Function at 0x6e6c04
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x52
push 0
push 0
dec ecx
jne 0x6e6c0d
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0x148], ecx
mov esi, edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x6e6f9a
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
cmp byte [eax + 0x7c], 0
jne 0x6e6da1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x6e6f7c
inc eax
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x14c], 0
lea eax, [ebp - 0x144]
push eax
lea ecx, [ebp - 0x260]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x14c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x260]
call fcn.00405624
push eax
call sub.kernel32.dll_FindFirstFileA_1
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0xffffffff
setne bl
test bl, bl
je 0x6e6d8a
mov eax, dword [ebp - 4]
cmp word [eax + 0x72], 0
je 0x6e6cf0
lea ecx, [ebp - 0x268]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x14c]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x268]
lea edx, [ebp - 0x264]
call fcn.0040b918
mov ecx, dword [ebp - 0x264]
mov esi, dword [ebp - 4]
mov edx, dword [ebp - 4]
mov eax, dword [esi + 0x74]
call dword [esi + 0x70]
xor eax, eax
push ebp
push 0x6e6d83
push dword fs:[eax]
mov dword fs:[eax], esp
jmp 0x6e6d57
cmp byte [ebp - 0x118], 0x2e
je 0x6e6d3e
push ebp
lea ecx, [ebp - 0x270]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x14c]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x270]
lea edx, [ebp - 0x26c]
call fcn.0040b918
mov eax, dword [ebp - 0x26c]
call fcn.006e6978
pop ecx
lea eax, [ebp - 0x144]
push eax
mov eax, dword [ebp - 0x150]
push eax
call sub.kernel32.dll_FindNextFileA
cmp eax, 1
sbb ebx, ebx
inc ebx
test bl, bl
je 0x6e6d69
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x9c]
cmp byte [eax], 0
je 0x6e6d00
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6e6d8a
mov eax, dword [ebp - 0x150]
push eax
call sub.kernel32.dll_FindClose_1
ret
inc dword [ebp - 0x14c]
dec dword [ebp - 0x154]
jne 0x6e6c65
jmp 0x6e6f7c
mov eax, dword [ebp - 4]
cmp word [eax + 0x62], 0
je 0x6e6db9
mov ebx, dword [ebp - 4]
mov ecx, esi
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x64]
call dword [ebx + 0x60]
lea eax, [ebp - 0x144]
push eax
lea ecx, [ebp - 0x274]
mov edx, 0x6e6fb4
mov eax, esi
call fcn.006e5b94
mov edx, dword [ebp - 0x274]
lea eax, [ebp - 0x259]
call fcn.0040bed8
push eax
call sub.kernel32.dll_FindFirstFileA_1
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0xffffffff
setne bl
test bl, bl
je 0x6e6f7c
xor eax, eax
push ebp
push 0x6e6f75
push dword fs:[eax]
mov dword fs:[eax], esp
jmp 0x6e6f45
lea eax, [ebp - 0x278]
lea edx, [ebp - 0x118]
mov ecx, 0x104
call fcn.004053d4
mov eax, dword [ebp - 0x278]
cmp byte [eax], 0x2e
je 0x6e6f20
push ebp
lea edx, [ebp - 0x27c]
mov eax, esi
call fcn.006f4e20
mov eax, dword [ebp - 0x27c]
call fcn.006e6978
pop ecx
mov edi, dword [ebp - 0x144]
test edi, 0x10
jbe 0x6e6f20
test edi, 2
jbe 0x6e6ece
mov eax, dword [ebp - 4]
cmp byte [eax + 0x50], 0
je 0x6e6f20
mov eax, dword [ebp + 8]
push eax
lea eax, [ebp - 0x288]
lea edx, [ebp - 0x118]
mov ecx, 0x104
call fcn.004053d4
mov edx, dword [ebp - 0x288]
lea ecx, [ebp - 0x284]
mov eax, esi
call fcn.006e5b94
mov eax, dword [ebp - 0x284]
lea edx, [ebp - 0x280]
call fcn.006f4e20
mov edx, dword [ebp - 0x280]
mov ecx, dword [ebp - 0x148]
mov eax, dword [ebp - 4]
call fcn.006e6c04
jmp 0x6e6f20
mov eax, dword [ebp + 8]
push eax
lea eax, [ebp - 0x294]
lea edx, [ebp - 0x118]
mov ecx, 0x104
call fcn.004053d4
mov edx, dword [ebp - 0x294]
lea ecx, [ebp - 0x290]
mov eax, esi
call fcn.006e5b94
mov eax, dword [ebp - 0x290]
lea edx, [ebp - 0x28c]
call fcn.006f4e20
mov edx, dword [ebp - 0x28c]
mov ecx, dword [ebp - 0x148]
mov eax, dword [ebp - 4]
call fcn.006e6c04
lea eax, [ebp - 0x144]
push eax
mov eax, dword [ebp - 0x150]
push eax
call sub.kernel32.dll_FindNextFileA
cmp eax, 1
sbb ebx, ebx
inc ebx
mov eax, dword [0x74c914]
mov eax, dword [eax]
call fcn.004bfd14
test bl, bl
je 0x6e6f5b
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x9c]
cmp byte [eax], 0
je 0x6e6e14
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6e6f7c
mov eax, dword [ebp - 0x150]
push eax
call sub.kernel32.dll_FindClose_1
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6e6fa1
lea eax, [ebp - 0x294]
mov edx, 0xe
call fcn.00405178
ret