Function at 0x100066ac
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x268
push ebx
push esi
push edi
call fcn.10001684
cmp al, 0x15
lea eax, [ebp - 0x1bc]
push eax
lea ecx, [ebp - 0x20]
call fcn.1000e770
push 1
lea ecx, [ebp + 8]
call fcn.1000e950
lea edx, [ebp - 0x1c0]
push edx
lea ecx, [ebp - 0x10]
call fcn.1000ebd0
lea eax, [ebp - 0x1c4]
push eax
lea ecx, [ebp - 0x30]
call fcn.1000ebd0
lea ecx, [ebp - 0x1c8]
push ecx
lea ecx, [ebp - 0x40]
call fcn.1000ebd0
lea edx, [ebp - 0x1cc]
push edx
lea ecx, [ebp - 0x78]
call fcn.1000e770
lea eax, [ebp - 0x1d0]
push eax
lea ecx, [ebp - 0x54]
call fcn.1000e770
lea ecx, [ebp + 8]
push ecx
lea ecx, [ebp - 0x68]
call fcn.1000e7a0
push 0x2a
lea ecx, [ebp - 0x68]
call fcn.1000e8b0
lea edx, [ebp - 0x1b8]
push edx
lea ecx, [ebp - 0x68]
call fcn.1000e990
push eax
call dword [sym.imp.KERNEL32.DLL_FindFirstFileA]
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xffffffff
je 0x100069c0
lea eax, [ebp - 0x18c]
push eax
lea ecx, [ebp - 0x20]
call fcn.1000e850
push 0x1001e324
lea ecx, [ebp - 0x20]
push ecx
call fcn.10010af0
add esp, 8
and eax, 0xff
test eax, eax
jne 0x1000679f
push 0x1001e328
lea edx, [ebp - 0x20]
push edx
call fcn.10010af0
add esp, 8
and eax, 0xff
test eax, eax
je 0x100067a4
jmp 0x1000699d
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp + 8]
push ecx
lea edx, [ebp - 0x1e0]
push edx
call fcn.10010b50
add esp, 0xc
push eax
lea ecx, [ebp - 0x78]
call fcn.1000e830
lea ecx, [ebp - 0x1e0]
call fcn.1000e810
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x54]
call fcn.1000e830
lea ecx, [ebp - 0x20]
push ecx
call fcn.10001f7a
add esp, 4
lea edx, [ebp - 0x78]
push edx
call fcn.10001f7a
add esp, 4
push 0
push 0x100214a0
lea ecx, [ebp - 0x78]
call fcn.1000e9c0
test eax, eax
jne 0x1000680b
jmp 0x1000699d
mov eax, dword [ebp - 0x1b8]
and eax, 0x10
test eax, eax
je 0x10006849
push 0x1001e32c
lea ecx, [ebp - 0x54]
push ecx
lea edx, [ebp - 0x1f0]
push edx
call fcn.10010b90
add esp, 0xc
push eax
lea ecx, [ebp - 0x10]
call fcn.1000ed10
lea ecx, [ebp - 0x1f0]
call fcn.1000e810
jmp 0x1000699d
lea ecx, [ebp - 0x20]
call fcn.1000ec90
cmp eax, 4
jbe 0x1000699d
push 0x1001e0bc
call fcn.10001709
add esp, 4
push eax
push 4
sub esp, 0x10
mov ecx, esp
lea eax, [ebp - 0x20]
push eax
call fcn.1000e7a0
lea ecx, [ebp - 0x208]
push ecx
call fcn.10001f20
add esp, 0x18
push eax
call fcn.10010af0
add esp, 8
and eax, 0xff
test eax, eax
jne 0x100068fc
push 0x1001e0c8
call fcn.10001709
add esp, 4
push eax
push 4
sub esp, 0x10
mov ecx, esp
lea edx, [ebp - 0x20]
push edx
call fcn.1000e7a0
lea eax, [ebp - 0x220]
push eax
call fcn.10001f20
add esp, 0x18
push eax
call fcn.10010af0
add esp, 8
mov byte [ebp - 0x20c], al
lea ecx, [ebp - 0x220]
call fcn.1000e810
mov ecx, dword [ebp - 0x20c]
and ecx, 0xff
test ecx, ecx
jne 0x100068fc
mov dword [ebp - 0x268], 0
jmp 0x10006906
mov dword [ebp - 0x268], 1
mov dl, byte [ebp - 0x268]
mov byte [ebp - 0x1f4], dl
lea ecx, [ebp - 0x208]
call fcn.1000e810
mov eax, dword [ebp - 0x1f4]
and eax, 0xff
test eax, eax
je 0x1000693a
lea ecx, [ebp - 0x54]
push ecx
lea ecx, [ebp - 0x30]
call fcn.1000ed10
jmp 0x1000699d
push 0x1001e0d4
call fcn.10001709
add esp, 4
push eax
push 4
sub esp, 0x10
mov ecx, esp
lea edx, [ebp - 0x20]
push edx
call fcn.1000e7a0
lea eax, [ebp - 0x238]
push eax
call fcn.10001f20
add esp, 0x18
push eax
call fcn.10010af0
add esp, 8
mov byte [ebp - 0x224], al
lea ecx, [ebp - 0x238]
call fcn.1000e810
mov ecx, dword [ebp - 0x224]
and ecx, 0xff
test ecx, ecx
je 0x1000699d
lea edx, [ebp - 0x54]
push edx
lea ecx, [ebp - 0x40]
call fcn.1000ed10
lea eax, [ebp - 0x1b8]
push eax
mov ecx, dword [ebp - 0x44]
push ecx
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
test eax, eax
jne 0x1000675c
mov edx, dword [ebp - 0x44]
push edx
call dword [sym.imp.KERNEL32.DLL_FindClose]
call fcn.10001684
cmp dword [ebp + ecx*4 + 0x4d], ebp
shr al, 0xe1
add byte [eax], 0
test eax, eax
jbe 0x10006b4e
mov dword [ebp - 0x58], 0
jmp 0x100069e9
mov eax, dword [ebp - 0x58]
add eax, 1
mov dword [ebp - 0x58], eax
lea ecx, [ebp - 0x30]
call fcn.1000ecb0
cmp dword [ebp - 0x58], eax
jae 0x10006a8a
sub esp, 0x10
mov esi, esp
lea ecx, [ebp - 0x240]
push ecx
mov edx, dword [ebp - 0x58]
push edx
lea ecx, [ebp - 0x30]
call fcn.1000ecf0
mov ecx, eax
call fcn.1000e990
push eax
mov ecx, esi
call fcn.1000e7e0
call fcn.100048b9
add esp, 0x10
and eax, 0xff
cmp eax, 1
jne 0x10006a85
mov byte [ebp - 0x244], 1
lea ecx, [ebp - 0x68]
call fcn.1000e810
lea ecx, [ebp - 0x54]
call fcn.1000e810
lea ecx, [ebp - 0x78]
call fcn.1000e810
lea ecx, [ebp - 0x40]
call fcn.1000ec10
lea ecx, [ebp - 0x30]
call fcn.1000ec10
lea ecx, [ebp - 0x10]
call fcn.1000ec10
lea ecx, [ebp - 0x20]
call fcn.1000e810
lea ecx, [ebp + 8]
call fcn.1000e810
mov al, byte [ebp - 0x244]
jmp 0x10006d27
jmp 0x100069e0
lea ecx, [ebp - 0x30]
call fcn.1000ecb0
cmp dword [ebp - 0x58], eax
jne 0x10006b4e
mov dword [ebp - 0x58], 0
jmp 0x10006aad
mov eax, dword [ebp - 0x58]
add eax, 1
mov dword [ebp - 0x58], eax
lea ecx, [ebp - 0x40]
call fcn.1000ecb0
cmp dword [ebp - 0x58], eax
jae 0x10006b4e
sub esp, 0x10
mov esi, esp
lea ecx, [ebp - 0x24c]
push ecx
mov edx, dword [ebp - 0x58]
push edx
lea ecx, [ebp - 0x40]
call fcn.1000ecf0
mov ecx, eax
call fcn.1000e990
push eax
mov ecx, esi
call fcn.1000e7e0
call fcn.100048b9
add esp, 0x10
and eax, 0xff
cmp eax, 1
jne 0x10006b49
mov byte [ebp - 0x250], 1
lea ecx, [ebp - 0x68]
call fcn.1000e810
lea ecx, [ebp - 0x54]
call fcn.1000e810
lea ecx, [ebp - 0x78]
call fcn.1000e810
lea ecx, [ebp - 0x40]
call fcn.1000ec10
lea ecx, [ebp - 0x30]
call fcn.1000ec10
lea ecx, [ebp - 0x10]
call fcn.1000ec10
lea ecx, [ebp - 0x20]
call fcn.1000e810
lea ecx, [ebp + 8]
call fcn.1000e810
mov al, byte [ebp - 0x250]
jmp 0x10006d27
jmp 0x10006aa4
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
sub eax, dword [0x100213d8]
cmp eax, 0x4b0
jbe 0x10006bb3
mov byte [ebp - 0x254], 0
lea ecx, [ebp - 0x68]
call fcn.1000e810
lea ecx, [ebp - 0x54]
call fcn.1000e810
lea ecx, [ebp - 0x78]
call fcn.1000e810
lea ecx, [ebp - 0x40]
call fcn.1000ec10
lea ecx, [ebp - 0x30]
call fcn.1000ec10
lea ecx, [ebp - 0x10]
call fcn.1000ec10
lea ecx, [ebp - 0x20]
call fcn.1000e810
lea ecx, [ebp + 8]
call fcn.1000e810
mov al, byte [ebp - 0x254]
jmp 0x10006d27
lea ecx, [ebp - 0x10]
call fcn.1000ecb0
test eax, eax
jbe 0x10006cda
lea ecx, [ebp - 0x10]
call fcn.1000ec90
push eax
lea ecx, [ebp - 0x10]
call fcn.1000ec70
push eax
call fcn.10010bf0
add esp, 8
mov dword [ebp - 0x58], 0
jmp 0x10006bef
mov eax, dword [ebp - 0x58]
add eax, 1
mov dword [ebp - 0x58], eax
lea ecx, [ebp - 0x10]
call fcn.1000ecb0
cmp dword [ebp - 0x58], eax
jae 0x10006cda
mov ecx, dword [ebp - 0x58]
push ecx
lea ecx, [ebp - 0x10]
call fcn.1000ecf0
sub esp, 0x10
mov ecx, esp
push eax
call fcn.1000e7a0
call fcn.100066ac
add esp, 0x10
and eax, 0xff
test eax, eax
je 0x10006c7a
mov byte [ebp - 0x25c], 1
lea ecx, [ebp - 0x68]
call fcn.1000e810
lea ecx, [ebp - 0x54]
call fcn.1000e810
lea ecx, [ebp - 0x78]
call fcn.1000e810
lea ecx, [ebp - 0x40]
call fcn.1000ec10
lea ecx, [ebp - 0x30]
call fcn.1000ec10
lea ecx, [ebp - 0x10]
call fcn.1000ec10
lea ecx, [ebp - 0x20]
call fcn.1000e810
lea ecx, [ebp + 8]
call fcn.1000e810
mov al, byte [ebp - 0x25c]
jmp 0x10006d27
xor edx, edx
mov dl, byte [0x1002581d]
test edx, edx
jne 0x10006cd5
mov byte [ebp - 0x260], 0
lea ecx, [ebp - 0x68]
call fcn.1000e810
lea ecx, [ebp - 0x54]
call fcn.1000e810
lea ecx, [ebp - 0x78]
call fcn.1000e810
lea ecx, [ebp - 0x40]
call fcn.1000ec10
lea ecx, [ebp - 0x30]
call fcn.1000ec10
lea ecx, [ebp - 0x10]
call fcn.1000ec10
lea ecx, [ebp - 0x20]
call fcn.1000e810
lea ecx, [ebp + 8]
call fcn.1000e810
mov al, byte [ebp - 0x260]
jmp 0x10006d27
jmp 0x10006be6
mov byte [ebp - 0x264], 0
lea ecx, [ebp - 0x68]
call fcn.1000e810
lea ecx, [ebp - 0x54]
call fcn.1000e810
lea ecx, [ebp - 0x78]
call fcn.1000e810
lea ecx, [ebp - 0x40]
call fcn.1000ec10
lea ecx, [ebp - 0x30]
call fcn.1000ec10
lea ecx, [ebp - 0x10]
call fcn.1000ec10
lea ecx, [ebp - 0x20]
call fcn.1000e810
lea ecx, [ebp + 8]
call fcn.1000e810
mov al, byte [ebp - 0x264]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret