Function at 0x40fc20
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4151dd
mov eax, dword fs:[0]
push eax
sub esp, 0x280
mov eax, dword [0x41e130]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0x10]
mov edi, dword [ebp + 8]
mov dword [ebp - 0x284], ecx
mov ecx, dword [ebp + 0x14]
mov dword [ebp - 0x280], eax
mov dword [ebp - 0x274], ecx
mov esi, dword [sym.imp.Common.dll_public:_bool___thiscall_CTXStringW::IsEmpty_void_const]
mov ecx, edi
mov dword [ebp - 4], 0
call esi
test al, al
lea ecx, [ebp + 0xc]
je 0x40fc95
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.Common.dll_public:_void___thiscall_CTXStringW::destructor_void_]
xor eax, eax
jmp 0x40ffc8
call esi
test al, al
je 0x40fcb2
lea ecx, [ebp + 0xc]
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.Common.dll_public:_void___thiscall_CTXStringW::destructor_void_]
xor eax, eax
jmp 0x40ffc8
mov ebx, dword [sym.imp.Common.dll_public:_void___thiscall_CTXStringW::constructor_class_CTXStringW_const__]
push ecx
lea edx, [ebp + 0xc]
mov ecx, esp
mov dword [ebp - 0x26c], esp
push edx
call ebx
call fcn.00412080
add esp, 4
test eax, eax
jne 0x40fced
lea ecx, [ebp + 0xc]
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.Common.dll_public:_void___thiscall_CTXStringW::destructor_void_]
mov eax, 0xfffffffd
jmp 0x40ffc8
push 1
lea eax, [ebp - 0x26c]
push eax
mov ecx, edi
call dword [sym.imp.Common.dll_public:_class_CTXStringW___thiscall_CTXStringW::Right_int_]
push 0x5c
push eax
call dword [sym.imp.Common.dll_bool___cdecl_operator__class_CTXStringW_const___wchar_t_]
mov esi, dword [sym.imp.Common.dll_public:_void___thiscall_CTXStringW::destructor_void_]
add esp, 8
lea ecx, [ebp - 0x26c]
mov byte [ebp - 0x261], al
call esi
cmp byte [ebp - 0x261], 0
je 0x40fd31
push 0x5c
mov ecx, edi
call dword [sym.imp.Common.dll_public:_class_CTXStringW____thiscall_CTXStringW::operator_wchar_t_]
push ecx
mov ecx, esp
mov dword [ebp - 0x26c], esp
push edi
call ebx
call fcn.00408820
add esp, 4
test eax, eax
mov dword [ebp - 0x26c], eax
jne 0x40fd65
lea ecx, [ebp + 0xc]
mov dword [ebp - 4], 0xffffffff
call esi
mov eax, 1
jmp 0x40ffc8
xor eax, eax
push 0x24c
push eax
lea ecx, [ebp - 0x25c]
mov esi, 1
push ecx
mov dword [ebp - 0x268], eax
mov dword [ebp - 0x270], esi
mov dword [ebp - 0x260], eax
call sub.MSVCR80.dll_memset
push 0x417bdc
lea edx, [ebp - 0x27c]
push edi
push edx
call dword [sym.imp.Common.dll_class_CTXStringW___cdecl_operator_class_CTXStringW_const___wchar_t_const__]
add esp, 0x18
lea eax, [ebp - 0x260]
push eax
lea ecx, [ebp - 0x27c]
mov byte [ebp - 4], 1
call dword [sym.imp.Common.dll_public:_wchar_t_const____thiscall_CTXStringW::operator_wchar_t_const__void_const]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp eax, 0xffffffff
mov dword [ebp - 0x288], eax
je 0x40ff70
cmp dword [ebp - 0x270], 0
je 0x40ff59
test byte [ebp - 0x260], 0x10
je 0x40ff0c
push 0x417bd4
lea ecx, [ebp - 0x234]
push ecx
call dword [sym.imp.SHLWAPI.dll_StrCmpW]
test eax, eax
je 0x40ff13
push 0x417bd0
lea edx, [ebp - 0x234]
push edx
call dword [sym.imp.SHLWAPI.dll_StrCmpW]
test eax, eax
je 0x40ff13
lea eax, [ebp - 0x234]
push eax
push 0x417f00
call dword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
je 0x40ff0c
lea ecx, [ebp - 0x278]
push ecx
lea edx, [ebp - 0x234]
push edx
mov dword [ebp - 0x278], 0
call dword [sym.imp.Common.dll_Ordinal_34]
mov ecx, dword [ebp - 0x284]
add esp, 8
cmp dword [ebp - 0x278], 0
je 0x40feb9
call fcn.00408c80
mov eax, dword [ebp - 0x274]
push eax
lea ecx, [ebp - 0x234]
push ecx
push ecx
lea edx, [ebp + 0xc]
mov ecx, esp
mov dword [ebp - 0x270], esp
push edx
call ebx
push ecx
mov ecx, esp
mov dword [ebp - 0x28c], esp
push edi
mov byte [ebp - 4], 2
call ebx
mov byte [ebp - 4], 1
call fcn.0040e400
mov esi, eax
add esp, 0x10
cmp esi, 0xffffffff
je 0x40ff59
cmp esi, 0xfffffffd
jmp 0x40ff0a
call fcn.00408c80
lea eax, [ebp - 0x234]
push eax
push str.All_Users
call dword [sym.imp.SHLWAPI.dll_StrCmpIW]
test eax, eax
jne 0x40ff0c
mov ecx, dword [ebp - 0x274]
push ecx
push ecx
lea edx, [ebp + 0xc]
mov ecx, esp
mov dword [ebp - 0x28c], esp
push edx
call ebx
push ecx
mov ecx, esp
mov dword [ebp - 0x270], esp
push edi
mov byte [ebp - 4], 3
call ebx
mov byte [ebp - 4], 1
call fcn.0040f280
mov esi, eax
add esp, 0xc
test esi, esi
je 0x40ff59
add dword [ebp - 0x268], 1
mov ecx, dword [ebp - 0x280]
test ecx, ecx
je 0x40ff3a
mov edx, dword [ebp - 0x268]
mov eax, dword [ecx]
mov eax, dword [eax]
push 0
push 0x64
push 0x64
push edx
mov edx, dword [ebp - 0x26c]
push edx
push esi
push 1
call eax
mov edx, dword [ebp - 0x288]
lea ecx, [ebp - 0x260]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
mov dword [ebp - 0x270], eax
jmp 0x40fdd3
mov eax, dword [ebp - 0x288]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp esi, 0xffffffff
je 0x40ff81
cmp esi, 0xfffffffd
je 0x40ff81
mov ecx, dword [ebp - 0x274]
cmp dword [ecx + 8], 0
jbe 0x40ff81
mov esi, 2
mov ecx, dword [ebp - 0x280]
test ecx, ecx
je 0x40ffa8
mov eax, dword [ebp - 0x268]
mov edx, dword [ecx]
mov edx, dword [edx]
push 0
push 0x64
push 0x64
push eax
mov eax, dword [ebp - 0x26c]
push eax
push esi
push 1
call edx
mov edi, dword [sym.imp.Common.dll_public:_void___thiscall_CTXStringW::destructor_void_]
lea ecx, [ebp - 0x27c]
mov byte [ebp - 4], 0
call edi
lea ecx, [ebp + 0xc]
mov dword [ebp - 4], 0xffffffff
call edi
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00412d02
mov esp, ebp
pop ebp
ret 0x10