Function at 0xee8f4
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x66
push 0
push 0
dec ecx
jne 0xee8fd
xchg dword [ebp - 4], ecx
push ebx
mov byte [ebp - 9], cl
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0xef128
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
call fcn.000144dc
test eax, eax
jle 0xeee85
mov eax, dword [ebp - 8]
call fcn.000144dc
test eax, eax
jle 0xeee85
lea eax, [ebp - 0x290]
xor ecx, ecx
mov edx, 0x250
call fcn.00012b38
lea edx, [ebp - 0x294]
mov eax, dword [ebp - 4]
call fcn.0006b234
mov edx, dword [ebp - 0x294]
lea eax, [ebp - 0x1c]
mov ecx, dword [ebp - 8]
call fcn.00014548
mov dword [ebp - 0x20], 0xffffffff
xor eax, eax
push ebp
push 0xeee7e
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0
push 0
lea eax, [ebp - 0x290]
push eax
push 1
mov eax, dword [ebp - 0x1c]
call fcn.000144cc
push eax
call sub.kernel32.dll_FindFirstFileExW
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xffffffff
je 0xeee60
lea eax, [ebp - 0x3c]
lea edx, [ebp - 0x264]
mov ecx, 0x104
call fcn.0001443c
lea edx, [ebp - 0x298]
mov eax, dword [ebp - 0x3c]
call fcn.0006b580
mov edx, dword [ebp - 0x298]
lea eax, [ebp - 0x3c]
call fcn.000142e4
mov eax, dword [ebp - 0x3c]
call fcn.000144dc
cmp eax, 3
jl 0xeee36
lea edx, [ebp - 0x29c]
mov eax, dword [ebp - 4]
call fcn.0006b234
mov edx, dword [ebp - 0x29c]
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x3c]
call fcn.00014548
mov eax, dword [ebp - 0x30]
call fcn.0006b2d4
test al, al
je 0xeee36
xor eax, eax
mov dword [ebp - 0x38], eax
lea edx, [ebp - 0x38]
mov eax, dword [ebp - 0x30]
call fcn.00079b04
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
cmp dword [ebp - 0x14], 0
jne 0xeea49
cmp dword [ebp - 0x18], 0x400
jae 0xeeafb
jmp 0xeea4f
jge 0xeeafb
lea edx, [ebp - 0x2a8]
mov eax, 0xef13c
call fcn.0007a2b0
push dword [ebp - 0x2a8]
push dword [ebp - 0x14]
push dword [ebp - 0x18]
lea eax, [ebp - 0x2ac]
call fcn.00076650
push dword [ebp - 0x2ac]
lea edx, [ebp - 0x2b0]
mov eax, 0xef14c
call fcn.0007a2b0
push dword [ebp - 0x2b0]
lea edx, [ebp - 0x2b4]
mov eax, dword [ebp - 0x38]
call fcn.000766dc
push dword [ebp - 0x2b4]
lea edx, [ebp - 0x2b8]
mov eax, 0xef14c
call fcn.0007a2b0
push dword [ebp - 0x2b8]
lea eax, [ebp - 0x2a4]
mov edx, 5
call fcn.00013fb8
mov edx, dword [ebp - 0x2a4]
lea eax, [ebp - 0x2a0]
call fcn.00014458
lea eax, [ebp - 0x2a0]
mov edx, dword [ebp - 0x30]
call fcn.000144e8
mov eax, dword [ebp - 0x2a0]
call fcn.000eb804
jmp 0xeee36
xor eax, eax
mov dword [ebp - 0x38], eax
call fcn.0007b5cc
mov dword [ebp - 0x2c], eax
xor eax, eax
push ebp
push 0xeee2f
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 0x31], 0x2d
mov byte [ebp - 0x21], 0x2d
mov byte [ebp - 0x32], 0x2d
mov ecx, dword [ebp - 0x2c]
mov edx, 0xef158
mov eax, dword [ebp - 0x30]
call fcn.0007d4e4
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0x33
je 0xeeb9c
cmp byte [ebp + 8], 0
je 0xeeb9c
lea edx, [ebp - 0x2bc]
mov eax, 0xef164
call fcn.0007a2b0
mov eax, dword [ebp - 0x2bc]
push eax
lea edx, [ebp - 0x2c0]
mov eax, dword [ebp - 4]
call fcn.0006b340
mov eax, dword [ebp - 0x2c0]
mov ecx, dword [ebp - 0x2c]
pop edx
call fcn.0007d4e4
mov byte [ebp - 0x21], al
lea edx, [ebp - 0x2c4]
mov eax, 0xef170
call fcn.0007a2b0
mov edx, dword [ebp - 0x2c4]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
call fcn.0007d4e4
mov byte [ebp - 0x32], al
lea edx, [ebp - 0x2d0]
mov eax, 0xef17c
call fcn.0007a2b0
push dword [ebp - 0x2d0]
lea eax, [ebp - 0x2d4]
mov dl, byte [ebp - 0x31]
call fcn.00013e20
push dword [ebp - 0x2d4]
lea eax, [ebp - 0x2d8]
mov dl, byte [ebp - 0x21]
call fcn.00013e20
push dword [ebp - 0x2d8]
lea eax, [ebp - 0x2dc]
mov dl, byte [ebp - 0x32]
call fcn.00013e20
push dword [ebp - 0x2dc]
lea edx, [ebp - 0x2e0]
mov eax, 0xef188
call fcn.0007a2b0
push dword [ebp - 0x2e0]
lea eax, [ebp - 0x2cc]
mov edx, 5
call fcn.00013fb8
mov edx, dword [ebp - 0x2cc]
lea eax, [ebp - 0x2c8]
call fcn.00014458
mov edx, dword [ebp - 0x2c8]
lea eax, [ebp - 0x28]
mov ecx, dword [ebp - 0x30]
call fcn.00014548
push 0x10000000
push 2
push 0
lea eax, [ebp - 0x38]
push eax
lea edx, [ebp - 0x2e4]
mov eax, 0xef18c
call fcn.0007a2b0
mov eax, dword [ebp - 0x2e4]
mov cl, 1
mov edx, dword [ebp - 0x30]
call fcn.0007c8cc
lea edx, [ebp - 0x40]
call fcn.00077bb0
lea edx, [ebp - 0x2ec]
mov eax, 0xef19c
call fcn.0007a2b0
push dword [ebp - 0x2ec]
push dword [ebp - 0x40]
lea edx, [ebp - 0x2f0]
mov eax, 0xef14c
call fcn.0007a2b0
push dword [ebp - 0x2f0]
lea edx, [ebp - 0x2f4]
mov eax, dword [ebp - 0x38]
call fcn.000766dc
push dword [ebp - 0x2f4]
lea eax, [ebp - 0x2e8]
mov edx, 4
call fcn.00013fb8
mov eax, dword [ebp - 0x2e8]
mov edx, dword [ebp - 0x2c]
call fcn.0007b860
push 0x10000000
push 2
push 0
lea eax, [ebp - 0x38]
push eax
lea edx, [ebp - 0x2f8]
mov eax, 0xef1a8
call fcn.0007a2b0
mov eax, dword [ebp - 0x2f8]
mov cl, 1
mov edx, dword [ebp - 0x30]
call fcn.0007c8cc
lea edx, [ebp - 0x40]
call fcn.00077bb0
lea edx, [ebp - 0x300]
mov eax, 0xef1b4
call fcn.0007a2b0
push dword [ebp - 0x300]
push dword [ebp - 0x40]
lea edx, [ebp - 0x304]
mov eax, 0xef14c
call fcn.0007a2b0
push dword [ebp - 0x304]
lea edx, [ebp - 0x308]
mov eax, dword [ebp - 0x38]
call fcn.000766dc
push dword [ebp - 0x308]
lea eax, [ebp - 0x2fc]
mov edx, 4
call fcn.00013fb8
mov eax, dword [ebp - 0x2fc]
mov edx, dword [ebp - 0x2c]
call fcn.0007b860
push 0xa0000000
push 2
push 0
lea eax, [ebp - 0x38]
push eax
lea edx, [ebp - 0x30c]
mov eax, 0xef1c0
call fcn.0007a2b0
mov eax, dword [ebp - 0x30c]
mov cl, 1
mov edx, dword [ebp - 0x30]
call fcn.0007c8cc
lea edx, [ebp - 0x40]
call fcn.00077bb0
lea edx, [ebp - 0x314]
mov eax, 0xef1d0
call fcn.0007a2b0
push dword [ebp - 0x314]
push dword [ebp - 0x40]
lea edx, [ebp - 0x318]
mov eax, 0xef14c
call fcn.0007a2b0
push dword [ebp - 0x318]
lea edx, [ebp - 0x31c]
mov eax, dword [ebp - 0x38]
call fcn.000766dc
push dword [ebp - 0x31c]
lea eax, [ebp - 0x310]
mov edx, 4
call fcn.00013fb8
mov eax, dword [ebp - 0x310]
mov edx, dword [ebp - 0x2c]
call fcn.0007b860
mov eax, dword [ebp - 0x28]
call fcn.000eb804
lea edx, [ebp - 0x320]
mov eax, dword [ebp - 0x2c]
call fcn.0007ae40
mov eax, dword [ebp - 0x320]
call fcn.000eb804
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0xeee36
lea eax, [ebp - 0x2c]
call fcn.0007b5e8
ret
lea eax, [ebp - 0x290]
xor ecx, ecx
mov edx, 0x250
call fcn.00012b38
lea eax, [ebp - 0x290]
push eax
mov eax, dword [ebp - 0x20]
push eax
call sub.kernel32.dll_FindNextFileW
test eax, eax
jne 0xee9af
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0xeee85
mov eax, dword [ebp - 0x20]
push eax
call sub.kernel32.dll_FindClose_1
mov dword [ebp - 0x20], 0xffffffff
ret
lea eax, [ebp - 0x290]
xor ecx, ecx
mov edx, 0x250
call fcn.00012b38
mov dword [ebp - 0x20], 0xffffffff
xor eax, eax
push ebp
push 0xef08a
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0
push 1
lea eax, [ebp - 0x290]
push eax
push 1
lea edx, [ebp - 0x324]
mov eax, dword [ebp - 4]
call fcn.0006b234
lea eax, [ebp - 0x324]
mov edx, 0xef1e8
call fcn.000144e8
mov eax, dword [ebp - 0x324]
call fcn.000144cc
push eax
call sub.kernel32.dll_FindFirstFileExW
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xffffffff
je 0xef06c
lea eax, [ebp - 0x3c]
lea edx, [ebp - 0x264]
mov ecx, 0x104
call fcn.0001443c
lea edx, [ebp - 0x328]
mov eax, dword [ebp - 0x3c]
call fcn.0006b580
mov edx, dword [ebp - 0x328]
lea eax, [ebp - 0x3c]
call fcn.000142e4
mov eax, dword [ebp - 0x3c]
mov edx, 0xef1f0
call fcn.000145f4
je 0xef042
mov eax, dword [ebp - 0x3c]
mov edx, 0xef1f8
call fcn.000145f4
je 0xef042
mov eax, dword [ebp - 0x3c]
call fcn.000144dc
test eax, eax
jle 0xef042
cmp byte [ebp + 0xc], 0
je 0xeef99
lea edx, [ebp - 0x32c]
mov eax, dword [ebp - 0x3c]
call fcn.0006bd60
mov eax, dword [ebp - 0x32c]
push eax
lea edx, [ebp - 0x330]
mov eax, 0xef204
call fcn.0006bd60
mov edx, dword [ebp - 0x330]
pop eax
call fcn.000145f4
je 0xef042
mov eax, dword [ebp - 0x290]
and eax, 0x410
cmp eax, 0x10
jne 0xef042
mov eax, dword [0xfb5dc]
cmp dword [eax + 0x14], 1
ja 0xeefe1
call sub.kernel32.dll_GetTickCount
mov edx, dword [ebp + 0x10]
mov edx, dword [edx - 4]
call fcn.00077970
cmp eax, 0x1e
jb 0xef008
call sub.kernel32.dll_GetTickCount
mov edx, dword [ebp + 0x10]
mov dword [edx - 4], eax
push 0x46
call sub.kernel32.dll_Sleep
jmp 0xef008
call sub.kernel32.dll_GetTickCount
mov edx, dword [ebp + 0x10]
mov edx, dword [edx - 4]
call fcn.00077970
cmp eax, 0x50
jb 0xef008
call sub.kernel32.dll_GetTickCount
mov edx, dword [ebp + 0x10]
mov dword [edx - 4], eax
push 0x14
call sub.kernel32.dll_Sleep
lea edx, [ebp - 0x334]
mov eax, dword [ebp - 4]
call fcn.0006b234
mov edx, dword [ebp - 0x334]
lea eax, [ebp - 0x30]
mov ecx, dword [ebp - 0x3c]
call fcn.00014548
mov eax, dword [ebp + 0x10]
push eax
mov al, byte [ebp + 0xc]
push eax
mov al, byte [ebp + 8]
push eax
mov cl, byte [ebp - 9]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0x30]
call fcn.000ee8f4
pop ecx
lea eax, [ebp - 0x290]
xor ecx, ecx
mov edx, 0x250
call fcn.00012b38
lea eax, [ebp - 0x290]
push eax
mov eax, dword [ebp - 0x20]
push eax
call sub.kernel32.dll_FindNextFileW
test eax, eax
jne 0xeeef7
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0xef091
mov eax, dword [ebp - 0x20]
push eax
call sub.kernel32.dll_FindClose_1
mov dword [ebp - 0x20], 0xffffffff
ret