Function at 0x1404da43b
Capabilities:
Enumerate files on windows

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
or bp, 0x1ad4
neg bx
push rsi
movzx ebx, si
test rbp, rdx
push rdi
bt si, 0xbe
ror sil, cl
push r12
cmovns rbp, rsp
push r13
bts eax, r14d
push r14
cwde
bt si, di
mov si, dx
push r15
xadd rax, rbp
or rbx, 0x3c060156
lea rbp, [rsp - 0x230]
btc esi, 0x4e
movsxd rbx, eax
bts rbx, r10
sub rsp, 0x330
clc
mov rax, qword [0x1400b7288]
btr r12, r9
xor ebx, ecx
xor rax, rsp
adc sil, r14b
mov qword [rbp + 0x220], rax
rcr esi, 0x75
mov r12, r8
btc si, r10w
movsx si, r12b
cmp r12w, 0x2b67
mov rsi, rcx
and rbx, 0x8982ce9
movabs rbx, 0x200000000801
cmp rdx, rcx
jmp 0x1404da4e3
je 0x1404da52e
mov al, byte [rdx]
clc
sub al, 0x2f
cmp al, 0x2d
jmp 0x1404da4f5
ja 0x1404da50a
movsx rax, al
stc
bt rbx, rax
jb 0x1404da52e
mov rcx, rsi
jmp 0x1404da512
call fcn.1400fc84c
mov rdx, rax
cmp bh, 0x61
test r10b, spl
cmp rax, rsi
jmp 0x1404da528
jne 0x1404da4e9
mov r8b, byte [rdx]
cmp r8b, 0x3a
jmp 0x1404da53a
jne 0x1404da577
lea rax, [rsi + 1]
jmp 0x1404da549
cmp rdx, rax
je 0x1404da577
mov r9, r12
cmp r13w, 0x654e
sub r8d, r8d
xor edx, edx
mov rcx, 0x4ac92604
setae cl
mov rcx, rsi
call fcn.1404da119
jmp 0x1404daa4a
sub r8b, 0x2f
test r15d, 0x18543337
xor edi, edi
cmc
cmp r8b, 0x2d
jmp 0x1404da58e
ja 0x1404da5ae
movsx rax, r8b
bt rbx, rax
jmp 0x1404da5a1
mov al, 1
jmp 0x1404da5a8
jb 0x1404da5ba
mov al, dil
adc cl, spl
btr ecx, r13d
inc cl
sub rdx, rsi
movsx rcx, cx
bswap cx
mov qword [rbp - 0x60], rdi
movzx cx, r9b
movsxd rcx, esp
mov cx, r8w
inc rdx
mov qword [rbp - 0x58], rdi
neg al
seta cl
mov qword [rbp - 0x50], rdi
movzx rcx, r12w
setb cl
lea rcx, [rsp + 0x30]
mov qword [rbp - 0x48], rdi
jmp 0x1404da5f9
sbb r13, r13
test dx, 0x48f3
cmp r14b, 0x9e
test edx, r15d
mov qword [rbp - 0x40], rdi
jmp 0x1404da614
and r13, rdx
stc
mov byte [rbp - 0x38], dil
cmc
xor edx, edx
call fcn.1404a68c4
mov rax, qword [rsp + 0x38]
adc r15w, bx
mov r15d, 0xfde9
jmp 0x1404da639
cmp dword [rax + 0xc], r15d
jmp 0x1404da642
jne 0x1404da680
cmp byte [rsp + 0x48], dil
jmp 0x1404da652
je 0x1404da678
mov rax, qword [rsp + 0x30]
cmp bp, 0x806
rcl r8b, 0xc2
and dword [rax + 0x3a8], 0xfffffffd
mov r8b, r9b
bswap r8w
movsx r8d, r10w
mov r8d, r15d
jmp 0x1404da6f3
call fcn.1404cc7e6
test eax, eax
jmp 0x1404da68c
jne 0x1404da6c6
cmp byte [rsp + 0x48], dil
je 0x1404da6b6
mov rax, qword [rsp + 0x30]
and dword [rax + 0x3a8], 0xfffffffd
xchg r8b, r8b
movzx r8w, r9b
jmp 0x1404da6b6
mov r8d, 1
jmp 0x1404da6c1
jmp 0x1404da6f3
cmp byte [rsp + 0x48], dil
jmp 0x1404da6d0
je 0x1404da6e8
mov rax, qword [rsp + 0x30]
sal ch, cl
and dword [rax + 0x3a8], 0xfffffffd
movsx rcx, r14w
mov r8d, edi
not dx
seta dh
cwd
lea rdx, [rbp - 0x60]
not cx
mov rcx, rsi
call fcn.1404a731a
mov rcx, qword [rbp - 0x50]
lea r8, [rbp - 0x30]
stc
test r8b, 0x26
test eax, eax
mov dword [rsp + 0x28], edi
jmp 0x1404da71a
mov qword [rsp + 0x20], rdi
jmp 0x1404da724
cmovne rcx, rdi
cmc
sub r9d, r9d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov rbx, rax
test r9w, 0x1850
cmp rax, 0xffffffffffffffff
jmp 0x1404da746
jne 0x1404da77a
mov r9, r12
xor cx, sp
sub r8d, r8d
jmp 0x1404da75f
sub edx, edx
mov rcx, rsi
jmp 0x1404da769
call fcn.1404da119
mov edi, eax
jmp 0x1404da775
jmp 0x1404daa20
mov r14, qword [r12 + 8]
sub r14, qword [r12]
sar r14, 3
xadd ecx, ecx
sub edx, edx
setg ch
movzx rcx, ax
mov qword [rsp + 0x70], rdi
movsx rcx, si
movsx cx, al
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x80], rdi
jmp 0x1404da7b3
mov qword [rbp - 0x78], rdi
jmp 0x1404da7bc
mov qword [rbp - 0x70], rdi
jmp 0x1404da7c5
mov byte [rbp - 0x68], dil
jmp 0x1404da7ce
call fcn.1404a68c4
mov rax, qword [rsp + 0x58]
cmp ebx, esp
cmp dword [rax + 0xc], r15d
jne 0x1404da825
cmp byte [rsp + 0x68], dil
jmp 0x1404da7ee
je 0x1404da818
mov rax, qword [rsp + 0x50]
mov r8w, 0x5d02
bts r8w, bx
rcr r8w, cl
and dword [rax + 0x3a8], 0xfffffffd
mov r8b, 0x43
movzx r8, di
movsxd r8, r13d
mov r8d, r15d
jmp 0x1404da820
jmp 0x1404da8ac
call fcn.1404cc7e6
test eax, eax
jmp 0x1404da831
jne 0x1404da873
cmp byte [rsp + 0x68], dil
jmp 0x1404da841
je 0x1404da863
mov rax, qword [rsp + 0x50]
xadd r8w, r8w
btc r8w, r14w
movsxd r8, esi
and dword [rax + 0x3a8], 0xfffffffd
mov r8b, r9b
mov r8d, 1
jmp 0x1404da86e
jmp 0x1404da8ac
cmp byte [rsp + 0x68], dil
jmp 0x1404da87d
je 0x1404da89e
mov rax, qword [rsp + 0x50]
adc cl, 0x46
sar r8b, cl
and dword [rax + 0x3a8], 0xfffffffd
setge r8b
movzx dx, r9b
mov r8d, edi
movsx edx, di
movzx dx, r15b
cmovnp ecx, ebx
lea rdx, [rsp + 0x70]
movzx cx, bh
movzx rcx, r8w
lea rcx, [rbp - 4]
jmp 0x1404da8c2
call fcn.1404d99d9
mov r15, qword [rbp - 0x80]
bt rcx, rdx
rcr ch, 0x84
test eax, eax
not cl
mov rcx, r15
jmp 0x1404da8de
cmovne rcx, rdi
cmp byte [rcx], 0x2e
jmp 0x1404da8ea
jne 0x1404da91f
mov al, byte [rcx + 1]
test bpl, sil
test al, al
jmp 0x1404da8fd
je 0x1404da94e
cmp al, 0x2e
jmp 0x1404da90a
jne 0x1404da91f
cmp byte [rcx + 2], dil
jmp 0x1404da919
je 0x1404da94e
mov r9, r12
not r8b
mov r8, r13
movzx dx, cl
movsx edx, r8w
mov dl, 0xab
mov rdx, rsi
call fcn.1404da119
mov edi, eax
test ebp, esi
test eax, eax
jmp 0x1404da945
jne 0x1404da9fb
sub edi, edi
clc
cmp byte [rbp - 0x68], dil
jmp 0x1404da957
je 0x1404da96a
mov rcx, r15
jmp 0x1404da965
call fcn.1404cb6be
lea rdx, [rbp - 0x30]
mov rcx, rbx
jmp 0x1404da976
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
mov r15d, 0xfde9
test eax, eax
jmp 0x1404da989
jne 0x1404da78a
mov rax, qword [r12]
cwd
test cx, 0x3c18
bt edx, 0xfe
mov rdx, qword [r12 + 8]
cmp si, 0x5be
stc
cmc
sub rdx, rax
cmp r9b, 9
cmc
sar rdx, 3
test dx, 0xa99
cmp r14, rdx
jmp 0x1404da9c3
je 0x1404daa12
sub rdx, r14
xchg cx, r8w
lea rcx, [rax + r14*8]
movsx r9d, si
lea r9, [0x1400acc8c]
seta r8b
not r8b
mov r8d, 8
jmp 0x1404da9f1
call fcn.1404e6927
jmp 0x1404daa12
cmp byte [rbp - 0x68], 0
jmp 0x1404daa04
je 0x1404daa12
mov rcx, r15
call fcn.1404cb6be
mov rcx, rbx
jmp 0x1404daa1a
call qword [sym.imp.KERNEL32.dll_FindClose]
cmp byte [rbp - 0x38], 0
jmp 0x1404daa29
je 0x1404daa3d
mov rcx, qword [rbp - 0x50]
jmp 0x1404daa38
call fcn.1404cb6be
mov eax, edi
rol cx, 0x71
shl ch, 0xd3
sal cx, 0x97
mov rcx, qword [rbp + 0x220]
cmp r14, r13
cmp ebx, 0xce9134b
xor rcx, rsp
call fcn.1404a1da3
mov rbx, qword [rsp + 0x388]
rol r13d, cl
rcr r15d, cl
add rsp, 0x330
pop r15
movsx si, spl
pop r14
movsx di, spl
jmp 0x1404daa8a
pop r13
cmovb r12d, eax
pop r12
movzx ebp, dx
movsx rdi, bx
cmovs di, r13w
pop rdi
mov si, 0x408e
bswap si
pop rsi
movsx ebp, r12w
movzx bp, cl
movsx bp, r10b
pop rbp
ret