Function at 0x14006aba0
Capabilities:
Enumerate files on windows
Get file attributes

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x108
movaps xmmword [rsp + 0xf0], xmm6
mov qword [rsp + 0x30], rdx
mov rdi, rcx
mov rax, qword [0x140155cc0]
xor rax, rsp
mov qword [rsp + 0xe8], rax
movaps xmm6, xmmword [section..rdata]
movaps xmmword [rsp + 0xb0], xmm6
movaps xmmword [rsp + 0xa0], xmm6
movaps xmmword [rsp + 0x90], xmm6
movaps xmmword [rsp + 0x80], xmm6
lea rdx, str.Next
lea r8, str....._base_files_file_enumerator_win.cc
lea rbx, [rsp + 0xc0]
mov rcx, rbx
mov r9d, 0x88
call fcn.140054de0
lea rcx, [rsp + 0x80]
mov qword [rsp + 0x48], rbx
mov rdx, rbx
xor r8d, r8d
call fcn.140069250
lea r14, [rdi + reloc.SHELL32.dll_IsUserAnAdmin]
lea r15, [rdi + 0x260]
lea rax, [rdi + 0x280]
mov qword [rsp + 0x40], rax
lea r12, [rdi + 4]
lea r13, [rdi + 0x30]
mov rbx, qword [sym.imp.KERNEL32.dll_GetLastError]
movabs rsi, 0xaaaaaaaaaaaaaaaa
lea rbp, [rsp + 0x60]
mov qword [rsp + 0x38], r14
jmp 0x14006ac98
call qword [sym.imp.SHLWAPI.dll_PathMatchSpecW]
cmp eax, 1
je 0x14006b092
mov rcx, qword [rsp + 0x30]
call fcn.140055000
mov rcx, rbp
call fcn.140055000
cmp byte [rdi], 0
je 0x14006ae40
mov rcx, qword [rdi + 0x258]
mov rdx, r12
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x14006acd0
mov rcx, qword [rdi + 0x258]
call qword [sym.imp.KERNEL32.dll_FindClose]
mov qword [rdi + 0x258], 0xffffffffffffffff
nop dword [rax]
call rbx
cmp qword [rdi + 0x258], 0xffffffffffffffff
je 0x14006af6b
mov qword [rsp + 0x70], rsi
movaps xmmword [rsp + 0x60], xmm6
mov qword [rsp + 0x50], r13
mov rcx, r13
call fcn.1400ffa68
mov qword [rsp + 0x58], rax
mov rcx, rbp
lea rdx, [rsp + 0x50]
call fcn.140054e90
mov rcx, rdi
mov rdx, rbp
call fcn.14006c270
test al, al
jne 0x14006ac90
mov rcx, r15
mov r14, r13
mov r13, rbx
mov ebx, dword [r12]
mov rdx, qword [rsp + 0x30]
mov qword [rdx + 0x10], rsi
movups xmmword [rdx], xmm6
mov r8, rbp
call fcn.140057210
test bl, 0x10
je 0x14006ade0
cmp byte [rdi + 0x278], 1
jne 0x14006ade0
mov rcx, qword [rsp + 0x30]
cmp byte [rcx + 0x17], 0
jns 0x14006ad66
mov rax, qword [rsp + 0x30]
mov rcx, qword [rax]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
test eax, 0x400
jne 0x14006ade0
mov edx, 1
mov rcx, qword [rsp + 0x38]
call fcn.14006b630
mov rax, qword [rdi + 0x2c0]
lea rcx, [rax + rax*2]
shl rcx, 3
mov rax, qword [rsp + 0x38]
add rcx, qword [rax]
je 0x14006b0e4
mov rdx, qword [rsp + 0x30]
call fcn.140054e30
mov rax, qword [rdi + 0x2b0]
mov rcx, qword [rdi + 0x2c0]
dec rax
lea rdx, [rcx + 1]
cmp rcx, rax
mov eax, 0
cmovne rax, rdx
mov qword [rdi + 0x2c0], rax
mov rcx, qword [rsp + 0x38]
call fcn.14006b7f0
nop dword [rax + rax]
and ebx, 0x10
shr ebx, 4
mov rcx, rdi
mov edx, ebx
call fcn.14006c3d0
test al, al
mov rbx, r13
mov r13, r14
mov r14, qword [rsp + 0x38]
je 0x14006ac86
mov eax, dword [rdi + 0x298]
cmp eax, 1
jne 0x14006b08a
cmp byte [rdi + 0x297], 0
mov rdx, qword [rsp + 0x40]
js 0x14006afa8
cmp byte [rsp + 0x77], 0
mov rcx, rbp
jns 0x14006ac77
jmp 0x14006afbe
mov rax, qword [rdi + 0x2b8]
cmp rax, qword [rdi + 0x2c0]
je 0x14006b07e
mov rcx, r14
call fcn.14006b7f0
mov rcx, r15
mov rdx, rax
call fcn.140055010
mov r8, qword [rdi + 0x2c0]
cmp qword [rdi + 0x2b8], r8
je 0x14006aff8
test r8, r8
jne 0x14006ae87
mov r8, qword [rdi + 0x2b0]
lea rdx, [r8 - 1]
mov qword [rdi + 0x2c0], rdx
mov rcx, r14
call fcn.14006b180
mov rcx, r14
call fcn.14006c140
mov qword [rsp + 0x70], rsi
movaps xmmword [rsp + 0x60], xmm6
mov eax, dword [rdi + 0x298]
cmp eax, 1
je 0x14006aef0
test eax, eax
jne 0x14006b0f7
movsx rax, byte [rdi + 0x297]
mov rcx, qword [rsp + 0x40]
test rax, rax
jns 0x14006aedf
mov rax, qword [rdi + 0x288]
mov rcx, qword [rdi + 0x280]
mov qword [rsp + 0xc0], rcx
jmp 0x14006af04
lea rax, [0x14011df80]
mov qword [rsp + 0xc0], rax
mov eax, 1
mov r8, qword [rsp + 0x48]
mov qword [r8 + 8], rax
mov rcx, r15
mov rdx, rbp
call fcn.1400564a0
cmp byte [rsp + 0x77], 0
mov rcx, rbp
jns 0x14006af27
mov rcx, qword [rsp + 0x60]
mov dword [rsp + 0x28], 2
mov qword [rsp + 0x20], 0
mov edx, 1
mov r8, r12
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov qword [rdi + 0x258], rax
mov byte [rdi], 1
mov rcx, rbp
call fcn.140055000
call rbx
cmp qword [rdi + 0x258], 0xffffffffffffffff
jne 0x14006ace0
mov byte [rdi], 0
cmp dword [rdi + 0x298], 0
je 0x14006af82
cmp eax, 0x12
je 0x14006ac98
jmp 0x14006afe9
cmp byte [rdi + 0x297], 0
js 0x14006afc8
mov byte [rdi + 0x297], 1
mov rcx, qword [rsp + 0x40]
mov dword [rcx], 0x2a
cmp eax, 0x12
je 0x14006ac98
jmp 0x14006afe9
mov rax, qword [rsp + 0x40]
mov rdx, qword [rax]
cmp byte [rsp + 0x77], 0
mov rcx, rbp
jns 0x14006ac77
mov rcx, qword [rsp + 0x60]
jmp 0x14006ac77
mov qword [rdi + 0x288], 1
mov rcx, qword [rdi + 0x280]
mov dword [rcx], 0x2a
cmp eax, 0x12
je 0x14006ac98
cmp dword [rdi + 0x29c], 0
je 0x14006ac98
jmp 0x14006b071
mov r14, r12
mov r12, r15
mov r15, rsi
mov rsi, r13
mov r13, rbx
mov rbx, qword [rsp + 0x48]
mov rcx, rbx
lea rdx, str.pop_back
lea r8, str....._basecontainerscircular_deque.h
mov r9d, 0x40e
call fcn.140054de0
mov rcx, rbp
lea rdx, str._empty__
mov r8d, 0xffffffff
mov r9, rbx
mov rbx, r13
mov r13, rsi
mov rsi, r15
mov r15, r12
mov r12, r14
mov r14, qword [rsp + 0x38]
call fcn.14005b640
mov rcx, rbp
call fcn.14005b960
mov r8, qword [rdi + 0x2c0]
test r8, r8
jne 0x14006ae87
jmp 0x14006ae80
mov ecx, eax
call fcn.14006a390
mov dword [rdi + 0x2a0], eax
mov rcx, qword [rsp + 0x30]
call fcn.140054e10
jmp 0x14006b09c
test eax, eax
jne 0x14006b136
lea rcx, [rsp + 0x60]
call fcn.140055000
lea rcx, [rsp + 0x80]
call fcn.1400692f0
mov rcx, qword [rsp + 0xe8]
xor rcx, rsp
cmp rcx, qword [0x140155cc0]
jne 0x14006b0de
mov rax, qword [rsp + 0x30]
movaps xmm6, xmmword [rsp + 0xf0]
add rsp, 0x108
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call fcn.1400e0180
int3
lea rcx, [0x140117223]
lea rdx, str....._third_partylibc_srcinclude__memoryconstruct_at.h:40:_assertion___location___nullptr_failed:_null_pointer_given_to_construct_at_n
call fcn.140044b40
lea rdx, str.BuildSearchFilter
lea r8, str....._base_files_file_enumerator_win.cc
lea rsi, [rsp + 0xc0]
mov rcx, rsi
mov r9d, 0x20
call fcn.140054de0
lea rdi, [rsp + 0xe0]
mov rcx, rdi
mov rdx, rsi
call fcn.14005ba80
mov rcx, rdi
call fcn.14005bb30
lea rdx, str.IsPatternMatched
lea r8, str....._base_files_file_enumerator_win.cc
lea rsi, [rsp + 0xc0]
mov rcx, rsi
mov r9d, 0xdd
call fcn.140054de0
lea rdi, [rsp + 0xe0]
mov rcx, rdi
mov rdx, rsi
call fcn.14005ba80
mov rcx, rdi
call fcn.14005bb30
int3