Function at 0x1400483a0
Capabilities:
Enumerate files on windows
Get file attributes

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x108
movaps xmmword [rsp + 0xf0], xmm6
mov qword [rsp + 0x38], rdx
mov rdi, rcx
mov rax, qword [0x1400e0338]
xor rax, rsp
mov qword [rsp + 0xe8], rax
movaps xmm6, xmmword [section..rdata]
movaps xmmword [rsp + 0xd0], xmm6
movaps xmmword [rsp + 0xc0], xmm6
movaps xmmword [rsp + 0xb0], xmm6
movaps xmmword [rsp + 0xa0], xmm6
movaps xmmword [rsp + 0x90], xmm6
lea rdx, str.Next
lea r8, str..._.._base_files_file_enumerator_win.cc
lea rbx, [rsp + 0x70]
mov rcx, rbx
mov r9d, 0x82
call fcn.140047740
lea rcx, [rsp + 0x90]
mov rdx, rbx
xor r8d, r8d
call fcn.140049050
lea r15, [rdi + 4]
lea rsi, [rdi + 0x2a8]
lea r12, [rdi + 0x260]
lea rax, [rdi + 0x280]
mov qword [rsp + 0x30], rax
lea r13, [rdi + 0x30]
movabs r14, 0xaaaaaaaaaaaaaaaa
jmp 0x140048487
call qword [sym.imp.SHLWAPI.dll_PathMatchSpecW]
cmp eax, 1
je 0x1400487db
lea rcx, [rsp + 0x40]
call fcn.1400359f0
mov rcx, rbx
call fcn.1400359f0
cmp byte [rdi], 0
je 0x1400484d0
mov rcx, qword [rdi + 0x258]
mov rdx, r15
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x140048610
mov rcx, qword [rdi + 0x258]
call qword [sym.imp.KERNEL32.dll_FindClose]
mov qword [rdi + 0x258], 0xffffffffffffffff
jmp 0x140048610
mov rdx, qword [rdi + 0x2c0]
cmp qword [rdi + 0x2b8], rdx
je 0x140048811
test rdx, rdx
jne 0x1400484f0
mov rdx, qword [rdi + 0x2b0]
add rdx, 0xffffffffffffffff
mov rcx, rsi
call fcn.140048d50
mov rcx, r12
mov rdx, rax
call fcn.140035a00
mov rdx, qword [rdi + 0x2c0]
test rdx, rdx
jne 0x14004851a
mov rdx, qword [rdi + 0x2b0]
lea rax, [rdx - 1]
mov qword [rdi + 0x2c0], rax
mov rcx, rsi
call fcn.1400489d0
mov rbp, rax
mov rdx, qword [rdi + 0x2c0]
mov rcx, rsi
call fcn.1400489d0
mov rcx, rsi
mov rdx, rax
mov r8, rbp
call fcn.1400488e0
mov rcx, rsi
call fcn.140048e10
mov qword [rsp + 0x80], r14
movaps xmmword [rsp + 0x70], xmm6
mov eax, dword [rdi + 0x298]
cmp eax, 1
je 0x14004859b
test eax, eax
jne 0x1400485c2
movzx eax, byte [rdi + 0x297]
test al, al
mov rcx, qword [rdi + 0x280]
cmovns rcx, qword [rsp + 0x30]
mov qword [rsp + 0x40], rcx
cmovs rax, qword [rdi + 0x288]
mov qword [rsp + 0x48], rax
jmp 0x1400485b0
lea rax, [0x1400bfa6e]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], 1
mov rcx, r12
mov rdx, rbx
lea r8, [rsp + 0x40]
call fcn.140036800
jmp 0x1400485ca
mov rcx, rbx
call fcn.1400358c0
cmp byte [rsp + 0x87], 0
mov rcx, rbx
jns 0x1400485dc
mov rcx, qword [rsp + 0x70]
mov dword [rsp + 0x28], 2
mov qword [rsp + 0x20], 0
mov edx, 1
mov r8, r15
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov qword [rdi + 0x258], rax
mov byte [rdi], 1
mov rcx, rbx
call fcn.1400359f0
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp qword [rdi + 0x258], 0xffffffffffffffff
je 0x140048650
mov qword [rsp + 0x80], r14
movaps xmmword [rsp + 0x70], xmm6
mov qword [rsp + 0x60], r13
cmp word [r13], 0
je 0x140048670
xor eax, eax
cmp word [rdi + rax*2 + 0x32], 0
lea rax, [rax + 1]
jne 0x140048640
jmp 0x140048672
mov ebp, eax
mov byte [rdi], 0
cmp dword [rdi + 0x298], 0
je 0x14004873a
cmp ebp, 0x12
je 0x140048487
jmp 0x140048754
xor eax, eax
mov qword [rsp + 0x68], rax
mov rcx, rbx
lea rdx, [rsp + 0x60]
call fcn.140035910
mov rcx, rdi
mov rdx, rbx
call fcn.140048f10
test al, al
jne 0x14004847f
mov ebp, dword [rdi + 4]
mov qword [rsp + 0x50], r14
movaps xmmword [rsp + 0x40], xmm6
mov rcx, r12
lea rdx, [rsp + 0x40]
mov r8, rbx
call fcn.140037740
test bpl, 0x10
je 0x140048780
cmp byte [rdi + 0x278], 0
je 0x140048780
cmp byte [rsp + 0x57], 0
lea rcx, [rsp + 0x40]
jns 0x1400486dc
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
test eax, 0x400
jne 0x140048780
mov edx, 1
mov rcx, rsi
call fcn.140048a90
mov rdx, qword [rdi + 0x2c0]
mov rcx, rsi
call fcn.1400489d0
mov rcx, rax
lea rdx, [rsp + 0x40]
call fcn.1400358e0
mov rax, qword [rdi + 0x2b0]
mov rdx, qword [rdi + 0x2c0]
add rax, 0xffffffffffffffff
cmp rdx, rax
jne 0x140048766
mov qword [rdi + 0x2c0], 0
jmp 0x140048775
mov rcx, qword [rsp + 0x30]
lea rdx, [0x1400bfa6e]
call fcn.14002d828
cmp ebp, 0x12
je 0x140048487
cmp dword [rdi + 0x29c], 0
je 0x140048487
jmp 0x140048804
mov rcx, rdx
inc rcx
mov qword [rdi + 0x2c0], rcx
jne 0x140048778
mov rdx, rax
mov rcx, rsi
call fcn.140048d50
and ebp, 0x10
shr ebp, 4
mov rcx, rdi
mov edx, ebp
call fcn.140049040
test al, al
je 0x140048475
mov eax, dword [rdi + 0x298]
cmp eax, 1
je 0x1400487ad
test eax, eax
jne 0x140048475
jmp 0x1400487db
mov rdx, qword [rsp + 0x30]
cmp byte [rdx + 0x17], 0
jns 0x1400487c0
mov rax, qword [rsp + 0x30]
mov rdx, qword [rax]
cmp byte [rsp + 0x87], 0
mov rcx, rbx
jns 0x140048466
mov rcx, qword [rsp + 0x70]
jmp 0x140048466
lea rsi, [rsp + 0x40]
mov rdi, qword [rsp + 0x38]
mov rcx, rdi
mov rdx, rsi
call fcn.1400358e0
mov rcx, rsi
call fcn.1400359f0
lea rcx, [rsp + 0x70]
call fcn.1400359f0
jmp 0x14004881e
mov ecx, ebp
call fcn.14003afa0
mov dword [rdi + 0x2a0], eax
mov rdi, qword [rsp + 0x38]
mov rcx, rdi
call fcn.1400358c0
lea rcx, [rsp + 0x90]
call fcn.140049190
mov rcx, qword [rsp + 0xe8]
xor rcx, rsp
call fcn.14008f710
mov rax, rdi
movaps xmm6, xmmword [rsp + 0xf0]
add rsp, 0x108
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret