Function at 0x140009f10
Capabilities:
Enumerate files on windows

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x680]
sub rsp, 0x780
mov qword [rbp - 0x60], 0xfffffffffffffffe
mov qword [rsp + 0x7d0], rbx
mov rax, qword [0x140104508]
xor rax, rsp
mov qword [rbp + 0x670], rax
mov rdi, rdx
mov r13, rcx
mov qword [rbp - 0x78], rcx
xor eax, eax
mov dword [rsp + 0x20], eax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x58], xmm0
mov qword [rbp - 0x48], rax
lea rcx, [rbp + 0xe0]
call fcn.140005700
nop
lea rcx, [r13 + 0x170]
call fcn.140052c60
mov r12d, 1
test eax, eax
jne 0x140009fcb
xor r9d, r9d
mov r8d, r12d
mov rdx, rdi
lea rcx, [r13 + 0x170]
call fcn.140052bb0
test eax, eax
jne 0x140009fcb
lea rcx, [0x1400cdb30]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r8, [0x1400cdb30]
mov edx, eax
lea rcx, [r13 + 0x1a8]
call fcn.140001a10
jmp 0x14000a530
xor edx, edx
mov r8d, 0xe8
lea rcx, [r13 + 0x170]
call fcn.140052a00
mov qword [r13 + 0x1a0], rax
lea rdx, [rbp + 0xe0]
mov rcx, r13
call fcn.14000c8f0
test eax, eax
je 0x14000a026
lea rcx, [0x1400cdb80]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r8, [0x1400cdb80]
mov edx, eax
lea rcx, [r13 + 0x1a8]
call fcn.140001a10
mov r12d, 2
jmp 0x14000a530
lea rdi, [r13 + 8]
mov qword [rsp + 0x38], rdi
mov rdx, rdi
lea rcx, [rbp - 0x70]
call fcn.140005880
mov rcx, rax
call fcn.140050af0
test eax, eax
jne 0x14000a050
lea r12d, [rax + 3]
jmp 0x14000a530
mov rbx, qword [0x140104018]
mov qword [rsp + 0x40], rbx
mov dword [rsp + 0x20], r12d
lea rcx, [0x1400cdbc8]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
movsxd r14, eax
mov r15, qword [rdi]
movsxd rdi, dword [r15 - 8]
lea esi, [r14 + rdi]
cmp esi, edi
jl 0x14000a0f9
cmp esi, r14d
jl 0x14000a0f9
test esi, esi
je 0x14000a0f9
mov edx, esi
lea rcx, [rsp + 0x40]
call fcn.140001970
mov rbx, qword [rsp + 0x40]
test eax, eax
je 0x14000a0f9
add rdi, rdi
lea eax, [rsi + 1]
movsxd rdx, eax
add rdx, rdx
mov r9, rdi
mov r8, r15
mov rcx, rbx
call fcn.1400029b0
mov r8, r14
lea eax, [r14 + 1]
movsxd rdx, eax
add rdx, rdx
lea rcx, [rdi + rbx]
add r8, r8
je 0x14000a0f9
test rcx, rcx
jne 0x14000a0e4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [rax], socket
jmp 0x14000a9fa
cmp rdx, r8
jb 0x14000a9e4
lea rdx, [0x1400cdbc8]
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [r13 + 0x168]
lea rdx, [rsp + 0x40]
call fcn.1400063d0
nop
lea rcx, [rbx - 0xc]
mov r14d, 0xffffffff
cmp rcx, qword [0x140104010]
je 0x14000a12f
mov eax, r14d
lock xadd dword [rcx], eax
sub eax, 1
jg 0x14000a12f
call fcn.1400bf5e4
cmp dword [r13 + 0x90], 0
jne 0x14000a36b
lea rdx, [rbp + 0xe0]
mov rcx, r13
call fcn.140008040
nop
mov rbx, qword [0x140104018]
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x20], 2
lea rcx, [0x1400cd944]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
movsxd r15, eax
mov r13, qword [r13 + 8]
movsxd rdi, dword [r13 - 8]
lea esi, [r15 + rdi]
cmp esi, edi
jl 0x14000a1fb
cmp esi, r15d
jl 0x14000a1fb
test esi, esi
je 0x14000a1fb
mov edx, esi
lea rcx, [rsp + 0x30]
call fcn.140001970
mov rbx, qword [rsp + 0x30]
test eax, eax
je 0x14000a1fb
add rdi, rdi
lea eax, [rsi + 1]
movsxd rdx, eax
add rdx, rdx
mov r9, rdi
mov r8, r13
mov rcx, rbx
call fcn.1400029b0
mov r8, r15
lea eax, [r15 + 1]
movsxd rdx, eax
add rdx, rdx
lea rcx, [rdi + rbx]
add r8, r8
je 0x14000a1fb
test rcx, rcx
jne 0x14000a1e5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [rax], socket
jmp 0x14000aa21
cmp rdx, r8
jb 0x14000aa0b
lea rdx, [0x1400cd944]
call sub.VCRUNTIME140.dll_memcpy
nop
mov rdi, qword [0x140104018]
mov qword [rsp + 0x48], rdi
mov dword [rsp + 0x20], 6
mov r12, qword [rbp + 0xe8]
movsxd r13, dword [r12 - 8]
movsxd rsi, dword [rbx - 8]
lea r15d, [rsi + r13]
cmp r15d, esi
jl 0x14000a27f
cmp r15d, r13d
jl 0x14000a27f
test r15d, r15d
je 0x14000a27f
mov edx, r15d
lea rcx, [rsp + 0x48]
call fcn.140001970
mov rdi, qword [rsp + 0x48]
test eax, eax
je 0x14000a27f
add rsi, rsi
lea eax, [r15 + 1]
movsxd rdx, eax
add rdx, rdx
mov r9, rsi
mov r8, rbx
mov rcx, rdi
call fcn.1400029b0
mov r9, r13
add r9, r9
lea eax, [r13 + 1]
movsxd rdx, eax
add rdx, rdx
lea rcx, [rsi + rdi]
mov r8, r12
call fcn.1400029b0
lea rdx, [rsp + 0x48]
lea rcx, [rbp + 0xe0]
call fcn.1400063d0
nop
lea rcx, [rdi - 0xc]
cmp rcx, qword [0x140104010]
je 0x14000a2b4
mov eax, r14d
lock xadd dword [rcx], eax
sub eax, 1
jg 0x14000a2af
call fcn.1400bf5e4
mov rbx, qword [rsp + 0x30]
lea rcx, [rbx - 0xc]
cmp rcx, qword [0x140104010]
je 0x14000a2d1
lock xadd dword [rcx], r14d
sub r14d, 1
jg 0x14000a2d1
call fcn.1400bf5e4
mov rbx, qword [rbp + 0xe0]
cmp dword [rbx - 0xc], 0
jl 0x14000a2e9
mov qword [rsp + 0x50], rbx
lock inc dword [rbx - 0xc]
jmp 0x14000a30d
mov rax, qword [0x140104018]
mov qword [rsp + 0x50], rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov r8, rbx
mov edx, eax
lea rcx, [rsp + 0x50]
call fcn.140001a10
lea rcx, [rsp + 0x50]
call fcn.140050af0
mov rbx, qword [rbp - 0x78]
mov rax, qword [rbx + 0x158]
cmp qword [rbx + 0x160], rax
je 0x14000a34d
lea rdx, [rbp + 0xe0]
mov rcx, rax
call fcn.140005260
add qword [rbx + 0x158], 0x118
xor r15d, r15d
jmp 0x14000a52d
lea r8, [rbp + 0xe0]
mov rdx, rax
lea rcx, [rbx + 0x150]
call fcn.1400034f0
xor r15d, r15d
jmp 0x14000a52d
mov rax, qword [0x140104018]
mov qword [rbp - 0x80], rax
mov r8, qword [rbp + 0xe8]
lea rdx, [0x1400cdbe8]
lea rcx, [rbp - 0x80]
call fcn.1400086c0
mov r9, qword [rbp - 0x80]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
test rax, rax
je 0x14000a3ac
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetEvent]
lea r8, [0x1400cdc18]
mov rdi, qword [rsp + 0x38]
mov rdx, rdi
lea rcx, [rsp + 0x78]
invalid
retf
invalid
invalid