Function at 0x425980
Capabilities:
Enumerate files on windows

Disassembly:
sub rsp, 0x58
mov qword [rsp + 0x68], rbp
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], rdi
xor edi, edi
cmp rdx, rcx
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], r15
mov rsi, rdx
mov r15d, edi
mov r14d, edi
mov rbp, rcx
je 0x4259e0
movzx eax, byte [rsi]
cmp al, 0x5c
je 0x4259e0
cmp al, 0x2f
je 0x4259e0
cmp al, 0x3a
je 0x4259e5
dec rsi
cmp rsi, rbp
jbe 0x4259db
lea rdx, [rsi + 1]
mov rcx, rbp
call fcn.004290a0
mov rsi, rax
cmp rsi, rbp
jne 0x4259b5
cmp byte [rsi], 0x3a
jne 0x425a53
lea rax, [rbp + 1]
cmp rsi, rax
je 0x425a53
mov ecx, 0x10
call fcn.00422e20
test rax, rax
mov rdx, rax
jne 0x425a0f
mov r13, 0xffffffffffffffff
mov eax, r13d
jmp 0x425d11
cmp qword [0x00436d98], rdi
mov qword [rax], rbp
mov qword [rax + 8], rdi
je 0x425a3b
mov rax, qword [0x00436db0]
mov r13d, edi
mov qword [0x00436db0], rdx
mov qword [rax + 8], rdx
mov eax, edi
jmp 0x425d11
mov qword [0x00436d98], rax
mov qword [0x00436db0], rdx
mov r13d, edi
mov eax, edi
jmp 0x425d11
movzx eax, byte [rsi]
cmp al, 0x5c
je 0x425a62
cmp al, 0x2f
je 0x425a62
cmp al, 0x3a
jne 0x425a6b
mov r15d, esi
sub r15d, ebp
inc r15d
test rbp, rbp
mov qword [rsp + 0x60], rbx
mov r13, 0xffffffffffffffff
mov qword [rsp + 0x50], r12
je 0x425b82
mov rax, qword [0x00436da0]
test rax, rax
jne 0x425aab
mov ecx, 0x244
call fcn.00422e20
test rax, rax
mov qword [0x00436da0], rax
je 0x425bb2
mov rcx, qword [0x00436da8]
test rcx, rcx
je 0x425acb
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rax, qword [0x00436da0]
mov qword [0x00436da8], rdi
mov rdx, rax
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp rax, r13
mov qword [0x00436da8], rax
je 0x425bb2
mov rbx, qword [0x00436da0]
add rbx, 0x2c
je 0x425bb2
mov rax, qword [0x00436db0]
mov qword [rsp + 0x20], rax
nop
nop
nop
lea rdx, [0x0042e020]
mov rcx, rbx
call fcn.00428f90
test eax, eax
je 0x425c84
lea rdx, [0x0042fba8]
mov rcx, rbx
call fcn.00428f90
test eax, eax
je 0x425c84
movzx eax, byte [rsi]
cmp al, 0x5c
je 0x425bed
cmp al, 0x3a
je 0x425bed
cmp al, 0x2f
je 0x425bed
mov rcx, rbx
call fcn.00428340
test rax, rax
mov rbp, rax
je 0x425d04
mov rcx, rax
call fcn.00425890
test eax, eax
jne 0x425d04
jmp 0x425c81
mov rdx, qword [0x00436da0]
mov rcx, qword [0x00436da8]
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x425ae7
mov rcx, qword [0x00436da8]
call qword [sym.imp.KERNEL32.dll_FindClose]
mov qword [0x00436da8], rdi
mov ecx, 0x10
call fcn.00422e20
test rax, rax
mov rdx, rax
je 0x425d04
cmp qword [0x00436d98], 0
mov qword [rax], rbp
mov qword [rax + 8], rdi
je 0x425cf3
mov rax, qword [0x00436db0]
mov qword [rax + 8], rdx
jmp 0x425cfa
xor eax, eax
mov rcx, r13
mov rdi, rbx
repne scasb al, byte [rdi]
movsxd r12, r15d
not rcx
add rcx, r12
call fcn.00422e20
test rax, rax
je 0x425d04
mov r8, r12
mov rdx, rbp
mov rcx, rax
call fcn.00428eb0
lea rdi, [rax + r12]
mov rcx, rdi
sub rcx, rbx
nop
nop
nop
movzx eax, byte [rbx]
inc rbx
test al, al
mov byte [rcx + rbx - 1], al
jne 0x425c30
mov ecx, 0x10
call fcn.00422e20
test rax, rax
je 0x425d04
sub rdi, r12
mov qword [rax], rdi
xor edi, edi
cmp qword [0x00436d98], rdi
mov qword [rax + 8], rdi
je 0x425c73
mov rcx, qword [0x00436db0]
mov qword [rcx + 8], rax
jmp 0x425c7a
mov qword [0x00436d98], rax
mov qword [0x00436db0], rax
inc r14d
mov rdx, qword [0x00436da0]
mov rcx, qword [0x00436da8]
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
je 0x425caf
mov rbx, qword [0x00436da0]
add rbx, 0x2c
jne 0x425b10
jmp 0x425cc3
mov rcx, qword [0x00436da8]
call qword [sym.imp.KERNEL32.dll_FindClose]
mov qword [0x00436da8], rdi
test r14d, r14d
je 0x425bb2
mov rax, qword [rsp + 0x20]
test rax, rax
je 0x425ce3
mov rcx, qword [rax + 8]
call fcn.00425900
xor eax, eax
jmp 0x425d07
mov rcx, qword [0x00436d98]
call fcn.00425900
xor eax, eax
jmp 0x425d07
mov qword [0x00436d98], rax
mov qword [0x00436db0], rdx
mov r13d, edi
mov eax, r13d
mov rbx, qword [rsp + 0x60]
mov r12, qword [rsp + 0x50]
mov r15, qword [rsp + 0x38]
mov r14, qword [rsp + 0x40]
mov r13, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x70]
mov rbp, qword [rsp + 0x68]
add rsp, 0x58
ret