Function at 0x40119a
Capabilities:
Enumerate files on windows
Enumerate files recursively

Disassembly:
jmp 0x403ab0
mov eax, 0x1a54
call fcn.0040c810
push ebx
push ebp
push esi
push edi
mov ecx, 0x1ff
xor eax, eax
lea edi, [esp + 0x266]
mov word [esp + 0x264], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [esp + 0x1a68]
lea ecx, [esp + 0x1264]
push eax
push ecx
call dword [sym.imp.MSVCRT.dll_wcscpy]
lea edx, [esp + 0x126c]
push 0x410a3c
push edx
call dword [sym.imp.MSVCRT.dll_wcscat]
add esp, 0x10
lea eax, [esp + 0x14]
lea ecx, [esp + 0x1264]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp eax, 0xffffffff
mov dword [esp + 0x10], eax
je 0x403d34
lea edx, [esp + 0x14]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x403d34
mov ebx, dword [sym.imp.MSVCRT.dll_wcsstr]
mov esi, dword [sym.imp.MSVCRT.dll_wcscmp]
lea eax, [esp + 0x40]
push 0x410a38
push eax
call esi
add esp, 8
test eax, eax
je 0x403d1c
lea ecx, [esp + 0x40]
push 0x410a30
push ecx
call esi
add esp, 8
test eax, eax
je 0x403d1c
mov eax, dword [esp + 0x1a68]
lea edx, [esp + 0x40]
push edx
push eax
lea ecx, [esp + 0xa6c]
push str._s_s
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
mov edx, dword [esp + 0x40]
add esp, 0x10
push 1
push 0
push 0
push edx
call fcn.0040c870
mov ebp, eax
mov eax, dword [esp + 0x34]
mov edi, edx
xor ecx, ecx
lea edx, [esp + 0xa64]
add ebp, eax
push 0x5c
push edx
adc edi, ecx
call dword [sym.imp.MSVCRT.dll_wcsrchr]
mov esi, eax
lea eax, [esp + 0x26c]
push esi
push eax
call dword [sym.imp.MSVCRT.dll_wcscpy]
lea ecx, [esp + 0x274]
push ecx
call dword [sym.imp.MSVCRT.dll__wcslwr]
add esp, 0x14
test esi, esi
je 0x403d05
push esi
call dword [sym.imp.MSVCRT.dll_wcslen]
add esp, 4
cmp eax, 0x1e
jae 0x403d05
lea edx, [esp + 0x264]
push 0x410a14
push edx
call ebx
add esp, 8
test eax, eax
jne 0x403ca0
lea eax, [esp + 0x264]
push 0x410a08
push eax
call ebx
add esp, 8
test eax, eax
jne 0x403ca0
lea ecx, [esp + 0x264]
push 0x4109fc
push ecx
call ebx
add esp, 8
test eax, eax
jne 0x403ca0
lea edx, [esp + 0x264]
push 0x4109f0
push edx
call ebx
add esp, 8
test eax, eax
jne 0x403ca0
lea eax, [esp + 0x264]
push 0x4109e4
push eax
call ebx
add esp, 8
test eax, eax
jne 0x403ca0
lea ecx, [esp + 0x264]
push 0x4109d8
push ecx
call ebx
add esp, 8
test eax, eax
jne 0x403ca0
lea edx, [esp + 0x264]
push 0x4109cc
push edx
call ebx
add esp, 8
test eax, eax
je 0x403d05
test edi, edi
ja 0x403d05
cmp ebp, 0xc800
jbe 0x403d05
test edi, edi
ja 0x403d05
jb 0x403cba
cmp ebp, 0x32000000
jae 0x403d05
lea eax, [esp + 0xa64]
push eax
call fcn.004010eb
add esp, 4
test eax, eax
je 0x403d05
mov eax, dword [0x432680]
lea ecx, [esp + 0xa64]
mov edx, eax
push ecx
shl edx, 6
add edx, eax
lea eax, [edx*8 + 0x411660]
push eax
call dword [sym.imp.MSVCRT.dll_wcscpy]
mov eax, dword [0x432680]
add esp, 8
inc eax
cmp eax, 0xc8
mov dword [0x432680], eax
jg 0x403d34
test byte [esp + 0x14], 0x10
je 0x403d1c
lea ecx, [esp + 0xa64]
push ecx
call fcn.0040119a
add esp, 4
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x14]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x403b40
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x1a54
ret