Function at 0x14001ce04
Capabilities:
Check if file exists
Enumerate files on windows

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0xa80
mov rax, qword [0x14005b870]
xor rax, rsp
mov qword [rsp + 0xa70], rax
mov rdi, r9
mov r12, r8
mov rbx, rdx
mov rsi, rcx
call fcn.14001dc84
xor r14d, r14d
mov r13d, 0x1000000
cmp eax, r14d
je 0x14001cfc3
cmp r12, r14
je 0x14001ce78
cmp word [r12], r14w
je 0x14001ce78
lea rcx, [rsp + 0x270]
sub rcx, r12
movzx eax, word [r12]
mov word [rcx + r12], ax
add r12, 2
cmp ax, r14w
jne 0x14001ce62
jmp 0x14001ce8b
lea rdx, [rsp + 0x270]
mov r8, r13
mov rcx, rbx
call fcn.140037ea4
or rbx, 0xffffffffffffffff
lea rdx, [rsp + 0x20]
cmp rsi, rbx
jne 0x14001ced8
lea rcx, [rsp + 0x270]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rsi, rax
cmp rax, rbx
jne 0x14001cf04
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 2
je 0x14001cec9
cmp eax, 3
je 0x14001cec9
cmp eax, 0x12
je 0x14001cec9
lea ebp, [rbx + 2]
jmp 0x14001cecc
mov ebp, r14d
mov byte [rdi + 0x149c], bpl
jmp 0x14001d158
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
cmp eax, r14d
jne 0x14001cefb
mov rsi, rbx
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x12
setne al
mov byte [rdi + 0x149c], al
cmp rsi, rbx
je 0x14001d158
lea rax, [rsp + 0x270]
lea rdx, [rdi + 0x400]
lea rcx, [rsp + 0x270]
sub rdx, rax
movzx eax, word [rcx]
mov word [rdx + rcx], ax
add rcx, 2
cmp ax, r14w
jne 0x14001cf1e
lea rcx, [rdi + 0x400]
lea rbx, [rsp + 0x4c]
call fcn.140027fb4
movzx edx, word [rbx]
add rbx, 2
mov word [rax], dx
add rax, 2
cmp dx, r14w
jne 0x14001cf40
lea rcx, [rdi + 0x400]
mov r8, r13
mov rdx, rdi
call fcn.140037e6c
mov eax, dword [rsp + 0x40]
mov r11d, dword [rsp + 0x3c]
shl r11, 0x20
lea rdx, [rdi + 0xc80]
lea rcx, [rsp + 0x254]
add r11, rax
mov eax, dword [rsp + 0x20]
mov dword [rdi + 0xc08], eax
lea rax, [rsp + 0x254]
mov qword [rdi + 0xc00], r11
sub rdx, rax
movzx eax, word [rcx]
mov word [rdx + rcx], ax
add rcx, 2
cmp ax, r14w
jne 0x14001cfa1
mov rax, qword [rsp + 0x24]
mov qword [rdi + 0x1480], rax
jmp 0x14001d0fb
mov ebp, 1
cmp rbx, r14
je 0x14001cfec
cmp byte [rbx], r14b
je 0x14001cfec
lea rcx, [rsp + 0x270]
sub rcx, rbx
mov al, byte [rbx]
mov byte [rcx + rbx], al
add rbx, rbp
cmp al, r14b
jne 0x14001cfdd
jmp 0x14001cfff
lea rdx, [rsp + 0x270]
mov r8, r13
mov rcx, r12
call fcn.140037e6c
or rbx, 0xffffffffffffffff
lea rdx, [rsp + 0x20]
cmp rsi, rbx
jne 0x14001d03a
lea rcx, [rsp + 0x270]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov rsi, rax
cmp rax, rbx
jne 0x14001d066
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 2
je 0x14001d035
cmp eax, 3
mov eax, ebp
jne 0x14001d057
mov eax, r14d
jmp 0x14001d057
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
cmp eax, r14d
jne 0x14001d05d
mov rsi, rbx
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x12
setne al
mov byte [rdi + 0x149c], al
cmp rsi, rbx
je 0x14001d158
lea rax, [rsp + 0x270]
mov rdx, rdi
lea rcx, [rsp + 0x270]
sub rdx, rax
mov al, byte [rcx]
mov byte [rdx + rcx], al
add rcx, rbp
cmp al, r14b
jne 0x14001d07c
mov rcx, rdi
lea rbx, [rsp + 0x4c]
call fcn.140027f1c
mov cl, byte [rbx]
add rbx, rbp
mov byte [rax], cl
add rax, rbp
cmp cl, r14b
jne 0x14001d096
lea rdx, [rdi + 0x400]
mov r8, r13
mov rcx, rdi
call fcn.140037ea4
mov eax, dword [rsp + 0x40]
mov r11d, dword [rsp + 0x3c]
shl r11, 0x20
lea rdx, [rdi + 0xc80]
lea rcx, [rsp + 0x150]
add r11, rax
mov eax, dword [rsp + 0x20]
mov r8, r13
mov dword [rdi + 0xc08], eax
mov qword [rdi + 0xc00], r11
call fcn.140037ea4
mov r11, qword [rsp + 0x24]
mov qword [rdi + 0x1480], r11
mov rax, qword [rsp + 0x2c]
lea rdx, [rsp + 0x34]
lea rcx, [rdi + 0xc14]
mov qword [rdi + 0x1488], rax
mov rax, qword [rsp + 0x34]
mov qword [rdi + 0x1490], rax
call fcn.140037b78
lea rdx, [rsp + 0x24]
lea rcx, [rdi + 0xc38]
call fcn.140037b78
lea rdx, [rsp + 0x2c]
lea rcx, [rdi + 0xc5c]
call fcn.140037b78
lea rcx, [rdi + 0xc14]
call fcn.140037968
mov dword [rdi + 0xc0c], eax
mov dword [rdi + 0x1498], r14d
mov rax, rsi
mov rcx, qword [rsp + 0xa70]
xor rcx, rsp
call fcn.140040860
add rsp, 0xa80
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret