Function at 0x1404db91c
Capabilities:
Enumerate files on windows

Disassembly:
mov qword [rsp + 0x20], rbx
clc
push rbp
rol al, 0xc4
push rsi
movsxd rbp, esp
push rdi
push r12
rcl rbp, cl
neg bx
push r13
push r14
rcl rax, cl
push r15
movzx r12, r12w
btc ebp, 0xc2
lea rbp, [rsp - 0x230]
rcl r12b, cl
xchg r12b, al
and al, ah
sub rsp, 0x330
mov rax, qword [0x1400b7288]
stc
xor bh, 0xb1
mov sil, 0xc0
xor rax, rsp
movsx si, dl
neg r12
mov qword [rbp + 0x220], rax
sar r12w, 0xa4
bsr r12w, r14w
mov r12, r8
mov rsi, rcx
movabs rbx, 0x200000000801
cmp rsi, r13
test r9b, 0x68
jmp 0x1404db9a0
cmp rdx, rcx
je 0x1404db9f7
mov al, byte [rdx]
cmc
clc
sub al, 0x2f
cmp al, 0x2d
jmp 0x1404db9b6
ja 0x1404db9ca
movsx rax, al
bt rbx, rax
jb 0x1404db9f7
mov rcx, rsi
jmp 0x1404db9d2
call fcn.140240fb7
mov rdx, rax
cmp di, r13w
jmp 0x1404db9e9
cmp rax, rsi
jmp 0x1404db9f1
jne 0x1404db9a9
mov r8b, byte [rdx]
cmp r10b, 0x94
cmp r8b, 0x3a
jmp 0x1404dba07
jne 0x1404dba57
lea rax, [rsi + 1]
cmc
cmp dl, 0xdd
cmp rdx, rax
jmp 0x1404dba1d
je 0x1404dba57
mov r9, r12
xadd rcx, rcx
jmp 0x1404dba2f
sub r8d, r8d
jmp 0x1404dba3c
sub edx, edx
movsx cx, bh
cmova ecx, eax
mov rcx, rsi
jmp 0x1404dba4d
call fcn.1404db605
jmp 0x1404dbf0f
sub r8b, 0x2f
test r14b, 0x26
cmc
xor edi, edi
stc
clc
cmp r8b, 0x2d
jmp 0x1404dba6d
ja 0x1404dba85
movsx rax, r8b
clc
stc
bt rbx, rax
mov al, 1
jb 0x1404dba8c
mov al, dil
sbb ch, 0x65
cmc
sub rdx, rsi
bswap cx
mov qword [rbp - 0x60], rdi
setge ch
movsxd rcx, esi
movsx cx, r15b
inc rdx
sar cl, cl
mov qword [rbp - 0x58], rdi
rol rcx, cl
cmp r15b, r12b
neg al
movsx ecx, r12w
mov qword [rbp - 0x50], rdi
bswap rcx
setg ch
lea rcx, [rsp + 0x30]
jmp 0x1404dbaca
mov qword [rbp - 0x48], rdi
jmp 0x1404dbad3
sbb r13, r13
cmc
clc
cmp r15, 0x6f130a4f
mov qword [rbp - 0x40], rdi
clc
cmp dx, bx
and r13, rdx
cmp rsi, 0x433f0ef0
mov byte [rbp - 0x38], dil
test rax, 0x73c07831
cmp al, r11b
xor edx, edx
call fcn.1404a7c8f
mov rax, qword [rsp + 0x38]
rol r15b, cl
movzx r15, bp
mov r15d, 0xfde9
jmp 0x1404dbb21
cmp dword [rax + 0xc], r15d
jmp 0x1404dbb2a
jne 0x1404dbb60
cmp byte [rsp + 0x48], dil
jmp 0x1404dbb3a
je 0x1404dbb53
mov rax, qword [rsp + 0x30]
ror r8b, cl
bt r8d, r13d
and dword [rax + 0x3a8], 0xfffffffd
mov r8d, r15d
jmp 0x1404dbb5b
jmp 0x1404dbbc8
call fcn.1404cdb26
test eax, eax
jmp 0x1404dbb6c
jne 0x1404dbba1
cmp byte [rsp + 0x48], dil
jmp 0x1404dbb7c
je 0x1404dbb91
mov rax, qword [rsp + 0x30]
and dword [rax + 0x3a8], 0xfffffffd
xchg r8, r8
mov r8d, 1
jmp 0x1404dbb9c
jmp 0x1404dbbc8
cmp byte [rsp + 0x48], dil
jmp 0x1404dbbab
je 0x1404dbbc5
mov rax, qword [rsp + 0x30]
and dword [rax + 0x3a8], 0xfffffffd
movzx dx, r10b
cwd
cdq
mov r8d, edi
lea rdx, [rbp - 0x60]
cmovns cx, bp
mov rcx, rsi
jmp 0x1404dbbd8
call fcn.1404a870d
mov rcx, qword [rbp - 0x50]
sbb r8b, r13b
xor r8w, 0x446b
bsr r8w, r13w
lea r8, [rbp - 0x30]
test sil, r10b
jmp 0x1404dbbfb
test eax, eax
mov dword [rsp + 0x28], edi
jmp 0x1404dbc06
mov qword [rsp + 0x20], rdi
jmp 0x1404dbc10
cmovne rcx, rdi
test bpl, 0x65
sub r9d, r9d
clc
xor edx, edx
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov rbx, rax
test bl, 0xc0
cmc
cmp rax, 0xffffffffffffffff
jmp 0x1404dbc34
jne 0x1404dbc70
mov r9, r12
bts rcx, r13
xor cl, r9b
movzx cx, r8b
sub r8d, r8d
movzx ecx, ax
rol rcx, cl
sub ecx, r11d
sub edx, edx
mov rcx, rsi
jmp 0x1404dbc5f
call fcn.1404db605
mov edi, eax
jmp 0x1404dbc6b
jmp 0x1404dbef5
mov r14, qword [r12 + 8]
clc
adc ecx, 0x313046b
sub r14, qword [r12]
sal rcx, 0x9d
sar r14, 3
sub edx, edx
bswap cx
seto cl
xchg cx, cx
mov qword [rsp + 0x70], rdi
mov rcx, r13
mov ecx, 0x2a8007e7
lea rcx, [rsp + 0x50]
jmp 0x1404dbcaa
mov qword [rsp + 0x78], rdi
jmp 0x1404dbcb4
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x78], rdi
jmp 0x1404dbcc1
mov qword [rbp - 0x70], rdi
mov byte [rbp - 0x68], dil
jmp 0x1404dbcce
call fcn.1404a7c8f
mov rax, qword [rsp + 0x58]
cmp rsp, r10
cmc
cmp dword [rax + 0xc], r15d
jne 0x1404dbd19
cmp byte [rsp + 0x68], dil
jmp 0x1404dbcf0
je 0x1404dbd0c
mov rax, qword [rsp + 0x50]
shrd r8w, ax, 0xbd
bsr r8d, r10d
and dword [rax + 0x3a8], 0xfffffffd
mov r8d, r15d
jmp 0x1404dbd14
jmp 0x1404dbd85
call fcn.1404cdb26
test eax, eax
jmp 0x1404dbd25
jne 0x1404dbd5e
cmp byte [rsp + 0x68], dil
jmp 0x1404dbd35
je 0x1404dbd4e
mov rax, qword [rsp + 0x50]
and dword [rax + 0x3a8], 0xfffffffd
movsx r8d, r8w
movsxd r8, ecx
mov r8d, 1
jmp 0x1404dbd59
jmp 0x1404dbd85
cmp byte [rsp + 0x68], dil
jmp 0x1404dbd68
je 0x1404dbd82
mov rax, qword [rsp + 0x50]
bt r8w, r10w
and cl, r10b
and dword [rax + 0x3a8], 0xfffffffd
mov r8d, edi
lea rdx, [rsp + 0x70]
mov cl, r9b
setb ch
lea rcx, [rbp - 4]
jmp 0x1404dbd99
call fcn.1404dae4c
mov r15, qword [rbp - 0x80]
test eax, eax
movzx cx, ch
xchg ch, ch
mov rcx, r15
jmp 0x1404dbdb2
cmovne rcx, rdi
cmp byte [rcx], 0x2e
jmp 0x1404dbdbe
jne 0x1404dbdec
mov al, byte [rcx + 1]
clc
test al, al
je 0x1404dbe20
cmp al, 0x2e
jmp 0x1404dbdd7
jne 0x1404dbdec
cmp byte [rcx + 2], dil
jmp 0x1404dbde6
je 0x1404dbe20
mov r9, r12
mov dx, sp
xchg r8b, dl
mov r8, r13
cqo
xchg dx, dx
mov rdx, rsi
jmp 0x1404dbe05
call fcn.1404db605
mov edi, eax
clc
test eax, eax
jmp 0x1404dbe14
jne 0x1404dbed0
xor edi, edi
test r15b, 0x28
cmp byte [rbp - 0x68], dil
jmp 0x1404dbe29
je 0x1404dbe3c
mov rcx, r15
jmp 0x1404dbe37
call fcn.1404cc9fa
lea rdx, [rbp - 0x30]
mov rcx, rbx
jmp 0x1404dbe48
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
mov r15d, 0xfde9
cmp r11w, sp
jmp 0x1404dbe5d
test eax, eax
jmp 0x1404dbe64
jne 0x1404dbc88
mov rax, qword [r12]
shrd edx, esp, 5
mov dl, cl
sbb dh, 0x80
mov rdx, qword [r12 + 8]
sub rdx, rax
sar rdx, 3
test r8b, r14b
jmp 0x1404dbe8b
cmp r14, rdx
jmp 0x1404dbe93
je 0x1404dbee7
sub rdx, r14
cmovnp r9w, r12w
movsx rcx, di
lea rcx, [rax + r14*8]
lea r9, [0x1400acc8c]
movsxd r8, ebx
movzx r8d, r10w
movsx r8d, r11w
mov r8d, 8
jmp 0x1404dbec6
call fcn.1404e7e7d
jmp 0x1404dbee7
cmp byte [rbp - 0x68], 0
jmp 0x1404dbed9
je 0x1404dbee7
mov rcx, r15
call fcn.1404cc9fa
mov rcx, rbx
jmp 0x1404dbeef
call qword [sym.imp.KERNEL32.dll_FindClose]
cmp byte [rbp - 0x38], 0
jmp 0x1404dbefe
je 0x1404dbf0d
mov rcx, qword [rbp - 0x50]
call fcn.1404cc9fa
mov eax, edi
mov rcx, qword [rbp + 0x220]
test r15b, r12b
clc
xor rcx, rsp
jmp 0x1404dbf22
call fcn.1404a30f1
mov rbx, qword [rsp + 0x388]
add rsp, 0x330
bswap rdi
setle bpl
movsx r13, r15w
pop r15
xchg r12, r13
pop r14
not r13d
mov bp, ax
pop r13
pop r12
jmp 0x1404dbf5e
pop rdi
xchg bpl, sil
cmovg esi, edi
mov bpl, r9b
pop rsi
pop rbp
jmp 0x1404dbf6f
ret