Function at 0x40680d
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
push edi
mov eax, 0x1aac
push esi
push ebx
call fcn.0041f3f0
sub esp, eax
mov dword [esp], 0x8003
call sub.KERNEL32.dll_SetErrorMode
push ebx
mov eax, dword [esp + 0x1ac0]
lea ebx, [esp + 0x698]
mov dword [esp + 0x14], 0x204
mov dword [esp + 0xc], 0x204
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov dword [esp + 0x10], ebx
mov dword [esp], 0xfde9
call sub.KERNEL32.dll_MultiByteToWideChar
sub esp, 0x18
mov dword [esp + 4], 0x422f32
mov dword [esp], ebx
call sub.msvcrt.dll_wcscat
lea eax, [esp + 0x134]
mov dword [esp], ebx
mov dword [esp + 4], eax
call sub.KERNEL32.dll_FindFirstFileW
push esi
push esi
mov dword [esp + 0x2c], eax
inc eax
je 0x406acb
lea ebp, [esp + 0x160]
lea ebx, [esp + 0x30]
cmp dword [0x42b330], 0
jne 0x4068bd
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
call sub.KERNEL32.dll_FindClose
push ecx
jmp 0x406acb
mov dword [esp + 4], 0x422f36
mov dword [esp], ebp
call fcn.00412861
test eax, eax
je 0x406aa5
mov dword [esp + 4], 0x422f38
mov dword [esp], ebp
call fcn.00412861
test eax, eax
je 0x406aa5
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x104
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 8], ebp
mov dword [esp + 4], 0
mov dword [esp], 0xfde9
call sub.KERNEL32.dll_WideCharToMultiByte
sub esp, 0x20
mov eax, dword [esp + 0x1ac0]
mov dword [esp + 4], ebx
add eax, 0x204
mov dword [esp], eax
call fcn.004128b5
test al, al
je 0x406a1c
mov edx, dword [esp + 0x134]
lea eax, [esp + 0x384]
test dl, 0x10
je 0x40699d
mov esi, str._d_a_s_a_s_a
mov ecx, 0xa
mov edi, eax
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x1ac0]
lea esi, [esp + 0xaa0]
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 8], eax
mov dword [esp + 4], 0x1000
mov dword [esp], esi
mov dword [esp + 0x14], ecx
call fcn.004127a8
jmp 0x4069ef
mov edi, dword [esp + 0x154]
mov esi, str._d_a_s_a_I64u_a_s_a
mov ecx, 4
mov dword [esp + 0x14], edi
mov edi, dword [esp + 0x150]
mov dword [esp + 0x18], edi
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [esp + 0x1ac0]
lea esi, [esp + 0xaa0]
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 8], eax
mov dword [esp + 4], 0x1000
mov dword [esp], esi
mov dword [esp + 0x1c], ecx
call fcn.004127a8
test eax, eax
js 0x406aa5
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x1ac0]
mov dword [esp + 8], esi
mov dword [esp + 4], 0xa9
mov eax, dword [eax + 0x30c]
mov dword [esp], eax
call fcn.00405d7d
test byte [esp + 0x134], 0x10
je 0x406aa5
mov eax, dword [esp + 0x1ac0]
mov dword [esp + 8], 0x104
lea esi, [esp + 0x384]
add eax, 0x204
mov dword [esp + 4], eax
lea eax, [esp + 0x588]
mov dword [esp], eax
call fcn.00412548
mov eax, dword [esp + 0x1ac0]
mov dword [esp + 0x10], ebx
mov dword [esp + 8], 0x422f3b
mov dword [esp + 4], 0x204
mov dword [esp], esi
mov dword [esp + 0xc], eax
call fcn.004127a8
mov edx, dword [esp + 0x1ac0]
mov eax, dword [edx + 0x308]
inc eax
mov dword [esp + 0x68c], eax
mov eax, dword [edx + 0x30c]
mov dword [esp], esi
mov dword [esp + 0x690], eax
call fcn.0040680d
lea eax, [esp + 0x134]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
call sub.KERNEL32.dll_FindNextFileW
test eax, eax
push edx
push edx
jne 0x4068a2
jmp 0x4068ab
mov eax, dword [esp + 0x1ac0]
cmp dword [eax + 0x308], 0
jne 0x406b20
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0xaa
mov eax, dword [eax + 0x30c]
mov dword [esp], eax
call fcn.00405d7d
mov eax, dword [esp + 0x1ac0]
cmp byte [eax + 0x310], 0
je 0x406b20
lea eax, [esp + 0x1ac0]
mov dword [esp], eax
call fcn.00407f59
add esp, 0x1aac
pop ebx
pop esi
pop edi
pop ebp
ret