Function at 0xb28847
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
mov eax, 0xb77e79
call fcn.00b77aa8
sub esp, 0x2b0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov bl, cl
lea ecx, [ebp - 0x4c]
call fcn.00b220df
or dword [ebp - 0x18], 0xffffffff
test bl, bl
je 0xb288aa
mov edx, 0xb86478
lea ecx, [ebp + 0x20]
call fcn.00b27801
test al, al
je 0xb288aa
sub esp, 0x18
mov ecx, esp
lea eax, [ebp + 8]
push eax
call fcn.00b29097
lea ecx, [ebp - 0x34]
call fcn.00b3b4c3
add esp, 0x18
push eax
lea ecx, [ebp + 0x20]
call fcn.00b21f13
lea ecx, [ebp - 0x34]
call fcn.00b21f09
sub esp, 0x18
mov ecx, esp
lea eax, [ebp + 8]
push eax
call fcn.00b29097
lea ecx, [ebp - 0x34]
call fcn.00b3b4fe
add esp, 0x18
push eax
lea ecx, [ebp + 0x20]
call fcn.00b2325d
lea ecx, [ebp - 0x34]
call fcn.00b21f09
push 0xb86618
lea ecx, [ebp + 8]
call fcn.00b2908d
and dword [ebp - 4], 0
lea eax, [ebp - 0x2b4]
push eax
push 0xb865f8
lea edx, [ebp + 8]
lea ecx, [ebp - 0x34]
call fcn.00b29196
pop ecx
mov ecx, eax
call fcn.00b21f04
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, eax
mov dword [ebp - 0x18], esi
lea ecx, [ebp - 0x34]
call fcn.00b21f09
cmp esi, 0xffffffff
jne 0xb28932
mov dword [ebp - 0x1c], 2
push 0xb8eda0
lea eax, [ebp - 0x1c]
push eax
call fcn.00b591a6
lea eax, [ebp - 0x2b4]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0xb28a4b
cmp byte [0xb92b18], 0
jne 0xb28a8d
test byte [ebp - 0x2b4], 0x10
je 0xb289f5
push 0xb86538
lea eax, [ebp - 0x288]
push eax
call fcn.00b5f9a4
pop ecx
pop ecx
test eax, eax
je 0xb28932
push 0xb8661c
lea eax, [ebp - 0x288]
push eax
call fcn.00b5f9a4
pop ecx
pop ecx
test eax, eax
je 0xb28932
lea eax, [ebp - 0x288]
push eax
lea ecx, [ebp - 0x64]
call fcn.00b2417e
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x34]
call fcn.00b291fb
pop ecx
lea ecx, [ebp - 0x64]
call fcn.00b21f09
sub esp, 0x18
mov ecx, esp
lea eax, [ebp + 0x38]
push eax
call fcn.00b220f6
sub esp, 0x18
mov ecx, esp
lea eax, [ebp + 0x20]
push eax
call fcn.00b29097
sub esp, 0x18
mov ecx, esp
lea eax, [ebp - 0x34]
push eax
call fcn.00b29097
mov cl, bl
call fcn.00b28847
add esp, 0x48
lea ecx, [ebp - 0x34]
call fcn.00b21f09
jmp 0xb28932
sub esp, 0x18
mov ecx, esp
lea eax, [ebp + 0x38]
push eax
call fcn.00b220f6
sub esp, 0x18
mov ecx, esp
lea eax, [ebp + 0x20]
push eax
call fcn.00b29097
lea eax, [ebp - 0x288]
push eax
lea ecx, [ebp - 0x34]
call fcn.00b2417e
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x64]
call fcn.00b291fb
sub esp, 0x14
mov ecx, esp
push eax
call fcn.00b23262
mov cl, bl
call fcn.00b28ac0
add esp, 0x48
lea ecx, [ebp - 0x64]
call fcn.00b21f09
jmp 0xb289e8
or dword [ebp - 4], 0xffffffff
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
lea ecx, [ebp - 0x4c]
call fcn.00b21fd8
lea ecx, [ebp + 8]
call fcn.00b21f09
lea ecx, [ebp + 0x20]
call fcn.00b21f09
lea ecx, [ebp + 0x38]
call fcn.00b21fd8
mov al, 1
jmp 0xb28aaf
lea ecx, [ebp - 0x4c]
call fcn.00b21fd8
lea ecx, [ebp + 8]
call fcn.00b21f09
lea ecx, [ebp + 0x20]
call fcn.00b21f09
lea ecx, [ebp + 0x38]
call fcn.00b21fd8
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret