Function at 0x41e68f
Capabilities:
Enumerate files on windows
Get file attributes
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x402b60
push 0x45d024
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xb7c
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov ebx, dword [ebp + 8]
mov edx, dword [ebx + 4]
test edx, edx
jne 0x41e6c6
xor eax, eax
jmp 0x41e6ce
mov eax, dword [ebx + 8]
sub eax, edx
sar eax, 2
mov ecx, dword [ebp + 0xc]
cmp ecx, eax
jge 0x41e7bb
mov esi, ecx
shl esi, 2
cmp dword [esi + edx], 0
je 0x41e7bb
mov edi, dword [esi + edx]
mov dword [ebp - 0x820], edi
cmp byte [edi], 0x2a
jne 0x41e707
inc edi
push edi
mov ecx, 0x475a08
call fcn.00418fca
jmp 0x41e9c7
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, dword [ebp - 0x820]
cmp byte [ecx + edi - 1], 0x5c
jne 0x41e950
cmp dword [0x47367c], eax
je 0x41e764
push eax
push eax
push 0xbb
call fcn.00424a93
pop ecx
push eax
mov esi, 0x45f150
mov ecx, esi
call fcn.00411c78
push dword [0x532504]
mov ecx, esi
call fcn.00411ce8
mov ebx, eax
mov ecx, esi
call fcn.00411cd4
mov dword [0x47367c], eax
cmp ebx, 1
jne 0x41e7bb
or dword [ebp - 0xa68], 0xffffffff
push 0x40ab70
push edi
push 0x40aab0
mov ebx, 0x104
push ebx
lea eax, [ebp - 0xa64]
push eax
mov edi, dword [sym.imp.MSVCRT.dll__snprintf]
call edi
add esp, 0x14
and byte [ebp - 0x961], 0
and dword [ebp - 4], 0
lea eax, [ebp - 0x960]
push eax
lea eax, [ebp - 0xa64]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0xa68], eax
cmp eax, 0xffffffff
jne 0x41e7cc
or dword [ebp - 4], eax
xor eax, eax
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
leave
ret
mov esi, 0x40ab6c
lea eax, [ebp - 0x934]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x41e7f9
test cl, cl
je 0x41e7f5
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x41e7f9
inc eax
inc eax
inc esi
inc esi
test cl, cl
jne 0x41e7d7
xor eax, eax
jmp 0x41e7fe
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x41e8fb
mov esi, 0x40ab68
lea eax, [ebp - 0x934]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x41e833
test cl, cl
je 0x41e82f
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x41e833
inc eax
inc eax
inc esi
inc esi
test cl, cl
jne 0x41e811
xor eax, eax
jmp 0x41e838
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x41e8fb
test byte [ebp - 0x960], 0x10
jne 0x41e8fb
lea eax, [ebp - 0x934]
push eax
push dword [ebp - 0x820]
push 0x40aab0
push ebx
lea eax, [ebp - 0xb70]
push eax
call edi
add esp, 0x14
and byte [ebp - 0xa6d], 0
lea eax, [ebp - 0xb70]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
test al, 2
jne 0x41e8fb
and byte [ebp - 0x818], 0
lea eax, [ebp - 0xb70]
push eax
call fcn.00426ac8
pop ecx
test eax, eax
lea eax, [ebp - 0xb70]
push eax
je 0x41e8c6
push 0x800
lea eax, [ebp - 0x818]
push eax
push 0x45f128
push 0x40ab04
push 0x40aaf0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
jmp 0x41e8eb
call fcn.00426a69
pop ecx
test eax, eax
je 0x41e8eb
push 0x800
lea eax, [ebp - 0x818]
push eax
lea eax, [ebp - 0xb70]
push eax
call fcn.00426fd5
add esp, 0xc
push 1
lea eax, [ebp - 0x818]
push eax
call fcn.00420a42
pop ecx
pop ecx
lea eax, [ebp - 0x960]
push eax
push dword [ebp - 0xa68]
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x41e7cc
push dword [ebp - 0xa68]
call dword [sym.imp.KERNEL32.dll_FindClose]
or dword [ebp - 0xa68], 0xffffffff
or dword [ebp - 4], 0xffffffff
jmp 0x41e9c7
cmp dword [esi + edx], 0
je 0x41e9c7
and byte [ebp - 0x818], 0
push dword [esi + edx]
call fcn.00426ac8
pop ecx
test eax, eax
mov eax, dword [ebx + 4]
push dword [esi + eax]
je 0x41e993
push 0x800
lea eax, [ebp - 0x818]
push eax
push 0x45f128
push 0x40ab04
push 0x40aaf0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
jmp 0x41e9b7
call fcn.00426a69
pop ecx
test eax, eax
je 0x41e9b7
push 0x800
lea eax, [ebp - 0x818]
push eax
mov eax, dword [ebx + 4]
push dword [esi + eax]
call fcn.00426fd5
add esp, 0xc
push 0
lea eax, [ebp - 0x818]
push eax
call fcn.00420a42
pop ecx
pop ecx
push 1
pop eax
jmp 0x41e7bd