Function at 0x1401c3d50
Capabilities:
Enumerate files on windows

Disassembly:
push r13
push r14
sub rsp, 0x9d8
mov rax, qword [0x1402b4198]
xor rax, rsp
mov qword [rsp + 0x9a0], rax
cmp byte [0x1402b6294], 0
mov r14, rdx
mov qword [rsp + 0x50], r8
mov r13, rcx
jne 0x1401c3d91
cmp byte [0x1402b4b71], 0
je 0x1401c3d91
xor eax, eax
jmp 0x1401c4035
mov ecx, dword [0x1402b6860]
mov qword [rsp + 0x9b0], r15
xor r15d, r15d
mov byte [rdx], 0
mov qword [r8], 0
test ecx, ecx
je 0x1401c4106
mov qword [rsp + 0xa08], rbx
mov qword [rsp + 0x9d0], rbp
mov qword [rsp + 0x9c8], rsi
mov qword [rsp + 0x9c0], rdi
mov qword [rsp + 0x9b8], r12
nop dword [rax]
mov rax, qword [0x1402b6858]
xor ebx, ebx
xor r12d, r12d
mov edx, r15d
cmp byte [0x1402b6294], bl
mov qword [rsp + 0x58], rdx
mov rsi, qword [rax + r15*8]
jne 0x1401c3e0c
cmp byte [0x1402b4b71], bl
jne 0x1401c3ff1
mov r8, rsi
mov byte [r14], bl
lea rdx, str._s.dll
lea rcx, [rsp + 0x1a0]
call fcn.14001c830
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x1a0]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov rbp, rax
cmp rax, 0xffffffffffffffff
je 0x1401c4051
nop word [rax + rax]
movzx edx, byte [rsp + 0x8c]
cmp dl, byte [0x140228a08]
movzx ecx, byte [rsp + 0x8d]
jne 0x1401c3e74
cmp cl, byte [0x140228a09]
je 0x1401c3f48
cmp dl, byte [0x14027b428]
jne 0x1401c3e98
cmp cl, byte [0x14027b429]
jne 0x1401c3e98
movzx eax, byte [rsp + 0x8e]
cmp al, byte [0x14027b42a]
je 0x1401c3f48
mov rcx, 0xffffffffffffffff
nop
cmp byte [rsi + rcx + 1], r12b
lea rcx, [rcx + 1]
jne 0x1401c3ea0
lea rdx, [rsp + 0x8c]
mov rax, 0xffffffffffffffff
nop word [rax + rax]
cmp byte [rdx + rax + 1], r12b
lea rax, [rax + 1]
jne 0x1401c3ec0
lea rdi, [rcx + rax]
lea rcx, [rdi + 2]
call fcn.1400c2b00
mov rbx, rax
test rax, rax
je 0x1401c3f7b
lea rax, [rsp + 0x8c]
mov r9, rsi
lea r8, str._s_s
mov qword [rsp + 0x20], rax
lea rdx, [rdi + 2]
mov rcx, rbx
call fcn.140007560
test byte [rsp + 0x60], 0x10
jne 0x1401c3f48
mov rax, qword [rsp + 0x50]
mov r9, r14
mov r8, qword [r13 + 8]
mov rcx, rbx
mov edx, dword [r13]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r12
call fcn.1400ba7b0
test eax, eax
js 0x1401c3f60
cmp byte [r14], r12b
jne 0x1401c3fcc
mov rcx, rbx
call fcn.1400c2c20
mov rbx, rax
lea rdx, [rsp + 0x60]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x1401c3e50
jmp 0x1401c3fcc
lea rax, str.search_in_directory_failed
mov r9d, 0x3c1
mov qword [rsp + 0x38], rax
mov rax, qword [0x1402b1728]
jmp 0x1401c3f94
lea rax, str.cant_allocate_memory_for_path
mov r9d, 0x3b7
mov qword [rsp + 0x38], rax
mov rax, qword [0x1402b1698]
mov qword [rsp + 0x30], rax
lea r8, str.H5PL__find_plugin_in_path
mov rax, qword [0x1402b1558]
lea rdx, str.C:_b_abs_e4nt8ttmb0croothdf5_1686163951797work_srcH5PLpath.c
mov qword [rsp + 0x28], rax
xor ecx, ecx
mov rax, qword [0x1402b1528]
mov qword [rsp + 0x20], rax
call fcn.1400c3a10
mov r12d, 0xffffffff
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_FindClose]
test rbx, rbx
je 0x1401c3fe2
mov rcx, rbx
call fcn.1400c2c20
test r12d, r12d
js 0x1401c409c
mov ecx, dword [0x1402b6860]
cmp byte [r14], 0
jne 0x1401c4003
inc r15d
cmp r15d, ecx
jb 0x1401c3de0
xor eax, eax
mov r12, qword [rsp + 0x9b8]
mov rdi, qword [rsp + 0x9c0]
mov rsi, qword [rsp + 0x9c8]
mov rbp, qword [rsp + 0x9d0]
mov rbx, qword [rsp + 0xa08]
mov r15, qword [rsp + 0x9b0]
mov rcx, qword [rsp + 0x9a0]
xor rcx, rsp
call fcn.1402226d0
add rsp, 0x9d8
pop r14
pop r13
ret
lea rax, str.cant_open_directory
mov r9d, 0x3a8
mov qword [rsp + 0x38], rax
lea r8, str.H5PL__find_plugin_in_path
mov rax, qword [0x1402b1808]
lea rdx, str.C:_b_abs_e4nt8ttmb0croothdf5_1686163951797work_srcH5PLpath.c
mov qword [rsp + 0x30], rax
xor ecx, ecx
mov rax, qword [0x1402b1558]
mov qword [rsp + 0x28], rax
mov rax, qword [0x1402b1528]
mov qword [rsp + 0x20], rax
call fcn.1400c3a10
mov rax, qword [0x1402b6858]
lea r8, str.H5PL__find_plugin_in_path_table
mov rcx, qword [rsp + 0x58]
lea rdx, str.C:_b_abs_e4nt8ttmb0croothdf5_1686163951797work_srcH5PLpath.c
mov r9d, 0x322
mov rcx, qword [rax + rcx*8]
mov qword [rsp + 0x40], rcx
lea rcx, str.search_in_path__s_encountered_an_error
mov qword [rsp + 0x38], rcx
mov rcx, qword [0x1402b1728]
mov qword [rsp + 0x30], rcx
mov rcx, qword [0x1402b1558]
mov qword [rsp + 0x28], rcx
mov rcx, qword [0x1402b1528]
mov qword [rsp + 0x20], rcx
xor ecx, ecx
call fcn.1400c3a10
mov eax, 0xffffffff
jmp 0x1401c4005
xor eax, eax
jmp 0x1401c402d