Function at 0x10025bac
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push 0x2f4
mov eax, 0x1017d3fd
call fcn.100854d6
mov eax, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
xor esi, esi
cmp eax, esi
mov dword [ebp - 0x300], ecx
mov dword [ebp - 0x2fc], eax
jne 0x10025bda
xor eax, eax
jmp 0x10025e41
cmp edi, esi
je 0x10025bd3
push eax
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x2d4], esi
call fcn.100015f0
push 0x1018ae98
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], esi
call fcn.10003640
push esi
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x30], 7
call fcn.10001b40
xor ebx, ebx
inc ebx
push edi
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], bl
call fcn.100015f0
lea eax, [ebp - 0x80]
push eax
mov byte [ebp - 4], 2
call fcn.1001de88
pop ecx
mov dword [ebp - 0x2e4], esi
mov dword [ebp - 0x2e0], esi
mov dword [ebp - 0x2dc], esi
cmp dword [ebp - 0x68], 8
mov eax, dword [ebp - 0x7c]
mov byte [ebp - 4], 3
jae 0x10025c4c
lea eax, [ebp - 0x7c]
lea ecx, [ebp - 0x2e8]
push ecx
push 0x1018b914
push eax
call fcn.10020d72
mov eax, dword [ebp - 0x60]
add esp, 0xc
cmp dword [ebp - 0x4c], 8
jae 0x10025c6d
lea eax, [ebp - 0x60]
lea ecx, [ebp - 0x2d0]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp eax, 0xffffffff
mov dword [ebp - 0x2d8], eax
je 0x10025e06
lea eax, [ebp - 0x2d0]
push eax
push dword [ebp - 0x2d8]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
cmp eax, esi
je 0x10025e06
cmp word [ebp - 0x2a4], 0x2e
je 0x10025c8a
cmp word [ebp - 0x2a2], si
je 0x10025c8a
cmp word [ebp - 0x2a2], 0x2e
jne 0x10025ccb
cmp word [ebp - 0x2a0], si
je 0x10025c8a
lea eax, [ebp - 0x2a4]
push eax
lea ecx, [ebp - 0x48]
call fcn.10003610
test byte [ebp - 0x2d0], 0x10
je 0x10025c8a
lea eax, [ebp - 0x48]
push eax
call fcn.1001de88
pop ecx
lea eax, [ebp - 0x2e8]
push eax
push dword [ebp - 0x2e4]
lea ecx, [ebp - 0x2f0]
call fcn.10051a72
jmp 0x10025d56
lea ecx, [ebp - 0x2f0]
call fcn.10005225
cmp dword [eax + 0x18], 8
jb 0x10025d1d
mov eax, dword [eax + 4]
jmp 0x10025d20
add eax, 4
push eax
lea ecx, [ebp - 0x2c]
call fcn.100015f0
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 4
call fcn.100075ec
test eax, eax
push esi
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2c]
push ebx
je 0x10025d86
call fcn.100017c0
lea ecx, [ebp - 0x2f0]
call fcn.10005246
lea eax, [ebp - 0x2e8]
push eax
push dword [ebp - 0x2e0]
lea ecx, [ebp - 0x2f8]
call fcn.10051a72
lea eax, [ebp - 0x2f8]
push eax
lea ecx, [ebp - 0x2f0]
call fcn.10054d99
test al, al
je 0x10025d07
jmp 0x10025d91
mov dword [ebp - 0x2d4], ebx
call fcn.100017c0
cmp dword [ebp - 0x2d4], esi
jne 0x10025c8a
push dword [ebp - 0x2fc]
lea ecx, [ebp - 0x2c]
call fcn.100015f0
push 0xffffffffffffffff
push esi
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 5
call fcn.10003be0
push 0x101ebeec
lea ecx, [ebp - 0x2c]
call fcn.10003640
cmp dword [ebp - 0x14], 8
mov eax, dword [ebp - 0x28]
jae 0x10025dd7
lea eax, [ebp - 0x28]
mov ecx, dword [ebp - 0x300]
push edi
push eax
call fcn.10025bac
cmp eax, esi
push esi
lea ecx, [ebp - 0x2c]
push ebx
jne 0x10025dfb
mov byte [ebp - 4], 3
call fcn.100017c0
jmp 0x10025c8a
mov dword [ebp - 0x2d4], ebx
call fcn.100017c0
push dword [ebp - 0x2d8]
call dword [sym.imp.KERNEL32.dll_FindClose]
lea ecx, [ebp - 0x2e8]
call fcn.10010d20
push esi
push ebx
lea ecx, [ebp - 0x80]
call fcn.100017c0
push esi
push ebx
lea ecx, [ebp - 0x48]
call fcn.100017c0
push esi
push ebx
lea ecx, [ebp - 0x64]
call fcn.100017c0
mov eax, dword [ebp - 0x2d4]
call fcn.10085559
ret 8