Function at 0x1404da5a6
Capabilities:
Enumerate files on windows

Disassembly:
mov qword [rsp + 0x20], rbx
xadd rax, rbx
push rbp
not al
ror al, 2
cdqe
push rsi
push rdi
push r12
clc
sub bp, si
push r13
btr ebx, 0xe4
sub bx, 0x2307
cmp dx, 0x1705
push r14
push r15
lea rbp, [rsp - 0x230]
sub rsp, 0x330
btr ax, r10w
stc
adc r12b, 0x37
mov rax, qword [0x1400b7288]
btr ebx, 3
xor rax, rsp
stc
add sil, 0x73
sar si, cl
mov qword [rbp + 0x220], rax
sub sil, 0xb1
mov r12, r8
shrd bx, r15w, 0x5b
adc rbx, rdx
mov rsi, rcx
cmc
movabs rbx, 0x200000000801
test bpl, r12b
stc
cmc
cmp rdx, rcx
jmp 0x1404da634
je 0x1404da684
mov al, byte [rdx]
test dh, 9
sub al, 0x2f
test r11, 0x13f1672f
cmp dl, r10b
cmp al, 0x2d
jmp 0x1404da652
ja 0x1404da66b
movsx rax, al
bt rbx, rax
jmp 0x1404da665
jb 0x1404da684
mov rcx, rsi
call fcn.140242158
mov rdx, rax
cmp rax, rsi
jmp 0x1404da67e
jne 0x1404da63a
mov r8b, byte [rdx]
jmp 0x1404da68d
cmp r8b, 0x3a
jmp 0x1404da696
jne 0x1404da6dd
lea rax, [rsi + 1]
jmp 0x1404da6a5
cmp rdx, rax
jmp 0x1404da6ad
je 0x1404da6dd
mov r9, r12
movzx rcx, r10w
shld cx, dx, 0x33
not ecx
xor r8d, r8d
cmovp cx, r15w
sub edx, edx
mov rcx, rsi
jmp 0x1404da6d3
call fcn.1404da277
jmp 0x1404dab7c
sub r8b, 0x2f
cmp r9w, r10w
test r14w, 0x7f01
sub edi, edi
cmp dil, r15b
cmp r8b, 0x2d
jmp 0x1404da6f9
ja 0x1404da717
movsx rax, r8b
cmc
bt rbx, rax
mov al, dl
mov al, 1
jmp 0x1404da711
jb 0x1404da71f
mov al, dil
btc cx, 0x88
sub rdx, rsi
movsxd rcx, r11d
bswap cx
mov qword [rbp - 0x60], rdi
movsx ecx, r14w
inc cl
movzx rcx, bp
inc rdx
btr cx, dx
add cl, 0xf9
mov qword [rbp - 0x58], rdi
movsxd rcx, r9d
bts cx, bp
stc
neg al
mov qword [rbp - 0x50], rdi
movsx rcx, sp
dec ch
lea rcx, [rsp + 0x30]
mov qword [rbp - 0x48], rdi
jmp 0x1404da766
sbb r13, r13
mov qword [rbp - 0x40], rdi
stc
clc
and r13, rdx
mov byte [rbp - 0x38], dil
cmp rdx, r8
xor edx, edx
jmp 0x1404da780
call fcn.1404a6aa8
mov rax, qword [rsp + 0x38]
mov r15d, 0xfde9
cmp dword [rax + 0xc], r15d
jmp 0x1404da799
jne 0x1404da7cd
cmp byte [rsp + 0x48], dil
je 0x1404da7c0
mov rax, qword [rsp + 0x30]
and dword [rax + 0x3a8], 0xfffffffd
xchg r8b, r8b
mov r8b, 0x92
setno r8b
mov r8d, r15d
jmp 0x1404da7c8
jmp 0x1404da83d
call fcn.1404cc8b6
test eax, eax
jmp 0x1404da7d9
jne 0x1404da816
cmp byte [rsp + 0x48], dil
je 0x1404da806
mov rax, qword [rsp + 0x30]
btr r8d, r13d
and dword [rax + 0x3a8], 0xfffffffd
movzx r8, cx
xchg r8w, r8w
cmove r8d, eax
mov r8d, 1
jmp 0x1404da811
jmp 0x1404da83d
cmp byte [rsp + 0x48], dil
jmp 0x1404da820
je 0x1404da836
mov rax, qword [rsp + 0x30]
and dword [rax + 0x3a8], 0xfffffffd
cdq
setns dl
mov r8d, edi
cmova cx, dx
lea rdx, [rbp - 0x60]
mov rcx, rsi
jmp 0x1404da849
call fcn.1404a74d7
mov rcx, qword [rbp - 0x50]
btr r8w, 0x45
inc r8
lea r8, [rbp - 0x30]
cmc
stc
test eax, eax
jmp 0x1404da868
mov dword [rsp + 0x28], edi
jmp 0x1404da871
mov qword [rsp + 0x20], rdi
jmp 0x1404da87b
cmovne rcx, rdi
cmp bl, r8b
stc
xor r9d, r9d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov rbx, rax
jmp 0x1404da899
cmp rax, 0xffffffffffffffff
jmp 0x1404da8a2
jne 0x1404da8cd
mov r9, r12
test bx, r13w
xor r8d, r8d
xor edx, edx
mov rcx, rsi
jmp 0x1404da8bc
call fcn.1404da277
mov edi, eax
jmp 0x1404da8c8
jmp 0x1404dab62
mov r14, qword [r12 + 8]
shl ch, cl
neg cx
sub r14, qword [r12]
sbb cl, 0x5b
sar r14, 3
and rcx, 0x69ca318e
cmp r15b, 0xe8
cmp r14d, ebx
sub edx, edx
mov qword [rsp + 0x70], rdi
lea rcx, [rsp + 0x50]
jmp 0x1404da901
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x80], rdi
jmp 0x1404da90f
mov qword [rbp - 0x78], rdi
mov qword [rbp - 0x70], rdi
jmp 0x1404da91c
mov byte [rbp - 0x68], dil
call fcn.1404a6aa8
mov rax, qword [rsp + 0x58]
cmc
cmp dword [rax + 0xc], r15d
jmp 0x1404da934
jne 0x1404da970
cmp byte [rsp + 0x68], dil
je 0x1404da968
mov rax, qword [rsp + 0x50]
rcr r8w, 0xab
bts r8, r11
and dword [rax + 0x3a8], 0xfffffffd
movsxd r8, r13d
cmovbe r8w, r12w
mov r8d, 0x3af02bcf
mov r8d, r15d
jmp 0x1404da9f0
call fcn.1404cc8b6
test eax, eax
jmp 0x1404da97c
jne 0x1404da9bb
cmp byte [rsp + 0x68], dil
jmp 0x1404da98c
je 0x1404da9b0
mov rax, qword [rsp + 0x50]
mov r8, 0x50856d81
not r8w
and dword [rax + 0x3a8], 0xfffffffd
bswap r8w
not r8b
mov r8d, 1
jmp 0x1404da9f0
cmp byte [rsp + 0x68], dil
jmp 0x1404da9c5
je 0x1404da9ed
mov rax, qword [rsp + 0x50]
test rbp, rbx
btr dx, 0x96
shr r8b, 0x57
and dword [rax + 0x3a8], 0xfffffffd
movsx cx, al
mov edx, 0x353033f2
cdq
mov r8d, edi
lea rdx, [rsp + 0x70]
movzx cx, bpl
movsx ecx, r15w
lea rcx, [rbp - 4]
jmp 0x1404daa07
call fcn.1404d9add
mov r15, qword [rbp - 0x80]
stc
test eax, eax
movsx cx, sil
bswap cx
mov rcx, r15
jmp 0x1404daa23
cmovne rcx, rdi
test r12b, 0x66
test r14d, ebx
cmp byte [rcx], 0x2e
jmp 0x1404daa36
jne 0x1404daa67
mov al, byte [rcx + 1]
test dil, 0x5c
test al, al
je 0x1404daa99
cmp al, 0x2e
jmp 0x1404daa52
jne 0x1404daa67
cmp byte [rcx + 2], dil
jmp 0x1404daa61
je 0x1404daa99
mov r9, r12
jmp 0x1404daa71
mov r8, r13
mov rdx, r9
mov rdx, rsi
jmp 0x1404daa7f
call fcn.1404da277
mov edi, eax
test bp, r10w
test r15b, 0x31
stc
test eax, eax
jne 0x1404dab38
sub edi, edi
cmp byte [rbp - 0x68], dil
je 0x1404daab0
mov rcx, r15
jmp 0x1404daaab
call fcn.1404cb744
lea rdx, [rbp - 0x30]
mov rcx, rbx
jmp 0x1404daabc
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
mov r15d, 0xfde9
test eax, eax
jmp 0x1404daacf
jne 0x1404da8f0
mov rax, qword [r12]
sar dl, cl
adc dl, 0x1f
mov rdx, qword [r12 + 8]
jmp 0x1404daaf0
sub rdx, rax
clc
sar rdx, 3
jmp 0x1404dab00
cmp r14, rdx
jmp 0x1404dab08
je 0x1404dab54
sub rdx, r14
lea rcx, [rax + r14*8]
bswap r9w
lea r9, [0x1400acc8c]
mov r8d, r10d
mov r8d, 8
jmp 0x1404dab2e
call fcn.1404e6aa5
jmp 0x1404dab54
cmp byte [rbp - 0x68], 0
jmp 0x1404dab41
je 0x1404dab54
mov rcx, r15
jmp 0x1404dab4f
call fcn.1404cb744
mov rcx, rbx
jmp 0x1404dab5c
call qword [sym.imp.KERNEL32.dll_FindClose]
cmp byte [rbp - 0x38], 0
jmp 0x1404dab6b
je 0x1404dab7a
mov rcx, qword [rbp - 0x50]
call fcn.1404cb744
mov eax, edi
mov rcx, qword [rbp + 0x220]
cmp spl, r14b
cmc
jmp 0x1404dab8c
xor rcx, rsp
jmp 0x1404dab94
call fcn.1404a2014
mov rbx, qword [rsp + 0x388]
dec dil
bswap r13w
add rsp, 0x330
movzx di, dil
xchg r15b, dil
mov r12, 0x7343258a
pop r15
movsx r13d, r10w
jmp 0x1404dabcc
pop r14
movzx r13d, cx
pop r13
bswap esi
pop r12
pop rdi
pop rsi
mov bpl, 0xaa
xchg bp, bp
pop rbp
jmp 0x1404dabe6
ret