Function at 0x1400981b0
Capabilities:
Check if file exists
Enumerate files on windows
Enumerate files recursively
Get file attributes

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rbp
mov qword [rax + 8], rcx
push rdi
sub rsp, 0xb20
xor edi, edi
mov rbp, r8
mov r8, rdx
lea rdx, [0x1400a9468]
lea rcx, [rax - 0x9f8]
mov rbx, r9
mov qword [rax - 0x9f8], 0xffffffffffffffff
mov word [rax - 0x9f0], di
mov word [rax - 0x290], di
mov word [rax - 0x518], di
call fcn.140091880
mov word [rsp + 0x30], di
mov qword [rsp + 0xb38], rsi
cmp qword [rsp + 0x130], 0xffffffffffffffff
jne 0x14009824f
lea rdx, [rsp + 0x3c0]
lea rcx, [rsp + 0x138]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, edi
cmp rax, 0xffffffffffffffff
mov qword [rsp + 0x130], rax
setne sil
test esi, esi
je 0x1400985d3
jmp 0x14009826f
mov rcx, qword [rsp + 0x130]
lea rdx, [rsp + 0x3c0]
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
mov esi, eax
je 0x1400985ec
or rcx, 0xffffffffffffffff
xor eax, eax
lea rdi, [rsp + 0x898]
repne scasw ax, word [rdi]
lea rdi, [rsp + 0x3ec]
not rcx
lea rdx, [rcx - 1]
or rcx, 0xffffffffffffffff
repne scasw ax, word [rdi]
not rcx
lea rax, [rdx + rcx]
cmp rax, 0x143
jae 0x140098344
lea rcx, [rsp + 0x898]
movzx eax, word [rcx]
add rcx, 2
test ax, ax
mov word [rcx - 0x28a], ax
jne 0x1400982b1
or rcx, 0xffffffffffffffff
xor eax, eax
lea rdi, [rsp + 0x610]
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
test ecx, ecx
jle 0x140098308
movsxd rax, ecx
cmp word [rsp + rax*2 + 0x60e], 0x5c
je 0x140098308
xor eax, eax
lea rdi, [rsp + 0x610]
or rcx, 0xffffffffffffffff
repne scasw ax, word [rdi]
mov eax, dword [0x1400a9734]
mov dword [rdi - 2], eax
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x610]
repne scasw ax, word [rdi]
xor ecx, ecx
lea rdx, [rsp + 0x3ec]
nop
nop
nop
nop
movzx eax, word [rdx + rcx]
add rcx, 2
test ax, ax
mov word [rdi + rcx - 4], ax
jne 0x140098330
jmp 0x14009834e
mov word [rsp + 0x610], 0
test esi, esi
je 0x1400985d1
mov eax, dword [rsp + 0x3c0]
mov edi, 0
test al, 0x10
je 0x140098212
bt eax, 0xa
jb 0x140098212
lea rsi, [rsp + 0x3ec]
lea rdi, [0x1400a9784]
mov ecx, 3
repe cmpsw word [rsi], word [rdi]
mov edi, 0
je 0x140098212
lea rsi, [rsp + 0x3ec]
lea rdi, [0x1400a978c]
mov ecx, 2
repe cmpsw word [rsi], word [rdi]
mov edi, 0
je 0x140098212
movzx eax, word [rsp + 0x3ec]
cmp ax, 0x53
je 0x1400983cc
cmp ax, 0x73
jne 0x140098422
cmp word [rsp + 0x3ee], 0x2d
jne 0x140098422
or rcx, 0xffffffffffffffff
xor eax, eax
lea rdi, [rsp + 0x3ec]
repne scasw ax, word [rdi]
mov eax, 0x7f
lea rdx, [rsp + 0x3ec]
not rcx
sub rcx, 1
cmp ecx, 0x80
cmovge ecx, eax
movsxd rax, ecx
lea rcx, [rsp + 0x30]
lea rdi, [rax + rax]
mov r8, rdi
call sub.msvcrt.dll_memcpy
mov word [rsp + rdi + 0x30], 0
jmp 0x140098466
mov rdx, qword [rsp + 0xb58]
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, rdx
repne scasw ax, word [rdi]
mov eax, 0x7f
not rcx
sub rcx, 1
cmp ecx, 0x80
cmovge ecx, eax
movsxd rax, ecx
lea rcx, [rsp + 0x30]
lea rdi, [rax + rax]
mov r8, rdi
call sub.msvcrt.dll_memcpy
mov word [rsp + rdi + 0x30], 0
mov rsi, qword [rsp + 0xb50]
mov rcx, qword [rsp + 0xb30]
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
lea rdx, [rsp + 0x610]
mov r9, rbx
mov r8, rbp
mov qword [rsp + 0x20], rsi
call fcn.1400981b0
test eax, eax
jne 0x1400985ca
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, rbp
repne scasw ax, word [rdi]
lea rdi, [rsp + 0x610]
not rcx
lea rdx, [rcx - 1]
or rcx, 0xffffffffffffffff
repne scasw ax, word [rdi]
not rcx
lea rax, [rdx + rcx]
cmp rax, 0x104
jae 0x140098564
lea rax, [rsp + 0x610]
mov rdx, rbx
lea rcx, [rsp + 0x610]
sub rdx, rax
nop
nop
movzx eax, word [rcx]
add rcx, 2
test ax, ax
mov word [rdx + rcx - 2], ax
jne 0x1400984f0
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, rbx
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
test ecx, ecx
jle 0x140098538
movsxd rax, ecx
cmp word [rbx + rax*2 - 2], 0x5c
je 0x140098538
xor eax, eax
mov rdi, rbx
or rcx, 0xffffffffffffffff
repne scasw ax, word [rdi]
mov eax, dword [0x1400a9734]
mov dword [rdi - 2], eax
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rbx
repne scasw ax, word [rdi]
xor ecx, ecx
nop
nop
nop
movzx eax, word [rcx + rbp]
add rcx, 2
test ax, ax
mov word [rdi + rcx - 4], ax
jne 0x140098550
jmp 0x140098569
mov word [rbx], 0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x140098583
mov word [rbx], 0
xor edi, edi
jmp 0x140098212
or rcx, 0xffffffffffffffff
xor eax, eax
lea rdi, [rsp + 0x30]
repne scasw ax, word [rdi]
mov eax, 0x7f
lea rdx, [rsp + 0x30]
not rcx
sub rcx, 1
cmp ecx, 0x80
cmovge ecx, eax
movsxd rax, ecx
mov rcx, rsi
lea rdi, [rax + rax]
mov r8, rdi
call sub.msvcrt.dll_memcpy
mov word [rdi + rsi], 0
mov edi, 1
jmp 0x1400985d3
mov edi, 1
jmp 0x1400985d3
xor edi, edi
mov rax, qword [rsp + 0x130]
cmp rax, 0xffffffffffffffff
je 0x1400985fa
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FindClose]
jmp 0x1400985fa
mov rcx, qword [rsp + 0x130]
cmp rcx, 0xffffffffffffffff
jne 0x1400985e4
mov rsi, qword [rsp + 0xb38]
lea r11, [rsp + 0xb20]
mov eax, edi
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsp, r11
pop rdi
ret