Function at 0x40d1bf
Capabilities:
Enumerate files on windows

Disassembly:
push 0x280
mov eax, 0x411c1a
call fcn.0040f8eb
mov eax, dword [ebp + 0x10]
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x280], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x284], ecx
mov dword [ebp - 0x274], eax
mov esi, dword [sym.imp.Common.dll_public:_bool___thiscall_CTXStringW::IsEmpty_void_const]
xor edi, edi
mov ecx, ebx
mov dword [ebp - 4], edi
call esi
lea ecx, [ebp + 0xc]
test al, al
je 0x40d213
or dword [ebp - 4], 0xffffffff
call dword [sym.imp.Common.dll_public:_void___thiscall_CTXStringW::destructor_void_]
xor eax, eax
call fcn.0040f935
ret 0x10
call esi
test al, al
je 0x40d22a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call dword [sym.imp.Common.dll_public:_void___thiscall_CTXStringW::destructor_void_]
mov eax, edi
jmp 0x40d20b
mov esi, dword [sym.imp.Common.dll_public:_void___thiscall_CTXStringW::constructor_class_CTXStringW_const__]
push ecx
lea eax, [ebp + 0xc]
mov ecx, esp
mov dword [ebp - 0x26c], esp
push eax
call esi
call fcn.0040ee25
pop ecx
cmp eax, edi
jne 0x40d24e
push 0xfffffffffffffffd
pop edi
jmp 0x40d219
xor edi, edi
inc edi
push edi
lea eax, [ebp - 0x26c]
push eax
mov ecx, ebx
call dword [sym.imp.Common.dll_public:_class_CTXStringW___thiscall_CTXStringW::Right_int_]
push 0x5c
push eax
call dword [sym.imp.Common.dll_bool___cdecl_operator__class_CTXStringW_const___wchar_t_]
pop ecx
pop ecx
lea ecx, [ebp - 0x26c]
mov byte [ebp - 0x261], al
call dword [sym.imp.Common.dll_public:_void___thiscall_CTXStringW::destructor_void_]
cmp byte [ebp - 0x261], 0
je 0x40d291
push 0x5c
mov ecx, ebx
call dword [sym.imp.Common.dll_public:_class_CTXStringW____thiscall_CTXStringW::operator_wchar_t_]
push ecx
mov ecx, esp
mov dword [ebp - 0x26c], esp
push ebx
call esi
call fcn.00407010
pop ecx
mov dword [ebp - 0x26c], eax
test eax, eax
je 0x40d219
xor eax, eax
push 0x24c
push eax
mov dword [ebp - 0x268], eax
mov dword [ebp - 0x260], eax
lea eax, [ebp - 0x25c]
push eax
mov dword [ebp - 0x270], 1
call sub.MSVCR100.dll_memset
push 0x414b20
lea eax, [ebp - 0x27c]
push ebx
push eax
call dword [sym.imp.Common.dll_class_CTXStringW___cdecl_operator_class_CTXStringW_const___wchar_t_const__]
add esp, 0x18
lea eax, [ebp - 0x260]
push eax
lea ecx, [ebp - 0x27c]
mov byte [ebp - 4], 1
call dword [sym.imp.Common.dll_public:_wchar_t_const____thiscall_CTXStringW::operator_wchar_t_const__void_const]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x288], eax
cmp eax, 0xffffffff
je 0x40d4ae
cmp dword [ebp - 0x270], 0
je 0x40d498
test byte [ebp - 0x260], 0x10
je 0x40d451
push 0x414b18
lea eax, [ebp - 0x234]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCmpW]
test eax, eax
je 0x40d457
push 0x414b14
lea eax, [ebp - 0x234]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCmpW]
test eax, eax
je 0x40d457
lea eax, [ebp - 0x234]
push eax
push 0x414e40
call dword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x40d451
and dword [ebp - 0x278], 0
lea eax, [ebp - 0x278]
push eax
lea eax, [ebp - 0x234]
push eax
call dword [sym.imp.Common.dll_Ordinal_34]
cmp dword [ebp - 0x278], 0
pop ecx
pop ecx
mov ecx, dword [ebp - 0x284]
je 0x40d3ff
call fcn.004073b6
push dword [ebp - 0x274]
lea eax, [ebp - 0x234]
push eax
push ecx
lea eax, [ebp + 0xc]
mov ecx, esp
mov dword [ebp - 0x270], esp
push eax
call esi
push ecx
mov ecx, esp
mov dword [ebp - 0x28c], esp
push ebx
mov byte [ebp - 4], 2
call esi
mov byte [ebp - 4], 1
call fcn.0040c618
mov edi, eax
add esp, 0x10
cmp edi, 0xffffffff
je 0x40d498
cmp edi, 0xfffffffd
jmp 0x40d44f
call fcn.004073b6
lea eax, [ebp - 0x234]
push eax
push str.All_Users
call dword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
jne 0x40d451
push dword [ebp - 0x274]
lea eax, [ebp + 0xc]
push ecx
mov ecx, esp
mov dword [ebp - 0x28c], esp
push eax
call esi
push ecx
mov ecx, esp
mov dword [ebp - 0x270], esp
push ebx
mov byte [ebp - 4], 3
call esi
mov byte [ebp - 4], 1
call fcn.0040cb56
mov edi, eax
add esp, 0xc
test edi, edi
je 0x40d498
inc dword [ebp - 0x268]
mov ecx, dword [ebp - 0x280]
test ecx, ecx
je 0x40d47a
mov eax, dword [ecx]
push 0
push 0x64
push 0x64
push dword [ebp - 0x268]
push dword [ebp - 0x26c]
push edi
push 1
call dword [eax]
lea eax, [ebp - 0x260]
push eax
push dword [ebp - 0x288]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
mov dword [ebp - 0x270], eax
jmp 0x40d31e
push dword [ebp - 0x288]
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp edi, 0xffffffff
je 0x40d4bd
cmp edi, 0xfffffffd
je 0x40d4bd
mov eax, dword [ebp - 0x274]
cmp dword [eax + 8], 0
jbe 0x40d4bd
push 2
pop edi
mov ecx, dword [ebp - 0x280]
test ecx, ecx
je 0x40d4e0
mov eax, dword [ecx]
push 0
push 0x64
push 0x64
push dword [ebp - 0x268]
push dword [ebp - 0x26c]
push edi
push 1
call dword [eax]
lea ecx, [ebp - 0x27c]
mov byte [ebp - 4], 0
call dword [sym.imp.Common.dll_public:_void___thiscall_CTXStringW::destructor_void_]
jmp 0x40d219