Function at 0x140093c60
Capabilities:
Enumerate files on windows
Get file attributes

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x128
movaps xmmword [rsp + 0x110], xmm6
mov qword [rsp + 0x40], rdx
mov rdi, rcx
mov rax, qword [0x14019e018]
xor rax, rsp
mov qword [rsp + 0x108], rax
movabs r12, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x100], r12
movaps xmm6, xmmword [0x140175f60]
movaps xmmword [rsp + 0xf0], xmm6
movaps xmmword [rsp + 0xe0], xmm6
movaps xmmword [rsp + 0xd0], xmm6
movaps xmmword [rsp + 0xc0], xmm6
movaps xmmword [rsp + 0xb0], xmm6
lea rdx, str.Next
lea r8, str..._.._base_files_file_enumerator_win.cc
lea r15, [rsp + 0x90]
mov rcx, r15
mov r9d, 0x82
call fcn.140066190
lea rcx, [rsp + 0xb0]
mov rdx, r15
xor r8d, r8d
call fcn.1400bdcc0
lea rax, [rdi + 4]
mov qword [rsp + 0x58], rax
lea rax, [rdi + 0x2a8]
mov qword [rsp + 0x48], rax
lea rax, [rdi + 0x260]
mov qword [rsp + 0x38], rax
lea rbp, [rdi + 0x280]
lea rsi, [rdi + 0x30]
mov rbx, qword [sym.imp.KERNEL32.dll_GetLastError]
lea r14, [rsp + 0x80]
mov r13, qword [sym.imp.KERNEL32.dll_FindNextFileW]
mov qword [rsp + 0x50], rsi
jmp 0x140093d77
call qword [sym.imp.SHLWAPI.dll_PathMatchSpecW]
cmp eax, 1
je 0x140094195
lea rcx, [rsp + 0x60]
call fcn.1400506a0
mov rcx, r15
call fcn.1400506a0
cmp byte [rdi], 0
je 0x140093db0
mov rcx, qword [rdi + 0x258]
mov rdx, qword [rsp + 0x58]
call r13
test eax, eax
jne 0x140093f5f
mov rcx, qword [rdi + 0x258]
call qword [sym.imp.KERNEL32.dll_FindClose]
mov qword [rdi + 0x258], 0xffffffffffffffff
jmp 0x140093f5f
mov rax, qword [rdi + 0x2c0]
cmp qword [rdi + 0x2b8], rax
je 0x140094186
test rax, rax
mov rcx, qword [rdi + 0x2b0]
cmove rax, rcx
add rax, 0xffffffffffffffff
cmp rcx, rax
jb 0x14009420a
lea rdx, [rax + rax*2]
shl rdx, 3
add rdx, qword [rdi + 0x2a8]
mov rcx, qword [rsp + 0x38]
call fcn.1400506b0
mov rcx, qword [rdi + 0x2b0]
mov rdx, qword [rdi + 0x2c0]
mov rsi, r12
test rdx, rdx
je 0x140093e2c
lea rax, [rdx - 1]
mov qword [rdi + 0x2c0], rax
cmp rcx, rdx
jb 0x140094213
cmp rcx, rax
jae 0x140093e43
jmp 0x14009420d
lea rax, [rcx - 1]
mov qword [rdi + 0x2c0], rax
mov rdx, rcx
cmp rcx, rax
jb 0x14009420d
movabs rcx, 0x8000000000000000
cmp rdx, rcx
je 0x140094210
mov r12, r13
mov r13, r14
mov r14, qword [rsp + 0x48]
mov rcx, qword [r14]
lea rax, [rax + rax*2]
lea rcx, [rcx + rax*8]
call fcn.1400506a0
mov rcx, r14
call fcn.140094690
mov qword [rsp + 0xa0], rsi
movaps xmmword [rsp + 0x90], xmm6
mov eax, dword [rdi + 0x298]
cmp eax, 1
je 0x140093ed5
test eax, eax
mov r14, r13
jne 0x140093f01
movzx eax, byte [rdi + 0x297]
test al, al
mov rcx, qword [rdi + 0x280]
cmovns rcx, rbp
mov qword [rsp + 0x60], rcx
cmovs rax, qword [rdi + 0x288]
mov qword [rsp + 0x68], rax
mov rcx, qword [rsp + 0x38]
mov rdx, r15
lea r8, [rsp + 0x60]
call fcn.140051480
jmp 0x140093f09
lea rax, [0x140183b32]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 1
mov rcx, qword [rsp + 0x38]
mov rdx, r15
lea r8, [rsp + 0x60]
call fcn.140051480
mov r14, r13
jmp 0x140093f09
mov rcx, r15
call fcn.140050540
mov r13, r12
cmp byte [rsp + 0xa7], 0
mov rcx, r15
mov r12, rsi
jns 0x140093f24
mov rcx, qword [rsp + 0x90]
mov dword [rsp + 0x28], 2
mov qword [rsp + 0x20], 0
mov edx, 1
mov r8, qword [rsp + 0x58]
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov qword [rdi + 0x258], rax
mov byte [rdi], 1
mov rcx, r15
call fcn.1400506a0
mov rsi, qword [rsp + 0x50]
call rbx
cmp qword [rdi + 0x258], 0xffffffffffffffff
je 0x140094090
mov qword [rsp + 0xa0], r12
movaps xmmword [rsp + 0x90], xmm6
mov qword [rsp + 0x80], rsi
test rsi, rsi
je 0x1400941fb
mov rcx, rsi
call fcn.140152ff8
mov qword [rsp + 0x88], rax
mov rcx, r15
mov rdx, r14
call fcn.1400505c0
mov rcx, rdi
mov rdx, r15
call fcn.1400be330
test al, al
jne 0x140093d6f
mov rax, r12
mov r8, r15
mov r12, r13
mov r13, r14
mov r14d, dword [rdi + 4]
mov rsi, rax
mov qword [rsp + 0x70], rax
movaps xmmword [rsp + 0x60], xmm6
mov rcx, qword [rsp + 0x38]
lea rdx, [rsp + 0x60]
call fcn.140052580
test r14b, 0x10
je 0x140094110
cmp byte [rdi + 0x278], 0
je 0x140094110
cmp byte [rsp + 0x77], 0
lea rcx, [rsp + 0x60]
jns 0x140094012
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
test eax, 0x400
jne 0x140094110
mov edx, 1
mov rcx, qword [rsp + 0x48]
call fcn.140094330
mov rax, qword [rdi + 0x2c0]
cmp qword [rdi + 0x2b0], rax
jb 0x140094219
lea rcx, [rax + rax*2]
shl rcx, 3
add rcx, qword [rdi + 0x2a8]
lea rdx, [rsp + 0x60]
call fcn.140050560
mov r8, qword [rdi + 0x2b0]
mov rcx, qword [rdi + 0x2c0]
lea rax, [r8 - 1]
cmp rcx, rax
jne 0x1400940e9
mov qword [rdi + 0x2c0], 0
jmp 0x1400940f8
mov byte [rdi], 0
cmp dword [rdi + 0x298], 0
je 0x1400940a7
cmp eax, 0x12
je 0x140093d77
jmp 0x1400940d7
cmp byte [rbp + 0x17], 0
js 0x1400940b6
mov byte [rbp + 0x17], 1
mov rcx, rbp
jmp 0x1400940c8
mov qword [rdi + 0x288], 1
mov rcx, qword [rdi + 0x280]
mov dword [rcx], 0x2a
cmp eax, 0x12
je 0x140093d77
cmp dword [rdi + 0x29c], 0
je 0x140093d77
jmp 0x140094179
mov rdx, rcx
inc rdx
mov qword [rdi + 0x2c0], rdx
jne 0x1400940fb
mov rcx, rax
cmp r8, rcx
movabs rsi, 0xaaaaaaaaaaaaaaaa
jb 0x140094216
nop
and r14d, 0x10
shr r14d, 4
mov rcx, rdi
mov edx, r14d
call fcn.1400be480
test al, al
mov r14, r13
mov r13, r12
mov r12, rsi
mov rsi, qword [rsp + 0x50]
je 0x140093d65
mov eax, dword [rdi + 0x298]
cmp eax, 1
je 0x14009414e
test eax, eax
jne 0x140093d65
jmp 0x140094195
cmp byte [rbp + 0x17], 0
mov rdx, rbp
jns 0x14009415b
mov rdx, qword [rbp]
cmp byte [rsp + 0xa7], 0
mov rcx, r15
jns 0x140093d56
mov rcx, qword [rsp + 0x90]
jmp 0x140093d56
mov ecx, eax
call fcn.140077970
mov dword [rdi + 0x2a0], eax
mov rdi, qword [rsp + 0x40]
mov rcx, rdi
call fcn.140050540
jmp 0x1400941bf
lea rsi, [rsp + 0x60]
mov rdi, qword [rsp + 0x40]
mov rcx, rdi
mov rdx, rsi
call fcn.140050560
mov rcx, rsi
call fcn.1400506a0
lea rcx, [rsp + 0x90]
call fcn.1400506a0
lea rcx, [rsp + 0xb0]
call fcn.1400bdfe0
mov rcx, qword [rsp + 0x108]
xor rcx, rsp
call fcn.140137110
mov rax, rdi
movaps xmm6, xmmword [rsp + 0x110]
add rsp, 0x128
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov qword [rsp + 0x88], 0
int3
int3
int3
int3
int3
int3
int3