Function at 0x1400523c0
Capabilities:
Enumerate files on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r14
lea rbp, [rsp - 0x1728]
mov eax, 0x1828
call fcn.1401c2680
sub rsp, rax
mov rax, qword [0x1402a83b0]
xor rax, rsp
mov qword [rbp + 0x1710], rax
cmp qword [0x1402aab20], 0
mov esi, edx
mov dword [rsp + 0x4c], edx
mov rdi, rcx
mov qword [rsp + 0x40], rcx
mov r14d, 1
jne 0x14005242a
mov edx, 0x8000
mov ecx, r14d
call fcn.1401dce00
test eax, eax
jns 0x14005242a
lea rcx, str.Problem_to_set_binary_for_stout_n
call fcn.1401bdc60
xor ebx, ebx
mov qword [rsp + 0x1870], r13
mov r12d, r14d
mov qword [rsp + 0x1820], r15
mov eax, ebx
mov dword [0x1402aabb0], ebx
cmp esi, r14d
jle 0x140053128
movsxd rax, r12d
mov ecx, esi
lea rdx, [rdi + rax*8]
sub ecx, r12d
call fcn.14004c1b0
dec r12d
add r12d, eax
cmp dword [0x14029cb9c], 0
mov dword [rsp + 0x3c], r12d
je 0x140052484
cmp word [0x1402aaab4], 0
jne 0x140052484
call fcn.14004fb10
mov rcx, qword [0x1402aab90]
mov eax, dword [0x14029cb4c]
mov dword [rsp + 0x48], r14d
mov dword [0x14029cb9c], ebx
mov dword [rsp + 0x38], ebx
mov r13d, ebx
mov dword [rsp + 0x50], ebx
mov dword [0x14029cb54], eax
mov r15, rbx
mov qword [rsp + 0x30], rbx
mov esi, ebx
mov r14d, ebx
test rcx, rcx
je 0x1400525d9
lea rdx, [0x1401f859c]
call fcn.1401be7e4
mov rdi, rax
test rax, rax
je 0x1400525d4
lea rcx, [rbp + 0xa00]
mov r8, rax
mov edx, 0x200
call fcn.1401c26d0
test rax, rax
je 0x1400525cc
lea rbx, [rbp + 0xa00]
nop
lea rcx, [rbp + 0xa00]
or rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x140052510
movzx ecx, byte [rbx + rax - 1]
cmp cl, 0xa
je 0x140052528
cmp cl, 0xd
jne 0x14005253f
dec rax
cmp rax, 0x200
jae 0x140053168
mov byte [rbp + rax + 0xa00], 0
cmp byte [rbp + 0xa00], 0
je 0x1400525af
cmp r14d, esi
jl 0x14005257d
add esi, 0x20
movsxd rax, esi
test r15, r15
jne 0x140052566
imul rcx, rax, 0x12c
call fcn.1401bee78
jmp 0x140052575
imul rdx, rax, 0x12c
mov rcx, r15
call fcn.1401bef30
mov qword [rsp + 0x30], rax
mov r15, rax
movsxd rax, r14d
inc r14d
lea rcx, [rbp + 0xa00]
imul rdx, rax, 0x12c
lea rax, [rbp + 0xa00]
add rdx, r15
sub rdx, rax
nop
movzx eax, byte [rcx]
lea rcx, [rcx + 1]
mov byte [rdx + rcx - 1], al
test al, al
jne 0x1400525a0
lea rcx, [rbp + 0xa00]
mov r8, rdi
mov edx, 0x200
call fcn.1401c26d0
test rax, rax
jne 0x140052500
mov rcx, rdi
call fcn.1401be6a4
mov rdi, qword [rsp + 0x40]
movsxd rax, dword [rsp + 0x4c]
cmp r12d, eax
jge 0x14005290a
movsxd r15, r12d
mov r13d, r12d
mov dword [rsp + 0x3c], r12d
mov rcx, r15
mov r8, rax
cmp r15, rax
jge 0x140052635
movzx r9d, byte [0x1401fc6bd]
nop word [rax + rax]
mov rdx, qword [rdi + rcx*8]
movzx eax, byte [rdx]
cmp al, byte [0x1401fc6bc]
jne 0x140052625
cmp byte [rdx + 1], r9b
je 0x140052630
inc rcx
inc r13d
cmp rcx, r8
jl 0x140052610
mov dword [rsp + 0x3c], r13d
mov ebx, r13d
sub ebx, r12d
lea eax, [rbx + r14]
cmp eax, esi
jl 0x140052682
mov rcx, qword [rsp + 0x30]
lea eax, [rbx + r14]
add esi, eax
movsxd rax, esi
test rcx, rcx
jne 0x14005266c
imul rcx, rax, 0x12c
call fcn.1401bee78
mov rdi, rax
mov qword [rsp + 0x30], rax
jmp 0x140052687
imul rdx, rax, 0x12c
call fcn.1401bef30
mov rdi, rax
mov qword [rsp + 0x30], rax
jmp 0x140052687
mov rdi, qword [rsp + 0x30]
movsxd r12, r13d
cmp r15, r12
jge 0x1400528f7
nop dword [rax]
nop word [rax + rax]
mov rcx, qword [rsp + 0x40]
lea rdx, [0x1401fc6c0]
mov rcx, qword [rcx + r15*8]
call fcn.1401c2aac
test rax, rax
jne 0x140052707
mov rax, qword [rsp + 0x40]
lea rdx, [0x1401fc6c4]
mov rcx, qword [rax + r15*8]
call fcn.1401c2aac
test rax, rax
jne 0x140052707
mov rax, qword [rsp + 0x40]
mov rdx, qword [rax + r15*8]
movsxd rax, r14d
imul rcx, rax, 0x12c
add rcx, rdi
inc r14d
nop dword [rax]
movzx eax, byte [rdx]
lea rcx, [rcx + 1]
lea rdx, [rdx + 1]
mov byte [rcx - 1], al
test al, al
jne 0x1400526f0
jmp 0x1400528e9
mov rax, qword [rsp + 0x40]
lea rdx, [rbp + 0xb0]
mov rcx, qword [rax + r15*8]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
lea r8, [rbp + 0x8f0]
mov rdi, rax
mov rax, qword [rsp + 0x40]
mov rdx, qword [rax + r15*8]
sub r8, rdx
nop dword [rax]
nop word [rax + rax]
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
mov byte [r8 + rdx - 1], cl
test cl, cl
jne 0x140052740
lea rcx, [rbp + 0x8f0]
mov edx, 0x5c
call fcn.1401c2968
test rax, rax
jne 0x140052780
lea edx, [rax + 0x2f]
lea rcx, [rbp + 0x8f0]
call fcn.1401c2968
test rax, rax
jne 0x140052780
mov byte [rsp + 0x60], al
jmp 0x1400527a3
mov byte [rax + 1], 0
xor ecx, ecx
nop word [rax + rax]
movzx eax, byte [rbp + rcx + 0x8f0]
inc rcx
mov byte [rsp + rcx + 0x5f], al
test al, al
jne 0x140052790
cmp rdi, 0xffffffffffffffff
je 0x1400528e4
mov r12, qword [rsp + 0x30]
xor r13d, r13d
nop word [rax + rax]
movzx ecx, byte [rbp + 0xdc]
movzx eax, byte [rbp + 0xdd]
cmp cl, byte [0x1401f8460]
jne 0x1400527e2
cmp al, byte [0x1401f8461]
je 0x1400528b6
cmp cl, byte [0x1401fc6c8]
jne 0x140052805
cmp al, byte [0x1401fc6c9]
jne 0x140052805
movzx eax, byte [rbp + 0xde]
cmp al, byte [0x1401fc6ca]
je 0x1400528b6
lea eax, [rbx + r14]
cmp eax, esi
jl 0x14005283b
lea eax, [rbx + r14]
add esi, eax
movsxd rax, esi
test r12, r12
jne 0x140052829
imul rcx, rax, 0x12c
call fcn.1401bee78
jmp 0x140052838
imul rdx, rax, 0x12c
mov rcx, r12
call fcn.1401bef30
mov r12, rax
mov rcx, r13
nop
movzx eax, byte [rsp + rcx + 0x60]
lea rcx, [rcx + 1]
mov byte [rbp + rcx + 0xbff], al
test al, al
jne 0x140052840
lea rcx, [rbp + 0xc00]
dec rcx
nop
cmp byte [rcx + 1], r13b
lea rcx, [rcx + 1]
jne 0x140052860
lea r8, [rbp + 0xdc]
xor edx, edx
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [r8 + rdx]
lea rdx, [rdx + 1]
mov byte [rcx + rdx - 1], al
test al, al
jne 0x140052880
movsxd rax, r14d
lea rcx, [rbp + 0xc00]
xor r9d, r9d
mov r8d, 0x104
imul rdx, rax, 0x12c
add rdx, r12
call fcn.1400661a0
inc r14d
lea rdx, [rbp + 0xb0]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x1400527c0
mov rcx, rdi
mov qword [rsp + 0x30], r12
call qword [sym.imp.KERNEL32.dll_FindClose]
movsxd r13, dword [rsp + 0x3c]
mov r12, r13
mov rdi, qword [rsp + 0x30]
inc r15
dec ebx
cmp r15, r12
jl 0x1400526a0
mov r15, qword [rsp + 0x30]
lea r12d, [r13 + 1]
mov r13d, dword [rsp + 0x50]
mov dword [rsp + 0x3c], r12d
cmp word [0x1402aaac4], 0
je 0x1400529ac
cmp word [0x14029caf4], 0xffff
je 0x1400529ac
lea rcx, str.tiff
call fcn.140064760
movsx ecx, word [0x14029caf4]
cmp ecx, eax
je 0x140052999
lea rcx, [0x1401fc6cc]
call fcn.140064760
movsx ecx, word [0x14029caf4]
cmp ecx, eax
je 0x140052999
lea rcx, [0x1401fc6d0]
call fcn.140064760
movsx ecx, word [0x14029caf4]
cmp ecx, eax
je 0x140052999
lea rcx, [0x1401fc6d4]
call fcn.140064760
movsx ecx, word [0x14029caf4]
cmp ecx, eax
je 0x140052999
lea rcx, [0x1401f89fc]
call fcn.140064760
movsx ecx, word [0x14029caf4]
cmp ecx, eax
jne 0x1400529ac
mov edi, 1
xor ebx, ebx
movzx eax, di
mov word [0x1402aaac4], ax
jmp 0x1400529ba
xor ebx, ebx
mov eax, ebx
mov word [0x1402aaac4], bx
lea edi, [rbx + 1]
mov qword [rsp + 0x58], rbx
test ax, ax
je 0x140052ca7
lea rcx, [rsp + 0x60]
call fcn.140063b00
cmp word [0x14029caf4], 0xffff
movzx eax, word [0x1402aaab8]
mov word [rbp + 0x18], ax
movzx eax, word [0x14029cb04]
mov word [rbp + 0x1a], ax
movzx eax, word [0x14029cb08]
mov word [rbp + 0x1c], ax
movzx eax, byte [0x1402aaae0]
mov byte [rbp + 0x2e], al
movzx eax, byte [0x1402aaab6]
mov byte [rbp + 0x2f], al
movzx eax, byte [0x1402aaab2]
mov byte [rbp + 0x31], al
movzx eax, byte [0x1402aaab3]
mov byte [rbp + 0x30], al
movzx eax, byte [0x1402aaae8]
mov byte [rbp + 0x32], al
jne 0x140052a3d
lea rcx, str.tiff
call fcn.140064760
jmp 0x140052a44
movzx eax, word [0x14029caf4]
mov word [rsp + 0x60], ax
mov eax, dword [0x14029cb44]
cmp eax, 0xffffffff
je 0x140052a60
mov esi, dword [0x1402aab1c]
sub esi, eax
inc esi
jmp 0x140052ab2
cmp word [0x14029cb14], 0
jle 0x140052a6f
mov esi, r14d
jmp 0x140052ab2
mov esi, ebx
test r14d, r14d
jle 0x140052ab2
mov rbx, r15
mov edi, r14d
nop dword [rax]
movzx edx, word [0x14029caf0]
lea r9, [rbp + 0x1f0]
xor r8d, r8d
mov rcx, rbx
call fcn.140064210
test ax, ax
jne 0x140052aa4
add esi, dword [rbp + 0x218]
add rbx, 0x12c
dec rdi
jne 0x140052a80
xor ebx, ebx
mov rax, qword [0x1402aab20]
lea rdx, str.output
test rax, rax
cmovne rdx, rax
mov qword [0x1402aab20], rdx
test r14d, r14d
je 0x140052b5b
mov edx, 0x2f
mov rcx, r15
call fcn.1401c2968
test rax, rax
jne 0x140052b2b
lea edx, [rax + 0x5c]
mov rcx, r15
call fcn.1401c2968
test rax, rax
jne 0x140052b2b
lea rdx, [rbp + 0x4f0]
mov rcx, r15
sub rdx, r15
nop word [rax + rax]
movzx eax, byte [rcx]
lea rcx, [rcx + 1]
mov byte [rdx + rcx - 1], al
test al, al
jne 0x140052b10
mov rdx, qword [0x1402aab20]
mov r8, r15
jmp 0x140052b69
lea rcx, [rax + 1]
lea rdx, [rbp + 0x4f0]
sub rdx, rcx
nop dword [rax]
movzx eax, byte [rcx]
lea rcx, [rcx + 1]
mov byte [rdx + rcx - 1], al
test al, al
jne 0x140052b40
mov rdx, qword [0x1402aab20]
mov r8, r15
jmp 0x140052b69
mov byte [rbp + 0x4f0], 0
lea r8, str.output
movsx eax, word [0x14029caf4]
mov edi, 1
lea rcx, [rbp + 0x4f0]
xor r9d, r9d
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], eax
call fcn.14004a2e0
cmp byte [0x1402aaac6], 0
jne 0x140052c58
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0x4f0]
call fcn.1401c3310
test eax, eax
jne 0x140052c3c
lea edx, [rdi + 0x2d]
lea rcx, [rbp + 0x4f0]
call fcn.1401c2968
mov r8, rax
test rax, rax
je 0x140052c29
mov rdx, rbx
nop
movzx ecx, byte [rbp + rdx + 0x4f0]
lea rdx, [rdx + 1]
mov byte [rbp + rdx + 0xd0f], cl
test cl, cl
jne 0x140052bd0
lea rcx, [rbp + 0x4f0]
mov rdx, r8
sub rax, rcx
lea rcx, [rbp + 0xd10]
mov byte [rbp + rax + 0xd10], 0
call fcn.14004aac0
mov rcx, rbx
nop dword [rax + rax]
movzx eax, byte [rbp + rcx + 0xd10]
lea rcx, [rcx + 1]
mov byte [rbp + rcx + 0x4ef], al
test al, al
jne 0x140052c10
jmp 0x140052c3c
lea rdx, [0x1401f468c]
lea rcx, [rbp + 0xd10]
call fcn.14004aac0
lea rdx, [0x140264ea4]
lea rcx, [rbp + 0x4f0]
call fcn.1401be7e4
test rax, rax
jne 0x1400530f1
mov rcx, rbx
nop dword [rax + rax]
movzx eax, byte [rbp + rcx + 0x4f0]
lea rcx, [rcx + 1]
mov byte [rbp + rcx + 0x130f], al
test al, al
jne 0x140052c60
lea rax, [rbp + 0x1310]
lea r9, [rsp + 0x60]
lea rdx, [rbp + 0x4f0]
lea rcx, [rsp + 0x58]
mov r8d, esi
mov qword [0x1402aab20], rax
call fcn.140064000
test ax, ax
jne 0x1400530fe
cmp word [0x14029cb14], 0xffff
jne 0x140052cb8
mov word [0x14029cb14], bx
cmp dword [0x1402aab70], 0
jle 0x140052d27
cmp dword [0x1402aab74], 0
jle 0x140052d27
mov rdx, qword [0x1402aab20]
mov eax, dword [0x1401f77f4]
mov dword [rbp + 0x4f0], eax
test rdx, rdx
je 0x140052d04
lea r8, [0x1401f77f4]
lea rcx, [rbp + 0x4f0]
xor r9d, r9d
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 0xffffffff
call fcn.14004a2e0
lea r8, [rbp + 0x4f0]
lea rcx, [0x1401f77f4]
or edx, 0xffffffff
call fcn.140049880
test eax, eax
je 0x14005309a
jmp 0x14005309e
cmp dword [0x1402aab78], 0
je 0x140052d9f
mov rdx, qword [0x1402aab20]
movzx eax, word [0x1401f7740]
movsd xmm0, qword [str.clipboard]
movsd qword [rbp + 0x4f0], xmm0
mov word [rbp + 0x4f8], ax
test rdx, rdx
je 0x140052d7c
lea r8, str.clipboard
lea rcx, [rbp + 0x4f0]
xor r9d, r9d
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 0xffffffff
call fcn.14004a2e0
lea r8, [rbp + 0x4f0]
lea rcx, str.clipboard
or edx, 0xffffffff
call fcn.140049880
test eax, eax
jne 0x14005309e
jmp 0x14005309a
test r14d, r14d
jle 0x14005309a
mov ebx, dword [0x14029cb44]
mov r12d, dword [rsp + 0x38]
lea rsi, [rbp + 0x4f0]
sub rsi, r15
mov rdi, r15
mov qword [rsp + 0x50], r14
xor r15d, r15d
nop dword [rax + rax]
cmp ebx, 0xffffffff
je 0x140052f59
cmp ebx, dword [0x1402aab1c]
jg 0x14005306d
mov r14d, 1
nop dword [rax + rax]
movsx eax, word [0x14029caf4]
lea rcx, [rbp + 0xf10]
mov r9d, ebx
mov r8, rdi
mov rdx, rdi
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], eax
mov byte [rbp + 0xf10], r15b
call fcn.14004a2e0
mov r8, qword [0x1402aab20]
test r8, r8
je 0x140052ed1
lea rcx, [rbp + 0xf10]
mov edx, 0x2f
call fcn.1401c2968
test rax, rax
jne 0x140052e79
lea edx, [rax + 0x5c]
lea rcx, [rbp + 0xf10]
call fcn.1401c2968
test rax, rax
jne 0x140052e79
mov rax, r15
nop dword [rax]
movzx ecx, byte [rbp + rax + 0xf10]
lea rax, [rax + 1]
mov byte [rbp + rax + 0x4ef], cl
test cl, cl
jne 0x140052e60
jmp 0x140052e9f
lea rcx, [rax + 1]
lea rdx, [rbp + 0x4f0]
sub rdx, rcx
nop word [rax + rax]
movzx eax, byte [rcx]
lea rcx, [rcx + 1]
mov byte [rdx + rcx - 1], al
test al, al
jne 0x140052e90
movsx eax, word [0x14029caf4]
mov rdx, qword [0x1402aab20]
lea rcx, [rbp + 0x4f0]
mov r9d, ebx
mov r8, rdi
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], eax
call fcn.14004a2e0
mov r8, qword [0x1402aab20]
jmp 0x140052eeb
mov rcx, r15
movzx eax, byte [rbp + rcx + 0xf10]
lea rcx, [rcx + 1]
mov byte [rbp + rcx + 0x4ef], al
test al, al
jne 0x140052ed4
mov r9, qword [rsp + 0x58]
test r9, r9
je 0x140052f0a
movsx edx, word [0x14029cb14]
lea rcx, [rbp + 0xf10]
call fcn.140049d90
jmp 0x140052f36
cmp word [0x1402aaae4], r15w
je 0x140052f19
or edx, 0xffffffff
jmp 0x140052f20
movsx edx, word [0x14029cb14]
lea r8, [rbp + 0x4f0]
lea rcx, [rbp + 0xf10]
call fcn.140049880
mov r13d, eax
test r13d, r13d
cmovne r12d, r14d
add ebx, dword [0x14029cb48]
cmp ebx, dword [0x1402aab1c]
jle 0x140052df0
mov r14, qword [rsp + 0x50]
jmp 0x140053067
cmp qword [0x1402aab20], r15
mov rcx, rdi
je 0x140053000
mov edx, 0x2f
call fcn.1401c2968
test rax, rax
jne 0x140052fa1
lea edx, [rax + 0x5c]
mov rcx, rdi
call fcn.1401c2968
test rax, rax
jne 0x140052fa1
mov rcx, rdi
nop dword [rax + rax]
movzx eax, byte [rcx]
lea rcx, [rcx + 1]
mov byte [rcx + rsi - 1], al
test al, al
jne 0x140052f90
jmp 0x140052fbf
lea rcx, [rax + 1]
lea rdx, [rbp + 0x4f0]
sub rdx, rcx
nop
movzx eax, byte [rcx]
lea rcx, [rcx + 1]
mov byte [rdx + rcx - 1], al
test al, al
jne 0x140052fb0
movsx eax, word [0x14029caf4]
mov ebx, dword [rsp + 0x48]
mov rdx, qword [0x1402aab20]
lea rcx, [rbp + 0x4f0]
mov r9d, ebx
mov r8, rdi
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], eax
call fcn.14004a2e0
inc ebx
mov dword [rsp + 0x48], ebx
jmp 0x14005300f
movzx eax, byte [rcx]
lea rcx, [rcx + 1]
mov byte [rcx + rsi - 1], al
test al, al
jne 0x140053000
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x140053034
movsx edx, word [0x14029cb14]
mov r9, rcx
lea r8, [rbp + 0x4f0]
mov rcx, rdi
call fcn.140049d90
jmp 0x140053059
cmp word [0x1402aaae4], r15w
je 0x140053043
or edx, 0xffffffff
jmp 0x14005304a
movsx edx, word [0x14029cb14]
lea r8, [rbp + 0x4f0]
mov rcx, rdi
call fcn.140049880
test eax, eax
mov r13d, eax
mov eax, 1
cmovne r12d, eax
mov ebx, dword [0x14029cb44]
sub rsi, 0x12c
add rdi, 0x12c
dec r14
mov qword [rsp + 0x50], r14
jne 0x140052dd0
mov r15, qword [rsp + 0x30]
mov dword [rsp + 0x38], r12d
mov r12d, dword [rsp + 0x3c]
xor ebx, ebx
mov edi, dword [rsp + 0x38]
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x1400530ad
call fcn.140063f10
test r15, r15
je 0x1400530ba
mov rcx, r15
call fcn.1401be23c
mov rcx, qword [0x1402aaaa8]
test rcx, rcx
je 0x1400530cb
call fcn.1401be23c
mov esi, dword [rsp + 0x4c]
mov qword [0x1402aaaa8], rbx
mov dword [0x1402aaaa4], ebx
mov r14d, 1
cmp r12d, esi
jge 0x140053120
mov rdi, qword [rsp + 0x40]
jmp 0x140052450
mov rcx, rax
call fcn.1401be6a4
or eax, 0xffffffff
jmp 0x140053139
mov rcx, qword [0x1402aab20]
xor edx, edx
xor r9d, r9d
movzx r8d, ax
mov dword [rsp + 0x20], 0xffffffff
call fcn.140049e10
or eax, 0xffffffff
jmp 0x140053139
mov eax, dword [0x1402aabb0]
jmp 0x14005312c
mov edi, dword [rsp + 0x50]
test edi, edi
jne 0x140053134
test eax, eax
je 0x140053137
mov ebx, r14d
mov eax, ebx
mov r15, qword [rsp + 0x1820]
mov r13, qword [rsp + 0x1870]
mov rcx, qword [rbp + 0x1710]
xor rcx, rsp
call fcn.1401bd600
add rsp, 0x1828
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.1401be39c
int3