Function at 0x10004e0b
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push 0x28c
mov eax, 0x1003180a
call fcn.10022f92
mov edi, dword [ebp + 0x14]
mov ebx, dword [ebp + 0x10]
mov dword [ebp - 0x27c], ecx
mov dword [ebp - 0x280], edi
and dword [ebp - 4], 0
lea esi, [ebp + 8]
call fcn.10002833
mov eax, dword [0x10043e48]
mov ecx, 0x10043e48
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x278], eax
lea eax, [ebp - 0x278]
push eax
mov byte [ebp - 4], 1
mov eax, dword [ebp + 8]
push ecx
add eax, 0xfffffff0
mov dword [ebp - 0x268], esp
mov esi, esp
call fcn.10002462
add eax, 0x10
mov ecx, ebx
mov dword [esi], eax
call fcn.1000509a
test al, al
je 0x10004efc
lea eax, [ebp - 0x278]
push eax
lea eax, [ebp - 0x298]
push eax
call fcn.100058c6
lea eax, [ebp - 0x268]
push eax
lea eax, [ebp - 0x298]
push eax
call fcn.10005a79
push eax
mov esi, edi
mov byte [ebp - 4], 2
call fcn.10001c30
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x268]
add eax, 0xfffffff0
call fcn.100024ba
lea eax, [ebp - 0x298]
push eax
mov eax, dword [ebp - 0x27c]
call fcn.10005195
test al, al
je 0x10004efc
xor esi, esi
mov eax, dword [ebp - 0x278]
add eax, 0xfffffff0
call fcn.100024ba
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
call fcn.100024ba
mov eax, esi
call fcn.10023015
ret 0x10
xor esi, esi
inc esi
cmp dword [ebp + 0xc], esi
jl 0x10004ed9
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
call fcn.10002462
add eax, 0x10
mov dword [ebp - 0x26c], eax
mov esi, 0x100374cc
push esi
mov byte [ebp - 4], 3
call fcn.10020d18
pop ecx
push eax
push esi
lea eax, [ebp - 0x26c]
call fcn.10001efd
lea eax, [ebp - 0x264]
push eax
lea esi, [ebp - 0x26c]
call fcn.10001bc2
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
and dword [ebp - 0x270], 0
mov dword [ebp - 0x274], eax
lea eax, [ebp - 0x264]
mov byte [ebp - 4], 4
mov edi, dword [sym.imp.KERNEL32.dll_FindNextFileW]
push eax
push dword [ebp - 0x274]
call edi
cmp dword [ebp - 0x274], 0xffffffff
setne al
test al, al
je 0x1000503a
test byte [ebp - 0x264], 0x10
je 0x10005022
cmp word [ebp - 0x238], 0x2e
jne 0x10004fbb
cmp word [ebp - 0x236], 0
je 0x10005022
cmp word [ebp - 0x236], 0x2e
jne 0x10004fbb
cmp word [ebp - 0x234], 0
je 0x10005022
lea eax, [ebp - 0x238]
push eax
lea eax, [ebp - 0x268]
push eax
lea ecx, [ebp + 8]
call fcn.1000567a
pop ecx
pop ecx
push dword [ebp - 0x280]
mov eax, dword [ebp + 0xc]
dec eax
push ebx
push eax
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x268]
push ecx
add eax, 0xfffffff0
mov dword [ebp - 0x284], esp
mov esi, esp
call fcn.10002462
mov ecx, dword [ebp - 0x27c]
add eax, 0x10
mov dword [esi], eax
call fcn.10004e0b
xor esi, esi
cmp eax, esi
je 0x10005065
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x268]
add eax, 0xfffffff0
call fcn.100024ba
lea eax, [ebp - 0x264]
push eax
push dword [ebp - 0x274]
call edi
cmp eax, 1
je 0x10004f86
cmp dword [ebp - 0x274], 0
je 0x1000504f
push dword [ebp - 0x274]
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [ebp - 0x26c]
add eax, 0xfffffff0
call fcn.100024ba
xor esi, esi
inc esi
jmp 0x10004ed9
mov eax, dword [ebp - 0x268]
add eax, 0xfffffff0
call fcn.100024ba
cmp dword [ebp - 0x274], esi
je 0x10005087
push dword [ebp - 0x274]
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [ebp - 0x26c]
add eax, 0xfffffff0
call fcn.100024ba
jmp 0x10004ed9