Function at 0x14000a7c0
Capabilities:
Enumerate files on windows

Disassembly:
mov rax, rsp
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0x288]
sub rsp, 0x360
mov qword [rsp + 0x40], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x140093008]
xor rax, rsp
mov qword [rbp + 0x230], rax
mov r15, rcx
xor r12d, r12d
mov dword [rsp + 0x20], r12d
mov qword [rsp + 0x48], r12
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x50], xmm0
movdqu xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x38], r12
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], r12w
movdqa xmm0, xmmword [0x1400832b0]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x60], r12w
call fcn.14000bb40
mov rbx, rax
mov edx, 0xffffffff
mov rcx, qword [rax]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
lea r8, [rbx + 0x30]
lea rax, [rbp - 0x40]
cmp rax, r8
je 0x14000a887
mov rdx, r8
cmp qword [r8 + 0x18], 8
jb 0x14000a87a
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
lea rcx, [rbp - 0x40]
call fcn.14000ca10
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_ReleaseMutex]
mov r8d, 1
lea rdx, [0x14007cf28]
lea rcx, [rbp - 0x40]
call fcn.14000cba0
lea rcx, str.Searching_dalp_TAs_in_the_repository...
call fcn.140003050
lea rdx, [0x140093bd0]
lea rcx, [rbp - 0x80]
call fcn.140007fd0
mov rbx, rax
movdqa xmm0, xmmword [0x1400832b0]
movdqu xmmword [rsp + 0x70], xmm0
mov word [rsp + 0x60], r12w
mov dword [rsp + 0x20], 1
mov r8, qword [rbp - 0x30]
lea rdx, [r8 + 1]
cmp rdx, 8
jb 0x14000a902
lea rcx, [rsp + 0x60]
call fcn.14000e040
mov qword [rsp + 0x70], r12
mov r8, qword [rbp - 0x30]
lea rdx, [rbp - 0x40]
cmp qword [rbp - 0x28], 8
cmovae rdx, qword [rbp - 0x40]
lea rcx, [rsp + 0x60]
call fcn.14000cba0
mov r8d, 1
lea rdx, [0x14007cf58]
lea rcx, [rsp + 0x60]
call fcn.14000cba0
mov r8, qword [rbx + 0x10]
mov rax, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x70]
sub rax, rcx
cmp r8, rax
jbe 0x14000a962
mov rax, qword [rbx + 0x18]
sub rax, r8
cmp rax, rcx
jb 0x14000a962
lea r8, [rsp + 0x60]
mov rcx, rbx
call fcn.14000d9d0
jmp 0x14000a979
cmp qword [rbx + 0x18], 8
jb 0x14000a96c
mov rbx, qword [rbx]
mov rdx, rbx
lea rcx, [rsp + 0x60]
call fcn.14000cba0
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
lea rcx, [rbp - 0x60]
call fcn.140008470
movups xmmword [rbp - 0x60], xmm6
movups xmmword [rbp - 0x50], xmm7
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x14000a9e3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a9de
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000b0cd
call fcn.14003d794
movdqa xmm0, xmmword [0x1400832b0]
movdqu xmmword [rsp + 0x70], xmm0
mov word [rsp + 0x60], r12w
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x14000aa37
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000aa32
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000b0d3
call fcn.14003d794
lea rcx, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae rcx, qword [rbp - 0x60]
lea rdx, [rbp - 0x20]
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_FindFirstFileW]
mov rsi, rax
cmp rax, 0xffffffffffffffff
jne 0x14000aace
lea rcx, str.FindFirstFile_failed.
call fcn.140003050
lea r14d, [rsi + 3]
lea rcx, str.Searching_acp_TAs_in_the_repository...
call fcn.140003050
lea rdx, [0x140093b90]
lea rcx, [rsp + 0x60]
call fcn.140007fd0
mov rbx, rax
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x80]
call fcn.14000d560
nop
mov r8, qword [rbx + 0x10]
mov rcx, qword [rax + 0x18]
mov rdx, qword [rax + 0x10]
sub rcx, rdx
cmp r8, rcx
jbe 0x14000ac88
mov rcx, qword [rbx + 0x18]
sub rcx, r8
cmp rcx, rdx
jb 0x14000ac88
mov r8, rax
mov rcx, rbx
call fcn.14000d9d0
jmp 0x14000ac9d
mov r14d, 2
mov word [rbp + 0x4c], r12w
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], r12w
lea rax, [rbp + 0xc]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x14000aaf5
lea rdx, [rbp + 0xc]
lea rcx, [rbp - 0x80]
call fcn.14000ca10
nop
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rdx, qword [rbp - 0x80]
mov rax, qword [rbp - 0x70]
lea rbx, [rdx + rax*2]
lea rdi, [rbp - 0x80]
cmovae rdi, qword [rbp - 0x80]
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x60], 0
mov rdx, rbx
sub rdx, rdi
sar rdx, 1
lea rcx, [rsp + 0x60]
call fcn.140008880
mov r8, rbx
mov rdx, rdi
lea rcx, [rsp + 0x60]
call fcn.140008a00
or r14d, 4
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x14000aba7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000aba2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000b0d9
call fcn.14003d794
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], r12w
mov r9, qword [rsp + 0x60]
mov r10, qword [rsp + 0x78]
cmp qword [rsp + 0x70], 0x20
jne 0x14000ac37
lea rdx, [rsp + 0x60]
cmp r10, 0x10
cmovae rdx, r9
cmp byte [rdx + 0x20], 0
jne 0x14000ac37
mov r8d, r12d
movzx ecx, byte [rdx]
lea eax, [rcx - 0x30]
cmp al, 9
jbe 0x14000abf9
lea eax, [rcx - 0x61]
cmp al, 5
jbe 0x14000abf9
sub cl, 0x41
cmp cl, 5
ja 0x14000ac37
inc r8d
inc rdx
cmp r8d, 0x20
jl 0x14000abe0
lea rdx, [rsp + 0x60]
cmp r10, 0x10
cmovae rdx, r9
lea rcx, str.The_TA__s_was_found_in_the_repository.
call fcn.140003050
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x28]
call fcn.14000bcf0
mov r10, qword [rsp + 0x78]
mov r9, qword [rsp + 0x60]
cmp r10, 0x10
jb 0x14000ac6e
lea rdx, [r10 + 1]
mov rax, r9
cmp rdx, 0x1000
jb 0x14000ac66
add rdx, 0x27
mov r9, qword [r9 - 8]
sub rax, r9
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000b0df
mov rcx, r9
call fcn.14003d794
lea rdx, [rbp - 0x20]
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_FindNextFileW]
test eax, eax
je 0x14000aa68
jmp 0x14000aad4
cmp qword [rbx + 0x18], 8
jb 0x14000ac92
mov rbx, qword [rbx]
mov rdx, rbx
mov rcx, rax
call fcn.14000cba0
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
or r14d, 8
lea rcx, [rbp - 0x60]
call fcn.140008470
movups xmmword [rbp - 0x60], xmm6
movups xmmword [rbp - 0x50], xmm7
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x14000ad09
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ad04
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000b0e5
call fcn.14003d794
movdqa xmm0, xmmword [0x1400832b0]
movdqu xmmword [rbp - 0x70], xmm0
mov word [rbp - 0x80], r12w
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x14000ad5d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ad58
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000b0eb
call fcn.14003d794
lea rcx, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae rcx, qword [rbp - 0x60]
lea rdx, [rbp - 0x20]
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_FindFirstFileW]
mov rsi, rax
cmp rax, 0xffffffffffffffff
jne 0x14000ae30
lea rcx, str.FindFirstFile_failed.
call fcn.140003050
mov rsi, qword [rsp + 0x28]
mov rbx, rsi
mov rdi, qword [rsp + 0x30]
cmp rsi, rdi
je 0x14000ade5
mov rcx, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x14000adad
mov rcx, qword [rbx]
lea rdx, str.BA8D164350B649CC861D2C01BED14BE8
call fcn.14004865c
test eax, eax
je 0x14000addc
mov dword [rsp + 0x20], 2
mov word [rsp + 0x24], 0
lea r8, [rsp + 0x20]
mov rdx, rbx
mov rcx, r15
call fcn.140009490
add rbx, 0x20
cmp rbx, rdi
jne 0x14000ada0
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x14000afed
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000afe8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000b0f1
jmp 0x14000afe8
mov word [rbp + 0x4c], r12w
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], r12w
lea rax, [rbp + 0xc]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x14000ae51
lea rdx, [rbp + 0xc]
lea rcx, [rbp - 0x80]
call fcn.14000ca10
nop
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rdx, qword [rbp - 0x80]
mov rax, qword [rbp - 0x70]
lea rbx, [rdx + rax*2]
lea rdi, [rbp - 0x80]
cmovae rdi, qword [rbp - 0x80]
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x60], 0
mov rdx, rbx
sub rdx, rdi
sar rdx, 1
lea rcx, [rsp + 0x60]
call fcn.140008880
mov r8, rbx
mov rdx, rdi
lea rcx, [rsp + 0x60]
call fcn.140008a00
or r14d, 0x10
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x14000af03
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000aefe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000b0f7
call fcn.14003d794
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], r12w
mov r9, qword [rsp + 0x60]
mov r10, qword [rsp + 0x78]
cmp qword [rsp + 0x70], 0x20
jne 0x14000af97
lea rdx, [rsp + 0x60]
cmp r10, 0x10
cmovae rdx, r9
cmp byte [rdx + 0x20], 0
jne 0x14000af97
mov r8d, r12d
nop dword [rax]
movzx eax, byte [rdx]
lea ecx, [rax - 0x30]
cmp cl, 9
jbe 0x14000af59
lea ecx, [rax - 0x61]
cmp cl, 5
jbe 0x14000af59
sub al, 0x41
cmp al, 5
ja 0x14000af97
inc r8d
inc rdx
cmp r8d, 0x20
jl 0x14000af40
lea rdx, [rsp + 0x60]
cmp r10, 0x10
cmovae rdx, r9
lea rcx, str.The_TA__s_was_found_in_the_repository.
call fcn.140003050
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x28]
call fcn.14000bcf0
mov r10, qword [rsp + 0x78]
mov r9, qword [rsp + 0x60]
cmp r10, 0x10
jb 0x14000afce
lea rdx, [r10 + 1]
mov rax, r9
cmp rdx, 0x1000
jb 0x14000afc6
add rdx, 0x27
mov r9, qword [r9 - 8]
sub rax, r9
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000b0fd
mov rcx, r9
call fcn.14003d794
lea rdx, [rbp - 0x20]
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_FindNextFileW]
test eax, eax
je 0x14000ad8e
jmp 0x14000ae30
call fcn.14003d794
movdqa xmm0, xmmword [0x1400832b0]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x60], r12w
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x14000b03f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b03a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000b103
call fcn.14003d794
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], r12w
test rsi, rsi
je 0x14000b098
mov r8, rdi
mov rdx, rsi
call fcn.14000cd90
mov rdx, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x28]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b092
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000b109
call fcn.14003d794
nop
mov rcx, qword [rbp + 0x230]
xor rcx, rsp
call fcn.14003d770
lea r11, [rsp + 0x360]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call fcn.140047164
nop
call fcn.140047164
nop
call fcn.140047164
nop
call fcn.140047164
nop
call fcn.140047164
nop
call fcn.140047164
nop
call fcn.140047164
nop
call fcn.140047164
nop
call fcn.140047164
nop
call fcn.140047164
nop
call fcn.140047164
int3