Function at 0x40d1f1
Capabilities:
Enumerate files on windows

Disassembly:
push 0x280
mov eax, 0x411c49
call fcn.0040f91b
mov eax, dword [ebp + 0x10]
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x280], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x284], ecx
mov dword [ebp - 0x274], eax
mov esi, dword [sym.imp.Common.dll_public:_bool___thiscall_CTXStringW::IsEmpty_void_const]
xor edi, edi
mov ecx, ebx
mov dword [ebp - 4], edi
call esi
lea ecx, [ebp + 0xc]
test al, al
je 0x40d245
or dword [ebp - 4], 0xffffffff
call dword [sym.imp.Common.dll_public:_void___thiscall_CTXStringW::destructor_void_]
xor eax, eax
call fcn.0040f965
ret 0x10
call esi
test al, al
je 0x40d25c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call dword [sym.imp.Common.dll_public:_void___thiscall_CTXStringW::destructor_void_]
mov eax, edi
jmp 0x40d23d
mov esi, dword [sym.imp.Common.dll_public:_void___thiscall_CTXStringW::constructor_class_CTXStringW_const__]
push ecx
lea eax, [ebp + 0xc]
mov ecx, esp
mov dword [ebp - 0x26c], esp
push eax
call esi
call fcn.0040ee57
pop ecx
cmp eax, edi
jne 0x40d280
push 0xfffffffffffffffd
pop edi
jmp 0x40d24b
xor edi, edi
inc edi
push edi
lea eax, [ebp - 0x26c]
push eax
mov ecx, ebx
call dword [sym.imp.Common.dll_public:_class_CTXStringW___thiscall_CTXStringW::Right_int_]
push 0x5c
push eax
call dword [sym.imp.Common.dll_bool___cdecl_operator__class_CTXStringW_const___wchar_t_]
pop ecx
pop ecx
lea ecx, [ebp - 0x26c]
mov byte [ebp - 0x261], al
call dword [sym.imp.Common.dll_public:_void___thiscall_CTXStringW::destructor_void_]
cmp byte [ebp - 0x261], 0
je 0x40d2c3
push 0x5c
mov ecx, ebx
call dword [sym.imp.Common.dll_public:_class_CTXStringW____thiscall_CTXStringW::operator_wchar_t_]
push ecx
mov ecx, esp
mov dword [ebp - 0x26c], esp
push ebx
call esi
call fcn.00407015
pop ecx
mov dword [ebp - 0x26c], eax
test eax, eax
je 0x40d24b
xor eax, eax
push 0x24c
push eax
mov dword [ebp - 0x268], eax
mov dword [ebp - 0x260], eax
lea eax, [ebp - 0x25c]
push eax
mov dword [ebp - 0x270], 1
call sub.MSVCR100.dll_memset
push 0x414b68
lea eax, [ebp - 0x27c]
push ebx
push eax
call dword [sym.imp.Common.dll_class_CTXStringW___cdecl_operator_class_CTXStringW_const___wchar_t_const__]
add esp, 0x18
lea eax, [ebp - 0x260]
push eax
lea ecx, [ebp - 0x27c]
mov byte [ebp - 4], 1
call dword [sym.imp.Common.dll_public:_wchar_t_const____thiscall_CTXStringW::operator_wchar_t_const__void_const]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x288], eax
cmp eax, 0xffffffff
je 0x40d4e0
cmp dword [ebp - 0x270], 0
je 0x40d4ca
test byte [ebp - 0x260], 0x10
je 0x40d483
push 0x414b60
lea eax, [ebp - 0x234]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCmpW]
test eax, eax
je 0x40d489
push 0x414b5c
lea eax, [ebp - 0x234]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCmpW]
test eax, eax
je 0x40d489
lea eax, [ebp - 0x234]
push eax
push 0x414e88
call dword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x40d483
and dword [ebp - 0x278], 0
lea eax, [ebp - 0x278]
push eax
lea eax, [ebp - 0x234]
push eax
call dword [sym.imp.Common.dll_Ordinal_34]
cmp dword [ebp - 0x278], 0
pop ecx
pop ecx
mov ecx, dword [ebp - 0x284]
je 0x40d431
call fcn.004073bb
push dword [ebp - 0x274]
lea eax, [ebp - 0x234]
push eax
push ecx
lea eax, [ebp + 0xc]
mov ecx, esp
mov dword [ebp - 0x270], esp
push eax
call esi
push ecx
mov ecx, esp
mov dword [ebp - 0x28c], esp
push ebx
mov byte [ebp - 4], 2
call esi
mov byte [ebp - 4], 1
call fcn.0040c64d
mov edi, eax
add esp, 0x10
cmp edi, 0xffffffff
je 0x40d4ca
cmp edi, 0xfffffffd
jmp 0x40d481
call fcn.004073bb
lea eax, [ebp - 0x234]
push eax
push str.All_Users
call dword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
jne 0x40d483
push dword [ebp - 0x274]
lea eax, [ebp + 0xc]
push ecx
mov ecx, esp
mov dword [ebp - 0x28c], esp
push eax
call esi
push ecx
mov ecx, esp
mov dword [ebp - 0x270], esp
push ebx
mov byte [ebp - 4], 3
call esi
mov byte [ebp - 4], 1
call fcn.0040cb8b
mov edi, eax
add esp, 0xc
test edi, edi
je 0x40d4ca
inc dword [ebp - 0x268]
mov ecx, dword [ebp - 0x280]
test ecx, ecx
je 0x40d4ac
mov eax, dword [ecx]
push 0
push 0x64
push 0x64
push dword [ebp - 0x268]
push dword [ebp - 0x26c]
push edi
push 1
call dword [eax]
lea eax, [ebp - 0x260]
push eax
push dword [ebp - 0x288]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
mov dword [ebp - 0x270], eax
jmp 0x40d350
push dword [ebp - 0x288]
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp edi, 0xffffffff
je 0x40d4ef
cmp edi, 0xfffffffd
je 0x40d4ef
mov eax, dword [ebp - 0x274]
cmp dword [eax + 8], 0
jbe 0x40d4ef
push 2
pop edi
mov ecx, dword [ebp - 0x280]
test ecx, ecx
je 0x40d512
mov eax, dword [ecx]
push 0
push 0x64
push 0x64
push dword [ebp - 0x268]
push dword [ebp - 0x26c]
push edi
push 1
call dword [eax]
lea ecx, [ebp - 0x27c]
mov byte [ebp - 4], 0
call dword [sym.imp.Common.dll_public:_void___thiscall_CTXStringW::destructor_void_]
jmp 0x40d24b