Function at 0x1404d5a53
Capabilities:
Enumerate files on windows

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
rol bl, cl
xchg bx, ax
push rsi
ror bx, cl
inc sil
push rdi
cmc
movsx bx, r8b
sub bpl, 0x78
push r12
sal r12b, cl
ror bh, 0x7b
push r13
test r14b, bl
push r14
sar rsi, cl
push r15
lea rbp, [rsp - 0x230]
btc bx, 0xd1
and rsi, r8
btr rsi, r12
sub rsp, 0x330
cmp r10b, 0xf1
add bl, r12b
mov rax, qword [0x1400b7288]
shr sil, 0x7e
xor rax, rsp
sbb r12b, r12b
mov qword [rbp + 0x220], rax
rcl r12, 0x7b
movzx esi, r10w
mov r12, r8
or esi, 0x625454ae
test bpl, 0x98
mov rsi, rcx
rcr ebx, 0x62
adc bl, r14b
xor bl, r15b
movabs rbx, 0x200000000801
cmp rdx, rcx
jmp 0x1404d5af0
je 0x1404d5b3d
mov al, byte [rdx]
stc
sub al, 0x2f
stc
jmp 0x1404d5b01
cmp al, 0x2d
jmp 0x1404d5b08
ja 0x1404d5b24
movsx rax, al
cmc
clc
stc
bt rbx, rax
jmp 0x1404d5b1e
jb 0x1404d5b3d
mov rcx, rsi
call fcn.1401ba99c
mov rdx, rax
cmp rax, rsi
jmp 0x1404d5b37
jne 0x1404d5af6
mov r8b, byte [rdx]
cmp r8b, 0x3a
jmp 0x1404d5b49
jne 0x1404d5b7d
lea rax, [rsi + 1]
cmp rdx, rax
jmp 0x1404d5b5b
je 0x1404d5b7d
mov r9, r12
xor r8d, r8d
bt ecx, 0xd8
xor edx, edx
mov ch, 0xbb
mov rcx, rsi
call fcn.1404d5736
jmp 0x1404d6035
sub r8b, 0x2f
test cx, 0x3971
xor edi, edi
jmp 0x1404d5b91
cmp r8b, 0x2d
ja 0x1404d5bb2
movsx rax, r8b
clc
cmc
bt rbx, rax
mov al, 1
jmp 0x1404d5bac
jb 0x1404d5bc2
mov al, dil
bt rcx, r14
movzx cx, spl
rcr cx, 0xee
sub rdx, rsi
dec cl
mov qword [rbp - 0x60], rdi
inc rdx
dec rcx
shr ch, cl
shld cx, bp, 0xa
mov qword [rbp - 0x58], rdi
shl cx, 0x2f
neg al
mov qword [rbp - 0x50], rdi
not cx
lea rcx, [rsp + 0x30]
jmp 0x1404d5bf3
mov qword [rbp - 0x48], rdi
jmp 0x1404d5bfc
sbb r13, r13
test sp, 0x46d9
mov qword [rbp - 0x40], rdi
test r11, rdi
and r13, rdx
test r15b, sil
mov byte [rbp - 0x38], dil
xor edx, edx
call fcn.1404a1ba3
mov rax, qword [rsp + 0x38]
and r15b, r14b
movzx r15d, bx
mov r15d, 0xfde9
test cl, r15b
cmp rdi, rsp
cmp dword [rax + 0xc], r15d
jmp 0x1404d5c3d
jne 0x1404d5c76
cmp byte [rsp + 0x48], dil
jmp 0x1404d5c4d
je 0x1404d5c69
mov rax, qword [rsp + 0x30]
and dword [rax + 0x3a8], 0xfffffffd
movzx r8w, r15b
cmovge r8w, r9w
mov r8d, r15d
jmp 0x1404d5c71
jmp 0x1404d5ceb
call fcn.1404c7c3a
test eax, eax
jne 0x1404d5cbb
cmp byte [rsp + 0x48], dil
jmp 0x1404d5c8d
je 0x1404d5cab
mov rax, qword [rsp + 0x30]
movzx r8, r8w
and r8b, 0x84
bt r8, rax
and dword [rax + 0x3a8], 0xfffffffd
mov r8d, 1
jmp 0x1404d5cb6
jmp 0x1404d5ceb
cmp byte [rsp + 0x48], dil
jmp 0x1404d5cc5
je 0x1404d5cdd
mov rax, qword [rsp + 0x30]
xor r8w, 0x74f7
and dword [rax + 0x3a8], 0xfffffffd
mov r8d, edi
movzx rdx, r8w
not dh
movzx dx, dil
lea rdx, [rbp - 0x60]
setnp ch
cmovno cx, r9w
movzx ecx, dx
mov rcx, rsi
jmp 0x1404d5d02
call fcn.1404a25db
mov rcx, qword [rbp - 0x50]
movsx r8d, ax
or r8b, 0xc0
lea r8, [rbp - 0x30]
test dil, 0x24
test eax, eax
jmp 0x1404d5d22
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
cmovne rcx, rdi
cmp dx, 0x7b32
sub r9d, r9d
cmc
test r14b, 0x97
sub edx, edx
jmp 0x1404d5d43
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov rbx, rax
cmc
clc
cmp rax, 0xffffffffffffffff
jne 0x1404d5d7d
mov r9, r12
ror cl, cl
sub r8d, r8d
rol cx, 0x84
sub edx, edx
bswap rcx
mov rcx, rsi
call fcn.1404d5736
mov edi, eax
jmp 0x1404d5d78
jmp 0x1404d6017
mov r14, qword [r12 + 8]
sub r14, qword [r12]
movzx rcx, r12w
rcl cl, cl
sar r14, 3
test bx, sp
xor edx, edx
setl ch
jmp 0x1404d5d9d
mov qword [rsp + 0x70], rdi
lea rcx, [rsp + 0x50]
jmp 0x1404d5dac
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x78], rdi
jmp 0x1404d5dbe
mov qword [rbp - 0x70], rdi
jmp 0x1404d5dc7
mov byte [rbp - 0x68], dil
jmp 0x1404d5dd0
call fcn.1404a1ba3
mov rax, qword [rsp + 0x58]
stc
clc
test cx, 0x625f
cmp dword [rax + 0xc], r15d
jmp 0x1404d5dea
jne 0x1404d5e1f
cmp byte [rsp + 0x68], dil
je 0x1404d5e12
mov rax, qword [rsp + 0x50]
btc r8w, 0xf1
and dword [rax + 0x3a8], 0xfffffffd
movzx r8w, r14b
mov r8d, r15d
jmp 0x1404d5e1a
jmp 0x1404d5e88
call fcn.1404c7c3a
test eax, eax
jmp 0x1404d5e2b
jne 0x1404d5e6e
cmp byte [rsp + 0x68], dil
je 0x1404d5e5e
mov rax, qword [rsp + 0x50]
mov r8w, 0x19aa
bts r8d, ecx
and dword [rax + 0x3a8], 0xfffffffd
xchg r8b, r8b
movsx r8w, r13b
movzx r8w, cl
mov r8d, 1
jmp 0x1404d5e69
jmp 0x1404d5e88
cmp byte [rsp + 0x68], dil
je 0x1404d5e85
mov rax, qword [rsp + 0x50]
and dword [rax + 0x3a8], 0xfffffffd
mov r8d, edi
lea rdx, [rsp + 0x70]
movzx cx, ah
mov ch, 0x17
bswap ecx
lea rcx, [rbp - 4]
jmp 0x1404d5e9f
call fcn.1404d4f8b
mov r15, qword [rbp - 0x80]
adc cx, 0x1c9b
test eax, eax
movzx ecx, dx
mov rcx, r15
jmp 0x1404d5eba
cmovne rcx, rdi
cmp r12d, 0x761b4e04
jmp 0x1404d5eca
cmp byte [rcx], 0x2e
jmp 0x1404d5ed2
jne 0x1404d5f07
mov al, byte [rcx + 1]
stc
cmp r10b, r13b
cmp r15b, 0x6d
test al, al
jmp 0x1404d5eea
je 0x1404d5f38
cmp al, 0x2e
jmp 0x1404d5ef7
jne 0x1404d5f07
cmp byte [rcx + 2], dil
je 0x1404d5f38
mov r9, r12
mov r8, r9
mov r8, r13
movsx dx, dil
mov rdx, rsi
jmp 0x1404d5f1d
call fcn.1404d5736
mov edi, eax
cmp bpl, 0x87
cmc
test eax, eax
jmp 0x1404d5f30
jne 0x1404d5fed
xor edi, edi
cmp byte [rbp - 0x68], dil
jmp 0x1404d5f41
je 0x1404d5f54
mov rcx, r15
jmp 0x1404d5f4f
call fcn.1404c6aa1
lea rdx, [rbp - 0x30]
not ecx
bswap ecx
movsx cx, r13b
mov rcx, rbx
jmp 0x1404d5f69
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
mov r15d, 0xfde9
test sil, 0x8b
cmc
test eax, eax
jmp 0x1404d5f81
jne 0x1404d5d93
mov rax, qword [r12]
mov rdx, qword [r12 + 8]
cmc
cmp r12b, r14b
clc
sub rdx, rax
sar rdx, 3
cmc
cmp rsp, 0x57814721
cmp r14, rdx
jmp 0x1404d5fac
je 0x1404d6009
sub rdx, r14
cmovns rcx, r11
bswap r8d
lea rcx, [rax + r14*8]
jmp 0x1404d5fcd
lea r9, [0x1400acc8c]
movsx r8d, r12w
mov r8d, 8
jmp 0x1404d5fe3
call fcn.1404e1ecd
jmp 0x1404d6009
cmp byte [rbp - 0x68], 0
jmp 0x1404d5ff6
je 0x1404d6009
mov rcx, r15
jmp 0x1404d6004
call fcn.1404c6aa1
mov rcx, rbx
jmp 0x1404d6011
call qword [sym.imp.KERNEL32.dll_FindClose]
cmp byte [rbp - 0x38], 0
je 0x1404d602f
mov rcx, qword [rbp - 0x50]
jmp 0x1404d602a
call fcn.1404c6aa1
mov eax, edi
rcr cx, 0xcc
mov rcx, qword [rbp + 0x220]
test bp, 0x2636
xor rcx, rsp
jmp 0x1404d6049
call fcn.14049cfde
mov rbx, qword [rsp + 0x388]
sar di, 0xb8
rol r12d, 0x8a
add rsp, 0x330
pop r15
movzx edi, r14w
pop r14
pop r13
bswap si
movzx r12w, r8b
pop r12
pop rdi
movsx bp, r10b
movzx bp, r9b
pop rsi
mov bpl, bpl
movsxd rbp, edi
pop rbp
ret