Function at 0x403d80
Capabilities:
Enumerate files on windows
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x43c
mov eax, dword [0x41b004]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov dword [ebp - 0x434], ecx
mov eax, 0x41cc20
mov byte [eax], 0
add eax, 0x64
cmp eax, 0x41d3f0
jl 0x403da1
xor ecx, ecx
mov al, byte [ecx + 0x41c918]
lea ecx, [ecx + 1]
mov byte [ebp + ecx - 0x2e9], al
test al, al
jne 0x403db0
xor ecx, ecx
mov al, byte [ebp + ecx - 0x2e8]
lea ecx, [ecx + 1]
mov byte [ebp + ecx - 0x1e1], al
test al, al
jne 0x403dc6
lea ecx, [ebp - 0x2e8]
dec ecx
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x403de2
mov eax, dword [str.addons.]
mov dword [ecx], eax
mov eax, dword [0x419628]
mov dword [ecx + 4], eax
mov ax, word [0x41962c]
mov word [ecx + 8], ax
mov al, byte [0x41962e]
mov byte [ecx + 0xa], al
lea ecx, [ebp - 0x1e0]
dec ecx
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x403e14
mov eax, dword [str.addons_]
mov dword [ecx], eax
mov eax, dword [0x419634]
mov dword [ecx + 4], eax
lea ecx, [ebp - 0x1e0]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x403e36
sub ecx, edx
lea eax, [ebp - 0x1e0]
add eax, ecx
mov dword [ebp - 0x430], eax
lea eax, [ebp - 0x428]
push eax
lea eax, [ebp - 0x2e8]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov esi, eax
mov dword [ebp - 0x42c], esi
test esi, esi
je 0x40411a
mov ebx, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x38]
mov edi, 0x41cc20
mov dword [ebp - 0x438], 0x41cc52
sub edi, eax
nop dword [eax + eax]
mov ecx, 0x419638
lea eax, [ebp - 0x3fc]
nop dword [eax + eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x403ec0
test dl, dl
je 0x403ebc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x403ec0
add eax, 2
add ecx, 2
test dl, dl
jne 0x403ea0
xor eax, eax
jmp 0x403ec5
sbb eax, eax
or eax, 1
test eax, eax
je 0x4040fd
mov ecx, 0x41963c
lea eax, [ebp - 0x3fc]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x403ef8
test dl, dl
je 0x403ef4
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x403ef8
add eax, 2
add ecx, 2
test dl, dl
jne 0x403ed8
xor eax, eax
jmp 0x403efd
sbb eax, eax
or eax, 1
test eax, eax
je 0x4040fd
test byte [ebp - 0x428], 0x10
je 0x4040fd
lea eax, [ebp - 0x3fc]
push eax
push str._s_addon.cfg
push dword [ebp - 0x430]
call fcn.00401010
add esp, 0xc
lea eax, [ebp - 0x1e0]
push eax
push 0x64
lea eax, [ebp - 0xd8]
push eax
push 0x41964d
push str.Install
push str.GroupWiseAddon
call ebx
test eax, eax
je 0x4040fd
lea eax, [ebp - 0x1e0]
push eax
push 0x32
lea eax, [ebp - 0x6c]
push eax
push 0x41964d
push str.Default
push str.GroupWiseAddon
call ebx
lea eax, [ebp - 0x1e0]
mov byte [ebp - 0x38], 0
push eax
push 0x64
lea eax, [ebp - 0xd8]
push eax
push 0x41964d
push str.Resource
push str.GroupWiseAddon
call ebx
test eax, eax
jne 0x403fbc
lea eax, [ebp - 0x1e0]
push eax
push 0x32
lea eax, [ebp - 0x38]
push eax
push 0x41964d
push 0x41d590
push str.Name
call ebx
jmp 0x404033
lea eax, [ebp - 0xd8]
push 0x419684
push eax
call fcn.004058b0
add esp, 8
test eax, eax
je 0x404033
mov byte [eax], 0
add eax, 2
push eax
push 0x41d590
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0x3fc]
push eax
push str._s_s_s_s
push dword [ebp - 0x430]
call fcn.00401010
add esp, 0x18
lea eax, [ebp - 0x1e0]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov esi, eax
test esi, esi
je 0x40402d
push 0x32
lea eax, [ebp - 0x38]
push eax
push 0xa8c
push esi
call dword [sym.imp.USER32.dll_LoadStringA]
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov esi, dword [ebp - 0x42c]
lea ecx, [ebp - 0x38]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x404040
sub ecx, edx
je 0x4040fd
lea eax, [ebp - 0x38]
push eax
push 0
push 0x180
push dword [ebp - 0x434]
call dword [sym.imp.USER32.dll_SendMessageA]
mov esi, eax
lea ecx, [ebp - 0x6c]
mov edx, 0x419694
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x404090
test bl, bl
je 0x40408c
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x404090
add ecx, 2
add edx, 2
test al, al
jne 0x404070
xor ecx, ecx
jmp 0x404095
sbb ecx, ecx
or ecx, 1
xor eax, eax
test ecx, ecx
sete al
push eax
push esi
push 0x19a
push dword [ebp - 0x434]
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [ebp - 0x38]
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [edi + ecx - 1], al
test al, al
jne 0x4040b2
lea eax, [ebp - 0x3fc]
push eax
call fcn.004067f6
mov esi, dword [ebp - 0x438]
add esp, 4
mov edx, esi
add edi, 0x64
add esi, 0x64
sub edx, eax
mov dword [ebp - 0x438], esi
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x4040e4
mov ebx, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov esi, dword [ebp - 0x42c]
lea eax, [ebp - 0x428]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x403e90
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00404db8
mov esp, ebp
pop ebp
ret