx
stc
cmp spl, 0x25
sar rdx, 3
clc
cmp r14, rdx
je 0x1404dccd4
sub rdx, r14
movzx r8w, r14b
lea rcx, [rax + r14*8]
movzx r8, cx
bswap r8
cmovns r9w, cx
lea r9, [0x1400acc8c]
movzx r8d, cx
not r8b
mov r8d, 8
call fcn.1404e8a11
jmp 0x1404dccd4
cmp byte [rbp - 0x68], 0
je 0x1404dccd4
mov rcx, r15
call fcn.1404cd7c2
mov rcx, rbx
jmp 0x1404dccdc
call qword [sym.imp.KERNEL32.dll_FindClose]
cmp byte [rbp - 0x38], 0
jmp 0x1404dcceb
je 0x1404dccff
mov rcx, qword [rbp - 0x50]
jmp 0x1404dccfa
call fcn.1404cd7c2
mov eax, edi
movsx rcx, dx
mov rcx, qword [rbp + 0x220]
cmp dl, sil
xor rcx, rsp
jmp 0x1404dcd17
call fcn.1404a3da6
mov rbx, qword [rsp + 0x388]
bsf r15w, di
sal sil, cl
add rsp, 0x330
setno r12b
movsx rdi, di
xchg r15w, r15w
pop r15
pop r14
movzx r12w, r13b
xchg r12d, esi
pop r13
mov bpl, sil
pop r12
movsx esi, r10w
mov sil, r15b
pop rdi
pop rsi
mov bpl, 0xa8
mov ebp, r12d
cmovne bp, si
pop rbp
jmp 0x1404dcd6b
ret