Function at 0x140091710
Capabilities:
Enumerate files on windows
Get file attributes

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x128
movaps xmmword [rsp + 0x110], xmm6
mov qword [rsp + 0x40], rdx
mov rdi, rcx
mov rax, qword [0x14019c018]
xor rax, rsp
mov qword [rsp + 0x108], rax
movabs r12, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x100], r12
movaps xmm6, xmmword [0x140173f60]
movaps xmmword [rsp + 0xf0], xmm6
movaps xmmword [rsp + 0xe0], xmm6
movaps xmmword [rsp + 0xd0], xmm6
movaps xmmword [rsp + 0xc0], xmm6
movaps xmmword [rsp + 0xb0], xmm6
lea rdx, str.Next
lea r8, str..._.._base_files_file_enumerator_win.cc
lea r15, [rsp + 0x90]
mov rcx, r15
mov r9d, 0x82
call fcn.1400651f0
lea rcx, [rsp + 0xb0]
mov rdx, r15
xor r8d, r8d
call fcn.1400bbe30
lea rax, [rdi + 4]
mov qword [rsp + 0x58], rax
lea rax, [rdi + 0x2a8]
mov qword [rsp + 0x48], rax
lea rax, [rdi + 0x260]
mov qword [rsp + 0x38], rax
lea rbp, [rdi + 0x280]
lea rsi, [rdi + 0x30]
mov rbx, qword [sym.imp.KERNEL32.dll_GetLastError]
lea r14, [rsp + 0x80]
mov r13, qword [sym.imp.KERNEL32.dll_FindNextFileW]
mov qword [rsp + 0x50], rsi
jmp 0x140091827
call qword [sym.imp.SHLWAPI.dll_PathMatchSpecW]
cmp eax, 1
je 0x140091c45
lea rcx, [rsp + 0x60]
call fcn.140050480
mov rcx, r15
call fcn.140050480
cmp byte [rdi], 0
je 0x140091860
mov rcx, qword [rdi + 0x258]
mov rdx, qword [rsp + 0x58]
call r13
test eax, eax
jne 0x140091a0f
mov rcx, qword [rdi + 0x258]
call qword [sym.imp.KERNEL32.dll_FindClose]
mov qword [rdi + 0x258], 0xffffffffffffffff
jmp 0x140091a0f
mov rax, qword [rdi + 0x2c0]
cmp qword [rdi + 0x2b8], rax
je 0x140091c36
test rax, rax
mov rcx, qword [rdi + 0x2b0]
cmove rax, rcx
add rax, 0xffffffffffffffff
cmp rcx, rax
jb 0x140091cba
lea rdx, [rax + rax*2]
shl rdx, 3
add rdx, qword [rdi + 0x2a8]
mov rcx, qword [rsp + 0x38]
call fcn.140050490
mov rcx, qword [rdi + 0x2b0]
mov rdx, qword [rdi + 0x2c0]
mov rsi, r12
test rdx, rdx
je 0x1400918dc
lea rax, [rdx - 1]
mov qword [rdi + 0x2c0], rax
cmp rcx, rdx
jb 0x140091cc3
cmp rcx, rax
jae 0x1400918f3
jmp 0x140091cbd
lea rax, [rcx - 1]
mov qword [rdi + 0x2c0], rax
mov rdx, rcx
cmp rcx, rax
jb 0x140091cbd
movabs rcx, 0x8000000000000000
cmp rdx, rcx
je 0x140091cc0
mov r12, r13
mov r13, r14
mov r14, qword [rsp + 0x48]
mov rcx, qword [r14]
lea rax, [rax + rax*2]
lea rcx, [rcx + rax*8]
call fcn.140050480
mov rcx, r14
call fcn.140092140
mov qword [rsp + 0xa0], rsi
movaps xmmword [rsp + 0x90], xmm6
mov eax, dword [rdi + 0x298]
cmp eax, 1
je 0x140091985
test eax, eax
mov r14, r13
jne 0x1400919b1
movzx eax, byte [rdi + 0x297]
test al, al
mov rcx, qword [rdi + 0x280]
cmovns rcx, rbp
mov qword [rsp + 0x60], rcx
cmovs rax, qword [rdi + 0x288]
mov qword [rsp + 0x68], rax
mov rcx, qword [rsp + 0x38]
mov rdx, r15
lea r8, [rsp + 0x60]
call fcn.140051260
jmp 0x1400919b9
lea rax, [0x140181af2]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 1
mov rcx, qword [rsp + 0x38]
mov rdx, r15
lea r8, [rsp + 0x60]
call fcn.140051260
mov r14, r13
jmp 0x1400919b9
mov rcx, r15
call fcn.140050320
mov r13, r12
cmp byte [rsp + 0xa7], 0
mov rcx, r15
mov r12, rsi
jns 0x1400919d4
mov rcx, qword [rsp + 0x90]
mov dword [rsp + 0x28], 2
mov qword [rsp + 0x20], 0
mov edx, 1
mov r8, qword [rsp + 0x58]
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov qword [rdi + 0x258], rax
mov byte [rdi], 1
mov rcx, r15
call fcn.140050480
mov rsi, qword [rsp + 0x50]
call rbx
cmp qword [rdi + 0x258], 0xffffffffffffffff
je 0x140091b40
mov qword [rsp + 0xa0], r12
movaps xmmword [rsp + 0x90], xmm6
mov qword [rsp + 0x80], rsi
test rsi, rsi
je 0x140091cab
mov rcx, rsi
call fcn.140151168
mov qword [rsp + 0x88], rax
mov rcx, r15
mov rdx, r14
call fcn.1400503a0
mov rcx, rdi
mov rdx, r15
call fcn.1400bc4a0
test al, al
jne 0x14009181f
mov rax, r12
mov r8, r15
mov r12, r13
mov r13, r14
mov r14d, dword [rdi + 4]
mov rsi, rax
mov qword [rsp + 0x70], rax
movaps xmmword [rsp + 0x60], xmm6
mov rcx, qword [rsp + 0x38]
lea rdx, [rsp + 0x60]
call fcn.140052360
test r14b, 0x10
je 0x140091bc0
cmp byte [rdi + 0x278], 0
je 0x140091bc0
cmp byte [rsp + 0x77], 0
lea rcx, [rsp + 0x60]
jns 0x140091ac2
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
test eax, 0x400
jne 0x140091bc0
mov edx, 1
mov rcx, qword [rsp + 0x48]
call fcn.140091de0
mov rax, qword [rdi + 0x2c0]
cmp qword [rdi + 0x2b0], rax
jb 0x140091cc9
lea rcx, [rax + rax*2]
shl rcx, 3
add rcx, qword [rdi + 0x2a8]
lea rdx, [rsp + 0x60]
call fcn.140050340
mov r8, qword [rdi + 0x2b0]
mov rcx, qword [rdi + 0x2c0]
lea rax, [r8 - 1]
cmp rcx, rax
jne 0x140091b99
mov qword [rdi + 0x2c0], 0
jmp 0x140091ba8
mov byte [rdi], 0
cmp dword [rdi + 0x298], 0
je 0x140091b57
cmp eax, 0x12
je 0x140091827
jmp 0x140091b87
cmp byte [rbp + 0x17], 0
js 0x140091b66
mov byte [rbp + 0x17], 1
mov rcx, rbp
jmp 0x140091b78
mov qword [rdi + 0x288], 1
mov rcx, qword [rdi + 0x280]
mov dword [rcx], 0x2a
cmp eax, 0x12
je 0x140091827
cmp dword [rdi + 0x29c], 0
je 0x140091827
jmp 0x140091c29
mov rdx, rcx
inc rdx
mov qword [rdi + 0x2c0], rdx
jne 0x140091bab
mov rcx, rax
cmp r8, rcx
movabs rsi, 0xaaaaaaaaaaaaaaaa
jb 0x140091cc6
nop
and r14d, 0x10
shr r14d, 4
mov rcx, rdi
mov edx, r14d
call fcn.1400bc5f0
test al, al
mov r14, r13
mov r13, r12
mov r12, rsi
mov rsi, qword [rsp + 0x50]
je 0x140091815
mov eax, dword [rdi + 0x298]
cmp eax, 1
je 0x140091bfe
test eax, eax
jne 0x140091815
jmp 0x140091c45
cmp byte [rbp + 0x17], 0
mov rdx, rbp
jns 0x140091c0b
mov rdx, qword [rbp]
cmp byte [rsp + 0xa7], 0
mov rcx, r15
jns 0x140091806
mov rcx, qword [rsp + 0x90]
jmp 0x140091806
mov ecx, eax
call fcn.140076750
mov dword [rdi + 0x2a0], eax
mov rdi, qword [rsp + 0x40]
mov rcx, rdi
call fcn.140050320
jmp 0x140091c6f
lea rsi, [rsp + 0x60]
mov rdi, qword [rsp + 0x40]
mov rcx, rdi
mov rdx, rsi
call fcn.140050340
mov rcx, rsi
call fcn.140050480
lea rcx, [rsp + 0x90]
call fcn.140050480
lea rcx, [rsp + 0xb0]
call fcn.1400bc150
mov rcx, qword [rsp + 0x108]
xor rcx, rsp
call fcn.140135280
mov rax, rdi
movaps xmm6, xmmword [rsp + 0x110]
add rsp, 0x128
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov qword [rsp + 0x88], 0
int3
int3
int3
int3
int3
int3
int3