Function at 0x40cf15
Capabilities:
Enumerate files on windows

Disassembly:
push 0x280
mov eax, 0x411bf4
call fcn.0040f91b
mov eax, dword [ebp + 0x10]
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x27c], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x288], ecx
mov dword [ebp - 0x274], eax
mov esi, dword [sym.imp.Common.dll_public:_bool___thiscall_CTXStringW::IsEmpty_void_const]
xor edi, edi
mov ecx, ebx
mov dword [ebp - 4], edi
call esi
lea ecx, [ebp + 0xc]
test al, al
je 0x40cf69
or dword [ebp - 4], 0xffffffff
call dword [sym.imp.Common.dll_public:_void___thiscall_CTXStringW::destructor_void_]
xor eax, eax
call fcn.0040f965
ret 0x10
call esi
test al, al
je 0x40cf80
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call dword [sym.imp.Common.dll_public:_void___thiscall_CTXStringW::destructor_void_]
mov eax, edi
jmp 0x40cf61
mov esi, dword [sym.imp.Common.dll_public:_void___thiscall_CTXStringW::constructor_class_CTXStringW_const__]
push ecx
lea eax, [ebp + 0xc]
mov ecx, esp
mov dword [ebp - 0x26c], esp
push eax
call esi
call fcn.0040ee57
pop ecx
cmp eax, edi
jne 0x40cfa4
push 0xfffffffffffffffd
pop edi
jmp 0x40cf6f
xor edi, edi
inc edi
push edi
lea eax, [ebp - 0x26c]
push eax
mov ecx, ebx
call dword [sym.imp.Common.dll_public:_class_CTXStringW___thiscall_CTXStringW::Right_int_]
push 0x5c
push eax
call dword [sym.imp.Common.dll_bool___cdecl_operator__class_CTXStringW_const___wchar_t_]
pop ecx
pop ecx
lea ecx, [ebp - 0x26c]
mov byte [ebp - 0x261], al
call dword [sym.imp.Common.dll_public:_void___thiscall_CTXStringW::destructor_void_]
cmp byte [ebp - 0x261], 0
je 0x40cfe7
push 0x5c
mov ecx, ebx
call dword [sym.imp.Common.dll_public:_class_CTXStringW____thiscall_CTXStringW::operator_wchar_t_]
push ecx
mov ecx, esp
mov dword [ebp - 0x26c], esp
push ebx
call esi
call fcn.00407015
pop ecx
mov dword [ebp - 0x26c], eax
test eax, eax
je 0x40cf6f
xor eax, eax
push 0x24c
push eax
mov dword [ebp - 0x268], eax
mov dword [ebp - 0x260], eax
lea eax, [ebp - 0x25c]
push eax
mov dword [ebp - 0x270], 1
call sub.MSVCR100.dll_memset
push 0x414b68
lea eax, [ebp - 0x278]
push ebx
push eax
call dword [sym.imp.Common.dll_class_CTXStringW___cdecl_operator_class_CTXStringW_const___wchar_t_const__]
add esp, 0x18
lea eax, [ebp - 0x260]
push eax
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 1
call dword [sym.imp.Common.dll_public:_wchar_t_const____thiscall_CTXStringW::operator_wchar_t_const__void_const]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x284], eax
cmp eax, 0xffffffff
je 0x40d1aa
cmp dword [ebp - 0x270], 0
je 0x40d194
test byte [ebp - 0x260], 0x10
je 0x40d14d
push 0x414b60
lea eax, [ebp - 0x234]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCmpW]
test eax, eax
je 0x40d153
push 0x414b5c
lea eax, [ebp - 0x234]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCmpW]
test eax, eax
je 0x40d153
lea eax, [ebp - 0x234]
push eax
push 0x414e88
call dword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x40d14d
and dword [ebp - 0x280], 0
lea eax, [ebp - 0x280]
push eax
lea eax, [ebp - 0x234]
push eax
call dword [sym.imp.Common.dll_Ordinal_34]
cmp dword [ebp - 0x280], 0
pop ecx
pop ecx
je 0x40d14d
mov ecx, dword [ebp - 0x288]
call fcn.004073bb
push dword [ebp - 0x274]
lea eax, [ebp - 0x234]
push eax
push ecx
lea eax, [ebp + 0xc]
mov ecx, esp
mov dword [ebp - 0x270], esp
push eax
call esi
push ecx
mov ecx, esp
mov dword [ebp - 0x28c], esp
push ebx
mov byte [ebp - 4], 2
call esi
mov byte [ebp - 4], 1
call fcn.0040c3c8
mov edi, eax
add esp, 0x10
cmp edi, 0xffffffff
je 0x40d194
cmp edi, 0xfffffffd
je 0x40d194
inc dword [ebp - 0x268]
mov ecx, dword [ebp - 0x27c]
test ecx, ecx
je 0x40d176
mov eax, dword [ecx]
push 0
push 1
push 1
push dword [ebp - 0x268]
push dword [ebp - 0x26c]
push edi
push 2
call dword [eax]
lea eax, [ebp - 0x260]
push eax
push dword [ebp - 0x284]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
mov dword [ebp - 0x270], eax
jmp 0x40d074
push dword [ebp - 0x284]
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp edi, 0xffffffff
je 0x40d1b9
cmp edi, 0xfffffffd
je 0x40d1b9
mov eax, dword [ebp - 0x274]
cmp dword [eax + 8], 0
jbe 0x40d1b9
push 2
pop edi
mov ecx, dword [ebp - 0x27c]
test ecx, ecx
je 0x40d1dc
mov eax, dword [ecx]
push 0
push 1
push 1
push dword [ebp - 0x268]
push dword [ebp - 0x26c]
push edi
push 2
call dword [eax]
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 0
call dword [sym.imp.Common.dll_public:_void___thiscall_CTXStringW::destructor_void_]
jmp 0x40cf6f