Function at 0x1404d4af5
Capabilities:
Enumerate files on windows

Disassembly:
mov qword [rsp + 0x20], rbx
cmp esi, r15d
sar bl, cl
push rbp
bts ebx, r9d
cmp r13b, sil
rcr eax, cl
push rsi
and ah, 0x78
push rdi
cdqe
btc bp, cx
neg sil
push r12
bsr ebp, ebx
cmp r12b, 0x7a
push r13
not bp
test sp, r9w
movzx bx, r14b
push r14
push r15
rcr r12w, cl
rol r12w, 0x81
lea rbp, [rsp - 0x230]
movzx ebx, r15w
sub rsp, 0x330
movsxd r12, esi
rol bl, 0xc
mov rax, qword [0x1400b7288]
btr r12w, 0xb6
ror r12b, 0x6c
xor rax, rsp
cmp sp, bx
not r12
mov qword [rbp + 0x220], rax
sar bh, 0xab
mov r12, r8
sets sil
sub bx, cx
rol bx, cl
mov rsi, rcx
bswap ebx
movabs rbx, 0x200000000801
clc
cmc
cmp r9w, 0x7aa8
cmp rdx, rcx
jmp 0x1404d4ba4
je 0x1404d4bfe
mov al, byte [rdx]
sub al, 0x2f
cmp sp, sp
test r9, 0x35661c2b
cmp al, 0x2d
jmp 0x1404d4bbf
ja 0x1404d4bd9
movsx rax, al
clc
bt rbx, rax
jmp 0x1404d4bd3
jb 0x1404d4bfe
mov rcx, rsi
jmp 0x1404d4be1
call fcn.14020a668
mov rdx, rax
cmp dil, r8b
cmp r11b, 0x92
cmp rax, rsi
jmp 0x1404d4bf8
jne 0x1404d4baa
mov r8b, byte [rdx]
clc
test ecx, 0x6ab33c62
cmp r8b, 0x3a
jmp 0x1404d4c11
jne 0x1404d4c51
lea rax, [rsi + 1]
test r12w, bp
cmp dil, spl
cmc
cmp rdx, rax
jmp 0x1404d4c2b
je 0x1404d4c51
mov r9, r12
xor r8d, r8d
xor edx, edx
xchg cx, cx
movzx rcx, r13w
mov cx, r11w
mov rcx, rsi
call fcn.1404d47b2
jmp 0x1404d50f3
sub r8b, 0x2f
xor edi, edi
stc
cmp r8b, 0x2d
jmp 0x1404d4c61
ja 0x1404d4c7c
movsx rax, r8b
bt rbx, rax
mov al, 1
jmp 0x1404d4c76
jb 0x1404d4c84
mov al, dil
cmovne cx, r11w
sub rdx, rsi
bswap cx
sete cl
mov qword [rbp - 0x60], rdi
movsx rcx, r10w
mov rcx, r8
inc rdx
shld ecx, eax, 0x40
mov qword [rbp - 0x58], rdi
rcl ecx, 0x21
xor cl, 0x79
rcr rcx, 0x71
neg al
mov qword [rbp - 0x50], rdi
movsx ecx, r15w
movzx rcx, si
lea rcx, [rsp + 0x30]
jmp 0x1404d4cc5
mov qword [rbp - 0x48], rdi
jmp 0x1404d4cce
sbb r13, r13
jmp 0x1404d4cd9
mov qword [rbp - 0x40], rdi
jmp 0x1404d4ce2
and r13, rdx
mov byte [rbp - 0x38], dil
sub edx, edx
call fcn.1404a0cf3
mov rax, qword [rsp + 0x38]
inc r15b
xchg r15, r15
clc
mov r15d, 0xfde9
test r14b, sil
cmp dword [rax + 0xc], r15d
jmp 0x1404d4d0e
jne 0x1404d4d48
cmp byte [rsp + 0x48], dil
jmp 0x1404d4d1e
je 0x1404d4d3b
mov rax, qword [rsp + 0x30]
bswap r8w
xor r8d, 0x2c52282d
and dword [rax + 0x3a8], 0xfffffffd
mov r8d, r15d
jmp 0x1404d4d43
jmp 0x1404d4dba
call fcn.1404c6cb4
test eax, eax
jmp 0x1404d4d54
jne 0x1404d4d8f
cmp byte [rsp + 0x48], dil
jmp 0x1404d4d64
je 0x1404d4d7f
mov rax, qword [rsp + 0x30]
bsr r8w, r11w
and dword [rax + 0x3a8], 0xfffffffd
movzx r8, sp
mov r8d, 1
jmp 0x1404d4d8a
jmp 0x1404d4dba
cmp byte [rsp + 0x48], dil
jmp 0x1404d4d99
je 0x1404d4db7
mov rax, qword [rsp + 0x30]
shr ch, cl
adc r8b, 0x77
add ecx, 0x21b664ab
and dword [rax + 0x3a8], 0xfffffffd
mov r8d, edi
lea rdx, [rbp - 0x60]
bswap cx
mov cl, dil
mov rcx, rsi
jmp 0x1404d4dcc
call fcn.1404a1729
mov rcx, qword [rbp - 0x50]
cmp r8b, 0x9a
test dil, r11b
lea r8, [rbp - 0x30]
stc
cmc
cmp r11b, r11b
test eax, eax
jmp 0x1404d4dec
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
cmovne rcx, rdi
jmp 0x1404d4e03
sub r9d, r9d
stc
xor edx, edx
jmp 0x1404d4e0e
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x1404d4e4a
mov r9, r12
xor r8d, r8d
xor cx, ax
sal ecx, 0x47
adc cx, dx
xor edx, edx
xchg cx, cx
mov cl, 0xbd
movsx rcx, di
mov rcx, rsi
call fcn.1404d47b2
mov edi, eax
jmp 0x1404d50d9
mov r14, qword [r12 + 8]
mov cl, spl
movzx ecx, r14w
sub r14, qword [r12]
movzx cx, dil
sar r14, 3
sub edx, edx
mov qword [rsp + 0x70], rdi
movzx cx, r15b
movsx cx, r9b
lea rcx, [rsp + 0x50]
jmp 0x1404d4e7e
mov qword [rsp + 0x78], rdi
jmp 0x1404d4e88
mov qword [rbp - 0x80], rdi
jmp 0x1404d4e91
mov qword [rbp - 0x78], rdi
jmp 0x1404d4e9a
mov qword [rbp - 0x70], rdi
jmp 0x1404d4ea3
mov byte [rbp - 0x68], dil
jmp 0x1404d4eac
call fcn.1404a0cf3
mov rax, qword [rsp + 0x58]
test r14b, bl
cmp rbx, 0x4a414301
cmp dword [rax + 0xc], r15d
jne 0x1404d4efe
cmp byte [rsp + 0x68], dil
jmp 0x1404d4ed4
je 0x1404d4ef1
mov rax, qword [rsp + 0x50]
and dword [rax + 0x3a8], 0xfffffffd
movsx r8, ax
movsxd r8, r15d
movzx r8d, r12w
mov r8d, r15d
jmp 0x1404d4ef9
jmp 0x1404d4f72
call fcn.1404c6cb4
test eax, eax
jmp 0x1404d4f0a
jne 0x1404d4f4e
cmp byte [rsp + 0x68], dil
jmp 0x1404d4f1a
je 0x1404d4f3e
mov rax, qword [rsp + 0x50]
sal r8, 5
add r8b, al
and dword [rax + 0x3a8], 0xfffffffd
movzx r8w, r15b
not r8
mov r8d, r10d
mov r8d, 1
jmp 0x1404d4f49
jmp 0x1404d4f72
cmp byte [rsp + 0x68], dil
jmp 0x1404d4f58
je 0x1404d4f6d
mov rax, qword [rsp + 0x50]
and dword [rax + 0x3a8], 0xfffffffd
not cx
mov r8d, edi
cwd
lea rdx, [rsp + 0x70]
movzx cx, r10b
movsx ecx, bx
lea rcx, [rbp - 4]
call fcn.1404d3fce
mov r15, qword [rbp - 0x80]
bswap cx
test r9b, 0x10
btc cx, 0x7b
test eax, eax
mov cx, 0x6413
mov rcx, r15
jmp 0x1404d4fa6
cmovne rcx, rdi
clc
cmp rax, r15
stc
cmp byte [rcx], 0x2e
jmp 0x1404d4fb7
jne 0x1404d4ff0
mov al, byte [rcx + 1]
test esi, 0x65147caa
stc
test al, al
jmp 0x1404d4fce
je 0x1404d5012
cmp al, 0x2e
jmp 0x1404d4fdb
jne 0x1404d4ff0
cmp byte [rcx + 2], dil
jmp 0x1404d4fea
je 0x1404d5012
mov r9, r12
mov r8, r13
mov rdx, rsi
call fcn.1404d47b2
mov edi, eax
test eax, eax
jmp 0x1404d5007
jne 0x1404d50b9
sub edi, edi
clc
test ah, bl
cmp byte [rbp - 0x68], dil
jmp 0x1404d501b
je 0x1404d5029
mov rcx, r15
call fcn.1404c5b87
lea rdx, [rbp - 0x30]
movzx ecx, r15w
mov rcx, rbx
jmp 0x1404d5039
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
mov r15d, 0xfde9
cmc
clc
test eax, eax
jmp 0x1404d504e
jne 0x1404d4e63
mov rax, qword [r12]
add dl, ah
rcr dx, cl
cmc
mov rdx, qword [r12 + 8]
cmp sil, bpl
sub rdx, rax
cmc
sar rdx, 3
cmp r14, rdx
je 0x1404d50cb
sub rdx, r14
not r9w
jmp 0x1404d5087
lea rcx, [rax + r14*8]
cmove r9d, r12d
mov r9b, spl
mov r9b, 0x85
lea r9, [0x1400acc8c]
setbe r8b
cmovns r8d, edi
mov r8d, 8
jmp 0x1404d50af
call fcn.1404e0f18
jmp 0x1404d50cb
cmp byte [rbp - 0x68], 0
je 0x1404d50cb
mov rcx, r15
call fcn.1404c5b87
mov rcx, rbx
jmp 0x1404d50d3
call qword [sym.imp.KERNEL32.dll_FindClose]
cmp byte [rbp - 0x38], 0
je 0x1404d50f1
mov rcx, qword [rbp - 0x50]
jmp 0x1404d50ec
call fcn.1404c5b87
mov eax, edi
mov rcx, qword [rbp + 0x220]
xor rcx, rsp
jmp 0x1404d5102
call fcn.14049c123
mov rbx, qword [rsp + 0x388]
sbb r12b, 0x2a
movsx si, dl
add rsp, 0x330
pop r15
pop r14
mov bpl, r15b
movsxd r12, ebp
setne r13b
pop r13
movzx esi, r8w
pop r12
pop rdi
pop rsi
pop rbp
jmp 0x1404d513c
ret