Function at 0x14000ae50
Capabilities:
Enumerate files on windows

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x2a8]
sub rsp, 0x380
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x14008e010]
xor rax, rsp
mov qword [rbp + 0x250], rax
mov r13, rcx
xor r12d, r12d
mov dword [rsp + 0x38], r12d
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x20], xmm1
mov qword [rbp - 0x10], r12
movdqu xmmword [rbp - 0x78], xmm1
mov qword [rbp - 0x68], r12
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], r12w
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], r12w
call fcn.14000cc30
mov rbx, rax
mov edx, 0xffffffff
mov rcx, qword [rax]
call qword [sym.imp.KERNEL32.DLL_WaitForSingleObject]
lea rdx, [rbx + 0x30]
lea rax, [rbp - 0x40]
cmp rax, rdx
je 0x14000af0b
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 8
jb 0x14000af02
mov rdx, qword [rdx]
lea rcx, [rbp - 0x40]
call fcn.14000d1d0
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.DLL_ReleaseMutex]
mov rdx, qword [rbp - 0x30]
mov r8, qword [rbp - 0x28]
mov rax, r8
sub rax, rdx
cmp rax, 1
jb 0x14000af4f
lea rcx, [rdx + 1]
mov qword [rbp - 0x30], rcx
lea rax, [rbp - 0x40]
cmp r8, 8
cmovae rax, qword [rbp - 0x40]
mov r8d, 0x5c
mov word [rax + rdx*2], r8w
mov word [rax + rcx*2], r12w
jmp 0x14000af73
mov qword [rsp + 0x20], 1
lea r9, [0x14007c1c8]
movzx r8d, byte [rsp + 0x30]
mov edx, 1
lea rcx, [rbp - 0x40]
call fcn.14000e230
lea rcx, str.Searching_dalp_TAs_in_the_repository...
call fcn.1400031b0
lea rdx, [0x14008ec90]
lea rcx, [rsp + 0x40]
call fcn.140008b00
mov rbx, rax
mov qword [rsp + 0x78], r12
mov qword [rbp - 0x80], 7
mov word [rsp + 0x68], r12w
mov dword [rsp + 0x38], 1
mov rdx, qword [rbp - 0x30]
inc rdx
lea rcx, [rsp + 0x68]
call fcn.14000e780
lea rdx, [rbp - 0x40]
lea rcx, [rsp + 0x68]
call fcn.14000e950
mov rdx, qword [rsp + 0x78]
mov r8, qword [rbp - 0x80]
mov rax, r8
sub rax, rdx
mov edi, 0x2a
cmp rax, 1
jb 0x14000b00a
lea rcx, [rdx + 1]
mov qword [rsp + 0x78], rcx
lea rax, [rsp + 0x68]
cmp r8, 8
cmovae rax, qword [rsp + 0x68]
mov word [rax + rdx*2], di
mov word [rax + rcx*2], r12w
jmp 0x14000b02f
mov qword [rsp + 0x20], 1
lea r9, [0x14007c1f8]
movzx r8d, byte [rsp + 0x30]
mov edx, 1
lea rcx, [rsp + 0x68]
call fcn.14000e230
mov rcx, qword [rbx + 0x10]
mov rax, qword [rbp - 0x80]
mov rdx, qword [rsp + 0x78]
sub rax, rdx
cmp rcx, rax
jbe 0x14000b05f
mov rax, qword [rbx + 0x18]
sub rax, rcx
cmp rax, rdx
jb 0x14000b05f
lea r8, [rsp + 0x68]
mov rcx, rbx
call fcn.14000e840
jmp 0x14000b06c
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14000e950
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov word [rax], r12w
mov qword [rax + 0x18], 7
mov qword [rax + 0x10], r12
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x14000b0c3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b0be
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ba81
call fcn.140038b74
movups xmmword [rbp - 0x60], xmm6
movups xmmword [rbp - 0x50], xmm7
mov r15d, 2
mov rdx, qword [rbp - 0x80]
cmp rdx, 8
jb 0x14000b112
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b10d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ba87
call fcn.140038b74
mov qword [rsp + 0x78], r12
mov qword [rbp - 0x80], 7
mov word [rsp + 0x68], r12w
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x14000b167
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b162
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ba8d
call fcn.140038b74
lea rcx, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae rcx, qword [rbp - 0x60]
lea rdx, [rbp]
call qword [sym.imp.KERNEL32.DLL_FindFirstFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
jne 0x14000b199
lea rcx, str.FindFirstFile_failed.
call fcn.1400031b0
jmp 0x14000b405
lea rax, [rsp + 0x68]
mov qword [rsp + 0x38], rax
movzx ebx, byte [rsp + 0x30]
nop dword [rax + rax]
mov word [rbp + 0x6c], r12w
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], 7
mov word [rsp + 0x40], r12w
lea rax, [rbp + 0x2c]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x14000b1d4
lea rdx, [rbp + 0x2c]
lea rcx, [rsp + 0x40]
call fcn.14000d1d0
nop
lea rcx, [rsp + 0x40]
mov r9, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
cmovae rcx, r9
mov rax, qword [rsp + 0x50]
lea rsi, [rcx + rax*2]
lea rdi, [rsp + 0x40]
cmovae rdi, r9
mov qword [rsp + 0x78], r12
mov r8d, reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x80], r8
mov byte [rsp + 0x68], 0
mov rax, rsi
sub rax, rdi
sar rax, 1
cmp rax, 0x10
jb 0x14000b25a
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.1400091a0
mov qword [rsp + 0x78], r12
mov rdx, qword [rsp + 0x58]
mov r9, qword [rsp + 0x40]
mov r8, qword [rbp - 0x80]
cmp rdi, rsi
je 0x14000b2bb
nop
movzx r9d, byte [rdi]
mov rcx, qword [rsp + 0x78]
cmp rcx, r8
jae 0x14000b291
lea rax, [rcx + 1]
mov qword [rsp + 0x78], rax
lea rax, [rsp + 0x68]
cmp r8, 0x10
cmovae rax, qword [rsp + 0x68]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x14000b2a4
movzx r8d, bl
mov edx, 1
lea rcx, [rsp + 0x68]
call fcn.140007af0
add rdi, 2
mov r8, qword [rbp - 0x80]
cmp rdi, rsi
jne 0x14000b260
mov rdx, qword [rsp + 0x58]
mov r9, qword [rsp + 0x40]
or r15d, 4
cmp rdx, 8
jb 0x14000b2fe
lea rdx, [rdx*2 + 2]
mov rax, r9
cmp rdx, 0x1000
jb 0x14000b2f2
add rdx, 0x27
mov r9, qword [r9 - 8]
sub rax, r9
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ba93
mov rcx, r9
call fcn.140038b74
mov r8, qword [rbp - 0x80]
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], 7
mov word [rsp + 0x40], r12w
mov r10, qword [rsp + 0x68]
cmp qword [rsp + 0x78], 0x20
jne 0x14000b3b6
lea rdx, [rsp + 0x68]
cmp r8, 0x10
cmovae rdx, r10
cmp byte [rdx + 0x20], 0
jne 0x14000b3b6
mov r9d, r12d
nop dword [rax]
movzx ecx, byte [rdx]
lea eax, [rcx - 0x30]
cmp al, 9
jbe 0x14000b359
lea eax, [rcx - 0x61]
cmp al, 5
jbe 0x14000b359
sub cl, 0x41
cmp cl, 5
ja 0x14000b3b6
inc r9d
inc rdx
cmp r9d, 0x20
jl 0x14000b340
lea rdx, [rsp + 0x68]
cmp r8, 0x10
cmovae rdx, r10
lea rcx, str.The_TA__s_was_found_in_the_repository.
call fcn.1400031b0
mov rax, qword [rbp - 0x70]
cmp rax, qword [rbp - 0x68]
je 0x14000b39c
lea rdx, [rsp + 0x68]
mov rcx, rax
call fcn.140004530
add qword [rbp - 0x70], 0x20
jmp 0x14000b3ad
lea r8, [rsp + 0x68]
mov rdx, rax
lea rcx, [rbp - 0x78]
call fcn.14000dbc0
mov r10, qword [rsp + 0x68]
mov r8, qword [rbp - 0x80]
cmp r8, 0x10
jb 0x14000b3ed
lea rdx, [r8 + 1]
mov rax, r10
cmp rdx, 0x1000
jb 0x14000b3e5
add rdx, 0x27
mov r10, qword [r10 - 8]
sub rax, r10
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ba99
mov rcx, r10
call fcn.140038b74
lea rdx, [rbp]
mov rcx, r14
call qword [sym.imp.KERNEL32.DLL_FindNextFileW]
test eax, eax
jne 0x14000b1b0
lea edi, [rax + 0x2a]
mov r14d, r15d
lea rcx, str.Searching_acp_TAs_in_the_repository...
call fcn.1400031b0
lea rdx, [0x14008ec50]
lea rcx, [rsp + 0x40]
call fcn.140008b00
mov rbx, rax
mov qword [rsp + 0x78], r12
mov qword [rbp - 0x80], 7
mov word [rsp + 0x68], r12w
or r15d, 8
mov dword [rsp + 0x38], r15d
mov rdx, qword [rbp - 0x30]
inc rdx
lea rcx, [rsp + 0x68]
call fcn.14000e780
lea rdx, [rbp - 0x40]
lea rcx, [rsp + 0x68]
call fcn.14000e950
mov rdx, qword [rsp + 0x78]
mov r8, qword [rbp - 0x80]
mov rax, r8
sub rax, rdx
cmp rax, 1
jb 0x14000b49b
lea rcx, [rdx + 1]
mov qword [rsp + 0x78], rcx
lea rax, [rsp + 0x68]
cmp r8, 8
cmovae rax, qword [rsp + 0x68]
mov word [rax + rdx*2], di
mov word [rax + rcx*2], r12w
jmp 0x14000b4c0
mov qword [rsp + 0x20], 1
lea r9, [0x14007c1f8]
movzx r8d, byte [rsp + 0x30]
mov edx, 1
lea rcx, [rsp + 0x68]
call fcn.14000e230
mov rcx, qword [rbx + 0x10]
mov rax, qword [rbp - 0x80]
mov rdx, qword [rsp + 0x78]
sub rax, rdx
cmp rcx, rax
jbe 0x14000b4f0
mov rax, qword [rbx + 0x18]
sub rax, rcx
cmp rax, rdx
jb 0x14000b4f0
lea r8, [rsp + 0x68]
mov rcx, rbx
call fcn.14000e840
jmp 0x14000b4fd
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14000e950
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov word [rax], r12w
mov qword [rax + 0x18], 7
mov qword [rax + 0x10], r12
or r14d, 0x18
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x14000b558
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b553
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ba9f
call fcn.140038b74
movups xmmword [rbp - 0x60], xmm6
movups xmmword [rbp - 0x50], xmm7
and r14d, 0xfffffff7
mov rdx, qword [rbp - 0x80]
cmp rdx, 8
jb 0x14000b5a5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b5a0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000baa5
call fcn.140038b74
mov qword [rsp + 0x78], r12
mov qword [rbp - 0x80], 7
mov word [rsp + 0x68], r12w
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x14000b5fa
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b5f5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000baab
call fcn.140038b74
lea rcx, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae rcx, qword [rbp - 0x60]
lea rdx, [rbp]
call qword [sym.imp.KERNEL32.DLL_FindFirstFileW]
mov r15, rax
cmp rax, 0xffffffffffffffff
jne 0x14000b6f2
lea rcx, str.FindFirstFile_failed.
call fcn.1400031b0
mov rbx, qword [rbp - 0x78]
cmp rbx, qword [rbp - 0x70]
je 0x14000b957
mov rcx, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x14000b646
mov rcx, qword [rbx]
lea rdx, str.BA8D164350B649CC861D2C01BED14BE8
call fcn.140045ef8
test eax, eax
je 0x14000b6e9
mov dword [rsp + 0x38], 2
mov word [rsp + 0x3c], 0
mov edx, 0xffffffff
mov rcx, qword [r13 + 0x10]
call qword [sym.imp.KERNEL32.DLL_WaitForSingleObject]
mov rdx, rbx
lea rcx, [rsp + 0x40]
call fcn.140004530
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x60], rax
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x68]
mov rcx, r13
call fcn.14000eec0
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x14000b6df
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b6da
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000babd
call fcn.140038b74
mov rcx, qword [r13 + 0x10]
call qword [sym.imp.KERNEL32.DLL_ReleaseMutex]
add rbx, 0x20
jmp 0x14000b62f
lea rax, [rsp + 0x68]
mov qword [rsp + 0x38], rax
movzx ebx, byte [rsp + 0x30]
mov word [rbp + 0x6c], r12w
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], 7
mov word [rsp + 0x40], r12w
lea rax, [rbp + 0x2c]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x14000b725
lea rdx, [rbp + 0x2c]
lea rcx, [rsp + 0x40]
call fcn.14000d1d0
nop
lea rcx, [rsp + 0x40]
mov r9, qword [rsp + 0x40]
mov r10, qword [rsp + 0x58]
cmp r10, 8
cmovae rcx, r9
mov rax, qword [rsp + 0x50]
lea rsi, [rcx + rax*2]
lea rdi, [rsp + 0x40]
cmovae rdi, r9
mov qword [rsp + 0x78], r12
mov r8d, reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x80], r8
mov byte [rsp + 0x68], 0
mov rdx, rsi
sub rdx, rdi
sar rdx, 1
cmp rdx, 0x10
jb 0x14000b7a8
lea rcx, [rsp + 0x68]
call fcn.1400091a0
mov qword [rsp + 0x78], r12
mov r10, qword [rsp + 0x58]
mov r9, qword [rsp + 0x40]
mov r8, qword [rbp - 0x80]
cmp rdi, rsi
je 0x14000b80b
nop dword [rax]
movzx r9d, byte [rdi]
mov rcx, qword [rsp + 0x78]
cmp rcx, r8
jae 0x14000b7e1
lea rax, [rcx + 1]
mov qword [rsp + 0x78], rax
lea rax, [rsp + 0x68]
cmp r8, 0x10
cmovae rax, qword [rsp + 0x68]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x14000b7f4
movzx r8d, bl
mov edx, 1
lea rcx, [rsp + 0x68]
call fcn.140007af0
add rdi, 2
mov r8, qword [rbp - 0x80]
cmp rdi, rsi
jne 0x14000b7b0
mov r10, qword [rsp + 0x58]
mov r9, qword [rsp + 0x40]
or r14d, 0x20
cmp r10, 8
jb 0x14000b84e
lea rdx, [r10*2 + 2]
mov rax, r9
cmp rdx, 0x1000
jb 0x14000b842
add rdx, 0x27
mov r9, qword [r9 - 8]
sub rax, r9
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000bab1
mov rcx, r9
call fcn.140038b74
mov r8, qword [rbp - 0x80]
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], 7
mov word [rsp + 0x40], r12w
mov r10, qword [rsp + 0x68]
cmp qword [rsp + 0x78], 0x20
jne 0x14000b906
lea rdx, [rsp + 0x68]
cmp r8, 0x10
cmovae rdx, r10
cmp byte [rdx + 0x20], 0
jne 0x14000b906
mov r9d, r12d
nop dword [rax]
movzx ecx, byte [rdx]
lea eax, [rcx - 0x30]
cmp al, 9
jbe 0x14000b8a9
lea eax, [rcx - 0x61]
cmp al, 5
jbe 0x14000b8a9
sub cl, 0x41
cmp cl, 5
ja 0x14000b906
inc r9d
inc rdx
cmp r9d, 0x20
jl 0x14000b890
lea rdx, [rsp + 0x68]
cmp r8, 0x10
cmovae rdx, r10
lea rcx, str.The_TA__s_was_found_in_the_repository.
call fcn.1400031b0
mov rax, qword [rbp - 0x70]
cmp rax, qword [rbp - 0x68]
je 0x14000b8ec
lea rdx, [rsp + 0x68]
mov rcx, rax
call fcn.140004530
add qword [rbp - 0x70], 0x20
jmp 0x14000b8fd
lea r8, [rsp + 0x68]
mov rdx, rax
lea rcx, [rbp - 0x78]
call fcn.14000dbc0
mov r10, qword [rsp + 0x68]
mov r8, qword [rbp - 0x80]
cmp r8, 0x10
jb 0x14000b93d
lea rdx, [r8 + 1]
mov rax, r10
cmp rdx, 0x1000
jb 0x14000b935
add rdx, 0x27
mov r10, qword [r10 - 8]
sub rax, r10
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000bab7
mov rcx, r10
call fcn.140038b74
lea rdx, [rbp]
mov rcx, r15
call qword [sym.imp.KERNEL32.DLL_FindNextFileW]
test eax, eax
je 0x14000b62b
jmp 0x14000b701
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x14000b997
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b992
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000bac3
call fcn.140038b74
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], r12w
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x14000b9e8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b9e3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000bac9
call fcn.140038b74
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], r12w
mov rcx, qword [rbp - 0x78]
test rcx, rcx
je 0x14000ba41
mov rdx, qword [rbp - 0x70]
call fcn.14000e3e0
mov rdx, qword [rbp - 0x68]
mov rcx, qword [rbp - 0x78]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ba3b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ba7b
call fcn.140038b74
nop
mov rcx, qword [rbp + 0x250]
xor rcx, rsp
call fcn.140038b50
lea r11, [rsp + 0x380]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140045708
nop
call fcn.140045708
nop
call fcn.140045708
nop
call fcn.140045708
nop
call fcn.140045708
nop
call fcn.140045708
nop
call fcn.140045708
nop
call fcn.140045708
nop
call fcn.140045708
nop
call fcn.140045708
nop
call fcn.140045708
int3
call fcn.140045708
nop
call fcn.140045708
nop
call fcn.140045708
int3