Function at 0x140093920
Capabilities:
Enumerate files on windows
Get file attributes

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x128
movaps xmmword [rsp + 0x110], xmm6
mov qword [rsp + 0x40], rdx
mov rdi, rcx
mov rax, qword [0x14019d018]
xor rax, rsp
mov qword [rsp + 0x108], rax
movabs r12, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x100], r12
movaps xmm6, xmmword [0x140174f60]
movaps xmmword [rsp + 0xf0], xmm6
movaps xmmword [rsp + 0xe0], xmm6
movaps xmmword [rsp + 0xd0], xmm6
movaps xmmword [rsp + 0xc0], xmm6
movaps xmmword [rsp + 0xb0], xmm6
lea rdx, str.Next
lea r8, str..._.._base_files_file_enumerator_win.cc
lea r15, [rsp + 0x90]
mov rcx, r15
mov r9d, 0x82
call fcn.140065e60
lea rcx, [rsp + 0xb0]
mov rdx, r15
xor r8d, r8d
call fcn.1400bd980
lea rax, [rdi + 4]
mov qword [rsp + 0x58], rax
lea rax, [rdi + 0x2a8]
mov qword [rsp + 0x48], rax
lea rax, [rdi + 0x260]
mov qword [rsp + 0x38], rax
lea rbp, [rdi + 0x280]
lea rsi, [rdi + 0x30]
mov rbx, qword [sym.imp.KERNEL32.dll_GetLastError]
lea r14, [rsp + 0x80]
mov r13, qword [sym.imp.KERNEL32.dll_FindNextFileW]
mov qword [rsp + 0x50], rsi
jmp 0x140093a37
call qword [sym.imp.SHLWAPI.dll_PathMatchSpecW]
cmp eax, 1
je 0x140093e55
lea rcx, [rsp + 0x60]
call fcn.1400505d0
mov rcx, r15
call fcn.1400505d0
cmp byte [rdi], 0
je 0x140093a70
mov rcx, qword [rdi + 0x258]
mov rdx, qword [rsp + 0x58]
call r13
test eax, eax
jne 0x140093c1f
mov rcx, qword [rdi + 0x258]
call qword [sym.imp.KERNEL32.dll_FindClose]
mov qword [rdi + 0x258], 0xffffffffffffffff
jmp 0x140093c1f
mov rax, qword [rdi + 0x2c0]
cmp qword [rdi + 0x2b8], rax
je 0x140093e46
test rax, rax
mov rcx, qword [rdi + 0x2b0]
cmove rax, rcx
add rax, 0xffffffffffffffff
cmp rcx, rax
jb 0x140093eca
lea rdx, [rax + rax*2]
shl rdx, 3
add rdx, qword [rdi + 0x2a8]
mov rcx, qword [rsp + 0x38]
call fcn.1400505e0
mov rcx, qword [rdi + 0x2b0]
mov rdx, qword [rdi + 0x2c0]
mov rsi, r12
test rdx, rdx
je 0x140093aec
lea rax, [rdx - 1]
mov qword [rdi + 0x2c0], rax
cmp rcx, rdx
jb 0x140093ed3
cmp rcx, rax
jae 0x140093b03
jmp 0x140093ecd
lea rax, [rcx - 1]
mov qword [rdi + 0x2c0], rax
mov rdx, rcx
cmp rcx, rax
jb 0x140093ecd
movabs rcx, 0x8000000000000000
cmp rdx, rcx
je 0x140093ed0
mov r12, r13
mov r13, r14
mov r14, qword [rsp + 0x48]
mov rcx, qword [r14]
lea rax, [rax + rax*2]
lea rcx, [rcx + rax*8]
call fcn.1400505d0
mov rcx, r14
call fcn.140094350
mov qword [rsp + 0xa0], rsi
movaps xmmword [rsp + 0x90], xmm6
mov eax, dword [rdi + 0x298]
cmp eax, 1
je 0x140093b95
test eax, eax
mov r14, r13
jne 0x140093bc1
movzx eax, byte [rdi + 0x297]
test al, al
mov rcx, qword [rdi + 0x280]
cmovns rcx, rbp
mov qword [rsp + 0x60], rcx
cmovs rax, qword [rdi + 0x288]
mov qword [rsp + 0x68], rax
mov rcx, qword [rsp + 0x38]
mov rdx, r15
lea r8, [rsp + 0x60]
call fcn.1400513b0
jmp 0x140093bc9
lea rax, [0x140182b22]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 1
mov rcx, qword [rsp + 0x38]
mov rdx, r15
lea r8, [rsp + 0x60]
call fcn.1400513b0
mov r14, r13
jmp 0x140093bc9
mov rcx, r15
call fcn.140050470
mov r13, r12
cmp byte [rsp + 0xa7], 0
mov rcx, r15
mov r12, rsi
jns 0x140093be4
mov rcx, qword [rsp + 0x90]
mov dword [rsp + 0x28], 2
mov qword [rsp + 0x20], 0
mov edx, 1
mov r8, qword [rsp + 0x58]
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov qword [rdi + 0x258], rax
mov byte [rdi], 1
mov rcx, r15
call fcn.1400505d0
mov rsi, qword [rsp + 0x50]
call rbx
cmp qword [rdi + 0x258], 0xffffffffffffffff
je 0x140093d50
mov qword [rsp + 0xa0], r12
movaps xmmword [rsp + 0x90], xmm6
mov qword [rsp + 0x80], rsi
test rsi, rsi
je 0x140093ebb
mov rcx, rsi
call fcn.140152cb8
mov qword [rsp + 0x88], rax
mov rcx, r15
mov rdx, r14
call fcn.1400504f0
mov rcx, rdi
mov rdx, r15
call fcn.1400bdff0
test al, al
jne 0x140093a2f
mov rax, r12
mov r8, r15
mov r12, r13
mov r13, r14
mov r14d, dword [rdi + 4]
mov rsi, rax
mov qword [rsp + 0x70], rax
movaps xmmword [rsp + 0x60], xmm6
mov rcx, qword [rsp + 0x38]
lea rdx, [rsp + 0x60]
call fcn.1400524b0
test r14b, 0x10
je 0x140093dd0
cmp byte [rdi + 0x278], 0
je 0x140093dd0
cmp byte [rsp + 0x77], 0
lea rcx, [rsp + 0x60]
jns 0x140093cd2
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
test eax, 0x400
jne 0x140093dd0
mov edx, 1
mov rcx, qword [rsp + 0x48]
call fcn.140093ff0
mov rax, qword [rdi + 0x2c0]
cmp qword [rdi + 0x2b0], rax
jb 0x140093ed9
lea rcx, [rax + rax*2]
shl rcx, 3
add rcx, qword [rdi + 0x2a8]
lea rdx, [rsp + 0x60]
call fcn.140050490
mov r8, qword [rdi + 0x2b0]
mov rcx, qword [rdi + 0x2c0]
lea rax, [r8 - 1]
cmp rcx, rax
jne 0x140093da9
mov qword [rdi + 0x2c0], 0
jmp 0x140093db8
mov byte [rdi], 0
cmp dword [rdi + 0x298], 0
je 0x140093d67
cmp eax, 0x12
je 0x140093a37
jmp 0x140093d97
cmp byte [rbp + 0x17], 0
js 0x140093d76
mov byte [rbp + 0x17], 1
mov rcx, rbp
jmp 0x140093d88
mov qword [rdi + 0x288], 1
mov rcx, qword [rdi + 0x280]
mov dword [rcx], 0x2a
cmp eax, 0x12
je 0x140093a37
cmp dword [rdi + 0x29c], 0
je 0x140093a37
jmp 0x140093e39
mov rdx, rcx
inc rdx
mov qword [rdi + 0x2c0], rdx
jne 0x140093dbb
mov rcx, rax
cmp r8, rcx
movabs rsi, 0xaaaaaaaaaaaaaaaa
jb 0x140093ed6
nop
and r14d, 0x10
shr r14d, 4
mov rcx, rdi
mov edx, r14d
call fcn.1400be140
test al, al
mov r14, r13
mov r13, r12
mov r12, rsi
mov rsi, qword [rsp + 0x50]
je 0x140093a25
mov eax, dword [rdi + 0x298]
cmp eax, 1
je 0x140093e0e
test eax, eax
jne 0x140093a25
jmp 0x140093e55
cmp byte [rbp + 0x17], 0
mov rdx, rbp
jns 0x140093e1b
mov rdx, qword [rbp]
cmp byte [rsp + 0xa7], 0
mov rcx, r15
jns 0x140093a16
mov rcx, qword [rsp + 0x90]
jmp 0x140093a16
mov ecx, eax
call fcn.140077630
mov dword [rdi + 0x2a0], eax
mov rdi, qword [rsp + 0x40]
mov rcx, rdi
call fcn.140050470
jmp 0x140093e7f
lea rsi, [rsp + 0x60]
mov rdi, qword [rsp + 0x40]
mov rcx, rdi
mov rdx, rsi
call fcn.140050490
mov rcx, rsi
call fcn.1400505d0
lea rcx, [rsp + 0x90]
call fcn.1400505d0
lea rcx, [rsp + 0xb0]
call fcn.1400bdca0
mov rcx, qword [rsp + 0x108]
xor rcx, rsp
call fcn.140136dd0
mov rax, rdi
movaps xmm6, xmmword [rsp + 0x110]
add rsp, 0x128
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov qword [rsp + 0x88], 0
int3
int3
int3
int3
int3
int3
int3