Function at 0x10002bc0
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101e2b49
mov eax, dword fs:[0]
push eax
sub esp, 0x2b8
mov eax, dword [0x102683e0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x27c], edx
mov edi, ecx
xor eax, eax
mov dword [ebp - 0x14], 7
xor esi, esi
mov word [ebp - 0x28], ax
mov dword [ebp - 0x18], esi
cmp word [edi], ax
jne 0x10002c11
xor ecx, ecx
jmp 0x10002c23
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10002c14
sub ecx, edx
sar ecx, 1
push ecx
push edi
lea ecx, [ebp - 0x28]
call fcn.10003c10
mov ebx, dword [ebp + 8]
mov eax, ebx
dec ebx
mov dword [ebp - 4], 0
test eax, eax
je 0x10002e5e
cmp dword [ebp - 0x14], 8
lea ecx, [ebp - 0x28]
mov eax, dword [ebp - 0x18]
cmovae ecx, dword [ebp - 0x28]
cmp word [ecx + eax*2 - 2], 0x5c
je 0x10002c67
push 1
push 0x102285e4
lea ecx, [ebp - 0x28]
call fcn.10003b30
push 0x102285e8
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x2ac]
push eax
call fcn.10004650
add esp, 0xc
cmp dword [eax + 0x14], 8
jb 0x10002c87
mov eax, dword [eax]
lea ecx, [ebp - 0x278]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp dword [ebp - 0x298], 8
mov edi, eax
jb 0x10002cae
push dword [ebp - 0x2ac]
call fcn.101a02f0
add esp, 4
xor eax, eax
mov dword [ebp - 0x298], 7
mov dword [ebp - 0x29c], 0
mov word [ebp - 0x2ac], ax
cmp edi, 0xffffffff
je 0x10002e63
mov esi, dword [ebp - 0x27c]
lea ebx, [ebx]
mov ecx, 0x102285f0
lea eax, [ebp - 0x24c]
jmp 0x10002cf0
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x10002d16
test dx, dx
je 0x10002d12
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x10002d16
add eax, 4
add ecx, 4
test dx, dx
jne 0x10002cf0
xor eax, eax
jmp 0x10002d1b
sbb eax, eax
or eax, 1
test eax, eax
je 0x10002e41
mov ecx, 0x102285f4
lea eax, [ebp - 0x24c]
mov edi, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x10002d56
test dx, dx
je 0x10002d52
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x10002d56
add eax, 4
add ecx, 4
test dx, dx
jne 0x10002d30
xor eax, eax
jmp 0x10002d5b
sbb eax, eax
or eax, 1
test eax, eax
je 0x10002e41
test byte [ebp - 0x278], 0x10
lea eax, [ebp - 0x24c]
push eax
lea eax, [ebp - 0x28]
push eax
je 0x10002dba
lea eax, [ebp - 0x294]
push eax
call fcn.10004650
add esp, 0xc
mov byte [ebp - 4], 1
cmp dword [eax + 0x14], 8
jb 0x10002d92
mov eax, dword [eax]
push 0
push ebx
mov edx, esi
mov ecx, eax
call fcn.10002bc0
add esp, 8
mov byte [ebp - 4], 0
cmp dword [ebp - 0x280], 8
jb 0x10002e41
push dword [ebp - 0x294]
jmp 0x10002e39
lea eax, [ebp - 0x2c4]
push eax
call fcn.10004650
add esp, 0xc
mov byte [ebp - 4], 2
cmp dword [eax + 0x14], 8
jb 0x10002dd5
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x294]
call fcn.100031d0
lea eax, [ebp - 0x294]
mov byte [ebp - 4], 3
push eax
mov ecx, esi
call fcn.100033c0
cmp dword [ebp - 0x280], 8
jb 0x10002e0a
push dword [ebp - 0x294]
call fcn.101a02f0
add esp, 4
xor eax, eax
mov dword [ebp - 0x280], 7
mov byte [ebp - 4], al
cmp dword [ebp - 0x2b0], 8
mov dword [ebp - 0x284], 0
mov word [ebp - 0x294], ax
jb 0x10002e41
push dword [ebp - 0x2c4]
call fcn.101a02f0
add esp, 4
lea eax, [ebp - 0x278]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x10002ce0
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov esi, 1
cmp dword [ebp - 0x14], 8
jb 0x10002e74
push dword [ebp - 0x28]
call fcn.101a02f0
add esp, 4
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.101a0193
mov esp, ebp
pop ebp
ret