Function at 0x1404d5585
Capabilities:
Enumerate files on windows

Disassembly:
mov qword [rsp + 0x20], rbx
bts rbx, rbx
sal eax, 1
sar ah, cl
push rbp
seto bh
push rsi
stc
push rdi
sal si, 0x16
sar bx, 0xe7
push r12
push r13
sal bp, 0x57
sub r12w, r12w
ror ebx, 0x20
push r14
cmp cl, r9b
inc al
push r15
bsf r12, rax
lea rbp, [rsp - 0x230]
inc r12b
btc r12w, r13w
movzx ax, sil
sub rsp, 0x330
adc al, 0xbc
mov rax, qword [0x1400b7288]
shld ebx, esi, 0xc3
xor rax, rsp
mov bh, 0x85
mov qword [rbp + 0x220], rax
xor r12d, 0x327d5c92
shr r12d, cl
mov r12, r8
mov rsi, rcx
sar bh, cl
test r9b, 0xb7
movabs rbx, 0x200000000801
cmp r15b, sil
jmp 0x1404d561b
cmp rdx, rcx
jmp 0x1404d5623
je 0x1404d5662
mov al, byte [rdx]
sub al, 0x2f
cmp al, 0x2d
jmp 0x1404d5634
ja 0x1404d5649
movsx rax, al
stc
bt rbx, rax
jb 0x1404d5662
mov rcx, rsi
call fcn.140235f31
mov rdx, rax
cmp rax, rsi
jmp 0x1404d565c
jne 0x1404d5629
mov r8b, byte [rdx]
cmc
stc
cmp r8b, 0x3a
jmp 0x1404d5670
jne 0x1404d56b6
lea rax, [rsi + 1]
cmc
cmp rdx, rax
je 0x1404d56b6
mov r9, r12
sub rcx, 0x956a6c
inc ch
ror ecx, cl
sub r8d, r8d
sub edx, edx
movzx rcx, r9w
movzx cx, r11b
movsx rcx, bx
mov rcx, rsi
jmp 0x1404d56ac
call fcn.1404d5232
jmp 0x1404d5b79
sub r8b, 0x2f
xor edi, edi
cmp r8b, 0x2d
ja 0x1404d56dd
movsx rax, r8b
bt rbx, rax
not al
mov al, 1
jmp 0x1404d56d7
jb 0x1404d56e0
mov al, dil
sub rdx, rsi
cmovp cx, dx
mov qword [rbp - 0x60], rdi
jmp 0x1404d56f8
inc rdx
adc ecx, ebp
mov qword [rbp - 0x58], rdi
sal ch, 0xa5
xor cl, 0x9c
movsx ecx, r11w
neg al
mov qword [rbp - 0x50], rdi
movsxd rcx, r10d
lea rcx, [rsp + 0x30]
mov qword [rbp - 0x48], rdi
jmp 0x1404d5722
sbb r13, r13
cmc
mov qword [rbp - 0x40], rdi
test bx, 0x4d3d
test r10w, di
and r13, rdx
stc
mov byte [rbp - 0x38], dil
test r10b, sil
cmc
xor edx, edx
jmp 0x1404d5746
call fcn.1404a1808
mov rax, qword [rsp + 0x38]
bt r15w, r10w
mov r15d, 0xfde9
cmp r13d, ebp
cmp dword [rax + 0xc], r15d
jmp 0x1404d5767
jne 0x1404d57a5
cmp byte [rsp + 0x48], dil
jmp 0x1404d5777
je 0x1404d579d
mov rax, qword [rsp + 0x30]
and r8b, 0x9e
sbb r8b, 4
test r15, rbp
and dword [rax + 0x3a8], 0xfffffffd
movsx r8w, cl
movsx r8, r14w
mov r8d, r15d
jmp 0x1404d5808
call fcn.1404c7797
test eax, eax
jmp 0x1404d57b1
jne 0x1404d57e2
cmp byte [rsp + 0x48], dil
jmp 0x1404d57c1
je 0x1404d57d7
mov rax, qword [rsp + 0x30]
bsr r8, rdx
and dword [rax + 0x3a8], 0xfffffffd
mov r8d, 1
jmp 0x1404d5808
cmp byte [rsp + 0x48], dil
je 0x1404d57fe
mov rax, qword [rsp + 0x30]
shr cl, cl
shl edx, 0xc3
and dword [rax + 0x3a8], 0xfffffffd
mov r8d, edi
xchg dx, cx
movzx rcx, r8w
lea rdx, [rbp - 0x60]
mov rcx, rsi
jmp 0x1404d5814
call fcn.1404a2286
mov rcx, qword [rbp - 0x50]
bsf r8d, ebp
btr r8d, r15d
lea r8, [rbp - 0x30]
cmp al, bpl
test eax, eax
jmp 0x1404d5833
mov dword [rsp + 0x28], edi
jmp 0x1404d583c
mov qword [rsp + 0x20], rdi
jmp 0x1404d5846
cmovne rcx, rdi
cmp bl, 0x70
stc
xor r9d, r9d
test r13b, sil
stc
sub edx, edx
jmp 0x1404d585c
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov rbx, rax
cmp r13b, r10b
cmp rax, 0xffffffffffffffff
jmp 0x1404d5871
jne 0x1404d58b2
mov r9, r12
btc cx, 0x2c
shrd rcx, r12, 0x1d
inc ch
xor r8d, r8d
bts ecx, r15d
sub cx, 0x7d8d
test r13b, r15b
sub edx, edx
movsxd rcx, r15d
movsx rcx, r12w
mov rcx, rsi
jmp 0x1404d58a6
call fcn.1404d5232
mov edi, eax
jmp 0x1404d5b5c
mov r14, qword [r12 + 8]
sub r14, qword [r12]
adc cx, r14w
setp ch
sar r14, 3
xor edx, edx
mov qword [rsp + 0x70], rdi
lea rcx, [rsp + 0x50]
jmp 0x1404d58d7
mov qword [rsp + 0x78], rdi
jmp 0x1404d58e1
mov qword [rbp - 0x80], rdi
jmp 0x1404d58ea
mov qword [rbp - 0x78], rdi
jmp 0x1404d58f3
mov qword [rbp - 0x70], rdi
jmp 0x1404d58fc
mov byte [rbp - 0x68], dil
jmp 0x1404d5905
call fcn.1404a1808
mov rax, qword [rsp + 0x58]
clc
cmp rax, 0x1360789f
stc
cmp dword [rax + 0xc], r15d
jne 0x1404d5955
cmp byte [rsp + 0x68], dil
jmp 0x1404d592c
je 0x1404d5948
mov rax, qword [rsp + 0x50]
or r8b, 0x73
and dword [rax + 0x3a8], 0xfffffffd
bswap r8
xchg r8b, r8b
mov r8d, r15d
jmp 0x1404d5950
jmp 0x1404d59de
call fcn.1404c7797
test eax, eax
jne 0x1404d59a7
cmp byte [rsp + 0x68], dil
jmp 0x1404d596c
je 0x1404d599c
mov rax, qword [rsp + 0x50]
bt r8w, 0x35
movzx r8d, r9w
rcr r8w, cl
and dword [rax + 0x3a8], 0xfffffffd
movzx r8w, r8b
mov r8, 0x3a833331
movzx r8, r9w
mov r8d, 1
jmp 0x1404d59de
cmp byte [rsp + 0x68], dil
jmp 0x1404d59b1
je 0x1404d59d0
mov rax, qword [rsp + 0x50]
and dh, 0x59
cmovo rdx, r10
bt r8w, 0x16
and dword [rax + 0x3a8], 0xfffffffd
mov r8d, edi
mov dh, 0xbc
cmovp dx, r13w
not cx
lea rdx, [rsp + 0x70]
movsx rcx, r9w
mov cl, r10b
movsx ecx, r12w
lea rcx, [rbp - 4]
jmp 0x1404d59f7
call fcn.1404d4a9c
mov r15, qword [rbp - 0x80]
jmp 0x1404d5a0b
test eax, eax
not cx
jmp 0x1404d5a18
mov rcx, r15
jmp 0x1404d5a20
cmovne rcx, rdi
cmp byte [rcx], 0x2e
jmp 0x1404d5a2c
jne 0x1404d5a59
mov al, byte [rcx + 1]
test al, al
jmp 0x1404d5a3c
je 0x1404d5a89
cmp al, 0x2e
jne 0x1404d5a59
cmp byte [rcx + 2], dil
jmp 0x1404d5a53
je 0x1404d5a89
mov r9, r12
movzx edx, bx
mov r8, r13
movzx rdx, r14w
mov rdx, rsi
jmp 0x1404d5a6e
call fcn.1404d5232
mov edi, eax
jmp 0x1404d5a7f
test eax, eax
jne 0x1404d5b37
xor edi, edi
cmp byte [rbp - 0x68], dil
jmp 0x1404d5a92
je 0x1404d5aa5
mov rcx, r15
jmp 0x1404d5aa0
call fcn.1404c65b7
lea rdx, [rbp - 0x30]
movzx cx, r14b
movzx rcx, si
mov rcx, rbx
jmp 0x1404d5aba
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
mov r15d, 0xfde9
clc
cmp bl, bpl
test eax, eax
jmp 0x1404d5ad1
jne 0x1404d58c6
mov rax, qword [r12]
movsx edx, r12w
add edx, 0x3acc6f93
bts rdx, r8
mov rdx, qword [r12 + 8]
sub rdx, rax
sar rdx, 3
cmc
cmp r14, rdx
jmp 0x1404d5afe
je 0x1404d5b4e
sub rdx, r14
lea rcx, [rax + r14*8]
movzx r8, cx
bswap r9w
movsx r8d, r13w
lea r9, [0x1400acc8c]
movzx r8d, r9w
mov r8d, 8
jmp 0x1404d5b2d
call fcn.1404e1b35
jmp 0x1404d5b4e
cmp byte [rbp - 0x68], 0
jmp 0x1404d5b40
je 0x1404d5b4e
mov rcx, r15
call fcn.1404c65b7
mov rcx, rbx
jmp 0x1404d5b56
call qword [sym.imp.KERNEL32.dll_FindClose]
cmp byte [rbp - 0x38], 0
je 0x1404d5b74
mov rcx, qword [rbp - 0x50]
jmp 0x1404d5b6f
call fcn.1404c65b7
mov eax, edi
and cl, r13b
mov rcx, qword [rbp + 0x220]
xor rcx, rsp
jmp 0x1404d5b88
call fcn.14049cc19
mov rbx, qword [rsp + 0x388]
add rsp, 0x330
pop r15
movsx bp, cl
pop r14
movzx ebp, r9w
setae sil
movsx rbp, cx
pop r13
movsx rsi, dx
xchg r12w, bp
setns sil
pop r12
movsx ebp, r14w
mov dil, sil
pop rdi
not rsi
movsx rsi, bp
pop rsi
pop rbp
jmp 0x1404d5bd6
ret