Function at 0x10004cc0
Capabilities:
Enumerate files on windows
Enumerate files recursively
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x454
mov eax, dword [0x1001a280]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
push 0x103
lea eax, [ebp - 0x30f]
push 0
push eax
mov byte [ebp - 0x310], 0
call fcn.10008b90
push 0x103
lea eax, [ebp - 0x20b]
push 0
push eax
mov byte [ebp - 0x20c], 0
call fcn.10008b90
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatA]
add esp, 0x18
lea eax, [ebp - 0x310]
push ebx
push eax
call esi
push str..
lea eax, [ebp - 0x310]
push eax
call esi
push 0x140
lea eax, [ebp - 0x450]
push 0
push eax
call fcn.10008b90
add esp, 0xc
lea eax, [ebp - 0x450]
push eax
lea eax, [ebp - 0x310]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x454], eax
mov esi, eax
cmp byte [ebp - 0x424], 0x2e
je 0x10004f25
lea edx, [ebp - 0x20c]
mov eax, ebx
sub edx, ebx
mov cl, byte [eax]
mov byte [edx + eax], cl
lea eax, [eax + 1]
test cl, cl
jne 0x10004d77
lea edi, [ebp - 0x20c]
dec edi
lea ebx, [ebx]
mov al, byte [edi + 1]
lea edi, [edi + 1]
test al, al
jne 0x10004d90
mov ax, word [0x10015c1c]
lea edx, [ebp - 0x424]
mov word [edi], ax
mov esi, edx
jmp 0x10004db0
mov al, byte [edx]
inc edx
test al, al
jne 0x10004db0
lea edi, [ebp - 0x20c]
sub edx, esi
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x10004dc0
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
test byte [ebp - 0x450], 0x10
rep movsb byte es:[edi], byte [esi]
je 0x10004df3
lea eax, [ebp - 0x20c]
push eax
call fcn.10004cc0
add esp, 4
jmp 0x10004f1f
lea eax, [ebp - 0x424]
push str..url
push eax
call fcn.10007be0
add esp, 8
test eax, eax
je 0x10004f1f
push 0x103
lea eax, [ebp - 0x107]
push 0
push eax
mov byte [ebp - 0x108], 0
call fcn.10008b90
add esp, 0xc
lea eax, [ebp - 0x20c]
push eax
push 0x104
lea eax, [ebp - 0x108]
push eax
push 0x100153f9
push 0x10015c28
push str.InternetShortcut
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
lea eax, [ebp - 0x108]
push eax
call edi
mov esi, eax
lea eax, [ebp - 0x424]
push eax
call edi
push dword [0x1001b568]
lea ecx, [eax + 2]
add ecx, esi
mov esi, dword [0x1001a0a0]
add esi, ecx
call dword [sym.imp.KERNEL32.dll_LocalSize]
cmp eax, esi
jae 0x10004ea5
push 0x42
lea eax, [esi + 0x400]
push eax
push dword [0x1001b568]
call dword [sym.imp.KERNEL32.dll_LocalReAlloc]
mov dword [0x1001b568], eax
lea eax, [ebp - 0x424]
push eax
call edi
inc eax
push eax
lea eax, [ebp - 0x424]
push eax
mov eax, dword [0x1001a0a0]
add eax, dword [0x1001b568]
push eax
call fcn.10007f70
add esp, 0xc
lea eax, [ebp - 0x424]
push eax
call edi
mov ecx, dword [0x1001a0a0]
inc ecx
add eax, ecx
mov dword [0x1001a0a0], eax
lea eax, [ebp - 0x108]
push eax
call edi
inc eax
push eax
lea eax, [ebp - 0x108]
push eax
mov eax, dword [0x1001a0a0]
add eax, dword [0x1001b568]
push eax
call fcn.10007f70
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
call edi
mov ecx, dword [0x1001a0a0]
inc ecx
add eax, ecx
mov dword [0x1001a0a0], eax
mov esi, dword [ebp - 0x454]
lea eax, [ebp - 0x450]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x10004d60
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10008710
mov esp, ebp
pop ebp
ret