Function at 0x140013f70
Capabilities:
Enumerate files on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x568
lea rbp, [rsp + 0x40]
mov rax, qword [0x14005b040]
xor rax, rbp
mov qword [rbp + 0x510], rax
mov qword [rbp + 0x18], r9
mov rdi, r8
mov r13, rdx
mov qword [rbp], rdx
mov r12, rcx
mov qword [rbp + 8], rcx
lea rax, str.index.html
mov qword [rbp + 0x2b0], rax
lea rax, str.index.htm
mov qword [rbp + 0x2b8], rax
lea rax, [0x140052e0c]
mov qword [rbp + 0x2c0], rax
xor eax, eax
mov qword [rbp + 0x2c8], rax
mov rbx, 0xffffffffffffffff
mov r14d, ebx
mov esi, eax
mov qword [rbp + 0x20], rax
mov rax, qword [rcx + 0x60]
xor r9d, r9d
lea r8, str.ExecuteScripts
lea rdx, str.HTTP_SETTINGS
mov rcx, qword [rax + 0x6d8]
call fcn.140019450
lea rdx, [rbp + 0x28]
mov rcx, rdi
call fcn.140013de0
mov r15d, eax
inc rbx
cmp byte [rdi + rbx], sil
jne 0x140014022
mov r8, rdi
mov edx, 0x104
lea rcx, [rbp + 0x400]
test eax, eax
je 0x14001408e
call fcn.1400270dc
test rbx, rbx
je 0x140014082
cmp byte [rbp + rbx + 0x3ff], 0x5c
jne 0x140014082
mov esi, 1
dec rbx
cmp rbx, 0x104
jae 0x1400148c1
mov byte [rbp + rbx + 0x400], 0
lea rdx, [rbp + 0x28]
lea rcx, [rbp + 0x400]
call fcn.140013de0
mov r15d, eax
test r15d, r15d
je 0x1400140aa
xor eax, eax
jmp 0x14001489e
call fcn.1400270dc
test rbx, rbx
je 0x1400140aa
cmp byte [rbp + rbx + 0x3ff], 0x5c
mov ebx, 1
cmove esi, ebx
jmp 0x1400140af
mov ebx, 1
mov eax, 0x4000
test word [rbp + 0x2e], ax
je 0x14001414c
xor eax, eax
mov r14d, eax
mov rax, qword [rbp + 0x50]
mov qword [rbp + 0x20], rax
test esi, esi
jne 0x14001414c
lea r8, str.http:__
mov edx, 0x104
lea rcx, [rbp + 0x60]
call fcn.1400270dc
mov rax, qword [r13 + 0x20]
lea rdi, [0x1400501f0]
mov r8, rdi
test rax, rax
cmovne r8, rax
mov edx, 0x104
lea rcx, [rbp + 0x60]
call fcn.14002dcb0
mov rax, qword [r13 + 0x28]
test rax, rax
cmovne rdi, rax
mov r8, rdi
mov edx, 0x104
lea rcx, [rbp + 0x60]
call fcn.14002dcb0
lea r8, [0x140052e18]
mov edx, 0x104
lea rcx, [rbp + 0x60]
call fcn.14002dcb0
lea r8, [rbp + 0x60]
mov rdx, r13
mov rcx, r12
call fcn.140014ea0
jmp 0x14001489c
movsxd rax, r14d
lea rsi, [rbp + 0x2b0]
lea rsi, [rsi + rax*8]
mov r13d, 0x2a
test r14d, r14d
js 0x1400141e0
mov r15, qword [rsi]
test r15, r15
je 0x1400141e0
mov rbx, 0xffffffffffffffff
lea rbx, [rbx + 1]
cmp byte [rdi + rbx], 0
jne 0x140014174
mov r8, rdi
mov edx, 0x104
lea rcx, [rbp + 0x2f0]
call fcn.1400270dc
movzx eax, byte [rbp + rbx + 0x2ef]
cmp al, 0x5c
je 0x1400141ba
cmp al, 0x2f
je 0x1400141ba
lea r8, [0x140051e70]
mov edx, 0x104
lea rcx, [rbp + 0x2f0]
call fcn.14002dcb0
mov r8, r15
mov edx, 0x104
lea rcx, [rbp + 0x2f0]
call fcn.14002dcb0
lea rdx, [rbp + 0x28]
lea rcx, [rbp + 0x2f0]
call fcn.140013de0
jmp 0x1400141fd
mov r8, rdi
mov edx, 0x104
lea rcx, [rbp + 0x2f0]
call fcn.1400270dc
test r14d, r14d
js 0x140014303
mov rax, qword [rsi]
xor r15d, r15d
cmp r13b, byte [rax]
jne 0x140014306
cmp r15b, byte [rax + 1]
jne 0x140014306
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x2b0], xmm0
mov qword [rbp + 0x2c0], rax
mov qword [rbp + 0x2b0], r15
mov qword [rbp + 0x2b8], r15
mov dword [rbp + 0x2c0], r15d
mov rbx, 0xffffffffffffffff
mov r13d, 1
mov r12, rbx
mov r14, qword [rbp + 0x18]
inc r12
cmp byte [r14 + r12], 0
jne 0x140014252
lea rdx, str.__DOCTYPE_HTML_PUBLIC_____W3C__DTD_HTML_3.2_Final__EN___r_n
lea rcx, [rbp + 0x2b0]
call fcn.140011400
lea rdx, str._meta_charset_UTF_8___r_n
lea rcx, [rbp + 0x2b0]
call fcn.140011400
mov r15, qword [rbp]
mov rax, qword [r15 + 0x28]
lea rdi, [0x1400501f0]
test rax, rax
cmovne rdi, rax
mov rcx, rbx
nop dword [rax + rax]
inc rcx
cmp byte [rdi + rcx], 0
jne 0x1400142a0
add rcx, r13
cmovb rcx, rbx
call fcn.14002c94c
mov rbx, rax
mov qword [rbp + 0x10], rax
mov rsi, rax
movzx ecx, byte [rdi]
test cl, cl
je 0x1400143ad
nop word [rax + rax]
cmp cl, 0x25
jne 0x140014386
movsx ebx, byte [rdi + 1]
test bl, bl
je 0x140014397
lea r14, [rdi + 2]
cmp byte [r14], 0
je 0x140014397
mov ecx, ebx
call fcn.140026e20
test eax, eax
je 0x140014345
sub bl, 0x30
jmp 0x14001434f
xor r15d, r15d
lea rcx, [rbp + 0x2f0]
call fcn.140013ea0
mov r13, rax
mov qword [rbp + 0x10], rax
cmp rax, 0xffffffffffffffff
jne 0x14001467e
inc r14d
add rsi, 8
mov ebx, r15d
cmp r14d, eax
je 0x14001489c
cmp qword [rsi], 0
je 0x14001489c
jmp 0x14001415a
mov ecx, ebx
call fcn.14002ca88
lea ebx, [rax - 0x57]
movsx edi, byte [r14]
mov ecx, edi
call fcn.140026e20
test eax, eax
je 0x14001436f
sub dil, 0x30
shl bl, 4
or bl, dil
mov byte [rsi], bl
mov rdi, r14
jmp 0x140014394
mov ecx, edi
call fcn.14002ca88
lea edi, [rax - 0x57]
shl bl, 4
or bl, dil
mov byte [rsi], bl
mov rdi, r14
jmp 0x140014394
movzx eax, byte [rdi]
cmp al, 0x2b
jne 0x140014392
mov byte [rsi], 0x20
jmp 0x140014394
mov byte [rsi], al
inc rsi
inc rdi
movzx ecx, byte [rdi]
test cl, cl
jne 0x1400142d0
mov rbx, qword [rbp + 0x10]
mov r14, qword [rbp + 0x18]
mov byte [rsi], 0
mov r8, rbx
lea rdx, str._html__head__title__s__title___head__body__r_n
lea rcx, [rbp + 0x2b0]
call fcn.140011400
mov r8, rbx
lea rdx, str._h2_Directory_Index_of__s__h2__r_n
lea rcx, [rbp + 0x2b0]
call fcn.140011400
mov rcx, rbx
call fcn.1400272e4
lea rax, [rbp + 0x2f0]
mov rdi, 0xffffffffffffffff
mov rcx, rdi
lea rcx, [rcx + 1]
cmp byte [rax + rcx], 0
jne 0x1400143f5
lea rax, [rcx*2 + 2]
lea rdx, [rax + 0xf]
cmp rdx, rax
ja 0x14001441a
movabs rdx, 0xffffffffffffff0
and rdx, 0xfffffffffffffff0
mov rax, rdx
call fcn.1400455d0
sub rsp, rdx
lea rbx, [rsp + 0x40]
lea eax, [rcx + 1]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rbx
mov r9d, edi
lea r8, [rbp + 0x2f0]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea rdx, [rbp + 0x60]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rsi, rax
cmp rax, rdi
je 0x140014600
xor r15d, r15d
nop dword [rax]
test r13d, r13d
je 0x1400145fc
test byte [rbp + 0x60], 0x10
je 0x14001454c
movzx ecx, word [rbp + 0x8c]
movzx eax, word [rbp + 0x8e]
cmp cx, 0x2e
jne 0x14001454c
test ax, ax
je 0x1400145e7
cmp cx, cx
jne 0x14001454c
cmp ax, cx
jne 0x14001454c
cmp word [rbp + 0x90], r15w
jne 0x14001454c
mov edx, 0x5c
lea rcx, [rbp + 0x400]
call fcn.140022e98
mov rbx, rax
test rax, rax
je 0x1400145e7
test r14, r14
je 0x1400145e7
movzx edi, byte [rax]
mov byte [rax], r15b
lea rax, [rbp + 0x400]
mov rcx, 0xffffffffffffffff
nop
inc rcx
cmp byte [rax + rcx], r15b
jne 0x140014500
cmp r12, rcx
jae 0x14001451a
lea r8, [rbp + 0x400]
add r8, r12
jmp 0x140014523
jne 0x14001453d
lea r8, [0x140052e18]
lea r9, str.Parent_Directory
lea rdx, str._p__a_href__s___s__a___p__r_n
lea rcx, [rbp + 0x2b0]
call fcn.140011400
mov byte [rbx], dil
mov rdi, 0xffffffffffffffff
jmp 0x1400145e7
mov rbx, r15
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
mov r9d, edi
lea r8, [rbp + 0x8c]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
movsxd rdi, eax
test eax, eax
jle 0x1400145bf
mov rcx, rdi
call fcn.14002c94c
mov rbx, rax
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rax
mov rdi, 0xffffffffffffffff
mov r9d, edi
lea r8, [rbp + 0x8c]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
jmp 0x1400145c6
mov rdi, 0xffffffffffffffff
mov r9, rbx
mov r8, rbx
lea rdx, str._p__a_href__s___s__a___p__r_n
lea rcx, [rbp + 0x2b0]
call fcn.140011400
mov rcx, rbx
call fcn.1400272e4
lea rdx, [rbp + 0x60]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
mov r13d, eax
jmp 0x140014470
mov r15, qword [rbp]
lea rdx, str.__body___html__r_n
lea rcx, [rbp + 0x2b0]
call fcn.140011400
cmp rsi, 0xffffffffffffffff
je 0x140014622
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FindClose]
movsxd rax, dword [rbp + 0x2b8]
mov qword [rsp + 0x38], rax
mov rdi, qword [rbp + 0x2b0]
mov qword [rsp + 0x30], rdi
mov rax, qword [rbp + 0x20]
mov qword [rsp + 0x28], rax
xor eax, eax
mov qword [rsp + 0x20], rax
lea r9, [0x140052bf4]
mov r8d, 0xc8
mov rdx, r15
mov rcx, qword [rbp + 8]
call fcn.140014fa0
mov ebx, 1
test rdi, rdi
je 0x14001489c
mov rcx, rdi
call fcn.1400272e4
jmp 0x14001489c
mov rax, qword [r12 + 0x60]
mov r12, qword [rax + 0x6d8]
mov ebx, 0x200
lea rdi, [0x1400501f0]
mov r8, rdi
mov edx, 0x40
lea rcx, [rbp + 0x2b0]
call fcn.1400270dc
lea rax, [rbp + 0x2f0]
mov rsi, 0xffffffffffffffff
mov r14, rsi
nop dword [rax + rax]
inc r14
cmp byte [rax + r14], 0
jne 0x1400146c0
nop word [rax + rax]
add ebx, ebx
mov edx, ebx
mov rcx, r15
call fcn.140026cb0
mov r15, rax
test rax, rax
je 0x1400147a1
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
mov r9, rdi
xor r8d, r8d
lea rdx, str.content_type
mov rcx, r12
call fcn.140019080
lea ecx, [rbx - 2]
cmp eax, ecx
je 0x1400146d0
mov rsi, r15
cmp byte [r15], 0
je 0x140014792
mov r13, 0xffffffffffffffff
nop dword [rax]
cmp byte [rbp + 0x2b0], 0
jne 0x14001478e
mov rbx, r13
nop dword [rax]
inc rbx
cmp byte [rsi + rbx], 0
jne 0x140014730
cmp r14, rbx
jb 0x140014783
mov rax, r14
sub rax, rbx
lea rcx, [rbp + 0x2f0]
add rcx, rax
mov rdx, rsi
call fcn.140027214
test eax, eax
jne 0x140014783
mov dword [rsp + 0x28], 0x40
lea rax, [rbp + 0x2b0]
mov qword [rsp + 0x20], rax
mov r9, rdi
mov r8, rsi
lea rdx, str.content_type
mov rcx, r12
call fcn.140019080
inc rsi
add rsi, rbx
cmp byte [rsi], 0
jne 0x140014720
mov r13, qword [rbp + 0x10]
mov rcx, r15
call fcn.1400272e4
mov rsi, 0xffffffffffffffff
lea rbx, str.text_html
lea rdi, [0x14005c0e8]
nop
cmp byte [rbp + 0x2b0], 0
jne 0x140014825
mov rdx, qword [rbx - 8]
mov rcx, rsi
inc rcx
cmp byte [rdx + rcx], 0
jne 0x1400147c0
cmp r14, rcx
jb 0x1400147fb
mov rax, r14
sub rax, rcx
lea rcx, [rbp + 0x2f0]
add rcx, rax
call fcn.140027214
test eax, eax
jne 0x1400147fb
mov r8, qword [rbx]
mov edx, 0x40
lea rcx, [rbp + 0x2b0]
call fcn.1400270dc
add rbx, 0x10
cmp rbx, rdi
jl 0x1400147b0
cmp byte [rbp + 0x2b0], 0
jne 0x140014825
lea r8, str.text_html
mov edx, 0x40
lea rcx, [rbp + 0x2b0]
call fcn.1400270dc
mov rcx, qword [rbp]
mov rax, qword [rbp + 0x40]
mov rdx, rcx
mov qword [rsp + 0x38], rax
cmp dword [rcx + 0x18], 1
mov rcx, qword [rbp + 8]
jne 0x140014860
mov qword [rsp + 0x30], r13
mov rax, qword [rbp + 0x50]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x2b0]
mov qword [rsp + 0x20], rax
call fcn.140015150
jmp 0x140014897
xor eax, eax
mov qword [rsp + 0x30], rax
mov rax, qword [rbp + 0x50]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x2b0]
mov qword [rsp + 0x20], rax
lea r9, [0x140052bf4]
mov r8d, 0xc8
call fcn.140014fa0
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, 1
mov eax, ebx
mov rcx, qword [rbp + 0x510]
xor rcx, rbp
call fcn.140020e70
lea rsp, [rbp + 0x528]
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.140020f98
int3