Function at 0x1003beb7
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push 0x380
mov eax, 0x10088f12
call fcn.10063092
mov eax, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
mov ebx, dword [ebp + 0x10]
mov esi, ecx
cmp byte [esi + 8], 1
mov ecx, dword [ebp + 0x20]
mov dword [ebp - 0x370], esi
mov dword [ebp - 0x36c], eax
jne 0x1003bf22
push 0x1010
call fcn.10062b5c
pop ecx
test eax, eax
je 0x1003bf09
push 0x10003a98
push 0
push 0xe
push eax
call fcn.10037a50
add esp, 0x10
jmp 0x1003bf0b
xor eax, eax
mov dword [ebp - 0x384], eax
push 0x1008bdb8
lea eax, [ebp - 0x384]
push eax
call fcn.1006330f
inc dword [esi + 0x30]
mov eax, dword [esi + 0x30]
push 0
push dword [ebp + 0x28]
mov edx, dword [esi]
push dword [ebp + 0x24]
push eax
push ecx
push dword [ebp + 0x1c]
mov ecx, esi
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push ebx
push edi
push dword [ebp - 0x36c]
call dword [edx + 0xc]
mov dword [ebp - 0x360], eax
test eax, eax
jne 0x1003bf8f
push 0x1010
call fcn.10062b5c
pop ecx
test eax, eax
je 0x1003bf77
push 0x10003a38
push 0
push 4
push eax
call fcn.10037a50
add esp, 0x10
jmp 0x1003bf79
xor eax, eax
dec dword [esi + 0x30]
mov dword [ebp - 0x37c], eax
push 0x1008bdb8
lea eax, [ebp - 0x37c]
jmp 0x1003bf1c
mov ecx, dword [ebp - 0x36c]
mov cl, byte [ecx]
cmp cl, 0x2f
jne 0x1003bfa8
cmp byte [edi], cl
jne 0x1003bfa8
cmp byte [ebx], cl
je 0x1003c32a
cmp cl, 0x3a
je 0x1003c32a
test byte [ebp + 0x14], 0x10
je 0x1003c32a
push 0x104
lea eax, [ebp - 0x21c]
push 0
push eax
call fcn.100620c0
push dword [ebp - 0x36c]
lea eax, [ebp - 0x21c]
push 0x10003a30
push eax
call fcn.10062ada
push 0x140
xor edi, edi
lea eax, [ebp - 0x35c]
push edi
push eax
call fcn.100620c0
add esp, 0x24
lea eax, [ebp - 0x35c]
push eax
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x368], eax
cmp eax, 0xffffffff
jne 0x1003c071
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x1010
mov ebx, eax
call fcn.10062b5c
pop ecx
cmp eax, edi
je 0x1003c04d
push ebx
lea ecx, [ebp - 0x21c]
push ecx
push 0x100039d0
push ebx
push 5
push eax
call fcn.10037a50
add esp, 0x18
mov edi, eax
lea eax, [ebp - 0x360]
push eax
mov ecx, esi
call fcn.10038563
mov dword [ebp - 0x374], edi
push 0x1008bdb8
lea eax, [ebp - 0x374]
jmp 0x1003bf1c
mov ebx, dword [ebp - 0x35c]
and ebx, 0x10
je 0x1003c0a0
cmp byte [ebp - 0x330], 0x2e
jne 0x1003c0a0
lea eax, [ebp - 0x330]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1003c08e
sub eax, edx
cmp eax, 1
je 0x1003c28b
cmp ebx, edi
je 0x1003c0d1
cmp byte [ebp - 0x330], 0x2e
jne 0x1003c0d1
cmp byte [ebp - 0x32f], 0x2e
jne 0x1003c0d1
lea eax, [ebp - 0x330]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1003c0bf
sub eax, edx
cmp eax, 2
je 0x1003c28b
push 0x104
lea eax, [ebp - 0x118]
push edi
push eax
call fcn.100620c0
lea eax, [ebp - 0x330]
push eax
push dword [ebp - 0x36c]
lea eax, [ebp - 0x118]
push 0x10002638
push eax
call fcn.10062ada
mov edx, dword [ebp + 0x2c]
mov eax, dword [ebp - 0x33c]
mov ecx, dword [ebp - 0x340]
add esp, 0x1c
sub edx, edi
mov dword [ebp - 4], edi
je 0x1003c13e
dec edx
je 0x1003c12e
push dword [ebp + 0x2c]
push dword [ebp - 0x344]
push dword [ebp - 0x348]
jmp 0x1003c14b
push 1
push dword [ebp - 0x34c]
push dword [ebp - 0x350]
jmp 0x1003c14b
push edi
push dword [ebp - 0x354]
push dword [ebp - 0x358]
push dword [ebp - 0x360]
push ecx
push eax
push dword [ebp - 0x35c]
lea eax, [ebp - 0x35c]
push eax
mov ecx, esi
call fcn.1003826d
push eax
lea eax, [ebp - 0x330]
push eax
lea eax, [ebp - 0x118]
push eax
mov ecx, esi
call fcn.1003beb7
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x364], eax
jmp 0x1003c22f
mov ebx, dword [ebp - 0x364]
cmp ebx, edi
je 0x1003c27b
mov eax, dword [esi]
push ebx
push dword [ebp - 0x360]
mov ecx, esi
call dword [eax + 0x1c]
cmp ebx, eax
je 0x1003c25b
lea eax, [ebp - 0x364]
push eax
mov ecx, esi
call fcn.10038563
jmp 0x1003c28b
mov eax, dword [ebp - 0x360]
mov edx, dword [eax + 0x354]
add eax, 0x350
lea ecx, [ebx + 8]
mov dword [ecx], eax
mov dword [ebx + 0xc], edx
mov dword [edx], ecx
mov dword [eax + 4], ecx
jmp 0x1003c28b
push edi
lea eax, [ebp - 0x118]
push eax
push dword [esi + 0x10]
push 2
call dword [esi + 0xc]
push 0x140
lea eax, [ebp - 0x35c]
push edi
push eax
call fcn.100620c0
add esp, 0xc
lea eax, [ebp - 0x35c]
push eax
push dword [ebp - 0x368]
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x1003c071
call dword [sym.imp.KERNEL32.dll_GetLastError]
push dword [ebp - 0x368]
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp ebx, 0x12
je 0x1003c31b
push 0x1010
call fcn.10062b5c
pop ecx
cmp eax, edi
je 0x1003c2f7
push ebx
push 0x10003978
push ebx
push 5
push eax
call fcn.10037a50
add esp, 0x14
mov edi, eax
lea eax, [ebp - 0x360]
push eax
mov ecx, esi
call fcn.10038563
mov dword [ebp - 0x378], edi
push 0x1008bdb8
lea eax, [ebp - 0x378]
jmp 0x1003bf1c
push dword [ebp - 0x360]
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x10]
jmp 0x1003c332
mov edx, dword [esi]
push eax
mov ecx, esi
call dword [edx + 0x10]
mov eax, dword [ebp - 0x360]
call fcn.100630fd
ret 0x28