Function at 0x1404d6426
Capabilities:
Enumerate files on windows

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
setne bpl
adc bpl, 0xd9
push rsi
push rdi
stc
push r12
push r13
bt rsi, r8
push r14
mov al, 0xde
rcl bp, 0x49
btc eax, 0x71
push r15
shld eax, esp, 8
movsxd rax, r11d
movsx esi, sp
lea rbp, [rsp - 0x230]
rcr si, 0x67
cbw
cmovnp esi, ecx
sub rsp, 0x330
shrd rax, r9, 0xf
mov rax, qword [0x1400b7288]
xadd r12b, sil
xor rax, rsp
movzx esi, r8w
mov qword [rbp + 0x220], rax
mov r12, r8
cmp r11d, 0x276e3acf
bts si, cx
add bl, 0x7a
mov rsi, rcx
shr bl, 0x76
movabs rbx, 0x200000000801
stc
cmp rdx, rcx
jmp 0x1404d64b7
je 0x1404d6502
mov al, byte [rdx]
sub al, 0x2f
cmp r11w, 0x7644
cmc
cmp al, 0x2d
jmp 0x1404d64cf
ja 0x1404d64e3
movsx rax, al
bt rbx, rax
jb 0x1404d6502
mov rcx, rsi
call fcn.14028568a
mov rdx, rax
jmp 0x1404d64f4
cmp rax, rsi
jmp 0x1404d64fc
jne 0x1404d64bd
mov r8b, byte [rdx]
cmp r8b, 0x3a
jmp 0x1404d650e
jne 0x1404d654c
lea rax, [rsi + 1]
cmp rdx, rax
jmp 0x1404d6520
je 0x1404d654c
mov r9, r12
movsxd rcx, edi
cmp r11b, 0x73
xor r8d, r8d
jmp 0x1404d6538
xor edx, edx
mov rcx, rsi
jmp 0x1404d6542
call fcn.1404d60f9
jmp 0x1404d69e0
sub r8b, 0x2f
cmc
xor edi, edi
clc
cmp si, dx
test al, r9b
cmp r8b, 0x2d
jmp 0x1404d6563
ja 0x1404d657f
movsx rax, r8b
stc
bt rbx, rax
setp al
mov al, 0xc8
mov al, 1
jb 0x1404d658c
mov al, dil
shr rcx, 0xe7
shl cx, cl
rol cx, cl
sub rdx, rsi
mov qword [rbp - 0x60], rdi
inc rdx
test r15w, cx
setb ch
mov qword [rbp - 0x58], rdi
xchg cl, cl
neg al
mov qword [rbp - 0x50], rdi
lea rcx, [rsp + 0x30]
jmp 0x1404d65b3
mov qword [rbp - 0x48], rdi
jmp 0x1404d65bc
sbb r13, r13
cmp sil, 9
mov qword [rbp - 0x40], rdi
jmp 0x1404d65d0
and r13, rdx
test sp, 0x6aad
cmp r9d, r12d
mov byte [rbp - 0x38], dil
xor edx, edx
jmp 0x1404d65e6
call fcn.1404a2863
mov rax, qword [rsp + 0x38]
bsr r15, rbp
movzx r15w, bl
mov r15d, 0xfde9
cmp r9, 0xe0229a2
test r12b, r8b
jmp 0x1404d660e
cmp dword [rax + 0xc], r15d
jmp 0x1404d6617
jne 0x1404d6652
cmp byte [rsp + 0x48], dil
je 0x1404d6645
mov rax, qword [rsp + 0x30]
movzx r8w, r12b
xor r8b, r14b
and dword [rax + 0x3a8], 0xfffffffd
movzx r8d, r14w
movsx r8w, bl
mov r8d, r15d
jmp 0x1404d664d
jmp 0x1404d66c0
call fcn.1404c8804
test eax, eax
jne 0x1404d6698
cmp byte [rsp + 0x48], dil
jmp 0x1404d6669
je 0x1404d6688
mov rax, qword [rsp + 0x30]
shr r8w, cl
bt r8, r10
jmp 0x1404d6681
and dword [rax + 0x3a8], 0xfffffffd
mov r8d, 1
jmp 0x1404d6693
jmp 0x1404d66c0
cmp byte [rsp + 0x48], dil
je 0x1404d66b9
mov rax, qword [rsp + 0x30]
clc
sbb r8b, 0x3b
xadd dl, cl
and dword [rax + 0x3a8], 0xfffffffd
cqo
mov r8d, edi
xchg cl, cl
bswap edx
lea rdx, [rbp - 0x60]
xchg rcx, rcx
mov rcx, rsi
call fcn.1404a32fb
mov rcx, qword [rbp - 0x50]
not r8b
lea r8, [rbp - 0x30]
cmc
clc
test eax, eax
jmp 0x1404d66e3
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
jmp 0x1404d66f1
cmovne rcx, rdi
stc
xor r9d, r9d
cmp r12w, cx
jmp 0x1404d6702
xor edx, edx
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov rbx, rax
stc
test r15d, edx
cmp rax, 0xffffffffffffffff
jmp 0x1404d671a
jne 0x1404d674f
mov r9, r12
clc
xor r8d, r8d
cmp r8, r12
xor edx, edx
mov cl, r9b
movsx cx, sil
xchg cl, cl
mov rcx, rsi
jmp 0x1404d673e
call fcn.1404d60f9
mov edi, eax
jmp 0x1404d674a
jmp 0x1404d69c1
mov r14, qword [r12 + 8]
btc ecx, r13d
sub r14, qword [r12]
rcr ecx, 0x63
add cl, r11b
sar r14, 3
inc ch
bt ecx, 0x95
sub cx, 0x4f85
xor edx, edx
mov qword [rsp + 0x70], rdi
movsx rcx, di
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x78], rdi
jmp 0x1404d678b
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x78], rdi
mov qword [rbp - 0x70], rdi
jmp 0x1404d679c
mov byte [rbp - 0x68], dil
jmp 0x1404d67a5
call fcn.1404a2863
mov rax, qword [rsp + 0x58]
cmp dword [rax + 0xc], r15d
jmp 0x1404d67b8
jne 0x1404d67f1
cmp byte [rsp + 0x68], dil
jmp 0x1404d67c8
je 0x1404d67e4
mov rax, qword [rsp + 0x50]
bswap r8
adc r8w, sp
rcl r8b, cl
and dword [rax + 0x3a8], 0xfffffffd
mov r8d, r15d
jmp 0x1404d67ec
jmp 0x1404d685f
call fcn.1404c8804
test eax, eax
jmp 0x1404d67fd
jne 0x1404d6832
cmp byte [rsp + 0x68], dil
jmp 0x1404d680d
je 0x1404d6827
mov rax, qword [rsp + 0x50]
btc r8w, r9w
test bl, 0x2b
and dword [rax + 0x3a8], 0xfffffffd
mov r8d, 1
jmp 0x1404d685f
cmp byte [rsp + 0x68], dil
jmp 0x1404d683c
je 0x1404d6858
mov rax, qword [rsp + 0x50]
sal rdx, 0xd4
and dword [rax + 0x3a8], 0xfffffffd
movzx r8w, dl
cdq
mov r8d, edi
movsx rdx, si
lea rdx, [rsp + 0x70]
lea rcx, [rbp - 4]
jmp 0x1404d686d
call fcn.1404d5981
mov r15, qword [rbp - 0x80]
movsx cx, r12b
sal cx, 0x21
neg ecx
test eax, eax
movsx rcx, r14w
movsxd rcx, esp
mov rcx, r15
jmp 0x1404d6892
cmovne rcx, rdi
stc
test r12b, spl
cmp byte [rcx], 0x2e
jne 0x1404d68cc
mov al, byte [rcx + 1]
clc
stc
test al, al
jmp 0x1404d68af
je 0x1404d6900
cmp al, 0x2e
jmp 0x1404d68bc
jne 0x1404d68cc
cmp byte [rcx + 2], dil
je 0x1404d6900
mov r9, r12
movsx rdx, r14w
cmovle r8, rbp
mov r8, r13
mov rdx, rsi
jmp 0x1404d68e2
call fcn.1404d60f9
mov edi, eax
test eax, eax
jmp 0x1404d68f0
jne 0x1404d699c
sub edi, edi
test r15b, r11b
cmc
test bpl, 0x31
cmp byte [rbp - 0x68], dil
jmp 0x1404d6909
je 0x1404d691c
mov rcx, r15
jmp 0x1404d6917
call fcn.1404c769d
lea rdx, [rbp - 0x30]
mov ch, 0x4a
bswap ecx
movzx rcx, si
mov rcx, rbx
jmp 0x1404d6931
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
mov r15d, 0xfde9
stc
test eax, eax
jmp 0x1404d6945
jne 0x1404d6771
mov rax, qword [r12]
xadd dh, dl
mov rdx, qword [r12 + 8]
cmc
clc
cmp r8d, 0x3eac5c23
sub rdx, rax
sar rdx, 3
cmp r14, rdx
jmp 0x1404d696f
je 0x1404d69b3
sub rdx, r14
lea rcx, [rax + r14*8]
movsx r9d, bx
lea r9, [0x1400acc8c]
mov r8d, 8
jmp 0x1404d6992
call fcn.1404e289b
jmp 0x1404d69b3
cmp byte [rbp - 0x68], 0
jmp 0x1404d69a5
je 0x1404d69b3
mov rcx, r15
call fcn.1404c769d
mov rcx, rbx
jmp 0x1404d69bb
call qword [sym.imp.KERNEL32.dll_FindClose]
cmp byte [rbp - 0x38], 0
jmp 0x1404d69ca
je 0x1404d69de
mov rcx, qword [rbp - 0x50]
jmp 0x1404d69d9
call fcn.1404c769d
mov eax, edi
mov rcx, qword [rbp + 0x220]
stc
xor rcx, rsp
call fcn.14049dc81
mov rbx, qword [rsp + 0x388]
sub si, 0x4c0f
add rsp, 0x330
movzx r13, r14w
pop r15
not rbp
movsx r12, r8w
xchg bp, r12w
pop r14
movsx r12w, cl
setg bpl
pop r13
cmovg esi, edi
pop r12
not bp
movsxd rsi, ebp
pop rdi
seto sil
bswap si
mov rsi, 0x34f96f70
pop rsi
movzx ebp, r8w
pop rbp
jmp 0x1404d6a47
ret