Function at 0x1404d7543
Capabilities:
Enumerate files on windows

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
sbb bpl, 0x49
push rsi
btc bp, 0x47
movsx rbp, r10w
cmc
push rdi
rcl bpl, 0xf0
sal rax, cl
push r12
push r13
btr ax, cx
movsxd rsi, r14d
push r14
cmp bx, 0x26d7
shrd ebp, eax, 0xe5
push r15
rol r12w, 0xac
test sp, r10w
lea rbp, [rsp - 0x230]
sub rsp, 0x330
xchg bx, r12w
mov rax, qword [0x1400b7288]
mov bx, 0x4795
xor rax, rsp
mov qword [rbp + 0x220], rax
mov r12, r8
clc
jmp 0x1404d75b5
mov rsi, rcx
btr rbx, 0x8e
test sil, al
movsxd rbx, r11d
movabs rbx, 0x200000000801
cmp r14w, 0x7c56
clc
cmp rdx, rcx
jmp 0x1404d75dc
je 0x1404d7622
mov al, byte [rdx]
sub al, 0x2f
cmp ebx, 0x106b6548
cmp al, 0x2d
jmp 0x1404d75f3
ja 0x1404d760e
movsx rax, al
clc
jmp 0x1404d7604
bt rbx, rax
jb 0x1404d7622
mov rcx, rsi
call fcn.1400fcf4e
mov rdx, rax
cmp rax, rsi
jne 0x1404d75e2
mov r8b, byte [rdx]
cmp r8b, 0x3a
jmp 0x1404d762e
jne 0x1404d7660
lea rax, [rsi + 1]
cmp rdx, rax
jmp 0x1404d7640
je 0x1404d7660
mov r9, r12
xor r8d, r8d
xor edx, edx
mov rcx, rsi
jmp 0x1404d7656
call fcn.1404d7218
jmp 0x1404d7ad8
sub r8b, 0x2f
test r15b, r9b
sub edi, edi
jmp 0x1404d766f
cmp r8b, 0x2d
jmp 0x1404d7678
ja 0x1404d7695
movsx rax, r8b
clc
jmp 0x1404d7689
bt rbx, rax
mov al, 1
jb 0x1404d7698
mov al, dil
sub rdx, rsi
mov qword [rbp - 0x60], rdi
movsx rcx, si
setle ch
movzx rcx, bp
inc rdx
rcr rcx, cl
mov qword [rbp - 0x58], rdi
sub cl, 0x60
neg al
movsx cx, r11b
dec ecx
movsx rcx, sp
mov qword [rbp - 0x50], rdi
inc cx
lea rcx, [rsp + 0x30]
jmp 0x1404d76d5
mov qword [rbp - 0x48], rdi
jmp 0x1404d76de
sbb r13, r13
cmp dl, r13b
mov qword [rbp - 0x40], rdi
and r13, rdx
mov byte [rbp - 0x38], dil
cmp r13, r15
xor edx, edx
jmp 0x1404d76f9
call fcn.1404a396d
mov rax, qword [rsp + 0x38]
mov r15d, 0xfde9
cmp dword [rax + 0xc], r15d
jmp 0x1404d7712
jne 0x1404d774d
cmp byte [rsp + 0x48], dil
jmp 0x1404d7722
je 0x1404d7740
mov rax, qword [rsp + 0x30]
mov r8b, 0x52
and dword [rax + 0x3a8], 0xfffffffd
movzx r8d, bp
movzx r8w, r11b
mov r8d, r15d
jmp 0x1404d7748
jmp 0x1404d77ba
call fcn.1404c9869
test eax, eax
jmp 0x1404d7759
jne 0x1404d7789
cmp byte [rsp + 0x48], dil
je 0x1404d777e
mov rax, qword [rsp + 0x30]
xor r8w, r9w
and dword [rax + 0x3a8], 0xfffffffd
setne r8b
mov r8d, 1
jmp 0x1404d77ba
cmp byte [rsp + 0x48], dil
jmp 0x1404d7793
je 0x1404d77af
mov rax, qword [rsp + 0x30]
rol r8b, cl
and dword [rax + 0x3a8], 0xfffffffd
movsx rdx, r9w
xchg dx, dx
mov r8d, edi
movsx ecx, r10w
movsx rdx, r12w
lea rdx, [rbp - 0x60]
bswap ecx
mov cx, 0x5382
mov rcx, rsi
jmp 0x1404d77cc
call fcn.1404a43c3
mov rcx, qword [rbp - 0x50]
xor r8b, 0x84
lea r8, [rbp - 0x30]
test eax, eax
jmp 0x1404d77e4
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
cmovne rcx, rdi
jmp 0x1404d77f6
sub r9d, r9d
sub edx, edx
jmp 0x1404d7800
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jmp 0x1404d7812
jne 0x1404d7851
mov r9, r12
movsx cx, bl
jmp 0x1404d7827
sub r8d, r8d
btc cx, 0x9a
bsf rcx, r11
sub edx, edx
bswap cx
mov rcx, rsi
jmp 0x1404d7840
call fcn.1404d7218
mov edi, eax
jmp 0x1404d784c
jmp 0x1404d7abc
mov r14, qword [r12 + 8]
jmp 0x1404d785f
sub r14, qword [r12]
bswap rcx
sar r14, 3
xor edx, edx
cmovg ecx, esi
mov qword [rsp + 0x70], rdi
lea rcx, [rsp + 0x50]
jmp 0x1404d787e
mov qword [rsp + 0x78], rdi
jmp 0x1404d7888
mov qword [rbp - 0x80], rdi
jmp 0x1404d7891
mov qword [rbp - 0x78], rdi
jmp 0x1404d789a
mov qword [rbp - 0x70], rdi
jmp 0x1404d78a3
mov byte [rbp - 0x68], dil
jmp 0x1404d78ac
call fcn.1404a396d
mov rax, qword [rsp + 0x58]
cmp dword [rax + 0xc], r15d
jmp 0x1404d78bf
jne 0x1404d78f8
cmp byte [rsp + 0x68], dil
je 0x1404d78eb
mov rax, qword [rsp + 0x50]
bswap r8d
and dword [rax + 0x3a8], 0xfffffffd
jmp 0x1404d78eb
mov r8d, r15d
jmp 0x1404d78f3
jmp 0x1404d796f
call fcn.1404c9869
test eax, eax
jmp 0x1404d7904
jne 0x1404d7936
cmp byte [rsp + 0x68], dil
je 0x1404d7926
mov rax, qword [rsp + 0x50]
stc
and dword [rax + 0x3a8], 0xfffffffd
movsx r8, cx
mov r8d, 1
jmp 0x1404d7931
jmp 0x1404d796f
cmp byte [rsp + 0x68], dil
jmp 0x1404d7940
je 0x1404d7966
mov rax, qword [rsp + 0x50]
jmp 0x1404d7956
and dword [rax + 0x3a8], 0xfffffffd
sete dl
cwd
movsx r8d, r8w
mov r8d, edi
cdq
movsx dx, r13b
lea rdx, [rsp + 0x70]
lea rcx, [rbp - 4]
jmp 0x1404d797d
call fcn.1404d6add
mov r15, qword [rbp - 0x80]
test eax, eax
mov rcx, r15
jmp 0x1404d7990
cmovne rcx, rdi
cmp ebx, r15d
cmp byte [rcx], 0x2e
jne 0x1404d79ce
mov al, byte [rcx + 1]
cmp r14w, 0xa1b
cmc
test al, al
jmp 0x1404d79b1
je 0x1404d79f3
cmp al, 0x2e
jmp 0x1404d79be
jne 0x1404d79ce
cmp byte [rcx + 2], dil
je 0x1404d79f3
mov r9, r12
movsx rdx, r15w
mov r8, r13
mov rdx, rsi
call fcn.1404d7218
mov edi, eax
test eax, eax
jmp 0x1404d79e9
jne 0x1404d7a97
sub edi, edi
clc
cmc
cmp byte [rbp - 0x68], dil
je 0x1404d7a0a
mov rcx, r15
jmp 0x1404d7a05
call fcn.1404c874f
lea rdx, [rbp - 0x30]
bswap cx
movzx cx, sil
setns cl
mov rcx, rbx
jmp 0x1404d7a21
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
mov r15d, 0xfde9
cmp r15b, 0x24
test eax, eax
jmp 0x1404d7a38
jne 0x1404d786a
mov rax, qword [r12]
btr rdx, 0x15
movsx rdx, r14w
rcr rdx, 0x61
mov rdx, qword [r12 + 8]
sub rdx, rax
stc
cmc
clc
sar rdx, 3
cmp cl, r9b
stc
cmp r14, rdx
jmp 0x1404d7a6a
je 0x1404d7ab3
sub rdx, r14
lea rcx, [rax + r14*8]
mov r9b, 0xba
xchg r8b, r9b
movsxd r9, ebp
lea r9, [0x1400acc8c]
mov r8d, 8
call fcn.1404e3a37
jmp 0x1404d7ab3
cmp byte [rbp - 0x68], 0
jmp 0x1404d7aa0
je 0x1404d7ab3
mov rcx, r15
jmp 0x1404d7aae
call fcn.1404c874f
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindClose]
cmp byte [rbp - 0x38], 0
je 0x1404d7acf
mov rcx, qword [rbp - 0x50]
call fcn.1404c874f
mov eax, edi
test r9, 0x504003d0
mov rcx, qword [rbp + 0x220]
test r15b, r11b
xor rcx, rsp
jmp 0x1404d7aea
call fcn.14049edb0
mov rbx, qword [rsp + 0x388]
cmovns bp, r14w
add rsp, 0x330
movsx si, r15b
movzx r14, sp
pop r15
xchg rsi, rsi
movzx ebp, r13w
movsxd r12, r10d
pop r14
movsx r13, r13w
movsx di, r13b
movzx edi, r8w
pop r13
cmovg esi, r13d
movzx r12, sp
movsx bp, dl
pop r12
pop rdi
jmp 0x1404d7b41
pop rsi
movsx rbp, r9w
pop rbp
jmp 0x1404d7b4c
ret