Function at 0x14000a720
Capabilities:
Enumerate files on windows

Disassembly:
mov rax, rsp
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0x288]
sub rsp, 0x360
mov qword [rsp + 0x40], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x140092008]
xor rax, rsp
mov qword [rbp + 0x230], rax
mov r15, rcx
xor r12d, r12d
mov dword [rsp + 0x20], r12d
mov qword [rsp + 0x48], r12
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x50], xmm0
movdqu xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x38], r12
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], r12w
movdqa xmm0, xmmword [0x140081a20]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x60], r12w
call fcn.14000baa0
mov rbx, rax
mov edx, 0xffffffff
mov rcx, qword [rax]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
lea r8, [rbx + 0x30]
lea rax, [rbp - 0x40]
cmp rax, r8
je 0x14000a7e7
mov rdx, r8
cmp qword [r8 + 0x18], 8
jb 0x14000a7da
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
lea rcx, [rbp - 0x40]
call fcn.14000c970
mov rcx, qword [rbx]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_ReleaseMutex]
mov r8d, 1
lea rdx, [0x14007bcd0]
lea rcx, [rbp - 0x40]
call fcn.14000cb00
lea rcx, str.Searching_dalp_TAs_in_the_repository...
call fcn.140003050
lea rdx, [0x140092bd0]
lea rcx, [rbp - 0x80]
call fcn.140007fd0
mov rbx, rax
movdqa xmm0, xmmword [0x140081a20]
movdqu xmmword [rsp + 0x70], xmm0
mov word [rsp + 0x60], r12w
mov dword [rsp + 0x20], 1
mov r8, qword [rbp - 0x30]
lea rdx, [r8 + 1]
cmp rdx, 8
jb 0x14000a862
lea rcx, [rsp + 0x60]
call fcn.14000dfa0
mov qword [rsp + 0x70], r12
mov r8, qword [rbp - 0x30]
lea rdx, [rbp - 0x40]
cmp qword [rbp - 0x28], 8
cmovae rdx, qword [rbp - 0x40]
lea rcx, [rsp + 0x60]
call fcn.14000cb00
mov r8d, 1
lea rdx, [0x14007bd00]
lea rcx, [rsp + 0x60]
call fcn.14000cb00
mov r8, qword [rbx + 0x10]
mov rax, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x70]
sub rax, rcx
cmp r8, rax
jbe 0x14000a8c2
mov rax, qword [rbx + 0x18]
sub rax, r8
cmp rax, rcx
jb 0x14000a8c2
lea r8, [rsp + 0x60]
mov rcx, rbx
call fcn.14000d930
jmp 0x14000a8d9
cmp qword [rbx + 0x18], 8
jb 0x14000a8cc
mov rbx, qword [rbx]
mov rdx, rbx
lea rcx, [rsp + 0x60]
call fcn.14000cb00
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
lea rcx, [rbp - 0x60]
call fcn.140008470
movups xmmword [rbp - 0x60], xmm6
movups xmmword [rbp - 0x50], xmm7
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x14000a943
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a93e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000b02d
call fcn.14003ce44
movdqa xmm0, xmmword [0x140081a20]
movdqu xmmword [rsp + 0x70], xmm0
mov word [rsp + 0x60], r12w
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x14000a997
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a992
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000b033
call fcn.14003ce44
lea rcx, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae rcx, qword [rbp - 0x60]
lea rdx, [rbp - 0x20]
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_FindFirstFileW]
mov rsi, rax
cmp rax, 0xffffffffffffffff
jne 0x14000aa2e
lea rcx, str.FindFirstFile_failed.
call fcn.140003050
lea r14d, [rsi + 3]
lea rcx, str.Searching_acp_TAs_in_the_repository...
call fcn.140003050
lea rdx, [0x140092b90]
lea rcx, [rsp + 0x60]
call fcn.140007fd0
mov rbx, rax
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x80]
call fcn.14000d4c0
nop
mov r8, qword [rbx + 0x10]
mov rcx, qword [rax + 0x18]
mov rdx, qword [rax + 0x10]
sub rcx, rdx
cmp r8, rcx
jbe 0x14000abe8
mov rcx, qword [rbx + 0x18]
sub rcx, r8
cmp rcx, rdx
jb 0x14000abe8
mov r8, rax
mov rcx, rbx
call fcn.14000d930
jmp 0x14000abfd
mov r14d, 2
mov word [rbp + 0x4c], r12w
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], r12w
lea rax, [rbp + 0xc]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x14000aa55
lea rdx, [rbp + 0xc]
lea rcx, [rbp - 0x80]
call fcn.14000c970
nop
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rdx, qword [rbp - 0x80]
mov rax, qword [rbp - 0x70]
lea rbx, [rdx + rax*2]
lea rdi, [rbp - 0x80]
cmovae rdi, qword [rbp - 0x80]
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x60], 0
mov rdx, rbx
sub rdx, rdi
sar rdx, 1
lea rcx, [rsp + 0x60]
call fcn.140008880
mov r8, rbx
mov rdx, rdi
lea rcx, [rsp + 0x60]
call fcn.140008a00
or r14d, 4
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x14000ab07
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ab02
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000b039
call fcn.14003ce44
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], r12w
mov r9, qword [rsp + 0x60]
mov r10, qword [rsp + 0x78]
cmp qword [rsp + 0x70], 0x20
jne 0x14000ab97
lea rdx, [rsp + 0x60]
cmp r10, 0x10
cmovae rdx, r9
cmp byte [rdx + 0x20], 0
jne 0x14000ab97
mov r8d, r12d
movzx ecx, byte [rdx]
lea eax, [rcx - 0x30]
cmp al, 9
jbe 0x14000ab59
lea eax, [rcx - 0x61]
cmp al, 5
jbe 0x14000ab59
sub cl, 0x41
cmp cl, 5
ja 0x14000ab97
inc r8d
inc rdx
cmp r8d, 0x20
jl 0x14000ab40
lea rdx, [rsp + 0x60]
cmp r10, 0x10
cmovae rdx, r9
lea rcx, str.The_TA__s_was_found_in_the_repository.
call fcn.140003050
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x28]
call fcn.14000bc50
mov r10, qword [rsp + 0x78]
mov r9, qword [rsp + 0x60]
cmp r10, 0x10
jb 0x14000abce
lea rdx, [r10 + 1]
mov rax, r9
cmp rdx, 0x1000
jb 0x14000abc6
add rdx, 0x27
mov r9, qword [r9 - 8]
sub rax, r9
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000b03f
mov rcx, r9
call fcn.14003ce44
lea rdx, [rbp - 0x20]
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_FindNextFileW]
test eax, eax
je 0x14000a9c8
jmp 0x14000aa34
cmp qword [rbx + 0x18], 8
jb 0x14000abf2
mov rbx, qword [rbx]
mov rdx, rbx
mov rcx, rax
call fcn.14000cb00
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
or r14d, 8
lea rcx, [rbp - 0x60]
call fcn.140008470
movups xmmword [rbp - 0x60], xmm6
movups xmmword [rbp - 0x50], xmm7
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x14000ac69
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ac64
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000b045
call fcn.14003ce44
movdqa xmm0, xmmword [0x140081a20]
movdqu xmmword [rbp - 0x70], xmm0
mov word [rbp - 0x80], r12w
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x14000acbd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000acb8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000b04b
call fcn.14003ce44
lea rcx, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae rcx, qword [rbp - 0x60]
lea rdx, [rbp - 0x20]
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_FindFirstFileW]
mov rsi, rax
cmp rax, 0xffffffffffffffff
jne 0x14000ad90
lea rcx, str.FindFirstFile_failed.
call fcn.140003050
mov rsi, qword [rsp + 0x28]
mov rbx, rsi
mov rdi, qword [rsp + 0x30]
cmp rsi, rdi
je 0x14000ad45
mov rcx, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x14000ad0d
mov rcx, qword [rbx]
lea rdx, str.BA8D164350B649CC861D2C01BED14BE8
call fcn.140047d0c
test eax, eax
je 0x14000ad3c
mov dword [rsp + 0x20], 2
mov word [rsp + 0x24], 0
lea r8, [rsp + 0x20]
mov rdx, rbx
mov rcx, r15
call fcn.1400093e0
add rbx, 0x20
cmp rbx, rdi
jne 0x14000ad00
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x14000af4d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000af48
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000b051
jmp 0x14000af48
mov word [rbp + 0x4c], r12w
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], r12w
lea rax, [rbp + 0xc]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x14000adb1
lea rdx, [rbp + 0xc]
lea rcx, [rbp - 0x80]
call fcn.14000c970
nop
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rdx, qword [rbp - 0x80]
mov rax, qword [rbp - 0x70]
lea rbx, [rdx + rax*2]
lea rdi, [rbp - 0x80]
cmovae rdi, qword [rbp - 0x80]
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x60], 0
mov rdx, rbx
sub rdx, rdi
sar rdx, 1
lea rcx, [rsp + 0x60]
call fcn.140008880
mov r8, rbx
mov rdx, rdi
lea rcx, [rsp + 0x60]
call fcn.140008a00
or r14d, 0x10
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x14000ae63
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ae5e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000b057
call fcn.14003ce44
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], r12w
mov r9, qword [rsp + 0x60]
mov r10, qword [rsp + 0x78]
cmp qword [rsp + 0x70], 0x20
jne 0x14000aef7
lea rdx, [rsp + 0x60]
cmp r10, 0x10
cmovae rdx, r9
cmp byte [rdx + 0x20], 0
jne 0x14000aef7
mov r8d, r12d
nop dword [rax]
movzx eax, byte [rdx]
lea ecx, [rax - 0x30]
cmp cl, 9
jbe 0x14000aeb9
lea ecx, [rax - 0x61]
cmp cl, 5
jbe 0x14000aeb9
sub al, 0x41
cmp al, 5
ja 0x14000aef7
inc r8d
inc rdx
cmp r8d, 0x20
jl 0x14000aea0
lea rdx, [rsp + 0x60]
cmp r10, 0x10
cmovae rdx, r9
lea rcx, str.The_TA__s_was_found_in_the_repository.
call fcn.140003050
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x28]
call fcn.14000bc50
mov r10, qword [rsp + 0x78]
mov r9, qword [rsp + 0x60]
cmp r10, 0x10
jb 0x14000af2e
lea rdx, [r10 + 1]
mov rax, r9
cmp rdx, 0x1000
jb 0x14000af26
add rdx, 0x27
mov r9, qword [r9 - 8]
sub rax, r9
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000b05d
mov rcx, r9
call fcn.14003ce44
lea rdx, [rbp - 0x20]
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_FindNextFileW]
test eax, eax
je 0x14000acee
jmp 0x14000ad90
call fcn.14003ce44
movdqa xmm0, xmmword [0x140081a20]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x60], r12w
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x14000af9f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000af9a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000b063
call fcn.14003ce44
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], r12w
test rsi, rsi
je 0x14000aff8
mov r8, rdi
mov rdx, rsi
call fcn.14000ccf0
mov rdx, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x28]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000aff2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000b069
call fcn.14003ce44
nop
mov rcx, qword [rbp + 0x230]
xor rcx, rsp
call fcn.14003ce20
lea r11, [rsp + 0x360]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call fcn.140046814
nop
call fcn.140046814
nop
call fcn.140046814
nop
call fcn.140046814
nop
call fcn.140046814
nop
call fcn.140046814
nop
call fcn.140046814
nop
call fcn.140046814
nop
call fcn.140046814
nop
call fcn.140046814
nop
call fcn.140046814
int3