Function at 0x1028d6d0
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5d8
mov eax, dword [0x10411968]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x5b8], 0
mov dword [ebp - 0x5bc], 0
push 0x140
push 0
lea eax, [ebp - 0x5b4]
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
cmp dword [ebp + 0x10], 0
je 0x1028d981
lea ecx, [ebp - 0x5c4]
push ecx
lea edx, [ebp - 0x20c]
push edx
push 0x104
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetFullPathNameA]
test eax, eax
jne 0x1028d73f
xor eax, eax
jmp 0x1028da34
mov ecx, dword [ebp - 0x5c4]
push ecx
lea edx, [ebp - 0x310]
push edx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy
add esp, 8
lea eax, [ebp - 0x42c]
push eax
lea ecx, [ebp - 0x5c5]
call fcn.1028da50
mov ecx, eax
call fcn.1017c760
mov dword [ebp - 0x5d0], eax
mov ecx, dword [ebp - 0x5c4]
mov dword [ebp - 0x5d4], ecx
mov edx, dword [ebp - 0x5d0]
push edx
mov eax, dword [ebp - 0x5d4]
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy
add esp, 8
lea ecx, [ebp - 0x42c]
call fcn.10179000
mov dword [ebp - 0x5b4], 0x10
lea ecx, [ebp - 0x5b4]
push ecx
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x5bc], eax
cmp dword [ebp - 0x5bc], 0xffffffff
je 0x1028d974
push 1
lea eax, [ebp - 0x45c]
push eax
lea ecx, [ebp - 0x5c6]
call fcn.1028da70
or dword [ebp - 0x5b8], 1
mov ecx, eax
call fcn.1017c760
push eax
lea ecx, [ebp - 0x588]
push ecx
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
add esp, 0xc
test eax, eax
je 0x1028d84c
push 2
lea edx, [ebp - 0x444]
push edx
lea ecx, [ebp - 0x5c7]
call fcn.1028da90
or dword [ebp - 0x5b8], 2
mov ecx, eax
call fcn.1017c760
push eax
lea eax, [ebp - 0x588]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
add esp, 0xc
test eax, eax
je 0x1028d84c
mov dword [ebp - 0x5cc], 0
jmp 0x1028d856
mov dword [ebp - 0x5cc], 1
mov cl, byte [ebp - 0x5cc]
mov byte [ebp - 0x5bd], cl
mov edx, dword [ebp - 0x5b8]
and edx, 2
je 0x1028d87f
and dword [ebp - 0x5b8], 0xfffffffd
lea ecx, [ebp - 0x444]
call fcn.10179000
mov eax, dword [ebp - 0x5b8]
and eax, 1
je 0x1028d89c
and dword [ebp - 0x5b8], 0xfffffffe
lea ecx, [ebp - 0x45c]
call fcn.10179000
movzx ecx, byte [ebp - 0x5bd]
test ecx, ecx
je 0x1028d8ac
jmp 0x1028d958
mov edx, dword [ebp - 0x5b4]
and edx, 0x10
je 0x1028d958
lea eax, [ebp - 0x5c4]
push eax
lea ecx, [ebp - 0x108]
push ecx
push 0x104
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_GetFullPathNameA]
test eax, eax
jne 0x1028d8e3
xor eax, eax
jmp 0x1028da34
lea eax, [ebp - 0x588]
push eax
mov ecx, dword [ebp - 0x5c4]
push ecx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy
add esp, 8
lea edx, [ebp - 0x474]
push edx
lea ecx, [ebp - 0x5c8]
call fcn.1028dab0
mov ecx, eax
call fcn.1017c760
push eax
lea eax, [ebp - 0x108]
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
add esp, 8
lea ecx, [ebp - 0x474]
call fcn.10179000
lea ecx, [ebp - 0x310]
push ecx
lea edx, [ebp - 0x108]
push edx
call sub.api_ms_win_crt_string_l1_1_0.dll_strcat
add esp, 8
push 1
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0x108]
push ecx
call fcn.1028d6d0
add esp, 0xc
lea edx, [ebp - 0x5b4]
push edx
mov eax, dword [ebp - 0x5bc]
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x1028d7d2
mov ecx, dword [ebp - 0x5bc]
push ecx
call dword [sym.imp.KERNEL32.dll_FindClose]
lea edx, [ebp - 0x5b4]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x5bc], eax
cmp dword [ebp - 0x5bc], 0xffffffff
jne 0x1028d9ab
mov eax, 1
jmp 0x1028da34
mov ecx, dword [ebp - 0x5b4]
and ecx, 0x10
jne 0x1028da0a
lea edx, [ebp - 0x5c4]
push edx
lea eax, [ebp - 0x414]
push eax
push 0x104
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFullPathNameA]
test eax, eax
jne 0x1028d9db
xor eax, eax
jmp 0x1028da34
lea edx, [ebp - 0x588]
push edx
mov eax, dword [ebp - 0x5c4]
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy
add esp, 8
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x5d8], ecx
lea edx, [ebp - 0x588]
push edx
call dword [ebp - 0x5d8]
add esp, 4
lea eax, [ebp - 0x5b4]
push eax
mov ecx, dword [ebp - 0x5bc]
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x1028d9ab
mov edx, dword [ebp - 0x5bc]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.102d9498
mov esp, ebp
pop ebp
ret